ProductSetup::ProductSetup: Begin product setup
ProductSetup::Install: Begin install
ProductSetup::Install: Install from: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp
ProductSetup::Install: Show gui: false
ProductSetup::Install: Install to: <default>
ProductSetup::Install: Existing product code: <none>
=== Verbose logging started: 8/4/2015  12:21:21  Build type: SHIP UNICODE 5.00.7601.00  Calling process: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\SophosUpdate.exe ===
MSI (c) (D4:90) [12:21:21:981]: Cloaking enabled.
MSI (c) (D4:90) [12:21:21:981]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (D4:90) [12:21:21:981]: End dialog not enabled
MSI (c) (D4:90) [12:21:21:981]: Original package ==> C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\Sophos Network Threat Protection.msi
MSI (c) (D4:90) [12:21:21:981]: Package we're running from ==> C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\Sophos Network Threat Protection.msi
MSI (c) (D4:90) [12:21:21:981]: Machine policy value 'DisableUserInstalls' is 0
MSI (c) (D4:90) [12:21:21:996]: APPCOMPAT: Compatibility mode property overrides found.
MSI (c) (D4:90) [12:21:21:996]: APPCOMPAT: looking for appcompat database entry with ProductCode '{66967E5F-43E8-4402-87A4-04685EE5C2CB}'.
MSI (c) (D4:90) [12:21:21:996]: APPCOMPAT: no matching ProductCode found in database.
MSI (c) (D4:90) [12:21:21:996]: MSCOREE not loaded loading copy from system32
MSI (c) (D4:90) [12:21:21:996]: APPCOMPAT: looking for appcompat database entry with ProductCode '{66967E5F-43E8-4402-87A4-04685EE5C2CB}'.
MSI (c) (D4:90) [12:21:21:996]: APPCOMPAT: no matching ProductCode found in database.
MSI (c) (D4:90) [12:21:21:996]: Transforms are not secure.
MSI (c) (D4:90) [12:21:21:996]: Note: 1: 2205 2:  3: Control 
MSI (c) (D4:90) [12:21:21:996]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\Windows\TEMP\Sophos Network Threat Protection Install Log 20150804 122121.txt'.
MSI (c) (D4:90) [12:21:21:996]: No Command Line.
MSI (c) (D4:90) [12:21:21:996]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{5C68857A-F9FC-4502-8585-BCA5095113C2}'.
MSI (c) (D4:90) [12:21:21:996]: Product Code passed to Engine.Initialize:           '(none)'
MSI (c) (D4:90) [12:21:21:996]: Product Code from property table before transforms: '{66967E5F-43E8-4402-87A4-04685EE5C2CB}'
MSI (c) (D4:90) [12:21:21:996]: Product Code from property table after transforms:  '{66967E5F-43E8-4402-87A4-04685EE5C2CB}'
MSI (c) (D4:90) [12:21:21:996]: Product not registered: beginning first-time install
MSI (c) (D4:90) [12:21:21:996]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
MSI (c) (D4:90) [12:21:21:996]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2 
MSI (c) (D4:90) [12:21:21:996]: Entering CMsiConfigurationManager::SetLastUsedSource.
MSI (c) (D4:90) [12:21:21:996]: User policy value 'SearchOrder' is 'nmu'
MSI (c) (D4:90) [12:21:21:996]: Adding new sources is allowed.
MSI (c) (D4:90) [12:21:21:996]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
MSI (c) (D4:90) [12:21:21:996]: Package name extracted from package path: 'Sophos Network Threat Protection.msi'
MSI (c) (D4:90) [12:21:21:996]: Package to be registered: 'Sophos Network Threat Protection.msi'
MSI (c) (D4:90) [12:21:21:996]: Note: 1: 2262 2: AdminProperties 3: -2147287038 
MSI (c) (D4:90) [12:21:21:996]: TRANSFORMS property is now: 
MSI (c) (D4:90) [12:21:21:996]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '405'.
MSI (c) (D4:90) [12:21:21:996]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming
MSI (c) (D4:90) [12:21:21:996]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Favorites
MSI (c) (D4:90) [12:21:21:996]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts
MSI (c) (D4:90) [12:21:21:996]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Documents
MSI (c) (D4:90) [12:21:21:996]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
MSI (c) (D4:90) [12:21:21:996]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent
MSI (c) (D4:90) [12:21:21:996]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo
MSI (c) (D4:90) [12:21:21:996]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Templates
MSI (c) (D4:90) [12:21:21:996]: SHELL32::SHGetFolderPath returned: C:\ProgramData
MSI (c) (D4:90) [12:21:21:996]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Local
MSI (c) (D4:90) [12:21:21:996]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Pictures
MSI (c) (D4:90) [12:21:21:996]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (c) (D4:90) [12:21:21:996]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
MSI (c) (D4:90) [12:21:21:996]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
MSI (c) (D4:90) [12:21:21:996]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu
MSI (c) (D4:90) [12:21:21:996]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop
MSI (c) (D4:90) [12:21:21:996]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (c) (D4:90) [12:21:21:996]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
MSI (c) (D4:90) [12:21:21:996]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
MSI (c) (D4:90) [12:21:21:996]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu
MSI (c) (D4:90) [12:21:21:996]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Desktop
MSI (c) (D4:90) [12:21:21:996]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates
MSI (c) (D4:90) [12:21:21:996]: SHELL32::SHGetFolderPath returned: C:\Windows\Fonts
MSI (c) (D4:90) [12:21:21:996]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16 
MSI (c) (D4:90) [12:21:21:996]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated.
MSI (c) (D4:90) [12:21:21:996]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'.
MSI (c) (D4:90) [12:21:21:996]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
MSI (c) (D4:90) [12:21:21:996]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 
MSI (c) (D4:90) [12:21:21:996]: PROPERTY CHANGE: Adding USERNAME property. Its value is ComputerUser.
MSI (c) (D4:90) [12:21:21:996]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 
MSI (c) (D4:90) [12:21:21:996]: PROPERTY CHANGE: Adding COMPANYNAME property. Its value is '*****'.
MSI (c) (D4:90) [12:21:21:996]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\Sophos Network Threat Protection.msi'.
MSI (c) (D4:90) [12:21:21:996]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\Sophos Network Threat Protection.msi'.
MSI (c) (D4:90) [12:21:21:996]: Machine policy value 'MsiDisableEmbeddedUI' is 0
MSI (c) (D4:90) [12:21:21:996]: EEUI - Disabling MsiEmbeddedUI due to existing external or embedded UI
MSI (c) (D4:90) [12:21:21:996]: EEUI - Disabling MsiEmbeddedUI in quiet mode
=== Logging started: 8/4/2015  12:21:21 ===
MSI (c) (D4:90) [12:21:21:996]: Machine policy value 'DisableRollback' is 0
MSI (c) (D4:90) [12:21:21:996]: User policy value 'DisableRollback' is 0
MSI (c) (D4:90) [12:21:21:996]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
MSI (c) (D4:90) [12:21:21:996]: Creating MSIHANDLE (1) of type 790537 for thread 5008
MSI (c) (D4:90) [12:21:21:996]: MsiOpenPackageEx is returning 0
MSI (c) (D4:90) [12:21:21:996]: Closing MSIHANDLE (1) of type 790537 for thread 5008
=== Verbose logging stopped: 8/4/2015  12:21:21 ===

setup::MsiInstaller::install: New version: {66967E5F-43E8-4402-87A4-04685EE5C2CB}, version: 1.0.3
setup::MsiInstaller::install: Performing clean install
setup::MsiInstaller::cleanInstall: Running clean install
setup::MsiInstaller::installOrUpgrade: Executing: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\Sophos Network Threat Protection.msi INSTALLDIR="" REBOOT=ReallySuppress INSTALLINGVERSION="1.0.3"
=== Verbose logging started: 8/4/2015  12:21:22  Build type: SHIP UNICODE 5.00.7601.00  Calling process: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\SophosUpdate.exe ===
MSI (c) (D4:D0) [12:21:22:012]: Resetting cached policy values
MSI (c) (D4:D0) [12:21:22:012]: Machine policy value 'Debug' is 0
MSI (c) (D4:D0) [12:21:22:012]: ******* RunEngine:
           ******* Product: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\Sophos Network Threat Protection.msi
           ******* Action: 
           ******* CommandLine: **********
MSI (c) (D4:D0) [12:21:22:012]: Client-side and UI is none or basic: Running entire install on the server.
MSI (c) (D4:D0) [12:21:22:012]: Grabbed execution mutex.
MSI (c) (D4:D0) [12:21:22:012]: Cloaking enabled.
MSI (c) (D4:D0) [12:21:22:012]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (D4:D0) [12:21:22:012]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (74:80) [12:21:22:012]: Running installation inside multi-package transaction C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\Sophos Network Threat Protection.msi
MSI (s) (74:80) [12:21:22:012]: Grabbed execution mutex.
MSI (s) (74:40) [12:21:22:012]: Resetting cached policy values
MSI (s) (74:40) [12:21:22:012]: Machine policy value 'Debug' is 0
MSI (s) (74:40) [12:21:22:012]: ******* RunEngine:
           ******* Product: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\Sophos Network Threat Protection.msi
           ******* Action: 
           ******* CommandLine: **********
MSI (s) (74:40) [12:21:22:012]: Machine policy value 'DisableUserInstalls' is 0
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: 00002109410000000000000000F01FEC
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: 00002109410000000000000000F01FEC
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: 00002109510090400000000000F01FEC
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: 00002109510090400000000000F01FEC
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: 00002109511090400000000000F01FEC
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: 00002109511090400000000000F01FEC
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: 00002109610090400000000000F01FEC
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: 00002109610090400000000000F01FEC
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: 00002109711090400000000000F01FEC
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: 00002109711090400000000000F01FEC
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: 00002109810090400000000000F01FEC
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: 00002109810090400000000000F01FEC
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: 00002109910090400000000000F01FEC
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: 00002109910090400000000000F01FEC
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: 00002109A10090400000000000F01FEC
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: 00002109A10090400000000000F01FEC
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: 00002109B10090400000000000F01FEC
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: 00002109B10090400000000000F01FEC
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: 00002109C20090400000000000F01FEC
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: 00002109C20090400000000000F01FEC
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: 00002109E60090400000000000F01FEC
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: 00002109E60090400000000000F01FEC
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: 00002109F10090400000000000F01FEC
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: 00002109F10090400000000000F01FEC
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: 00002109F100A0C00000000000F01FEC
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: 00002109F100A0C00000000000F01FEC
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: 00002109F100C0400000000000F01FEC
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: 00002109F100C0400000000000F01FEC
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: 00004109500200000000000000F01FEC
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: 00004109500200000000000000F01FEC
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: 02F3DFF142D5A9C49B6F2A705AC31F97
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: 02F3DFF142D5A9C49B6F2A705AC31F97
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: 062F3ED9E88BEC24097E377CC8739DE5
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: 062F3ED9E88BEC24097E377CC8739DE5
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: 18555481990E8AB4CBB63FB4F26006C0
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: 18555481990E8AB4CBB63FB4F26006C0
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: 271D3094BCCDF293393A43ACD974EFD3
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: 271D3094BCCDF293393A43ACD974EFD3
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: 32782E4C36602104B9CD2EA1411C13C6
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: 32782E4C36602104B9CD2EA1411C13C6
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: 329D093F1F67E8542881C8C051C6CDDF
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: 329D093F1F67E8542881C8C051C6CDDF
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: 34B5C1E0738189F49AB6978A0A5A59F5
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: 34B5C1E0738189F49AB6978A0A5A59F5
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: 358CA8E5BB5699C40AE9918B81151EC4
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: 358CA8E5BB5699C40AE9918B81151EC4
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: 65D72A2343DBBEE499EB8BE8B1861AC5
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: 65D72A2343DBBEE499EB8BE8B1861AC5
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: 68AB67CA408033019195008142412751
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: 68AB67CA408033019195008142412751
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: 68AB67CA7DA73301B744BA0000000010
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: 68AB67CA7DA73301B744BA0000000010
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: 6E815EB96CCE9A53884E7857C57002F0
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: 6E815EB96CCE9A53884E7857C57002F0
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: 6E8A266FCD4F2A1409E1C8110F44DBCE
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: 6E8A266FCD4F2A1409E1C8110F44DBCE
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: 8103584E46308B94A9DD96C124D5B7A5
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: 8103584E46308B94A9DD96C124D5B7A5
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: 8A0F842331866D117AB7000B0D511000
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: 8A0F842331866D117AB7000B0D511000
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: 93035FCBCF7A97C43A3E34A72EF89D81
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: 93035FCBCF7A97C43A3E34A72EF89D81
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: A063EE9D91C7CE74397C79EDFF4608B4
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: A063EE9D91C7CE74397C79EDFF4608B4
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: A089CE062ADB6BC44A720BA745894BAC
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: A089CE062ADB6BC44A720BA745894BAC
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: ACF7117400D0D6B4D986007B36264936
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: ACF7117400D0D6B4D986007B36264936
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: c1c4f01781cc94c4c8fb1542c0981a2a
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: c1c4f01781cc94c4c8fb1542c0981a2a
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: C39132180009BEE42BA87EE4777995AF
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: C39132180009BEE42BA87EE4777995AF
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: D14F593908F0E234A9958B4E777E1E36
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: D14F593908F0E234A9958B4E777E1E36
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: D38A8EDA07BB5BF4AB91624CE73A8149
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: D38A8EDA07BB5BF4AB91624CE73A8149
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: D50055ACCA496954696476D9C60C6D02
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: D50055ACCA496954696476D9C60C6D02
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: D75B3901316A3F7409FCF05D5CCDFF6E
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: D75B3901316A3F7409FCF05D5CCDFF6E
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: DDA39468D428E8B4DB27C8D5DC5CA217
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: DDA39468D428E8B4DB27C8D5DC5CA217
MSI (s) (74:40) [12:21:22:012]: Setting cached product context: machine assigned for product: FC95C210A470AD3408586B6E6337B395
MSI (s) (74:40) [12:21:22:012]: Using cached product context: machine assigned for product: FC95C210A470AD3408586B6E6337B395
MSI (s) (74:40) [12:21:22:012]: SRSetRestorePoint skipped for this transaction.
MSI (s) (74:40) [12:21:22:012]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2 
MSI (s) (74:40) [12:21:22:012]: File will have security applied from OpCode.
MSI (s) (74:40) [12:21:22:028]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\Sophos Network Threat Protection.msi' against software restriction policy
MSI (s) (74:40) [12:21:22:028]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\Sophos Network Threat Protection.msi has a digital signature
MSI (s) (74:40) [12:21:22:028]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\Sophos Network Threat Protection.msi is permitted to run because the user token authorizes execution (system or service token).
MSI (s) (74:40) [12:21:22:028]: End dialog not enabled
MSI (s) (74:40) [12:21:22:028]: Original package ==> C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\Sophos Network Threat Protection.msi
MSI (s) (74:40) [12:21:22:028]: Package we're running from ==> C:\Windows\Installer\23328.msi
MSI (s) (74:40) [12:21:22:028]: APPCOMPAT: Compatibility mode property overrides found.
MSI (s) (74:40) [12:21:22:028]: APPCOMPAT: looking for appcompat database entry with ProductCode '{66967E5F-43E8-4402-87A4-04685EE5C2CB}'.
MSI (s) (74:40) [12:21:22:028]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (74:40) [12:21:22:028]: MSCOREE not loaded loading copy from system32
MSI (s) (74:40) [12:21:22:028]: Machine policy value 'TransformsSecure' is 0
MSI (s) (74:40) [12:21:22:028]: User policy value 'TransformsAtSource' is 0
MSI (s) (74:40) [12:21:22:028]: Machine policy value 'DisablePatch' is 0
MSI (s) (74:40) [12:21:22:028]: Machine policy value 'AllowLockdownPatch' is 0
MSI (s) (74:40) [12:21:22:028]: Machine policy value 'DisableLUAPatching' is 0
MSI (s) (74:40) [12:21:22:028]: Machine policy value 'DisableFlyWeightPatching' is 0
MSI (s) (74:40) [12:21:22:028]: Enabling baseline caching for this transaction since all active patches are MSI 3.0 style MSPs or at least one MSI 3.0 minor update patch is active
MSI (s) (74:40) [12:21:22:028]: APPCOMPAT: looking for appcompat database entry with ProductCode '{66967E5F-43E8-4402-87A4-04685EE5C2CB}'.
MSI (s) (74:40) [12:21:22:028]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (74:40) [12:21:22:028]: Transforms are not secure.
MSI (s) (74:40) [12:21:22:028]: Note: 1: 2205 2:  3: Control 
MSI (s) (74:40) [12:21:22:028]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\Windows\TEMP\Sophos Network Threat Protection Install Log 20150804 122121.txt'.
MSI (s) (74:40) [12:21:22:028]: Command Line: INSTALLDIR= REBOOT=ReallySuppress INSTALLINGVERSION=1.0.3 CURRENTDIRECTORY=C:\Windows\system32 CLIENTUILEVEL=3 MSICLIENTUSESEXTERNALUI=1 CLIENTPROCESSID=1748 
MSI (s) (74:40) [12:21:22:028]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{5C68857A-F9FC-4502-8585-BCA5095113C2}'.
MSI (s) (74:40) [12:21:22:028]: Product Code passed to Engine.Initialize:           ''
MSI (s) (74:40) [12:21:22:028]: Product Code from property table before transforms: '{66967E5F-43E8-4402-87A4-04685EE5C2CB}'
MSI (s) (74:40) [12:21:22:028]: Product Code from property table after transforms:  '{66967E5F-43E8-4402-87A4-04685EE5C2CB}'
MSI (s) (74:40) [12:21:22:028]: Product not registered: beginning first-time install
MSI (s) (74:40) [12:21:22:028]: Product {66967E5F-43E8-4402-87A4-04685EE5C2CB} is not managed.
MSI (s) (74:40) [12:21:22:028]: MSI_LUA: Credential prompt not required, user is an admin
MSI (s) (74:40) [12:21:22:028]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
MSI (s) (74:40) [12:21:22:028]: Entering CMsiConfigurationManager::SetLastUsedSource.
MSI (s) (74:40) [12:21:22:028]: User policy value 'SearchOrder' is 'nmu'
MSI (s) (74:40) [12:21:22:028]: Adding new sources is allowed.
MSI (s) (74:40) [12:21:22:028]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
MSI (s) (74:40) [12:21:22:028]: Package name extracted from package path: 'Sophos Network Threat Protection.msi'
MSI (s) (74:40) [12:21:22:028]: Package to be registered: 'Sophos Network Threat Protection.msi'
MSI (s) (74:40) [12:21:22:028]: Note: 1: 2262 2: AdminProperties 3: -2147287038 
MSI (s) (74:40) [12:21:22:028]: Machine policy value 'DisableMsi' is 0
MSI (s) (74:40) [12:21:22:028]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (74:40) [12:21:22:028]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (74:40) [12:21:22:028]: Product installation will be elevated because user is admin and product is being installed per-machine.
MSI (s) (74:40) [12:21:22:028]: Running product '{66967E5F-43E8-4402-87A4-04685EE5C2CB}' with elevated privileges: Product is assigned.
MSI (s) (74:40) [12:21:22:028]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'ReallySuppress'.
MSI (s) (74:40) [12:21:22:028]: PROPERTY CHANGE: Adding INSTALLINGVERSION property. Its value is '1.0.3'.
MSI (s) (74:40) [12:21:22:028]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\Windows\system32'.
MSI (s) (74:40) [12:21:22:028]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'.
MSI (s) (74:40) [12:21:22:028]: PROPERTY CHANGE: Adding MSICLIENTUSESEXTERNALUI property. Its value is '1'.
MSI (s) (74:40) [12:21:22:028]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '1748'.
MSI (s) (74:40) [12:21:22:028]: Machine policy value 'DisableAutomaticApplicationShutdown' is 0
MSI (s) (74:40) [12:21:22:028]: RESTART MANAGER: Disabled by MSIRESTARTMANAGERCONTROL property; Windows Installer will use the built-in FilesInUse functionality.
MSI (s) (74:40) [12:21:22:028]: TRANSFORMS property is now: 
MSI (s) (74:40) [12:21:22:028]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '405'.
MSI (s) (74:40) [12:21:22:028]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming
MSI (s) (74:40) [12:21:22:028]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Favorites
MSI (s) (74:40) [12:21:22:028]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts
MSI (s) (74:40) [12:21:22:028]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Documents
MSI (s) (74:40) [12:21:22:028]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
MSI (s) (74:40) [12:21:22:028]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent
MSI (s) (74:40) [12:21:22:028]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo
MSI (s) (74:40) [12:21:22:028]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Templates
MSI (s) (74:40) [12:21:22:028]: SHELL32::SHGetFolderPath returned: C:\ProgramData
MSI (s) (74:40) [12:21:22:028]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Local
MSI (s) (74:40) [12:21:22:028]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Pictures
MSI (s) (74:40) [12:21:22:028]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (s) (74:40) [12:21:22:028]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
MSI (s) (74:40) [12:21:22:028]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
MSI (s) (74:40) [12:21:22:028]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu
MSI (s) (74:40) [12:21:22:043]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop
MSI (s) (74:40) [12:21:22:043]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (s) (74:40) [12:21:22:043]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
MSI (s) (74:40) [12:21:22:043]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
MSI (s) (74:40) [12:21:22:043]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu
MSI (s) (74:40) [12:21:22:043]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Desktop
MSI (s) (74:40) [12:21:22:043]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates
MSI (s) (74:40) [12:21:22:043]: SHELL32::SHGetFolderPath returned: C:\Windows\Fonts
MSI (s) (74:40) [12:21:22:043]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16 
MSI (s) (74:40) [12:21:22:043]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated.
MSI (s) (74:40) [12:21:22:043]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'.
MSI (s) (74:40) [12:21:22:043]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
MSI (s) (74:40) [12:21:22:043]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 
MSI (s) (74:40) [12:21:22:043]: PROPERTY CHANGE: Adding USERNAME property. Its value is ComputerUser.
MSI (s) (74:40) [12:21:22:043]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 
MSI (s) (74:40) [12:21:22:043]: PROPERTY CHANGE: Adding COMPANYNAME property. Its value is '*****'.
MSI (s) (74:40) [12:21:22:043]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\Windows\Installer\23328.msi'.
MSI (s) (74:40) [12:21:22:043]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\Sophos Network Threat Protection.msi'.
MSI (s) (74:40) [12:21:22:043]: Machine policy value 'MsiDisableEmbeddedUI' is 0
MSI (s) (74:40) [12:21:22:043]: EEUI - Disabling MsiEmbeddedUI due to existing external or embedded UI
MSI (s) (74:40) [12:21:22:043]: EEUI - Disabling MsiEmbeddedUI for service because it's not a quiet/basic install
MSI (s) (74:40) [12:21:22:043]: Note: 1: 2205 2:  3: PatchPackage 
MSI (s) (74:40) [12:21:22:043]: Machine policy value 'DisableRollback' is 0
MSI (s) (74:40) [12:21:22:043]: User policy value 'DisableRollback' is 0
MSI (s) (74:40) [12:21:22:043]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
=== Logging started: 8/4/2015  12:21:22 ===
MSI (s) (74:40) [12:21:22:043]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
MSI (s) (74:40) [12:21:22:043]: Doing action: INSTALL
MSI (s) (74:40) [12:21:22:043]: Note: 1: 2205 2:  3: ActionText 
Action start 12:21:22: INSTALL.
MSI (s) (74:40) [12:21:22:043]: Running ExecuteSequence
MSI (s) (74:40) [12:21:22:043]: Doing action: SystemFolder_x86_VC.194841A2_D0F2_3B96_9F71_05BA91BEA0FA
MSI (s) (74:40) [12:21:22:043]: Note: 1: 2205 2:  3: ActionText 
MSI (s) (74:40) [12:21:22:043]: PROPERTY CHANGE: Adding SystemFolder_x86_VC.194841A2_D0F2_3B96_9F71_05BA91BEA0FA property. Its value is 'C:\Windows\system32\'.
Action start 12:21:22: SystemFolder_x86_VC.194841A2_D0F2_3B96_9F71_05BA91BEA0FA.
MSI (s) (74:40) [12:21:22:043]: Doing action: FindRelatedProducts
MSI (s) (74:40) [12:21:22:043]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:22: SystemFolder_x86_VC.194841A2_D0F2_3B96_9F71_05BA91BEA0FA. Return value 1.
Action start 12:21:22: FindRelatedProducts.
MSI (s) (74:40) [12:21:22:043]: Doing action: LaunchConditions
MSI (s) (74:40) [12:21:22:043]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:22: FindRelatedProducts. Return value 1.
Action start 12:21:22: LaunchConditions.
MSI (s) (74:40) [12:21:22:043]: Doing action: ValidateProductID
MSI (s) (74:40) [12:21:22:043]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:22: LaunchConditions. Return value 1.
Action start 12:21:22: ValidateProductID.
MSI (s) (74:40) [12:21:22:043]: Skipping action: TamperProtectionCheckRemove (condition is false)
MSI (s) (74:40) [12:21:22:043]: Doing action: CostInitialize
MSI (s) (74:40) [12:21:22:043]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:22: ValidateProductID. Return value 1.
MSI (s) (74:40) [12:21:22:043]: Machine policy value 'MaxPatchCacheSize' is 10
MSI (s) (74:40) [12:21:22:043]: Baseline: Sorting baselines for {66967E5F-43E8-4402-87A4-04685EE5C2CB}.
MSI (s) (74:40) [12:21:22:043]: Baseline: New baseline 1.0.3 from transaction.
MSI (s) (74:40) [12:21:22:043]: Baseline: Sorted order Native: Order 0.
MSI (s) (74:40) [12:21:22:043]: Baseline Data Table:
MSI (s) (74:40) [12:21:22:043]: ProductCode: {66967E5F-43E8-4402-87A4-04685EE5C2CB} Version: 1.0.3 Attributes: 0 PatchId: Native BaselineId: -2147483648 Order: 0
MSI (s) (74:40) [12:21:22:043]: Baseline File Table:
MSI (s) (74:40) [12:21:22:043]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'C:\'.
MSI (s) (74:40) [12:21:22:043]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'.
MSI (s) (74:40) [12:21:22:043]: Note: 1: 2205 2:  3: Patch 
MSI (s) (74:40) [12:21:22:043]: Note: 1: 2205 2:  3: PatchPackage 
MSI (s) (74:40) [12:21:22:043]: Note: 1: 2205 2:  3: MsiPatchHeaders 
MSI (s) (74:40) [12:21:22:043]: Note: 1: 2205 2:  3: __MsiPatchFileList 
MSI (s) (74:40) [12:21:22:043]: Note: 1: 2205 2:  3: PatchPackage 
MSI (s) (74:40) [12:21:22:043]: Note: 1: 2228 2:  3: PatchPackage 4: SELECT `DiskId`, `PatchId`, `LastSequence` FROM `Media`, `PatchPackage` WHERE `Media`.`DiskId`=`PatchPackage`.`Media_` ORDER BY `DiskId`  
MSI (s) (74:40) [12:21:22:043]: Delta compression fallback method for this product transaction is 'MSI 2.0 legacy obsolescence'
MSI (s) (74:40) [12:21:22:043]: Note: 1: 2205 2:  3: Patch 
Action start 12:21:22: CostInitialize.
MSI (s) (74:40) [12:21:22:043]: Doing action: FileCost
MSI (s) (74:40) [12:21:22:043]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:22: CostInitialize. Return value 1.
MSI (s) (74:40) [12:21:22:043]: Note: 1: 2205 2:  3: MsiAssembly 
MSI (s) (74:40) [12:21:22:043]: Note: 1: 2205 2:  3: Class 
MSI (s) (74:40) [12:21:22:043]: Note: 1: 2205 2:  3: Extension 
Action start 12:21:22: FileCost.
MSI (s) (74:40) [12:21:22:043]: Doing action: CostFinalize
MSI (s) (74:40) [12:21:22:043]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:22: FileCost. Return value 1.
MSI (s) (74:40) [12:21:22:043]: PROPERTY CHANGE: Adding OutOfDiskSpace property. Its value is '0'.
MSI (s) (74:40) [12:21:22:043]: PROPERTY CHANGE: Adding OutOfNoRbDiskSpace property. Its value is '0'.
MSI (s) (74:40) [12:21:22:043]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceAvailable property. Its value is '0'.
MSI (s) (74:40) [12:21:22:043]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRequired property. Its value is '0'.
MSI (s) (74:40) [12:21:22:043]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRemaining property. Its value is '0'.
MSI (s) (74:40) [12:21:22:043]: Note: 1: 2205 2:  3: Patch 
MSI (s) (74:40) [12:21:22:043]: Note: 1: 2205 2:  3: Condition 
MSI (s) (74:40) [12:21:22:043]: PROPERTY CHANGE: Adding TARGETDIR property. Its value is 'C:\'.
MSI (s) (74:40) [12:21:22:043]: PROPERTY CHANGE: Adding INSTALLDIR.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0 property. Its value is 'C:\'.
MSI (s) (74:40) [12:21:22:043]: PROPERTY CHANGE: Adding Sophos property. Its value is 'C:\Program Files\Sophos\'.
MSI (s) (74:40) [12:21:22:043]: PROPERTY CHANGE: Adding INSTALLDIR property. Its value is 'C:\Program Files\Sophos\Sophos Network Threat Protection\'.
MSI (s) (74:40) [12:21:22:043]: PROPERTY CHANGE: Adding gui property. Its value is 'C:\Program Files\Sophos\Sophos Network Threat Protection\gui\'.
MSI (s) (74:40) [12:21:22:043]: PROPERTY CHANGE: Adding bin property. Its value is 'C:\Program Files\Sophos\Sophos Network Threat Protection\bin\'.
MSI (s) (74:40) [12:21:22:043]: PROPERTY CHANGE: Adding plugins property. Its value is 'C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\'.
MSI (s) (74:40) [12:21:22:043]: PROPERTY CHANGE: Adding SophosAppData property. Its value is 'C:\ProgramData\Sophos\'.
MSI (s) (74:40) [12:21:22:043]: PROPERTY CHANGE: Adding ProductData property. Its value is 'C:\ProgramData\Sophos\Sophos Network Threat Protection\'.
MSI (s) (74:40) [12:21:22:043]: PROPERTY CHANGE: Adding Logs property. Its value is 'C:\ProgramData\Sophos\Sophos Network Threat Protection\Logs\'.
MSI (s) (74:40) [12:21:22:043]: PROPERTY CHANGE: Adding Config property. Its value is 'C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\'.
MSI (s) (74:40) [12:21:22:043]: PROPERTY CHANGE: Adding Status property. Its value is 'C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\Status\'.
MSI (s) (74:40) [12:21:22:043]: Target path resolution complete. Dumping Directory table...
MSI (s) (74:40) [12:21:22:043]: Note: target paths subject to change (via custom actions or browsing)
MSI (s) (74:40) [12:21:22:043]: Dir (target): Key: TARGETDIR	, Object: C:\
MSI (s) (74:40) [12:21:22:043]: Dir (target): Key: WindowsFolder	, Object: C:\Windows\
MSI (s) (74:40) [12:21:22:043]: Dir (target): Key: INSTALLDIR.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0	, Object: C:\
MSI (s) (74:40) [12:21:22:043]: Dir (target): Key: SystemFolder	, Object: C:\Windows\system32\
MSI (s) (74:40) [12:21:22:043]: Dir (target): Key: SystemFolder_x86_VC.194841A2_D0F2_3B96_9F71_05BA91BEA0FA	, Object: C:\Windows\system32\
MSI (s) (74:40) [12:21:22:043]: Dir (target): Key: ProgramFilesFolder	, Object: C:\Program Files\
MSI (s) (74:40) [12:21:22:043]: Dir (target): Key: Sophos	, Object: C:\Program Files\Sophos\
MSI (s) (74:40) [12:21:22:043]: Dir (target): Key: INSTALLDIR	, Object: C:\Program Files\Sophos\Sophos Network Threat Protection\
MSI (s) (74:40) [12:21:22:043]: Dir (target): Key: gui	, Object: C:\Program Files\Sophos\Sophos Network Threat Protection\gui\
MSI (s) (74:40) [12:21:22:043]: Dir (target): Key: bin	, Object: C:\Program Files\Sophos\Sophos Network Threat Protection\bin\
MSI (s) (74:40) [12:21:22:043]: Dir (target): Key: plugins	, Object: C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\
MSI (s) (74:40) [12:21:22:043]: Dir (target): Key: CommonAppDataFolder	, Object: C:\ProgramData\
MSI (s) (74:40) [12:21:22:043]: Dir (target): Key: SophosAppData	, Object: C:\ProgramData\Sophos\
MSI (s) (74:40) [12:21:22:043]: Dir (target): Key: ProductData	, Object: C:\ProgramData\Sophos\Sophos Network Threat Protection\
MSI (s) (74:40) [12:21:22:043]: Dir (target): Key: Logs	, Object: C:\ProgramData\Sophos\Sophos Network Threat Protection\Logs\
MSI (s) (74:40) [12:21:22:043]: Dir (target): Key: Config	, Object: C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\
MSI (s) (74:40) [12:21:22:043]: Dir (target): Key: Status	, Object: C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\Status\
MSI (s) (74:40) [12:21:22:043]: PROPERTY CHANGE: Adding INSTALLLEVEL property. Its value is '1'.
MSI (s) (74:40) [12:21:22:043]: Note: 1: 2205 2:  3: MsiAssembly 
MSI (s) (74:40) [12:21:22:043]: Note: 1: 2228 2:  3: MsiAssembly 4:  SELECT `MsiAssembly`.`Attributes`, `MsiAssembly`.`File_Application`, `MsiAssembly`.`File_Manifest`,  `Component`.`KeyPath` FROM `MsiAssembly`, `Component` WHERE  `MsiAssembly`.`Component_` = `Component`.`Component` AND `MsiAssembly`.`Component_` = ? 
Action start 12:21:22: CostFinalize.
MSI (s) (74:40) [12:21:22:043]: Doing action: MigrateFeatureStates
MSI (s) (74:40) [12:21:22:043]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:22: CostFinalize. Return value 1.
Action start 12:21:22: MigrateFeatureStates.
MSI (s) (74:40) [12:21:22:043]: Doing action: InstallValidate
MSI (s) (74:40) [12:21:22:043]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:22: MigrateFeatureStates. Return value 0.
MSI (s) (74:40) [12:21:22:059]: Note: 1: 2205 2:  3: Dialog 
MSI (s) (74:40) [12:21:22:059]: Feature: AllComponents; Installed: Absent;   Request: Local;   Action: Local
MSI (s) (74:40) [12:21:22:059]: Component: ProductDataFolder; Installed: Absent;   Request: Local;   Action: Local;   Client State: Unknown
MSI (s) (74:40) [12:21:22:059]: Component: ConfigDataFolder; Installed: Absent;   Request: Local;   Action: Local;   Client State: Unknown
MSI (s) (74:40) [12:21:22:059]: Component: StatusFolder; Installed: Absent;   Request: Local;   Action: Local;   Client State: Unknown
MSI (s) (74:40) [12:21:22:059]: Component: LogsDataFolder; Installed: Absent;   Request: Local;   Action: Local;   Client State: Unknown
MSI (s) (74:40) [12:21:22:059]: Component: Driver; Installed: Absent;   Request: Local;   Action: Local;   Client State: Unknown
MSI (s) (74:40) [12:21:22:059]: Component: navl.dll; Installed: Absent;   Request: Local;   Action: Local;   Client State: Unknown
MSI (s) (74:40) [12:21:22:059]: Component: ip.plg; Installed: Absent;   Request: Local;   Action: Local;   Client State: Unknown
MSI (s) (74:40) [12:21:22:059]: Component: ipv6.plg; Installed: Absent;   Request: Local;   Action: Local;   Client State: Unknown
MSI (s) (74:40) [12:21:22:059]: Component: tcp.plg; Installed: Absent;   Request: Local;   Action: Local;   Client State: Unknown
MSI (s) (74:40) [12:21:22:059]: Component: http.plg; Installed: Absent;   Request: Local;   Action: Local;   Client State: Unknown
MSI (s) (74:40) [12:21:22:059]: Component: udp.plg; Installed: Absent;   Request: Local;   Action: Local;   Client State: Unknown
MSI (s) (74:40) [12:21:22:059]: Component: ProductInformation; Installed: Absent;   Request: Local;   Action: Local;   Client State: Unknown
MSI (s) (74:40) [12:21:22:059]: Component: Service; Installed: Absent;   Request: Local;   Action: Local;   Client State: Unknown
MSI (s) (74:40) [12:21:22:059]: Component: NTPAdapter; Installed: Absent;   Request: Local;   Action: Local;   Client State: Unknown
MSI (s) (74:40) [12:21:22:059]: Component: SspInterface; Installed: Absent;   Request: Local;   Action: Local;   Client State: Unknown
MSI (s) (74:40) [12:21:22:059]: Component: C_CENTRAL_msvcr120_x86.194841A2_D0F2_3B96_9F71_05BA91BEA0FA; Installed: Absent;   Request: Local;   Action: Local;   Client State: Unknown
MSI (s) (74:40) [12:21:22:059]: Component: C_CENTRAL_msvcp120_x86.194841A2_D0F2_3B96_9F71_05BA91BEA0FA; Installed: Absent;   Request: Local;   Action: Local;   Client State: Unknown
MSI (s) (74:40) [12:21:22:059]: Component: C_CENTRAL_vccorlib120_x86.194841A2_D0F2_3B96_9F71_05BA91BEA0FA; Installed: Absent;   Request: Local;   Action: Local;   Client State: Unknown
MSI (s) (74:40) [12:21:22:059]: Component: __ProductInformation65; Installed: Null;   Request: Local;   Action: Local;   Client State: Null
MSI (s) (74:40) [12:21:22:059]: Component: __Service65; Installed: Null;   Request: Local;   Action: Local;   Client State: Null
MSI (s) (74:40) [12:21:22:059]: Note: 1: 2205 2:  3: BindImage 
MSI (s) (74:40) [12:21:22:059]: Note: 1: 2205 2:  3: ProgId 
MSI (s) (74:40) [12:21:22:059]: Note: 1: 2205 2:  3: PublishComponent 
MSI (s) (74:40) [12:21:22:059]: Note: 1: 2205 2:  3: SelfReg 
MSI (s) (74:40) [12:21:22:059]: Note: 1: 2205 2:  3: Extension 
MSI (s) (74:40) [12:21:22:059]: Note: 1: 2205 2:  3: Font 
MSI (s) (74:40) [12:21:22:059]: Note: 1: 2205 2:  3: Shortcut 
MSI (s) (74:40) [12:21:22:059]: Note: 1: 2205 2:  3: Class 
Action start 12:21:22: InstallValidate.
MSI (s) (74:40) [12:21:22:059]: Note: 1: 2205 2:  3: _RemoveFilePath 
MSI (s) (74:40) [12:21:22:059]: PROPERTY CHANGE: Modifying CostingComplete property. Its current value is '0'. Its new value: '1'.
MSI (s) (74:40) [12:21:22:059]: Note: 1: 2205 2:  3: BindImage 
MSI (s) (74:40) [12:21:22:059]: Note: 1: 2205 2:  3: ProgId 
MSI (s) (74:40) [12:21:22:059]: Note: 1: 2205 2:  3: PublishComponent 
MSI (s) (74:40) [12:21:22:059]: Note: 1: 2205 2:  3: SelfReg 
MSI (s) (74:40) [12:21:22:059]: Note: 1: 2205 2:  3: Extension 
MSI (s) (74:40) [12:21:22:059]: Note: 1: 2205 2:  3: Font 
MSI (s) (74:40) [12:21:22:059]: Note: 1: 2205 2:  3: Shortcut 
MSI (s) (74:40) [12:21:22:059]: Note: 1: 2205 2:  3: Class 
MSI (s) (74:40) [12:21:22:059]: Note: 1: 2727 2:  
MSI (s) (74:40) [12:21:22:059]: Note: 1: 2727 2:  
MSI (s) (74:40) [12:21:22:059]: Doing action: RemoveExistingProducts
MSI (s) (74:40) [12:21:22:059]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:22: InstallValidate. Return value 1.
Action start 12:21:22: RemoveExistingProducts.
MSI (s) (74:40) [12:21:22:059]: Doing action: InstallInitialize
MSI (s) (74:40) [12:21:22:059]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:22: RemoveExistingProducts. Return value 1.
MSI (s) (74:40) [12:21:22:059]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (74:40) [12:21:22:059]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (74:40) [12:21:22:059]: BeginTransaction: Locking Server
MSI (s) (74:40) [12:21:22:059]: SRSetRestorePoint skipped for this transaction.
MSI (s) (74:40) [12:21:22:059]: Server not locked: locking for product {66967E5F-43E8-4402-87A4-04685EE5C2CB}
Action start 12:21:22: InstallInitialize.
MSI (s) (74:40) [12:21:23:044]: Doing action: ProcessComponents
MSI (s) (74:40) [12:21:23:044]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:23: InstallInitialize. Return value 1.
MSI (s) (74:40) [12:21:23:044]: Note: 1: 2205 2:  3: MsiPatchCertificate 
MSI (s) (74:40) [12:21:23:044]: LUA patching is disabled: missing MsiPatchCertificate table
MSI (s) (74:40) [12:21:23:044]: Resolving source.
MSI (s) (74:40) [12:21:23:044]: Resolving source to launched-from source.
MSI (s) (74:40) [12:21:23:044]: Setting launched-from source as last-used.
MSI (s) (74:40) [12:21:23:044]: PROPERTY CHANGE: Adding SourceDir property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\'.
MSI (s) (74:40) [12:21:23:044]: PROPERTY CHANGE: Adding SOURCEDIR property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\'.
MSI (s) (74:40) [12:21:23:044]: PROPERTY CHANGE: Adding SourcedirProduct property. Its value is '{66967E5F-43E8-4402-87A4-04685EE5C2CB}'.
MSI (s) (74:40) [12:21:23:044]: SOURCEDIR ==> C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\
MSI (s) (74:40) [12:21:23:044]: SOURCEDIR product ==> {66967E5F-43E8-4402-87A4-04685EE5C2CB}
MSI (s) (74:40) [12:21:23:044]: SECREPAIR: CryptAcquireContext succeeded
MSI (s) (74:40) [12:21:23:044]: Determining source type
MSI (s) (74:40) [12:21:23:044]: Source type from package 'Sophos Network Threat Protection.msi': 0
MSI (s) (74:40) [12:21:23:044]: SECREPAIR: Hash Database: C:\Windows\Installer\SourceHash{66967E5F-43E8-4402-87A4-04685EE5C2CB}
MSI (s) (74:40) [12:21:23:044]: Note: 1: 2262 2: SourceHash 3: -2147287038 
MSI (s) (74:40) [12:21:23:075]: SECREPAIR: New Hash Database creation complete.
MSI (s) (74:40) [12:21:23:091]: SECREPAIR: Hash Value for the file:Sophos Network Threat Protection.msi is: Uxfl9oJxEQWaIuC7BRhYtUg/unHx+v9OiAK3ZqKMiTA=
MSI (s) (74:40) [12:21:23:091]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\bin\Sntp.sys is: IyKvTMqoE0VyKmxkgEIZd4fyfuyebA5zBcKQPVHJegQ=
MSI (s) (74:40) [12:21:23:106]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\bin\navl.dll is: rampk4rR6sApRWy7kgJ0HK1WUizbvocchPWWAeaGZ3A=
MSI (s) (74:40) [12:21:23:106]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\bin\plugins\ip.plg is: +GIpSaJJnEiL9oDIKtE17h3YtvQdnsmzDbO9LF9rQGg=
MSI (s) (74:40) [12:21:23:106]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\bin\plugins\ipv6.plg is: u1T4zE6l+UlHQUQSC8NjglsI8/9Z1aSotrNk0LYn2Mg=
MSI (s) (74:40) [12:21:23:106]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\bin\plugins\tcp.plg is: tZqZeu54GbASHNuSzZeYF0S9vmWgwywkgD4TuFO6bdg=
MSI (s) (74:40) [12:21:23:106]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\bin\plugins\http.plg is: kWY29WAxbaoWB/63J7qhaie8/WgfQ1MBvUw3niCvxpw=
MSI (s) (74:40) [12:21:23:106]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\bin\plugins\udp.plg is: 8t8NGIx4CPoQSd6yJNveo6yGqIqGKO+eZPOHvuhwK2Q=
MSI (s) (74:40) [12:21:23:106]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\bin\SntpService.exe is: ilnJXieBWtqNQi2JiTYfcFLAQUjS8lbvCx+gXeWda4A=
MSI (s) (74:40) [12:21:23:106]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\bin\NTPAdapter.dll is: 7HS8u3IFVz64BTPKLHkPCoOZYK+f6vp1fv+n12mbQuQ=
MSI (s) (74:40) [12:21:23:106]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\bin\BPAIF.dll is: f1GFQ/6FI2gyk9vnKykPntSq0ef34SB29qQAfrYAgfQ=
MSI (s) (74:40) [12:21:23:106]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\bin\Sntp.inf is: OqRZ4GfF86PH1BxThxfFg6AGMMgYrTfGbo3fz9H2LnQ=
MSI (s) (74:40) [12:21:23:106]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\bin\Sntp.cat is: zwyeqyixZuXX5AxZstbu1m43/eDin3oqKbCwNZY8ovw=
MSI (s) (74:40) [12:21:23:106]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\bin\Sntp.man is: q+hTnRxv1QW9pl29ouDRQsvCwwIEHcL7dgjb7V4y/Kw=
MSI (s) (74:40) [12:21:23:122]: SECREPAIR: Hash Value for the file:System\msvcr120.dll is: huObWZWvDgQvzaqF/irv18ndx61l5jJ71ecFi8OrYVw=
MSI (s) (74:40) [12:21:23:122]: SECREPAIR: Hash Value for the file:System\msvcp120.dll is: h8QsoVVHPk5xhX0DSXyMvCj6j/fyyNcuih85txB49gA=
MSI (s) (74:40) [12:21:23:122]: SECREPAIR: Hash Value for the file:System\vccorlib120.dll is: nJ1OQhxV9+9ORV51tYpmOUKMzXXHblcX9Eiv5MIcUrA=
Action start 12:21:23: ProcessComponents.
MSI (s) (74:40) [12:21:23:153]: Source path resolution complete. Dumping Directory table...
MSI (s) (74:40) [12:21:23:153]: Dir (source): Key: TARGETDIR	, Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\	, LongSubPath: 	, ShortSubPath: 
MSI (s) (74:40) [12:21:23:153]: Dir (source): Key: WindowsFolder	, Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\	, LongSubPath: 	, ShortSubPath: 
MSI (s) (74:40) [12:21:23:153]: Dir (source): Key: INSTALLDIR.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0	, Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\	, LongSubPath: 	, ShortSubPath: 
MSI (s) (74:40) [12:21:23:153]: Dir (source): Key: SystemFolder	, Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\System\	, LongSubPath: System\	, ShortSubPath: Sys\
MSI (s) (74:40) [12:21:23:153]: Dir (source): Key: SystemFolder_x86_VC.194841A2_D0F2_3B96_9F71_05BA91BEA0FA	, Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\System\	, LongSubPath: System\	, ShortSubPath: Sys\
MSI (s) (74:40) [12:21:23:153]: Dir (source): Key: ProgramFilesFolder	, Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\	, LongSubPath: 	, ShortSubPath: 
MSI (s) (74:40) [12:21:23:153]: Dir (source): Key: Sophos	, Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\Sophos\	, LongSubPath: Sophos\	, ShortSubPath: 
MSI (s) (74:40) [12:21:23:153]: Dir (source): Key: INSTALLDIR	, Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\Sophos\Sophos Network Threat Protection\	, LongSubPath: Sophos\Sophos Network Threat Protection\	, ShortSubPath: Sophos\_tph7qnj\
MSI (s) (74:40) [12:21:23:153]: Dir (source): Key: gui	, Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\Sophos\Sophos Network Threat Protection\gui\	, LongSubPath: Sophos\Sophos Network Threat Protection\gui\	, ShortSubPath: Sophos\_tph7qnj\gui\
MSI (s) (74:40) [12:21:23:153]: Dir (source): Key: bin	, Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\Sophos\Sophos Network Threat Protection\bin\	, LongSubPath: Sophos\Sophos Network Threat Protection\bin\	, ShortSubPath: Sophos\_tph7qnj\bin\
MSI (s) (74:40) [12:21:23:153]: Dir (source): Key: plugins	, Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\Sophos\Sophos Network Threat Protection\bin\plugins\	, LongSubPath: Sophos\Sophos Network Threat Protection\bin\plugins\	, ShortSubPath: Sophos\_tph7qnj\bin\plugins\
MSI (s) (74:40) [12:21:23:153]: Dir (source): Key: CommonAppDataFolder	, Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\	, LongSubPath: 	, ShortSubPath: 
MSI (s) (74:40) [12:21:23:153]: Dir (source): Key: SophosAppData	, Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\Sophos\	, LongSubPath: Sophos\	, ShortSubPath: 
MSI (s) (74:40) [12:21:23:153]: Dir (source): Key: ProductData	, Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\Sophos\Sophos Network Threat Protection\	, LongSubPath: Sophos\Sophos Network Threat Protection\	, ShortSubPath: Sophos\hv6uh-kp\
MSI (s) (74:40) [12:21:23:153]: Dir (source): Key: Logs	, Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\Sophos\Sophos Network Threat Protection\Logs\	, LongSubPath: Sophos\Sophos Network Threat Protection\Logs\	, ShortSubPath: Sophos\hv6uh-kp\Logs\
MSI (s) (74:40) [12:21:23:153]: Dir (source): Key: Config	, Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\Sophos\Sophos Network Threat Protection\Config\	, LongSubPath: Sophos\Sophos Network Threat Protection\Config\	, ShortSubPath: Sophos\hv6uh-kp\Config\
MSI (s) (74:40) [12:21:23:153]: Dir (source): Key: Status	, Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\Sophos\Sophos Network Threat Protection\Config\Status\	, LongSubPath: Sophos\Sophos Network Threat Protection\Config\Status\	, ShortSubPath: Sophos\hv6uh-kp\Config\Status\
MSI (s) (74:40) [12:21:23:153]: Note: 1: 2205 2:  3: ActionText 
MSI (s) (74:40) [12:21:23:153]: Note: 1: 2205 2:  3: ActionText 
MSI (s) (74:40) [12:21:23:153]: Note: 1: 2205 2:  3: ActionText 
MSI (s) (74:40) [12:21:23:153]: Doing action: UnpublishFeatures
MSI (s) (74:40) [12:21:23:153]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:23: ProcessComponents. Return value 1.
Action start 12:21:23: UnpublishFeatures.
MSI (s) (74:40) [12:21:23:153]: Doing action: SchedSecureObjectsRollback
MSI (s) (74:40) [12:21:23:153]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:23: UnpublishFeatures. Return value 1.
MSI (s) (74:40) [12:21:23:169]: Creating MSIHANDLE (319) of type 790542 for thread 2624
MSI (s) (74:14) [12:21:23:169]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI9F4A.tmp, Entrypoint: SchedSecureObjectsRollback
MSI (s) (74:F4) [12:21:23:169]: Generating random cookie.
MSI (s) (74:F4) [12:21:23:169]: Created Custom Action Server with PID 5152 (0x1420).
MSI (s) (74:48) [12:21:23:185]: Running as a service.
MSI (s) (74:48) [12:21:23:185]: Hello, I'm your 32bit Elevated Non-remapped custom action server.
MSI (s) (74!54) [12:21:23:200]: Creating MSIHANDLE (320) of type 790541 for thread 4692
MSI (s) (74!54) [12:21:23:200]: Creating MSIHANDLE (321) of type 790540 for thread 4692
MSI (s) (74!54) [12:21:23:200]: Creating MSIHANDLE (322) of type 790531 for thread 4692
MSI (s) (74!54) [12:21:23:200]: Creating MSIHANDLE (323) of type 790531 for thread 4692
Action start 12:21:23: SchedSecureObjectsRollback.
MSI (s) (74!54) [12:21:23:200]: Closing MSIHANDLE (323) of type 790531 for thread 4692
MSI (s) (74!54) [12:21:23:200]: Closing MSIHANDLE (322) of type 790531 for thread 4692
MSI (s) (74!54) [12:21:23:200]: Creating MSIHANDLE (324) of type 790531 for thread 4692
MSI (s) (74!54) [12:21:23:200]: Creating MSIHANDLE (325) of type 790531 for thread 4692
SchedSecureObjectsRollback:  Failed to store ACL rollback information with error 0x80070002 - continuing
MSI (s) (74!54) [12:21:23:200]: Closing MSIHANDLE (325) of type 790531 for thread 4692
MSI (s) (74!54) [12:21:23:200]: Closing MSIHANDLE (324) of type 790531 for thread 4692
MSI (s) (74!54) [12:21:23:200]: Creating MSIHANDLE (326) of type 790531 for thread 4692
MSI (s) (74!54) [12:21:23:200]: Creating MSIHANDLE (327) of type 790531 for thread 4692
SchedSecureObjectsRollback:  Failed to store ACL rollback information with error 0x80070003 - continuing
MSI (s) (74!54) [12:21:23:200]: Closing MSIHANDLE (327) of type 790531 for thread 4692
MSI (s) (74!54) [12:21:23:200]: Closing MSIHANDLE (326) of type 790531 for thread 4692
MSI (s) (74!54) [12:21:23:200]: Creating MSIHANDLE (328) of type 790531 for thread 4692
MSI (s) (74!54) [12:21:23:200]: Creating MSIHANDLE (329) of type 790531 for thread 4692
MSI (s) (74!54) [12:21:23:200]: Closing MSIHANDLE (329) of type 790531 for thread 4692
MSI (s) (74!54) [12:21:23:200]: Creating MSIHANDLE (330) of type 790540 for thread 4692
MSI (s) (74!54) [12:21:23:200]: Creating MSIHANDLE (331) of type 790531 for thread 4692
MSI (s) (74!54) [12:21:23:200]: Creating MSIHANDLE (332) of type 790531 for thread 4692
MSI (s) (74!54) [12:21:23:200]: Creating MSIHANDLE (333) of type 790531 for thread 4692
MSI (s) (74!54) [12:21:23:200]: Closing MSIHANDLE (333) of type 790531 for thread 4692
MSI (s) (74!54) [12:21:23:200]: Closing MSIHANDLE (331) of type 790531 for thread 4692
MSI (s) (74!54) [12:21:23:200]: Closing MSIHANDLE (332) of type 790531 for thread 4692
MSI (s) (74!54) [12:21:23:200]: Closing MSIHANDLE (330) of type 790540 for thread 4692
MSI (s) (74!54) [12:21:23:200]: Creating MSIHANDLE (334) of type 790531 for thread 4692
SchedSecureObjectsRollback:  Failed to store ACL rollback information with error 0x80070003 - continuing
MSI (s) (74!54) [12:21:23:200]: Closing MSIHANDLE (334) of type 790531 for thread 4692
MSI (s) (74!54) [12:21:23:200]: Closing MSIHANDLE (328) of type 790531 for thread 4692
MSI (s) (74!54) [12:21:23:200]: Creating MSIHANDLE (335) of type 790531 for thread 4692
MSI (s) (74!54) [12:21:23:200]: Creating MSIHANDLE (336) of type 790531 for thread 4692
MSI (s) (74!54) [12:21:23:200]: Closing MSIHANDLE (336) of type 790531 for thread 4692
MSI (s) (74!54) [12:21:23:200]: Creating MSIHANDLE (337) of type 790540 for thread 4692
MSI (s) (74!54) [12:21:23:200]: Creating MSIHANDLE (338) of type 790531 for thread 4692
MSI (s) (74!54) [12:21:23:200]: Creating MSIHANDLE (339) of type 790531 for thread 4692
MSI (s) (74!54) [12:21:23:200]: Creating MSIHANDLE (340) of type 790531 for thread 4692
MSI (s) (74!54) [12:21:23:200]: Closing MSIHANDLE (340) of type 790531 for thread 4692
MSI (s) (74!54) [12:21:23:200]: Closing MSIHANDLE (338) of type 790531 for thread 4692
MSI (s) (74!54) [12:21:23:200]: Closing MSIHANDLE (339) of type 790531 for thread 4692
MSI (s) (74!54) [12:21:23:200]: Closing MSIHANDLE (337) of type 790540 for thread 4692
MSI (s) (74!54) [12:21:23:200]: Creating MSIHANDLE (341) of type 790531 for thread 4692
SchedSecureObjectsRollback:  Failed to store ACL rollback information with error 0x80070424 - continuing
MSI (s) (74!54) [12:21:23:200]: Closing MSIHANDLE (341) of type 790531 for thread 4692
MSI (s) (74!54) [12:21:23:200]: Closing MSIHANDLE (335) of type 790531 for thread 4692
MSI (s) (74!54) [12:21:23:200]: Closing MSIHANDLE (320) of type 790541 for thread 4692
MSI (s) (74!54) [12:21:23:200]: Closing MSIHANDLE (321) of type 790540 for thread 4692
MSI (s) (74:14) [12:21:23:200]: Closing MSIHANDLE (319) of type 790542 for thread 2624
SchedSecureObjectsRollback:  Failed to store ACL rollback information with error 0x80070424 - continuing
MSI (s) (74:40) [12:21:23:200]: Doing action: SetUnregisterManagementAdapterRollback
MSI (s) (74:40) [12:21:23:200]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:23: SchedSecureObjectsRollback. Return value 1.
MSI (s) (74:40) [12:21:23:200]: PROPERTY CHANGE: Adding UnregisterManagementAdapterRollback property. Its value is 'C:\Program Files\Sophos\Sophos Network Threat Protection\bin\NTPAdapter.dll'.
Action start 12:21:23: SetUnregisterManagementAdapterRollback.
MSI (s) (74:40) [12:21:23:200]: Skipping action: UnregisterManagementAdapterRollback (condition is false)
MSI (s) (74:40) [12:21:23:200]: Skipping action: UnregisterManagementAdapter (condition is false)
MSI (s) (74:40) [12:21:23:200]: Doing action: StopServices
MSI (s) (74:40) [12:21:23:200]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:23: SetUnregisterManagementAdapterRollback. Return value 1.
Action start 12:21:23: StopServices.
MSI (s) (74:40) [12:21:23:200]: Skipping action: CleanUpSsspUserAccount.SetProperty (condition is false)
MSI (s) (74:40) [12:21:23:200]: Skipping action: CleanUpSsspUserAccountRollback.SetProperty (condition is false)
MSI (s) (74:40) [12:21:23:200]: Skipping action: CleanUpSsspUserAccountRollback (condition is false)
MSI (s) (74:40) [12:21:23:200]: Skipping action: CleanUpSsspUserAccount (condition is false)
MSI (s) (74:40) [12:21:23:200]: Doing action: DeleteServices
MSI (s) (74:40) [12:21:23:200]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:23: StopServices. Return value 1.
Action start 12:21:23: DeleteServices.
MSI (s) (74:40) [12:21:23:200]: Doing action: UnregisterTypeLibraries
MSI (s) (74:40) [12:21:23:200]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:23: DeleteServices. Return value 1.
Action start 12:21:23: UnregisterTypeLibraries.
MSI (s) (74:40) [12:21:23:200]: Doing action: RemoveRegistryValues
MSI (s) (74:40) [12:21:23:200]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:23: UnregisterTypeLibraries. Return value 1.
Action start 12:21:23: RemoveRegistryValues.
MSI (s) (74:40) [12:21:23:200]: Doing action: ConfigureEventManifestUnregister
MSI (s) (74:40) [12:21:23:200]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:23: RemoveRegistryValues. Return value 1.
MSI (s) (74:40) [12:21:23:216]: Creating MSIHANDLE (342) of type 790542 for thread 2624
MSI (s) (74:1C) [12:21:23:216]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI9F7A.tmp, Entrypoint: ConfigureEventManifestUnregister
MSI (s) (74!0C) [12:21:23:216]: Creating MSIHANDLE (343) of type 790541 for thread 1804
MSI (s) (74!0C) [12:21:23:216]: Creating MSIHANDLE (344) of type 790531 for thread 1804
MSI (s) (74!0C) [12:21:23:216]: Closing MSIHANDLE (344) of type 790531 for thread 1804
MSI (s) (74!0C) [12:21:23:216]: Creating MSIHANDLE (345) of type 790540 for thread 1804
MSI (s) (74!0C) [12:21:23:216]: Creating MSIHANDLE (346) of type 790531 for thread 1804
MSI (s) (74!0C) [12:21:23:216]: Closing MSIHANDLE (346) of type 790531 for thread 1804
MSI (s) (74!0C) [12:21:23:216]: Closing MSIHANDLE (343) of type 790541 for thread 1804
MSI (s) (74!0C) [12:21:23:216]: Closing MSIHANDLE (345) of type 790540 for thread 1804
MSI (s) (74:1C) [12:21:23:216]: Closing MSIHANDLE (342) of type 790542 for thread 2624
Action start 12:21:23: ConfigureEventManifestUnregister.
MSI (s) (74:40) [12:21:23:216]: Skipping action: RemoveLogFiles.Property (condition is false)
MSI (s) (74:40) [12:21:23:216]: Skipping action: RemoveLogFiles (condition is false)
MSI (s) (74:40) [12:21:23:216]: Skipping action: RemovePolicyFile.Property (condition is false)
MSI (s) (74:40) [12:21:23:216]: Skipping action: RemovePolicyFile (condition is false)
MSI (s) (74:40) [12:21:23:216]: Skipping action: RemoveStatusFile.Property (condition is false)
MSI (s) (74:40) [12:21:23:216]: Skipping action: RemoveStatusFile (condition is false)
MSI (s) (74:40) [12:21:23:216]: Doing action: RemoveFiles
MSI (s) (74:40) [12:21:23:216]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:23: ConfigureEventManifestUnregister. Return value 1.
MSI (s) (74:40) [12:21:23:216]: Note: 1: 2205 2:  3: RemoveFile 
MSI (s) (74:40) [12:21:23:216]: Note: 1: 2205 2:  3: RemoveFile 
Action start 12:21:23: RemoveFiles.
MSI (s) (74:40) [12:21:23:216]: Doing action: RemoveFolders
MSI (s) (74:40) [12:21:23:216]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:23: RemoveFiles. Return value 0.
Action start 12:21:23: RemoveFolders.
MSI (s) (74:40) [12:21:23:216]: Doing action: CreateFolders
MSI (s) (74:40) [12:21:23:216]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:23: RemoveFolders. Return value 1.
MSI (s) (74:40) [12:21:23:232]: Using well known SID for Administrators
MSI (s) (74:40) [12:21:23:232]: Finished allocating new user SID
MSI (s) (74:40) [12:21:23:232]: Using well known SID for System
MSI (s) (74:40) [12:21:23:232]: Finished allocating new user SID
Action start 12:21:23: CreateFolders.
MSI (s) (74:40) [12:21:23:232]: Doing action: InstallFiles
MSI (s) (74:40) [12:21:23:232]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:23: CreateFolders. Return value 1.
MSI (s) (74:40) [12:21:23:232]: The file represented by File table key 'Sntp.sys' has no eligible binary patches
MSI (s) (74:40) [12:21:23:232]: The file represented by File table key 'navl.dll' has no eligible binary patches
MSI (s) (74:40) [12:21:23:232]: The file represented by File table key 'ip.plg' has no eligible binary patches
MSI (s) (74:40) [12:21:23:232]: The file represented by File table key 'ipv6.plg' has no eligible binary patches
MSI (s) (74:40) [12:21:23:232]: The file represented by File table key 'tcp.plg' has no eligible binary patches
MSI (s) (74:40) [12:21:23:232]: The file represented by File table key 'http.plg' has no eligible binary patches
MSI (s) (74:40) [12:21:23:232]: The file represented by File table key 'udp.plg' has no eligible binary patches
MSI (s) (74:40) [12:21:23:232]: The file represented by File table key 'SntpService.exe' has no eligible binary patches
MSI (s) (74:40) [12:21:23:232]: The file represented by File table key 'NTPAdapter.dll' has no eligible binary patches
MSI (s) (74:40) [12:21:23:232]: The file represented by File table key 'BPAIF.dll' has no eligible binary patches
MSI (s) (74:40) [12:21:23:232]: The file represented by File table key 'Sntp.inf' has no eligible binary patches
MSI (s) (74:40) [12:21:23:232]: The file represented by File table key 'Sntp.cat' has no eligible binary patches
MSI (s) (74:40) [12:21:23:232]: The file represented by File table key 'Sntp.man' has no eligible binary patches
MSI (s) (74:40) [12:21:23:232]: The file represented by File table key 'F_CENTRAL_msvcr120_x86.194841A2_D0F2_3B96_9F71_05BA91BEA0FA' has no eligible binary patches
MSI (s) (74:40) [12:21:23:232]: The file represented by File table key 'F_CENTRAL_msvcp120_x86.194841A2_D0F2_3B96_9F71_05BA91BEA0FA' has no eligible binary patches
MSI (s) (74:40) [12:21:23:232]: The file represented by File table key 'F_CENTRAL_vccorlib120_x86.194841A2_D0F2_3B96_9F71_05BA91BEA0FA' has no eligible binary patches
Action start 12:21:23: InstallFiles.
MSI (s) (74:40) [12:21:23:232]: Note: 1: 2205 2:  3: Patch 
MSI (s) (74:40) [12:21:23:232]: Note: 1: 2228 2:  3: Patch 4: SELECT `Patch`.`File_`, `Patch`.`Header`, `Patch`.`Attributes`, `Patch`.`Sequence`, `Patch`.`StreamRef_` FROM `Patch` WHERE `Patch`.`File_` = ? AND `Patch`.`#_MsiActive`=? ORDER BY `Patch`.`Sequence` 
MSI (s) (74:40) [12:21:23:232]: Note: 1: 2205 2:  3: MsiSFCBypass 
MSI (s) (74:40) [12:21:23:232]: Note: 1: 2228 2:  3: MsiSFCBypass 4: SELECT `File_` FROM `MsiSFCBypass` WHERE `File_` = ? 
MSI (s) (74:40) [12:21:23:232]: Note: 1: 2205 2:  3: MsiPatchHeaders 
MSI (s) (74:40) [12:21:23:232]: Note: 1: 2228 2:  3: MsiPatchHeaders 4: SELECT `Header` FROM `MsiPatchHeaders` WHERE `StreamRef` = ? 
MSI (s) (74:40) [12:21:23:232]: Note: 1: 2205 2:  3: PatchPackage 
MSI (s) (74:40) [12:21:23:232]: Note: 1: 2205 2:  3: MsiPatchHeaders 
MSI (s) (74:40) [12:21:23:232]: Note: 1: 2205 2:  3: PatchPackage 
MSI (s) (74:40) [12:21:23:232]: Skipping action: FixupDIFxAppRegistry (condition is false)
MSI (s) (74:40) [12:21:23:232]: Doing action: MsiProcessDrivers
MSI (s) (74:40) [12:21:23:232]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:23: InstallFiles. Return value 1.
MSI (s) (74:40) [12:21:23:232]: Creating MSIHANDLE (347) of type 790542 for thread 2624
MSI (s) (74:D0) [12:21:23:247]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI9F9A.tmp, Entrypoint: ProcessDriverPackages
MSI (s) (74!2C) [12:21:23:247]: Creating MSIHANDLE (348) of type 790531 for thread 812
Action start 12:21:23: MsiProcessDrivers.
MSI (s) (74!2C) [12:21:23:247]: Closing MSIHANDLE (348) of type 790531 for thread 812
MSI (s) (74!2C) [12:21:23:247]: Creating MSIHANDLE (349) of type 790541 for thread 812
MSI (s) (74!2C) [12:21:23:247]: Creating MSIHANDLE (350) of type 790540 for thread 812
MSI (s) (74!2C) [12:21:23:247]: Creating MSIHANDLE (351) of type 790531 for thread 812
MSI (s) (74!2C) [12:21:23:247]: Creating MSIHANDLE (352) of type 790531 for thread 812
DIFXAPP: ENTER: ProcessDriverPackages()
MSI (s) (74!2C) [12:21:23:247]: Closing MSIHANDLE (352) of type 790531 for thread 812
MSI (s) (74!2C) [12:21:23:247]: Creating MSIHANDLE (353) of type 790531 for thread 812
DIFXAPP: INFO: 'Component' is 'Driver'
MSI (s) (74!2C) [12:21:23:247]: Closing MSIHANDLE (353) of type 790531 for thread 812
MSI (s) (74!2C) [12:21:23:247]: Creating MSIHANDLE (354) of type 790541 for thread 812
MSI (s) (74!2C) [12:21:23:247]: Creating MSIHANDLE (355) of type 790540 for thread 812
MSI (s) (74!2C) [12:21:23:247]: Creating MSIHANDLE (356) of type 790531 for thread 812
MSI (s) (74!2C) [12:21:23:247]: Closing MSIHANDLE (356) of type 790531 for thread 812
MSI (s) (74!2C) [12:21:23:247]: Closing MSIHANDLE (355) of type 790540 for thread 812
MSI (s) (74!2C) [12:21:23:247]: Closing MSIHANDLE (354) of type 790541 for thread 812
MSI (s) (74!2C) [12:21:23:247]: Creating MSIHANDLE (357) of type 790531 for thread 812
DIFXAPP: INFO: Component state 0x2 -> 0x3
MSI (s) (74!2C) [12:21:23:247]: Closing MSIHANDLE (357) of type 790531 for thread 812
MSI (s) (74!2C) [12:21:23:247]: Creating MSIHANDLE (358) of type 790531 for thread 812
DIFXAPP: INFO: 'ComponentId' is {76F354A6-97D5-4872-9781-2F2642A4F18A}
MSI (s) (74!2C) [12:21:23:247]: Closing MSIHANDLE (358) of type 790531 for thread 812
MSI (s) (74!2C) [12:21:23:247]: Creating MSIHANDLE (359) of type 790531 for thread 812
MSI (s) (74!2C) [12:21:23:247]: Creating MSIHANDLE (360) of type 790531 for thread 812
DIFXAPP: INFO: 'Flags' is 21
MSI (s) (74!2C) [12:21:23:247]: Closing MSIHANDLE (360) of type 790531 for thread 812
MSI (s) (74!2C) [12:21:23:247]: Creating MSIHANDLE (361) of type 790531 for thread 812
DIFXAPP: INFO: component path is C:\Program Files\Sophos\Sophos Network Threat Protection\bin\
MSI (s) (74!2C) [12:21:23:247]: Closing MSIHANDLE (361) of type 790531 for thread 812
MSI (s) (74!2C) [12:21:23:247]: Creating MSIHANDLE (362) of type 790531 for thread 812
DIFXAPP: INFO: user SID of user performing the install is 'S-1-5-18'.
MSI (s) (74!2C) [12:21:23:247]: Closing MSIHANDLE (362) of type 790531 for thread 812
MSI (s) (74!2C) [12:21:23:247]: PROPERTY CHANGE: Adding MsiRollbackInstall property. Its value is '2.1
2
{76F354A6-97D5-4872-9781-2F2642A4F18A}
21
2
Sophos Network Threat Protection
Sophos Limited'.
MSI (s) (74!2C) [12:21:23:247]: Doing action: MsiRollbackInstall
MSI (s) (74!2C) [12:21:23:247]: Note: 1: 2205 2:  3: ActionText 
DIFXAPP: INFO: creating HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\DIFxApp\Components\{76F354A6-97D5-4872-9781-2F2642A4F18A} (User's SID: 'S-1-5-18') ...
Action start 12:21:23: MsiRollbackInstall.
MSI (s) (74!2C) [12:21:23:247]: PROPERTY CHANGE: Adding MsiInstallDrivers property. Its value is '2.1
2
{76F354A6-97D5-4872-9781-2F2642A4F18A}
C:\Program Files\Sophos\Sophos Network Threat Protection\bin\
21
2
Sophos Network Threat Protection
Sophos Limited'.
MSI (s) (74!2C) [12:21:23:247]: Doing action: MsiInstallDrivers
MSI (s) (74!2C) [12:21:23:247]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:23: MsiRollbackInstall. Return value 1.
Action start 12:21:23: MsiInstallDrivers.
MSI (s) (74!2C) [12:21:23:247]: Closing MSIHANDLE (359) of type 790531 for thread 812
MSI (s) (74!2C) [12:21:23:247]: Closing MSIHANDLE (351) of type 790531 for thread 812
MSI (s) (74!2C) [12:21:23:247]: Closing MSIHANDLE (350) of type 790540 for thread 812
MSI (s) (74!2C) [12:21:23:247]: Closing MSIHANDLE (349) of type 790541 for thread 812
MSI (s) (74!2C) [12:21:23:247]: Creating MSIHANDLE (363) of type 790531 for thread 812
Action ended 12:21:23: MsiInstallDrivers. Return value 1.
MSI (s) (74!2C) [12:21:23:247]: Closing MSIHANDLE (363) of type 790531 for thread 812
MSI (s) (74:D0) [12:21:23:247]: Closing MSIHANDLE (347) of type 790542 for thread 2624
DIFXAPP: RETURN: ProcessDriverPackages() 0 (0x0)
MSI (s) (74:40) [12:21:23:247]: Doing action: DuplicateFiles
MSI (s) (74:40) [12:21:23:247]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:23: MsiProcessDrivers. Return value 1.
Action start 12:21:23: DuplicateFiles.
MSI (s) (74:40) [12:21:23:247]: Doing action: SchedXmlFile
MSI (s) (74:40) [12:21:23:247]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:23: DuplicateFiles. Return value 1.
MSI (s) (74:40) [12:21:23:263]: Creating MSIHANDLE (364) of type 790542 for thread 2624
MSI (s) (74:54) [12:21:23:263]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI9FAB.tmp, Entrypoint: SchedXmlFile
MSI (s) (74:48) [12:21:23:263]: Creating MSIHANDLE (365) of type 790541 for thread 2632
MSI (s) (74:48) [12:21:23:263]: Creating MSIHANDLE (366) of type 790531 for thread 2632
MSI (s) (74:48) [12:21:23:263]: Closing MSIHANDLE (366) of type 790531 for thread 2632
MSI (s) (74:48) [12:21:23:263]: Creating MSIHANDLE (367) of type 790540 for thread 2632
MSI (s) (74:48) [12:21:23:263]: Creating MSIHANDLE (368) of type 790531 for thread 2632
MSI (s) (74:48) [12:21:23:263]: Creating MSIHANDLE (369) of type 790531 for thread 2632
MSI (s) (74:48) [12:21:23:263]: Closing MSIHANDLE (369) of type 790531 for thread 2632
MSI (s) (74:48) [12:21:23:263]: Creating MSIHANDLE (370) of type 790531 for thread 2632
MSI (s) (74:48) [12:21:23:263]: Closing MSIHANDLE (370) of type 790531 for thread 2632
MSI (s) (74:48) [12:21:23:263]: Creating MSIHANDLE (371) of type 790531 for thread 2632
MSI (s) (74:48) [12:21:23:263]: Closing MSIHANDLE (371) of type 790531 for thread 2632
MSI (s) (74:48) [12:21:23:263]: Creating MSIHANDLE (372) of type 790531 for thread 2632
MSI (s) (74:48) [12:21:23:263]: Closing MSIHANDLE (372) of type 790531 for thread 2632
MSI (s) (74:48) [12:21:23:263]: Closing MSIHANDLE (368) of type 790531 for thread 2632
MSI (s) (74:48) [12:21:23:263]: Creating MSIHANDLE (373) of type 790531 for thread 2632
MSI (s) (74:48) [12:21:23:263]: Creating MSIHANDLE (374) of type 790531 for thread 2632
MSI (s) (74:48) [12:21:23:263]: Closing MSIHANDLE (374) of type 790531 for thread 2632
MSI (s) (74:48) [12:21:23:263]: Creating MSIHANDLE (375) of type 790531 for thread 2632
MSI (s) (74:48) [12:21:23:263]: Closing MSIHANDLE (375) of type 790531 for thread 2632
MSI (s) (74:48) [12:21:23:263]: Creating MSIHANDLE (376) of type 790531 for thread 2632
MSI (s) (74:48) [12:21:23:263]: Closing MSIHANDLE (376) of type 790531 for thread 2632
MSI (s) (74:48) [12:21:23:263]: Creating MSIHANDLE (377) of type 790531 for thread 2632
MSI (s) (74:48) [12:21:23:263]: Closing MSIHANDLE (377) of type 790531 for thread 2632
MSI (s) (74:48) [12:21:23:263]: Closing MSIHANDLE (373) of type 790531 for thread 2632
MSI (s) (74:48) [12:21:23:263]: Closing MSIHANDLE (367) of type 790540 for thread 2632
MSI (s) (74:48) [12:21:23:263]: PROPERTY CHANGE: Adding ExecXmlFile property. Its value is '1€0€C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.man€7€1€/*/*/*/*[@messageFileName]€messageFileName€C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.sys€1€0€C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.man€7€1€/*/*/*/*[@resourceFileName]€resourceFileName€C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.sys'.
MSI (s) (74:48) [12:21:23:263]: Creating MSIHANDLE (378) of type 790531 for thread 2632
Action start 12:21:23: SchedXmlFile.
MSI (s) (74:48) [12:21:23:278]: Closing MSIHANDLE (378) of type 790531 for thread 2632
MSI (s) (74:48) [12:21:23:278]: Doing action: ExecXmlFile
MSI (s) (74:48) [12:21:23:278]: Note: 1: 2205 2:  3: ActionText 
Action start 12:21:23: ExecXmlFile.
MSI (s) (74:48) [12:21:23:278]: Closing MSIHANDLE (365) of type 790541 for thread 2632
MSI (s) (74:54) [12:21:23:278]: Closing MSIHANDLE (364) of type 790542 for thread 2624
Action ended 12:21:23: ExecXmlFile. Return value 1.
MSI (s) (74:40) [12:21:23:278]: Doing action: ConfigureEventManifestRegister
MSI (s) (74:40) [12:21:23:278]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:23: SchedXmlFile. Return value 1.
MSI (s) (74:40) [12:21:23:294]: Creating MSIHANDLE (379) of type 790542 for thread 2624
MSI (s) (74:20) [12:21:23:294]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI9FCB.tmp, Entrypoint: ConfigureEventManifestRegister
MSI (s) (74!8C) [12:21:23:294]: Creating MSIHANDLE (380) of type 790541 for thread 3980
MSI (s) (74!8C) [12:21:23:294]: Creating MSIHANDLE (381) of type 790531 for thread 3980
MSI (s) (74!8C) [12:21:23:294]: Closing MSIHANDLE (381) of type 790531 for thread 3980
MSI (s) (74!8C) [12:21:23:294]: Creating MSIHANDLE (382) of type 790540 for thread 3980
MSI (s) (74!8C) [12:21:23:294]: Creating MSIHANDLE (383) of type 790531 for thread 3980
MSI (s) (74!8C) [12:21:23:294]: Creating MSIHANDLE (384) of type 790531 for thread 3980
MSI (s) (74!8C) [12:21:23:294]: Closing MSIHANDLE (384) of type 790531 for thread 3980
MSI (s) (74!8C) [12:21:23:294]: PROPERTY CHANGE: Adding RollbackRegisterEventManifest property. Its value is '"wevtutil.exe" um "C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.man"'.
MSI (s) (74!8C) [12:21:23:294]: Creating MSIHANDLE (385) of type 790531 for thread 3980
Action start 12:21:23: ConfigureEventManifestRegister.
MSI (s) (74!8C) [12:21:23:294]: Closing MSIHANDLE (385) of type 790531 for thread 3980
MSI (s) (74!8C) [12:21:23:294]: Doing action: RollbackRegisterEventManifest
MSI (s) (74!8C) [12:21:23:294]: Note: 1: 2205 2:  3: ActionText 
Action start 12:21:23: RollbackRegisterEventManifest.
MSI (s) (74!8C) [12:21:23:294]: PROPERTY CHANGE: Adding RegisterEventManifest property. Its value is '"wevtutil.exe" im "C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.man"'.
MSI (s) (74!8C) [12:21:23:294]: Creating MSIHANDLE (386) of type 790531 for thread 3980
Action ended 12:21:23: RollbackRegisterEventManifest. Return value 1.
MSI (s) (74!8C) [12:21:23:294]: Closing MSIHANDLE (386) of type 790531 for thread 3980
MSI (s) (74!8C) [12:21:23:294]: Doing action: RegisterEventManifest
MSI (s) (74!8C) [12:21:23:294]: Note: 1: 2205 2:  3: ActionText 
Action start 12:21:23: RegisterEventManifest.
MSI (s) (74!8C) [12:21:23:294]: Closing MSIHANDLE (383) of type 790531 for thread 3980
MSI (s) (74!8C) [12:21:23:294]: Closing MSIHANDLE (380) of type 790541 for thread 3980
MSI (s) (74!8C) [12:21:23:294]: Closing MSIHANDLE (382) of type 790540 for thread 3980
MSI (s) (74:20) [12:21:23:294]: Closing MSIHANDLE (379) of type 790542 for thread 2624
Action ended 12:21:23: RegisterEventManifest. Return value 1.
MSI (s) (74:40) [12:21:23:294]: Doing action: WriteRegistryValues
MSI (s) (74:40) [12:21:23:294]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:23: ConfigureEventManifestRegister. Return value 1.
Action start 12:21:23: WriteRegistryValues.
MSI (s) (74:40) [12:21:23:294]: Doing action: RegisterTypeLibraries
MSI (s) (74:40) [12:21:23:294]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:23: WriteRegistryValues. Return value 1.
Action start 12:21:23: RegisterTypeLibraries.
MSI (s) (74:40) [12:21:23:294]: Doing action: InstallServices
MSI (s) (74:40) [12:21:23:294]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:23: RegisterTypeLibraries. Return value 1.
Action start 12:21:23: InstallServices.
MSI (s) (74:40) [12:21:23:294]: Doing action: SchedSecureObjects
MSI (s) (74:40) [12:21:23:294]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:23: InstallServices. Return value 1.
MSI (s) (74:40) [12:21:23:310]: Creating MSIHANDLE (387) of type 790542 for thread 2624
MSI (s) (74:38) [12:21:23:310]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI9FDB.tmp, Entrypoint: SchedSecureObjects
MSI (s) (74!74) [12:21:23:310]: Creating MSIHANDLE (388) of type 790541 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Creating MSIHANDLE (389) of type 790531 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Closing MSIHANDLE (389) of type 790531 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Creating MSIHANDLE (390) of type 790540 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Creating MSIHANDLE (391) of type 790531 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Creating MSIHANDLE (392) of type 790531 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Closing MSIHANDLE (392) of type 790531 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Closing MSIHANDLE (391) of type 790531 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Creating MSIHANDLE (393) of type 790531 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Creating MSIHANDLE (394) of type 790531 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Closing MSIHANDLE (394) of type 790531 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Closing MSIHANDLE (393) of type 790531 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Creating MSIHANDLE (395) of type 790531 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Creating MSIHANDLE (396) of type 790531 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Closing MSIHANDLE (396) of type 790531 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Closing MSIHANDLE (395) of type 790531 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Creating MSIHANDLE (397) of type 790531 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Creating MSIHANDLE (398) of type 790531 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Closing MSIHANDLE (398) of type 790531 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Creating MSIHANDLE (399) of type 790540 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Creating MSIHANDLE (400) of type 790531 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Creating MSIHANDLE (401) of type 790531 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Creating MSIHANDLE (402) of type 790531 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Closing MSIHANDLE (402) of type 790531 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Closing MSIHANDLE (400) of type 790531 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Closing MSIHANDLE (401) of type 790531 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Closing MSIHANDLE (399) of type 790540 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Creating MSIHANDLE (403) of type 790531 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Closing MSIHANDLE (403) of type 790531 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Closing MSIHANDLE (397) of type 790531 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Creating MSIHANDLE (404) of type 790531 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Creating MSIHANDLE (405) of type 790531 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Closing MSIHANDLE (405) of type 790531 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Creating MSIHANDLE (406) of type 790540 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Creating MSIHANDLE (407) of type 790531 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Creating MSIHANDLE (408) of type 790531 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Creating MSIHANDLE (409) of type 790531 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Closing MSIHANDLE (409) of type 790531 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Closing MSIHANDLE (407) of type 790531 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Closing MSIHANDLE (408) of type 790531 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Closing MSIHANDLE (406) of type 790540 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Creating MSIHANDLE (410) of type 790531 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Closing MSIHANDLE (410) of type 790531 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Closing MSIHANDLE (404) of type 790531 for thread 4468
MSI (s) (74!74) [12:21:23:310]: PROPERTY CHANGE: Adding ExecSecureObjects property. Its value is 'C:\ProgramData\Sophos\Sophos Network Threat Protection\€CreateFolder€€NT SERVICE\sntpservice€-2147483647€C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\Status\€CreateFolder€€NT SERVICE\sntpservice€278€C:\ProgramData\Sophos\Sophos Network Threat Protection\Logs\€CreateFolder€€NT SERVICE\sntpservice€278€SntpService€ServiceInstall€€Administrators€983551€SntpService€ServiceInstall€€Everyone€-2147483632'.
MSI (s) (74!74) [12:21:23:310]: Creating MSIHANDLE (411) of type 790531 for thread 4468
Action start 12:21:23: SchedSecureObjects.
MSI (s) (74!74) [12:21:23:310]: Closing MSIHANDLE (411) of type 790531 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Doing action: ExecSecureObjects
MSI (s) (74!74) [12:21:23:310]: Note: 1: 2205 2:  3: ActionText 
Action start 12:21:23: ExecSecureObjects.
MSI (s) (74!74) [12:21:23:310]: Closing MSIHANDLE (388) of type 790541 for thread 4468
MSI (s) (74!74) [12:21:23:310]: Closing MSIHANDLE (390) of type 790540 for thread 4468
MSI (s) (74:38) [12:21:23:325]: Closing MSIHANDLE (387) of type 790542 for thread 2624
Action ended 12:21:23: ExecSecureObjects. Return value 1.
MSI (s) (74:40) [12:21:23:325]: Doing action: SchedServiceConfig
MSI (s) (74:40) [12:21:23:325]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:23: SchedSecureObjects. Return value 1.
MSI (s) (74:40) [12:21:23:325]: Creating MSIHANDLE (412) of type 790542 for thread 2624
MSI (s) (74:B0) [12:21:23:325]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI9FFC.tmp, Entrypoint: SchedServiceConfig
MSI (s) (74!34) [12:21:23:341]: Creating MSIHANDLE (413) of type 790541 for thread 4916
MSI (s) (74!34) [12:21:23:341]: Creating MSIHANDLE (414) of type 790540 for thread 4916
MSI (s) (74!34) [12:21:23:341]: Creating MSIHANDLE (415) of type 790531 for thread 4916
MSI (s) (74!34) [12:21:23:341]: Creating MSIHANDLE (416) of type 790531 for thread 4916
MSI (s) (74!34) [12:21:23:341]: Closing MSIHANDLE (416) of type 790531 for thread 4916
MSI (s) (74!34) [12:21:23:341]: Closing MSIHANDLE (415) of type 790531 for thread 4916
MSI (s) (74!34) [12:21:23:341]: PROPERTY CHANGE: Adding RollbackServiceConfig property. Its value is 'SchedServiceConfig'.
MSI (s) (74!34) [12:21:23:341]: Creating MSIHANDLE (417) of type 790531 for thread 4916
Action start 12:21:23: SchedServiceConfig.
MSI (s) (74!34) [12:21:23:341]: Closing MSIHANDLE (417) of type 790531 for thread 4916
MSI (s) (74!34) [12:21:23:341]: Doing action: RollbackServiceConfig
MSI (s) (74!34) [12:21:23:341]: Note: 1: 2205 2:  3: ActionText 
Action start 12:21:23: RollbackServiceConfig.
MSI (s) (74!34) [12:21:23:341]: PROPERTY CHANGE: Adding ExecServiceConfig property. Its value is 'SchedServiceConfig€SntpService€0€restart€restart€none€1€120€€'.
MSI (s) (74!34) [12:21:23:341]: Creating MSIHANDLE (418) of type 790531 for thread 4916
Action ended 12:21:23: RollbackServiceConfig. Return value 1.
MSI (s) (74!34) [12:21:23:341]: Closing MSIHANDLE (418) of type 790531 for thread 4916
MSI (s) (74!34) [12:21:23:341]: Doing action: ExecServiceConfig
MSI (s) (74!34) [12:21:23:341]: Note: 1: 2205 2:  3: ActionText 
Action start 12:21:23: ExecServiceConfig.
MSI (s) (74!34) [12:21:23:341]: Closing MSIHANDLE (413) of type 790541 for thread 4916
MSI (s) (74!34) [12:21:23:341]: Closing MSIHANDLE (414) of type 790540 for thread 4916
MSI (s) (74:B0) [12:21:23:341]: Closing MSIHANDLE (412) of type 790542 for thread 2624
Action ended 12:21:23: ExecServiceConfig. Return value 1.
MSI (s) (74:40) [12:21:23:341]: Doing action: SetupSspUserAccount.SetProperty
MSI (s) (74:40) [12:21:23:341]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:23: SchedServiceConfig. Return value 1.
MSI (s) (74:40) [12:21:23:341]: PROPERTY CHANGE: Adding SetupSspUserAccount property. Its value is 'NT SERVICE\sntpservice'.
Action start 12:21:23: SetupSspUserAccount.SetProperty.
MSI (s) (74:40) [12:21:23:341]: Doing action: SetupSspUserAccountRollback.SetProperty
MSI (s) (74:40) [12:21:23:341]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:23: SetupSspUserAccount.SetProperty. Return value 1.
MSI (s) (74:40) [12:21:23:341]: PROPERTY CHANGE: Adding SetupSspUserAccountRollback property. Its value is 'NT SERVICE\sntpservice'.
Action start 12:21:23: SetupSspUserAccountRollback.SetProperty.
MSI (s) (74:40) [12:21:23:341]: Doing action: SetupSspUserAccountRollback
MSI (s) (74:40) [12:21:23:341]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:23: SetupSspUserAccountRollback.SetProperty. Return value 1.
Action start 12:21:23: SetupSspUserAccountRollback.
MSI (s) (74:40) [12:21:23:341]: Doing action: SetupSspUserAccount
MSI (s) (74:40) [12:21:23:341]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:23: SetupSspUserAccountRollback. Return value 1.
Action start 12:21:23: SetupSspUserAccount.
MSI (s) (74:40) [12:21:23:341]: Doing action: MsiConfigureServices
MSI (s) (74:40) [12:21:23:341]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:23: SetupSspUserAccount. Return value 1.
Action start 12:21:23: MsiConfigureServices.
MSI (s) (74:40) [12:21:23:341]: Note: 1: 2205 2:  3: MsiServiceConfigFailureActions 
MSI (s) (74:40) [12:21:23:341]: Note: 1: 2228 2:  3: MsiServiceConfigFailureActions 4: SELECT `Name`, `Event`, `ResetPeriod`, `RebootMessage`,`Command`,  `Actions`, `DelayActions`, `Action` FROM `MsiServiceConfigFailureActions`, `Component` WHERE `Component_` = `Component` AND (`Action` = 0 OR `Action` = 1 OR `Action` = 3) 
MSI (s) (74:40) [12:21:23:341]: Doing action: StartServices
MSI (s) (74:40) [12:21:23:341]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:23: MsiConfigureServices. Return value 1.
Action start 12:21:23: StartServices.
MSI (s) (74:40) [12:21:23:341]: Doing action: RegisterManagementAdapterRollback
MSI (s) (74:40) [12:21:23:341]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:23: StartServices. Return value 1.
Action start 12:21:23: RegisterManagementAdapterRollback.
MSI (s) (74:40) [12:21:23:341]: Doing action: SetRegisterManagementAdapter
MSI (s) (74:40) [12:21:23:341]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:23: RegisterManagementAdapterRollback. Return value 1.
MSI (s) (74:40) [12:21:23:341]: PROPERTY CHANGE: Adding RegisterManagementAdapter property. Its value is 'C:\Program Files\Sophos\Sophos Network Threat Protection\bin\NTPAdapter.dll'.
Action start 12:21:23: SetRegisterManagementAdapter.
MSI (s) (74:40) [12:21:23:341]: Doing action: RegisterManagementAdapter
MSI (s) (74:40) [12:21:23:341]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:23: SetRegisterManagementAdapter. Return value 1.
Action start 12:21:23: RegisterManagementAdapter.
MSI (s) (74:40) [12:21:23:341]: Doing action: RegisterUser
MSI (s) (74:40) [12:21:23:341]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:23: RegisterManagementAdapter. Return value 1.
Action start 12:21:23: RegisterUser.
MSI (s) (74:40) [12:21:23:341]: Doing action: RegisterProduct
MSI (s) (74:40) [12:21:23:341]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:23: RegisterUser. Return value 1.
Action start 12:21:23: RegisterProduct.
MSI (s) (74:40) [12:21:23:341]: PROPERTY CHANGE: Adding ProductToBeRegistered property. Its value is '1'.
MSI (s) (74:40) [12:21:23:341]: Doing action: PublishFeatures
MSI (s) (74:40) [12:21:23:341]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:23: RegisterProduct. Return value 1.
Action start 12:21:23: PublishFeatures.
MSI (s) (74:40) [12:21:23:341]: Doing action: PublishProduct
MSI (s) (74:40) [12:21:23:341]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:23: PublishFeatures. Return value 1.
Action start 12:21:23: PublishProduct.
MSI (s) (74:40) [12:21:23:341]: Skipping action: WixFailWhenDeferred (condition is false)
MSI (s) (74:40) [12:21:23:341]: Doing action: InstallFinalize
MSI (s) (74:40) [12:21:23:341]: Note: 1: 2205 2:  3: ActionText 
Action ended 12:21:23: PublishProduct. Return value 1.
MSI (s) (74:40) [12:21:23:341]: Running Script: C:\Windows\Installer\MSI9F49.tmp
MSI (s) (74:40) [12:21:23:341]: PROPERTY CHANGE: Adding UpdateStarted property. Its value is '1'.
MSI (s) (74:40) [12:21:23:341]: Machine policy value 'DisableRollback' is 0
MSI (s) (74:40) [12:21:23:357]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 
MSI (s) (74:40) [12:21:23:357]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1191469740,LangId=1033,Platform=0,ScriptType=1,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1)
Action start 12:21:23: InstallFinalize.
MSI (s) (74:40) [12:21:23:357]: Executing op: ProductInfo(ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},ProductName=Sophos Network Threat Protection,PackageName=Sophos Network Threat Protection.msi,Language=1033,Version=16777219,Assignment=1,ObsoleteArg=0,ProductIcon=shield.ico,,PackageCode={5C68857A-F9FC-4502-8585-BCA5095113C2},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0,ProductDeploymentFlags=3)
MSI (s) (74:40) [12:21:23:357]: Executing op: DialogInfo(Type=0,Argument=1033)
MSI (s) (74:40) [12:21:23:357]: Executing op: DialogInfo(Type=1,Argument=Sophos Network Threat Protection)
MSI (s) (74:40) [12:21:23:357]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1])
MSI (s) (74:40) [12:21:23:357]: Executing op: SetBaseline(Baseline=0,)
MSI (s) (74:40) [12:21:23:357]: Executing op: SetBaseline(Baseline=1,)
MSI (s) (74:40) [12:21:23:357]: Executing op: ActionStart(Name=ProcessComponents,Description=Updating component registration,)
MSI (s) (74:40) [12:21:23:357]: Executing op: ProgressTotal(Total=18,Type=1,ByteEquivalent=24000)
MSI (s) (74:40) [12:21:23:357]: Executing op: ComponentRegister(ComponentId={E1E87C49-DD4A-4C77-8D42-3ACD20DBC536},KeyPath=C:\ProgramData\Sophos\Sophos Network Threat Protection\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (74:40) [12:21:23:357]: Executing op: ComponentRegister(ComponentId={4D81D62C-8373-45B8-ABF2-0C0D6ED2DE34},KeyPath=C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (74:40) [12:21:23:357]: Executing op: ComponentRegister(ComponentId={74F91047-4C42-457F-B531-A83EF6EC85E2},KeyPath=C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\Status\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (74:40) [12:21:23:357]: Executing op: ComponentRegister(ComponentId={F1B8B8D7-46D7-4CA9-B109-35931536EA8A},KeyPath=C:\ProgramData\Sophos\Sophos Network Threat Protection\Logs\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (74:40) [12:21:23:357]: Executing op: ComponentRegister(ComponentId={76F354A6-97D5-4872-9781-2F2642A4F18A},KeyPath=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.sys,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (74:40) [12:21:23:357]: Executing op: ComponentRegister(ComponentId={355DC0F9-A6B5-4FCA-8121-00847E59A436},KeyPath=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\navl.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (74:40) [12:21:23:357]: Executing op: ComponentRegister(ComponentId={9B222529-2B29-4547-AAEA-9C8A0423595B},KeyPath=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\ip.plg,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (74:40) [12:21:23:357]: Executing op: ComponentRegister(ComponentId={1A0CA7AD-4F12-4887-809E-96D79A66CC7F},KeyPath=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\ipv6.plg,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (74:40) [12:21:23:357]: Executing op: ComponentRegister(ComponentId={F27D2FBB-5E0B-4351-82CE-E72D4F1EDE71},KeyPath=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\tcp.plg,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (74:40) [12:21:23:357]: Executing op: ComponentRegister(ComponentId={D45EF81E-13E2-45D6-9DA9-09FD21266A06},KeyPath=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\http.plg,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (74:40) [12:21:23:357]: Executing op: ComponentRegister(ComponentId={710F5A00-8ECC-402C-910E-6096F350A923},KeyPath=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\udp.plg,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (74:40) [12:21:23:357]: Executing op: ComponentRegister(ComponentId={38879DEA-36FA-41BE-ACF3-B084CB40689B},KeyPath=C:\Program Files\Sophos\Sophos Network Threat Protection\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (74:40) [12:21:23:357]: Executing op: ComponentRegister(ComponentId={DF927ABB-6A5F-44F2-A430-137AAC79AA71},KeyPath=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\SntpService.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (74:40) [12:21:23:372]: Executing op: ComponentRegister(ComponentId={4E691ABE-115D-4721-9F9A-3547D17077C5},KeyPath=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\NTPAdapter.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (74:40) [12:21:23:372]: Executing op: ComponentRegister(ComponentId={B9C8E32A-5EB9-4B7F-91AF-9FD883FB729C},KeyPath=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\BPAIF.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (74:40) [12:21:23:372]: Executing op: ComponentRegister(ComponentId={0835C947-D6D2-4E52-AF14-0231D04E88EA},KeyPath=C:\Windows\system32\msvcr120.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (74:40) [12:21:23:372]: Executing op: ComponentRegister(ComponentId={74260D9F-D644-423B-B2D4-0291EA4BA8BE},KeyPath=C:\Windows\system32\msvcp120.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (74:40) [12:21:23:372]: Executing op: ComponentRegister(ComponentId={63B83B20-1AB9-4F49-B0B2-4489724CA96C},KeyPath=C:\Windows\system32\vccorlib120.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (74:40) [12:21:23:372]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=13200)
MSI (s) (74:40) [12:21:23:372]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs,,BinaryType=0,,)
MSI (s) (74:40) [12:21:23:372]: Executing op: ProgressTick()
MSI (s) (74:40) [12:21:23:372]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=13200)
MSI (s) (74:40) [12:21:23:372]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs,,BinaryType=0,,)
MSI (s) (74:40) [12:21:23:372]: Executing op: ProgressTick()
MSI (s) (74:40) [12:21:23:372]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=13200)
MSI (s) (74:40) [12:21:23:372]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs,,BinaryType=0,,)
MSI (s) (74:40) [12:21:23:372]: Executing op: ProgressTick()
MSI (s) (74:40) [12:21:23:372]: Executing op: ActionStart(Name=StopServices,Description=Stopping services,Template=Service: [1])
MSI (s) (74:40) [12:21:23:372]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=1300000)
MSI (s) (74:40) [12:21:23:372]: Executing op: ServiceControl(,Name=SntpService,Action=2,Wait=1,)
MSI (s) (74:40) [12:21:23:372]: Executing op: ActionStart(Name=CreateFolders,Description=Creating folders,Template=Folder: [1])
MSI (s) (74:40) [12:21:23:372]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Network Threat Protection\,Foreign=0,SecurityDescriptor=BinaryData,)
MSI (s) (74:40) [12:21:23:372]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\,Foreign=0,,)
MSI (s) (74:40) [12:21:23:372]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\Status\,Foreign=0,,)
MSI (s) (74:40) [12:21:23:372]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Network Threat Protection\Logs\,Foreign=0,,)
MSI (s) (74:40) [12:21:23:372]: Executing op: FolderCreate(Folder=C:\Program Files\Sophos\Sophos Network Threat Protection\,Foreign=0,,)
MSI (s) (74:40) [12:21:23:372]: Executing op: ActionStart(Name=InstallFiles,Description=Copying new files,Template=File: [1],  Directory: [9],  Size: [6])
MSI (s) (74:40) [12:21:23:372]: Executing op: ProgressTotal(Total=3844655,Type=0,ByteEquivalent=1)
MSI (s) (74:40) [12:21:23:372]: Executing op: SetTargetFolder(Folder=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\)
MSI (s) (74:40) [12:21:23:372]: Executing op: SetSourceFolder(Folder=1\Sophos\_tph7qnj\bin\|Sophos\Sophos Network Threat Protection\bin\)
MSI (s) (74:40) [12:21:23:372]: Executing op: ChangeMedia(,MediaPrompt=Please insert the disk: ,,BytesPerTick=65536,CopierType=0,,,,,,IsFirstPhysicalMedia=1)
MSI (s) (74:40) [12:21:23:372]: Executing op: FileCopy(SourceName=BPAIF.dll,SourceCabKey=BPAIF.dll,DestName=BPAIF.dll,Attributes=512,FileSize=221480,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.0.2.13,Language=2057,InstallMode=58982400,,,,,,,)
MSI (s) (74:40) [12:21:23:372]: File: C:\Program Files\Sophos\Sophos Network Threat Protection\bin\BPAIF.dll;	To be installed;	Won't patch;	No existing file
MSI (s) (74:40) [12:21:23:372]: Source for file 'BPAIF.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\Sophos\Sophos Network Threat Protection\bin\'.
MSI (s) (74:40) [12:21:23:372]: Executing op: SetTargetFolder(Folder=C:\Windows\system32\)
MSI (s) (74:40) [12:21:23:372]: Executing op: SetSourceFolder(Folder=1\Sys\|System\)
MSI (s) (74:40) [12:21:23:372]: Executing op: FileCopy(SourceName=msvcp120.dll,SourceCabKey=F_CENTRAL_msvcp120_x86.194841A2_D0F2_3B96_9F71_05BA91BEA0FA,DestName=msvcp120.dll,Attributes=512,FileSize=455328,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=12.0.21005.1,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (74:40) [12:21:23:372]: File: C:\Windows\system32\msvcp120.dll;	To be installed;	Won't patch;	No existing file
MSI (s) (74:40) [12:21:23:372]: Source for file 'msvcp120.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\System\'.
MSI (s) (74:40) [12:21:23:388]: Executing op: FileCopy(SourceName=msvcr120.dll,SourceCabKey=F_CENTRAL_msvcr120_x86.194841A2_D0F2_3B96_9F71_05BA91BEA0FA,DestName=msvcr120.dll,Attributes=512,FileSize=970912,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=12.0.21005.1,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (74:40) [12:21:23:388]: File: C:\Windows\system32\msvcr120.dll;	To be installed;	Won't patch;	No existing file
MSI (s) (74:40) [12:21:23:388]: Source for file 'msvcr120.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\System\'.
MSI (s) (74:40) [12:21:23:388]: Executing op: FileCopy(SourceName=bxxe4aoo.dll|vccorlib120.dll,SourceCabKey=F_CENTRAL_vccorlib120_x86.194841A2_D0F2_3B96_9F71_05BA91BEA0FA,DestName=vccorlib120.dll,Attributes=512,FileSize=247984,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=12.0.21005.1,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (74:40) [12:21:23:388]: File: C:\Windows\system32\vccorlib120.dll;	To be installed;	Won't patch;	No existing file
MSI (s) (74:40) [12:21:23:388]: Source for file 'vccorlib120.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\System\'.
MSI (s) (74:40) [12:21:23:388]: Executing op: SetTargetFolder(Folder=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\)
MSI (s) (74:40) [12:21:23:388]: Executing op: SetSourceFolder(Folder=1\Sophos\_tph7qnj\bin\plugins\|Sophos\Sophos Network Threat Protection\bin\plugins\)
MSI (s) (74:40) [12:21:23:388]: Executing op: FileCopy(SourceName=http.plg,SourceCabKey=http.plg,DestName=http.plg,Attributes=512,FileSize=170792,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=346842918,HashPart2=-947429280,HashPart3=958730302,HashPart4=-2096259420,,)
MSI (s) (74:40) [12:21:23:388]: File: C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\http.plg;	To be installed;	Won't patch;	No existing file
MSI (s) (74:40) [12:21:23:388]: Source for file 'http.plg' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\Sophos\Sophos Network Threat Protection\bin\plugins\'.
MSI (s) (74:40) [12:21:23:388]: Executing op: FileCopy(SourceName=ip.plg,SourceCabKey=ip.plg,DestName=ip.plg,Attributes=512,FileSize=105256,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1437205946,HashPart2=1647987144,HashPart3=-333706853,HashPart4=850538841,,)
MSI (s) (74:40) [12:21:23:388]: File: C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\ip.plg;	To be installed;	Won't patch;	No existing file
MSI (s) (74:40) [12:21:23:388]: Source for file 'ip.plg' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\Sophos\Sophos Network Threat Protection\bin\plugins\'.
MSI (s) (74:40) [12:21:23:388]: Executing op: FileCopy(SourceName=ipv6.plg,SourceCabKey=ipv6.plg,DestName=ipv6.plg,Attributes=512,FileSize=89896,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=779164927,HashPart2=-1687897048,HashPart3=-1149621004,HashPart4=-280121634,,)
MSI (s) (74:40) [12:21:23:388]: File: C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\ipv6.plg;	To be installed;	Won't patch;	No existing file
MSI (s) (74:40) [12:21:23:388]: Source for file 'ipv6.plg' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\Sophos\Sophos Network Threat Protection\bin\plugins\'.
MSI (s) (74:40) [12:21:23:388]: Executing op: SetTargetFolder(Folder=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\)
MSI (s) (74:40) [12:21:23:388]: Executing op: SetSourceFolder(Folder=1\Sophos\_tph7qnj\bin\|Sophos\Sophos Network Threat Protection\bin\)
MSI (s) (74:40) [12:21:23:388]: Executing op: FileCopy(SourceName=navl.dll,SourceCabKey=navl.dll,DestName=navl.dll,Attributes=512,FileSize=446760,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=4.2.0.25,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (74:40) [12:21:23:388]: File: C:\Program Files\Sophos\Sophos Network Threat Protection\bin\navl.dll;	To be installed;	Won't patch;	No existing file
MSI (s) (74:40) [12:21:23:388]: Source for file 'navl.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\Sophos\Sophos Network Threat Protection\bin\'.
MSI (s) (74:40) [12:21:23:388]: Executing op: FileCopy(SourceName=4tttawjz.dll|NTPAdapter.dll,SourceCabKey=NTPAdapter.dll,DestName=NTPAdapter.dll,Attributes=512,FileSize=159504,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.0.3.10,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (74:40) [12:21:23:388]: File: C:\Program Files\Sophos\Sophos Network Threat Protection\bin\NTPAdapter.dll;	To be installed;	Won't patch;	No existing file
MSI (s) (74:40) [12:21:23:388]: Source for file 'NTPAdapter.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\Sophos\Sophos Network Threat Protection\bin\'.
MSI (s) (74:40) [12:21:23:388]: Executing op: FileCopy(SourceName=Sntp.cat,SourceCabKey=Sntp.cat,DestName=Sntp.cat,Attributes=512,FileSize=10112,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=916031194,HashPart2=-1373880841,HashPart3=-483188420,HashPart4=1980592432,,)
MSI (s) (74:40) [12:21:23:388]: File: C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.cat;	To be installed;	Won't patch;	No existing file
MSI (s) (74:40) [12:21:23:388]: Source for file 'Sntp.cat' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\Sophos\Sophos Network Threat Protection\bin\'.
MSI (s) (74:40) [12:21:23:388]: Executing op: FileCopy(SourceName=Sntp.inf,SourceCabKey=Sntp.inf,DestName=Sntp.inf,Attributes=512,FileSize=1645,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-2072588903,HashPart2=1404862741,HashPart3=42867064,HashPart4=-866253254,,)
MSI (s) (74:40) [12:21:23:388]: File: C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.inf;	To be installed;	Won't patch;	No existing file
MSI (s) (74:40) [12:21:23:388]: Source for file 'Sntp.inf' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\Sophos\Sophos Network Threat Protection\bin\'.
MSI (s) (74:40) [12:21:23:388]: Executing op: FileCopy(SourceName=Sntp.man,SourceCabKey=Sntp.man,DestName=Sntp.man,Attributes=512,FileSize=15466,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1473760338,HashPart2=-383308426,HashPart3=-1987885823,HashPart4=-1276791623,,)
MSI (s) (74:40) [12:21:23:388]: File: C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.man;	To be installed;	Won't patch;	No existing file
MSI (s) (74:40) [12:21:23:388]: Source for file 'Sntp.man' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\Sophos\Sophos Network Threat Protection\bin\'.
MSI (s) (74:40) [12:21:23:388]: Executing op: FileCopy(SourceName=Sntp.sys,SourceCabKey=Sntp.sys,DestName=Sntp.sys,Attributes=512,FileSize=79640,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.0.3.10,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (74:40) [12:21:23:388]: File: C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.sys;	To be installed;	Won't patch;	No existing file
MSI (s) (74:40) [12:21:23:404]: Source for file 'Sntp.sys' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\Sophos\Sophos Network Threat Protection\bin\'.
MSI (s) (74:40) [12:21:23:404]: Executing op: FileCopy(SourceName=yfmdjijj.exe|SntpService.exe,SourceCabKey=SntpService.exe,DestName=SntpService.exe,Attributes=512,FileSize=632232,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.0.3.10,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (74:40) [12:21:23:404]: File: C:\Program Files\Sophos\Sophos Network Threat Protection\bin\SntpService.exe;	To be installed;	Won't patch;	No existing file
MSI (s) (74:40) [12:21:23:404]: Source for file 'SntpService.exe' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\Sophos\Sophos Network Threat Protection\bin\'.
MSI (s) (74:40) [12:21:23:404]: Executing op: SetTargetFolder(Folder=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\)
MSI (s) (74:40) [12:21:23:404]: Executing op: SetSourceFolder(Folder=1\Sophos\_tph7qnj\bin\plugins\|Sophos\Sophos Network Threat Protection\bin\plugins\)
MSI (s) (74:40) [12:21:23:404]: Executing op: FileCopy(SourceName=tcp.plg,SourceCabKey=tcp.plg,DestName=tcp.plg,Attributes=512,FileSize=125736,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=2035717150,HashPart2=-1949917655,HashPart3=-692354056,HashPart4=335236338,,)
MSI (s) (74:40) [12:21:23:404]: File: C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\tcp.plg;	To be installed;	Won't patch;	No existing file
MSI (s) (74:40) [12:21:23:404]: Source for file 'tcp.plg' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\Sophos\Sophos Network Threat Protection\bin\plugins\'.
MSI (s) (74:40) [12:21:23:404]: Executing op: FileCopy(SourceName=udp.plg,SourceCabKey=udp.plg,DestName=udp.plg,Attributes=512,FileSize=111912,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=868474568,HashPart2=626941226,HashPart3=-1374575154,HashPart4=683887579,,)
MSI (s) (74:40) [12:21:23:404]: File: C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\udp.plg;	To be installed;	Won't patch;	No existing file
MSI (s) (74:40) [12:21:23:404]: Source for file 'udp.plg' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\Sophos\Sophos Network Threat Protection\bin\plugins\'.
MSI (s) (74:40) [12:21:23:404]: Executing op: CacheSizeFlush(,)
MSI (s) (74:40) [12:21:23:404]: Executing op: ActionStart(Name=MsiRollbackInstall,,)
MSI (s) (74:40) [12:21:23:404]: Executing op: CustomActionSchedule(Action=MsiRollbackInstall,ActionType=3329,Source=BinaryData,Target=RollbackInstall,CustomActionData=2.1
2
{76F354A6-97D5-4872-9781-2F2642A4F18A}
21
2
Sophos Network Threat Protection
Sophos Limited)
MSI (s) (74:40) [12:21:23:404]: Executing op: ActionStart(Name=MsiInstallDrivers,,)
MSI (s) (74:40) [12:21:23:404]: Executing op: CustomActionSchedule(Action=MsiInstallDrivers,ActionType=3073,Source=BinaryData,Target=InstallDriverPackages,CustomActionData=2.1
2
{76F354A6-97D5-4872-9781-2F2642A4F18A}
C:\Program Files\Sophos\Sophos Network Threat Protection\bin\
21
2
Sophos Network Threat Protection
Sophos Limited)
MSI (s) (74:40) [12:21:23:419]: Creating MSIHANDLE (419) of type 790536 for thread 2624
MSI (s) (74:64) [12:21:23:419]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIA04C.tmp, Entrypoint: InstallDriverPackages
MSI (s) (74!54) [12:21:23:419]: Creating MSIHANDLE (420) of type 790531 for thread 5716
MSI (s) (74!54) [12:21:23:419]: Closing MSIHANDLE (420) of type 790531 for thread 5716
MSI (s) (74!54) [12:21:23:419]: Creating MSIHANDLE (421) of type 790531 for thread 5716
DIFXAPP: ENTER: InstallDriverPackages()
MSI (s) (74!54) [12:21:23:419]: Closing MSIHANDLE (421) of type 790531 for thread 5716
MSI (s) (74!54) [12:21:23:419]: Creating MSIHANDLE (422) of type 790531 for thread 5716
DIFXAPP: INFO: 'CustomActionData' property 'DIFxApp Version' is '2.1'.
MSI (s) (74!54) [12:21:23:419]: Closing MSIHANDLE (422) of type 790531 for thread 5716
MSI (s) (74!54) [12:21:23:419]: Creating MSIHANDLE (423) of type 790531 for thread 5716
DIFXAPP: INFO: 'CustomActionData' property 'UI Level' is '2'.
MSI (s) (74!54) [12:21:23:419]: Closing MSIHANDLE (423) of type 790531 for thread 5716
MSI (s) (74!54) [12:21:23:419]: Creating MSIHANDLE (424) of type 790531 for thread 5716
DIFXAPP: INFO: 'CustomActionData' property 'componentId' is '{76F354A6-97D5-4872-9781-2F2642A4F18A}'.
MSI (s) (74!54) [12:21:23:419]: Closing MSIHANDLE (424) of type 790531 for thread 5716
MSI (s) (74!54) [12:21:23:419]: Creating MSIHANDLE (425) of type 790531 for thread 5716
DIFXAPP: INFO: 'CustomActionData' property 'componentPath' is 'C:\Program Files\Sophos\Sophos Network Threat Protection\bin\'.
MSI (s) (74!54) [12:21:23:419]: Closing MSIHANDLE (425) of type 790531 for thread 5716
MSI (s) (74!54) [12:21:23:419]: Creating MSIHANDLE (426) of type 790531 for thread 5716
DIFXAPP: INFO: 'CustomActionData' property 'flags' is 0x15.
MSI (s) (74!54) [12:21:23:419]: Closing MSIHANDLE (426) of type 790531 for thread 5716
MSI (s) (74!54) [12:21:23:419]: Creating MSIHANDLE (427) of type 790531 for thread 5716
DIFXAPP: INFO: 'CustomActionData' property 'installState' is '2'.
MSI (s) (74!54) [12:21:23:419]: Closing MSIHANDLE (427) of type 790531 for thread 5716
MSI (s) (74!54) [12:21:23:419]: Creating MSIHANDLE (428) of type 790531 for thread 5716
DIFXAPP: INFO: 'CustomActionData' property 'ProductName' is 'Sophos Network Threat Protection'.
MSI (s) (74!54) [12:21:23:419]: Closing MSIHANDLE (428) of type 790531 for thread 5716
MSI (s) (74!54) [12:21:23:419]: Creating MSIHANDLE (429) of type 790531 for thread 5716
DIFXAPP: INFO: 'CustomActionData' property 'ManufacturerName' is 'Sophos Limited'.
MSI (s) (74!54) [12:21:23:419]: Closing MSIHANDLE (429) of type 790531 for thread 5716
MSI (s) (74!54) [12:21:23:419]: Creating MSIHANDLE (430) of type 790531 for thread 5716
DIFXAPP: INFO: user SID of user performing the install is 'S-1-5-18'.
MSI (s) (74!54) [12:21:23:419]: Closing MSIHANDLE (430) of type 790531 for thread 5716
MSI (s) (74!54) [12:21:23:419]: Creating MSIHANDLE (431) of type 790531 for thread 5716
DIFXAPP: INFO: opening HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\DIFxApp\Components\{76F354A6-97D5-4872-9781-2F2642A4F18A} (User's SID: 'S-1-5-18') ...
MSI (s) (74!54) [12:21:23:419]: Closing MSIHANDLE (431) of type 790531 for thread 5716
MSI (s) (74!54) [12:21:23:419]: Creating MSIHANDLE (432) of type 790531 for thread 5716
DIFXAPP: INFO:   ENTER:  DriverPackageInstallW
MSI (s) (74!54) [12:21:23:419]: Closing MSIHANDLE (432) of type 790531 for thread 5716
MSI (s) (74!54) [12:21:23:466]: Creating MSIHANDLE (433) of type 790531 for thread 5716
DIFXAPP: INFO:   Sntp.inf: checking signature with catalog 'C:\Program Files\Sophos\Sophos Network Threat Protection\bin\sntp.cat' ...
MSI (s) (74!54) [12:21:23:466]: Closing MSIHANDLE (433) of type 790531 for thread 5716
MSI (s) (74!54) [12:21:23:466]: Creating MSIHANDLE (434) of type 790531 for thread 5716
DIFXAPP: INFO:   Driver package 'Sntp.inf' is Authenticode signed.
MSI (s) (74!54) [12:21:23:466]: Closing MSIHANDLE (434) of type 790531 for thread 5716
MSI (s) (74!54) [12:21:23:466]: Creating MSIHANDLE (435) of type 790531 for thread 5716
DIFXAPP: INFO:   Copied 'Sntp.inf' to driver store...
MSI (s) (74!54) [12:21:23:466]: Closing MSIHANDLE (435) of type 790531 for thread 5716
MSI (s) (74!54) [12:21:23:466]: Creating MSIHANDLE (436) of type 790531 for thread 5716
DIFXAPP: INFO:   Copied 'sntp.cat' to driver store...
MSI (s) (74!54) [12:21:23:466]: Closing MSIHANDLE (436) of type 790531 for thread 5716
MSI (s) (74!54) [12:21:23:497]: Creating MSIHANDLE (437) of type 790531 for thread 5716
DIFXAPP: INFO:   Commiting queue...
MSI (s) (74!54) [12:21:23:497]: Closing MSIHANDLE (437) of type 790531 for thread 5716
MSI (s) (74!54) [12:21:23:513]: Creating MSIHANDLE (438) of type 790531 for thread 5716
DIFXAPP: INFO:   Copied file: 'C:\Program Files\Sophos\Sophos Network Threat Protection\bin\sntp.sys' -> 'C:\Windows\system32\DRVSTORE\Sntp_29F86A7163E2FA3F7926539458A9887F08EF50AA\sntp.sys'.
MSI (s) (74!54) [12:21:23:513]: Closing MSIHANDLE (438) of type 790531 for thread 5716
MSI (s) (74!54) [12:21:23:513]: Creating MSIHANDLE (439) of type 790531 for thread 5716
DIFXAPP: INFO:   Installing INF file "C:\Windows\system32\DRVSTORE\Sntp_29F86A7163E2FA3F7926539458A9887F08EF50AA\Sntp.inf" of Type 1.
MSI (s) (74!54) [12:21:23:513]: Closing MSIHANDLE (439) of type 790531 for thread 5716
MSI (s) (74!54) [12:21:24:158]: Creating MSIHANDLE (440) of type 790531 for thread 5716
DIFXAPP: INFO:   Installing legacy driver 'C:\Windows\system32\DRVSTORE\Sntp_29F86A7163E2FA3F7926539458A9887F08EF50AA\Sntp.inf'
MSI (s) (74!54) [12:21:24:158]: Closing MSIHANDLE (440) of type 790531 for thread 5716
MSI (s) (74!54) [12:21:24:158]: Creating MSIHANDLE (441) of type 790531 for thread 5716
DIFXAPP: INFO:   Service 'sntp' was started
MSI (s) (74!54) [12:21:24:158]: Closing MSIHANDLE (441) of type 790531 for thread 5716
MSI (s) (74!54) [12:21:24:158]: Creating MSIHANDLE (442) of type 790531 for thread 5716
DIFXAPP: SUCCESS:Installation completed with code 0x0.
MSI (s) (74!54) [12:21:24:158]: Closing MSIHANDLE (442) of type 790531 for thread 5716
MSI (s) (74!54) [12:21:24:158]: Creating MSIHANDLE (443) of type 790531 for thread 5716
DIFXAPP: INFO:   RETURN: DriverPackageInstallW  (0x0)
MSI (s) (74!54) [12:21:24:158]: Closing MSIHANDLE (443) of type 790531 for thread 5716
MSI (s) (74!54) [12:21:24:158]: Creating MSIHANDLE (444) of type 790531 for thread 5716
DIFXAPP: INFO:   ENTER:  DriverPackageGetPathW
MSI (s) (74!54) [12:21:24:158]: Closing MSIHANDLE (444) of type 790531 for thread 5716
MSI (s) (74!54) [12:21:24:158]: Creating MSIHANDLE (445) of type 790531 for thread 5716
DIFXAPP: SUCCESS:Found driver store entry.
MSI (s) (74!54) [12:21:24:158]: Closing MSIHANDLE (445) of type 790531 for thread 5716
MSI (s) (74!54) [12:21:24:158]: Creating MSIHANDLE (446) of type 790531 for thread 5716
DIFXAPP: INFO:   RETURN: DriverPackageGetPathW  (0x7A)
MSI (s) (74!54) [12:21:24:158]: Closing MSIHANDLE (446) of type 790531 for thread 5716
MSI (s) (74!54) [12:21:24:158]: Creating MSIHANDLE (447) of type 790531 for thread 5716
DIFXAPP: INFO:   ENTER:  DriverPackageGetPathW
MSI (s) (74!54) [12:21:24:158]: Closing MSIHANDLE (447) of type 790531 for thread 5716
MSI (s) (74!54) [12:21:24:158]: Creating MSIHANDLE (448) of type 790531 for thread 5716
DIFXAPP: SUCCESS:Found driver store entry.
MSI (s) (74!54) [12:21:24:158]: Closing MSIHANDLE (448) of type 790531 for thread 5716
MSI (s) (74!54) [12:21:24:158]: Creating MSIHANDLE (449) of type 790531 for thread 5716
DIFXAPP: INFO:   RETURN: DriverPackageGetPathW  (0x0)
MSI (s) (74!54) [12:21:24:158]: Closing MSIHANDLE (449) of type 790531 for thread 5716
MSI (s) (74!54) [12:21:24:158]: Creating MSIHANDLE (450) of type 790531 for thread 5716
DIFXAPP: INFO: driver store entry for 'C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.inf' is 'C:\Windows\system32\DRVSTORE\Sntp_29F86A7163E2FA3F7926539458A9887F08EF50AA\Sntp.inf'.
MSI (s) (74!54) [12:21:24:158]: Closing MSIHANDLE (450) of type 790531 for thread 5716
MSI (s) (74!54) [12:21:24:158]: Creating MSIHANDLE (451) of type 790531 for thread 5716
DIFXAPP: INFO: The component Id '{76F354A6-97D5-4872-9781-2F2642A4F18A}' is now set to point to driver store: 'C:\Windows\system32\DRVSTORE\Sntp_29F86A7163E2FA3F7926539458A9887F08EF50AA\Sntp.inf'
MSI (s) (74!54) [12:21:24:158]: Closing MSIHANDLE (451) of type 790531 for thread 5716
MSI (s) (74!54) [12:21:24:158]: Creating MSIHANDLE (452) of type 790531 for thread 5716
DIFXAPP: INFO: A reboot is not needed to install the component '{76F354A6-97D5-4872-9781-2F2642A4F18A}'.
MSI (s) (74!54) [12:21:24:158]: Closing MSIHANDLE (452) of type 790531 for thread 5716
MSI (s) (74:64) [12:21:24:158]: Closing MSIHANDLE (419) of type 790536 for thread 2624
MSI (s) (74:40) [12:21:24:158]: Executing op: ActionStart(Name=ExecXmlFile,,)
DIFXAPP: RETURN: InstallDriverPackages() 0 (0x0)
MSI (s) (74:40) [12:21:24:158]: Executing op: CustomActionSchedule(Action=ExecXmlFile,ActionType=3073,Source=BinaryData,Target=ExecXmlFile,CustomActionData=1€0€C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.man€7€1€/*/*/*/*[@messageFileName]€messageFileName€C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.sys€1€0€C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.man€7€1€/*/*/*/*[@resourceFileName]€resourceFileName€C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.sys)
MSI (s) (74:40) [12:21:24:174]: Creating MSIHANDLE (453) of type 790536 for thread 2624
MSI (s) (74:98) [12:21:24:174]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIA349.tmp, Entrypoint: ExecXmlFile
MSI (s) (74:98) [12:21:24:252]: Closing MSIHANDLE (453) of type 790536 for thread 2624
MSI (s) (74:40) [12:21:24:252]: Executing op: ActionStart(Name=RollbackRegisterEventManifest,,)
MSI (s) (74:40) [12:21:24:252]: Executing op: CustomActionSchedule(Action=RollbackRegisterEventManifest,ActionType=3393,Source=BinaryData,Target=CAQuietExec,CustomActionData="wevtutil.exe" um "C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.man")
MSI (s) (74:40) [12:21:24:252]: Executing op: ActionStart(Name=RegisterEventManifest,,)
MSI (s) (74:40) [12:21:24:252]: Executing op: CustomActionSchedule(Action=RegisterEventManifest,ActionType=3073,Source=BinaryData,Target=CAQuietExec,CustomActionData="wevtutil.exe" im "C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.man")
MSI (s) (74:40) [12:21:24:267]: Creating MSIHANDLE (454) of type 790536 for thread 2624
MSI (s) (74:88) [12:21:24:267]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIA3A8.tmp, Entrypoint: CAQuietExec
MSI (s) (74!80) [12:21:24:819]: Creating MSIHANDLE (455) of type 790531 for thread 4736
MSI (s) (74!80) [12:21:24:819]: Closing MSIHANDLE (455) of type 790531 for thread 4736
MSI (s) (74!80) [12:21:24:819]: Creating MSIHANDLE (456) of type 790531 for thread 4736
CAQuietExec:  The publishers and channels are installed successfully. However, we can't enable one or more publishers and channels. The interface is unknown.
MSI (s) (74!80) [12:21:24:819]: Closing MSIHANDLE (456) of type 790531 for thread 4736
MSI (s) (74!80) [12:21:24:819]: Creating MSIHANDLE (457) of type 790531 for thread 4736
CAQuietExec:  Error 0x800706b5: Command line returned an error.
MSI (s) (74!80) [12:21:24:819]: Closing MSIHANDLE (457) of type 790531 for thread 4736
CAQuietExec:  Error 0x800706b5: CAQuietExec Failed
MSI (s) (74:88) [12:21:24:819]: Closing MSIHANDLE (454) of type 790536 for thread 2624
CustomAction RegisterEventManifest returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
MSI (s) (74:40) [12:21:24:866]: User policy value 'DisableRollback' is 0
MSI (s) (74:40) [12:21:24:866]: Machine policy value 'DisableRollback' is 0
Action ended 12:21:24: InstallFinalize. Return value 3.
MSI (s) (74:40) [12:21:24:866]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1191469740,LangId=1033,Platform=0,ScriptType=2,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1)
MSI (s) (74:40) [12:21:24:866]: Executing op: DialogInfo(Type=0,Argument=1033)
MSI (s) (74:40) [12:21:24:866]: Executing op: DialogInfo(Type=1,Argument=Sophos Network Threat Protection)
MSI (s) (74:40) [12:21:24:866]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1])
MSI (s) (74:40) [12:21:24:866]: Executing op: ActionStart(Name=RegisterEventManifest,,)
MSI (s) (74:40) [12:21:24:866]: Executing op: ProductInfo(ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},ProductName=Sophos Network Threat Protection,PackageName=Sophos Network Threat Protection.msi,Language=1033,Version=16777219,Assignment=1,ObsoleteArg=0,ProductIcon=shield.ico,,PackageCode={5C68857A-F9FC-4502-8585-BCA5095113C2},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0,ProductDeploymentFlags=3)
MSI (s) (74:40) [12:21:24:866]: Executing op: ActionStart(Name=RollbackRegisterEventManifest,,)
MSI (s) (74:40) [12:21:24:866]: Executing op: CustomActionRollback(Action=RollbackRegisterEventManifest,ActionType=3393,Source=BinaryData,Target=CAQuietExec,CustomActionData="wevtutil.exe" um "C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.man")
MSI (s) (74:40) [12:21:24:881]: Creating MSIHANDLE (458) of type 790536 for thread 2624
MSI (s) (74:14) [12:21:24:881]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIA609.tmp, Entrypoint: CAQuietExec
MSI (s) (74:14) [12:21:24:991]: Closing MSIHANDLE (458) of type 790536 for thread 2624
MSI (s) (74:40) [12:21:24:991]: Executing op: ActionStart(Name=ExecXmlFile,,)
MSI (s) (74:40) [12:21:24:991]: Executing op: ActionStart(Name=MsiInstallDrivers,,)
MSI (s) (74:40) [12:21:24:991]: Executing op: ActionStart(Name=MsiRollbackInstall,,)
MSI (s) (74:40) [12:21:24:991]: Executing op: CustomActionRollback(Action=MsiRollbackInstall,ActionType=3329,Source=BinaryData,Target=RollbackInstall,CustomActionData=2.1
2
{76F354A6-97D5-4872-9781-2F2642A4F18A}
21
2
Sophos Network Threat Protection
Sophos Limited)
MSI (s) (74:40) [12:21:25:006]: Creating MSIHANDLE (459) of type 790536 for thread 2624
MSI (s) (74:E0) [12:21:25:006]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIA687.tmp, Entrypoint: RollbackInstall
MSI (s) (74!78) [12:21:25:006]: Creating MSIHANDLE (460) of type 790531 for thread 4216
MSI (s) (74!78) [12:21:25:006]: Closing MSIHANDLE (460) of type 790531 for thread 4216
MSI (s) (74!78) [12:21:25:006]: Creating MSIHANDLE (461) of type 790531 for thread 4216
DIFXAPP: ENTER: RollbackInstall()
MSI (s) (74!78) [12:21:25:006]: Closing MSIHANDLE (461) of type 790531 for thread 4216
MSI (s) (74!78) [12:21:25:006]: Creating MSIHANDLE (462) of type 790531 for thread 4216
DIFXAPP: INFO: 'CustomActionData' property 'DIFxApp Version' is '2.1'.
MSI (s) (74!78) [12:21:25:006]: Closing MSIHANDLE (462) of type 790531 for thread 4216
MSI (s) (74!78) [12:21:25:006]: Creating MSIHANDLE (463) of type 790531 for thread 4216
DIFXAPP: INFO: 'CustomActionData' property 'componentId' is '{76F354A6-97D5-4872-9781-2F2642A4F18A}'.
MSI (s) (74!78) [12:21:25:006]: Closing MSIHANDLE (463) of type 790531 for thread 4216
MSI (s) (74!78) [12:21:25:006]: Creating MSIHANDLE (464) of type 790531 for thread 4216
DIFXAPP: INFO: 'CustomActionData' property 'flags' is 0x15.
MSI (s) (74!78) [12:21:25:006]: Closing MSIHANDLE (464) of type 790531 for thread 4216
MSI (s) (74!78) [12:21:25:006]: Creating MSIHANDLE (465) of type 790531 for thread 4216
DIFXAPP: INFO: 'CustomActionData' property 'installState' is '2'.
MSI (s) (74!78) [12:21:25:006]: Closing MSIHANDLE (465) of type 790531 for thread 4216
MSI (s) (74!78) [12:21:25:006]: Creating MSIHANDLE (466) of type 790531 for thread 4216
DIFXAPP: INFO: 'CustomActionData' property 'ProductName' is 'Sophos Network Threat Protection'.
MSI (s) (74!78) [12:21:25:006]: Closing MSIHANDLE (466) of type 790531 for thread 4216
MSI (s) (74!78) [12:21:25:006]: Creating MSIHANDLE (467) of type 790531 for thread 4216
DIFXAPP: INFO: 'CustomActionData' property 'ManufacturerName' is 'Sophos Limited'.
MSI (s) (74!78) [12:21:25:006]: Closing MSIHANDLE (467) of type 790531 for thread 4216
MSI (s) (74!78) [12:21:25:006]: Creating MSIHANDLE (468) of type 790531 for thread 4216
DIFXAPP: INFO: user SID of user performing the install is 'S-1-5-18'.
MSI (s) (74!78) [12:21:25:006]: Closing MSIHANDLE (468) of type 790531 for thread 4216
MSI (s) (74!78) [12:21:25:006]: Creating MSIHANDLE (469) of type 790531 for thread 4216
DIFXAPP: INFO:   ENTER:  DriverPackageUninstallW
MSI (s) (74!78) [12:21:25:006]: Closing MSIHANDLE (469) of type 790531 for thread 4216
MSI (s) (74!78) [12:21:25:006]: Creating MSIHANDLE (470) of type 790531 for thread 4216
DIFXAPP: INFO:   Uninstalling driver package C:\Windows\system32\DRVSTORE\Sntp_29F86A7163E2FA3F7926539458A9887F08EF50AA\Sntp.inf...
MSI (s) (74!78) [12:21:25:006]: Closing MSIHANDLE (470) of type 790531 for thread 4216
MSI (s) (74!78) [12:21:25:006]: Creating MSIHANDLE (471) of type 790531 for thread 4216
DIFXAPP: ERROR:  Unable to revert to a previous driver store for service 'sntp'.
MSI (s) (74!78) [12:21:25:006]: Closing MSIHANDLE (471) of type 790531 for thread 4216
MSI (s) (74!78) [12:21:25:006]: Creating MSIHANDLE (472) of type 790531 for thread 4216
DIFXAPP: ERROR:  Will attempt to uninstall the driver.
MSI (s) (74!78) [12:21:25:006]: Closing MSIHANDLE (472) of type 790531 for thread 4216
MSI (s) (74!78) [12:21:25:022]: Creating MSIHANDLE (473) of type 790531 for thread 4216
DIFXAPP: INFO:   service 'sntp' was deleted.
MSI (s) (74!78) [12:21:25:022]: Closing MSIHANDLE (473) of type 790531 for thread 4216
MSI (s) (74!78) [12:21:25:022]: Creating MSIHANDLE (474) of type 790531 for thread 4216
DIFXAPP: INFO:   Driver store entry 'C:\Windows\system32\DRVSTORE\Sntp_29F86A7163E2FA3F7926539458A9887F08EF50AA\Sntp.inf' removed.
MSI (s) (74!78) [12:21:25:022]: Closing MSIHANDLE (474) of type 790531 for thread 4216
MSI (s) (74!78) [12:21:25:022]: Creating MSIHANDLE (475) of type 790531 for thread 4216
DIFXAPP: SUCCESS:Uninstall completed.
MSI (s) (74!78) [12:21:25:022]: Closing MSIHANDLE (475) of type 790531 for thread 4216
MSI (s) (74!78) [12:21:25:022]: Creating MSIHANDLE (476) of type 790531 for thread 4216
DIFXAPP: INFO:   RETURN: DriverPackageUninstallW  (0x0)
MSI (s) (74!78) [12:21:25:022]: Closing MSIHANDLE (476) of type 790531 for thread 4216
MSI (s) (74!78) [12:21:25:022]: Creating MSIHANDLE (477) of type 790531 for thread 4216
DIFXAPP: ERROR: Rollback failed with error 0x2
MSI (s) (74!78) [12:21:25:022]: Closing MSIHANDLE (477) of type 790531 for thread 4216
DIFXAPP: RETURN: RollbackInstall() 2 (0x2)
MSI (s) (74:E0) [12:21:25:022]: Closing MSIHANDLE (459) of type 790536 for thread 2624
CustomAction MsiRollbackInstall returned actual error code 1603 but will be translated to success due to continue marking
MSI (s) (74:40) [12:21:25:022]: Executing op: ActionStart(Name=InstallFiles,Description=Copying new files,Template=File: [1],  Directory: [9],  Size: [6])
MSI (s) (74:40) [12:21:25:022]: Executing op: SetTargetFolder(Folder=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\)
MSI (s) (74:40) [12:21:25:022]: Executing op: FileRemove(,FileName=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\udp.plg,,)
MSI (s) (74:40) [12:21:25:038]: Note: 1: 2318 2:  
MSI (s) (74:40) [12:21:25:038]: Executing op: FileRemove(,FileName=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\tcp.plg,,)
MSI (s) (74:40) [12:21:25:038]: Note: 1: 2318 2:  
MSI (s) (74:40) [12:21:25:053]: Executing op: SetTargetFolder(Folder=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\)
MSI (s) (74:40) [12:21:25:053]: Executing op: FileRemove(,FileName=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\SntpService.exe,,)
MSI (s) (74:40) [12:21:25:210]: Note: 1: 2318 2:  
MSI (s) (74:40) [12:21:25:210]: Executing op: FileRemove(,FileName=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.sys,,)
MSI (s) (74:40) [12:21:25:210]: Note: 1: 2318 2:  
MSI (s) (74:40) [12:21:25:210]: Executing op: FileRemove(,FileName=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.man,,)
MSI (s) (74:40) [12:21:25:210]: Note: 1: 2318 2:  
MSI (s) (74:40) [12:21:25:210]: Executing op: FileRemove(,FileName=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.inf,,)
MSI (s) (74:40) [12:21:25:210]: Note: 1: 2318 2:  
MSI (s) (74:40) [12:21:25:210]: Executing op: FileRemove(,FileName=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.cat,,)
MSI (s) (74:40) [12:21:25:225]: Note: 1: 2318 2:  
MSI (s) (74:40) [12:21:25:225]: Executing op: FileRemove(,FileName=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\NTPAdapter.dll,,)
MSI (s) (74:40) [12:21:25:225]: Note: 1: 2318 2:  
MSI (s) (74:40) [12:21:25:225]: Executing op: FileRemove(,FileName=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\navl.dll,,)
MSI (s) (74:40) [12:21:25:241]: Note: 1: 2318 2:  
MSI (s) (74:40) [12:21:25:241]: Executing op: SetTargetFolder(Folder=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\)
MSI (s) (74:40) [12:21:25:241]: Executing op: FileRemove(,FileName=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\ipv6.plg,,)
MSI (s) (74:40) [12:21:25:257]: Note: 1: 2318 2:  
MSI (s) (74:40) [12:21:25:257]: Executing op: FileRemove(,FileName=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\ip.plg,,)
MSI (s) (74:40) [12:21:25:272]: Note: 1: 2318 2:  
MSI (s) (74:40) [12:21:25:272]: Executing op: FileRemove(,FileName=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\http.plg,,)
MSI (s) (74:40) [12:21:25:288]: Note: 1: 2318 2:  
MSI (s) (74:40) [12:21:25:288]: Note: 1: 2318 2:  
MSI (s) (74:40) [12:21:25:288]: Executing op: SetTargetFolder(Folder=C:\Windows\system32\)
MSI (s) (74:40) [12:21:25:288]: Executing op: FileRemove(,FileName=C:\Windows\system32\vccorlib120.dll,,)
MSI (s) (74:40) [12:21:25:303]: Executing op: FileRemove(,FileName=C:\Windows\system32\msvcr120.dll,,)
MSI (s) (74:40) [12:21:25:319]: Executing op: FileRemove(,FileName=C:\Windows\system32\msvcp120.dll,,)
MSI (s) (74:40) [12:21:25:335]: Executing op: SetTargetFolder(Folder=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\)
MSI (s) (74:40) [12:21:25:335]: Executing op: FileRemove(,FileName=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\BPAIF.dll,,)
MSI (s) (74:40) [12:21:25:350]: Note: 1: 2318 2:  
MSI (s) (74:40) [12:21:25:350]: Executing op: ActionStart(Name=CreateFolders,Description=Creating folders,Template=Folder: [1])
MSI (s) (74:40) [12:21:25:350]: Executing op: FolderRemove(Folder=C:\Program Files\Sophos\Sophos Network Threat Protection\,Foreign=0)
MSI (s) (74:40) [12:21:25:350]: Note: 1: 2318 2:  
MSI (s) (74:40) [12:21:25:350]: Note: 1: 2318 2:  
MSI (s) (74:40) [12:21:25:350]: Executing op: FolderRemove(Folder=C:\ProgramData\Sophos\Sophos Network Threat Protection\Logs\,Foreign=0)
MSI (s) (74:40) [12:21:25:350]: Note: 1: 2318 2:  
MSI (s) (74:40) [12:21:25:366]: Note: 1: 2318 2:  
MSI (s) (74:40) [12:21:25:366]: Executing op: FolderRemove(Folder=C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\Status\,Foreign=0)
MSI (s) (74:40) [12:21:25:366]: Note: 1: 2318 2:  
MSI (s) (74:40) [12:21:25:366]: Note: 1: 2318 2:  
MSI (s) (74:40) [12:21:25:366]: Note: 1: 2318 2:  
MSI (s) (74:40) [12:21:25:366]: Executing op: FolderRemove(Folder=C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\,Foreign=0)
MSI (s) (74:40) [12:21:25:366]: Executing op: FolderRemove(Folder=C:\ProgramData\Sophos\Sophos Network Threat Protection\,Foreign=0)
MSI (s) (74:40) [12:21:25:366]: Executing op: ActionStart(Name=StopServices,Description=Stopping services,Template=Service: [1])
MSI (s) (74:40) [12:21:25:366]: Executing op: ActionStart(Name=ProcessComponents,Description=Updating component registration,)
MSI (s) (74:40) [12:21:25:366]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs,SecurityDescriptor=BinaryData,BinaryType=0,,)
MSI (s) (74:40) [12:21:25:366]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs,SecurityDescriptor=BinaryData,BinaryType=0,,)
MSI (s) (74:40) [12:21:25:366]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs,SecurityDescriptor=BinaryData,BinaryType=0,,)
MSI (s) (74:40) [12:21:25:366]: Executing op: ComponentUnregister(ComponentId={63B83B20-1AB9-4F49-B0B2-4489724CA96C},ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},BinaryType=0,)
MSI (s) (74:40) [12:21:25:366]: Executing op: ComponentUnregister(ComponentId={74260D9F-D644-423B-B2D4-0291EA4BA8BE},ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},BinaryType=0,)
MSI (s) (74:40) [12:21:25:366]: Executing op: ComponentUnregister(ComponentId={0835C947-D6D2-4E52-AF14-0231D04E88EA},ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},BinaryType=0,)
MSI (s) (74:40) [12:21:25:366]: Executing op: ComponentUnregister(ComponentId={B9C8E32A-5EB9-4B7F-91AF-9FD883FB729C},ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},BinaryType=0,)
MSI (s) (74:40) [12:21:25:366]: Executing op: ComponentUnregister(ComponentId={4E691ABE-115D-4721-9F9A-3547D17077C5},ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},BinaryType=0,)
MSI (s) (74:40) [12:21:25:366]: Executing op: ComponentUnregister(ComponentId={DF927ABB-6A5F-44F2-A430-137AAC79AA71},ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},BinaryType=0,)
MSI (s) (74:40) [12:21:25:366]: Executing op: ComponentUnregister(ComponentId={38879DEA-36FA-41BE-ACF3-B084CB40689B},ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},BinaryType=0,)
MSI (s) (74:40) [12:21:25:366]: Executing op: ComponentUnregister(ComponentId={710F5A00-8ECC-402C-910E-6096F350A923},ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},BinaryType=0,)
MSI (s) (74:40) [12:21:25:366]: Executing op: ComponentUnregister(ComponentId={D45EF81E-13E2-45D6-9DA9-09FD21266A06},ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},BinaryType=0,)
MSI (s) (74:40) [12:21:25:366]: Executing op: ComponentUnregister(ComponentId={F27D2FBB-5E0B-4351-82CE-E72D4F1EDE71},ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},BinaryType=0,)
MSI (s) (74:40) [12:21:25:366]: Executing op: ComponentUnregister(ComponentId={1A0CA7AD-4F12-4887-809E-96D79A66CC7F},ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},BinaryType=0,)
MSI (s) (74:40) [12:21:25:366]: Executing op: ComponentUnregister(ComponentId={9B222529-2B29-4547-AAEA-9C8A0423595B},ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},BinaryType=0,)
MSI (s) (74:40) [12:21:25:366]: Executing op: ComponentUnregister(ComponentId={355DC0F9-A6B5-4FCA-8121-00847E59A436},ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},BinaryType=0,)
MSI (s) (74:40) [12:21:25:366]: Executing op: ComponentUnregister(ComponentId={76F354A6-97D5-4872-9781-2F2642A4F18A},ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},BinaryType=0,)
MSI (s) (74:40) [12:21:25:366]: Executing op: ComponentUnregister(ComponentId={F1B8B8D7-46D7-4CA9-B109-35931536EA8A},ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},BinaryType=0,)
MSI (s) (74:40) [12:21:25:366]: Executing op: ComponentUnregister(ComponentId={74F91047-4C42-457F-B531-A83EF6EC85E2},ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},BinaryType=0,)
MSI (s) (74:40) [12:21:25:366]: Executing op: ComponentUnregister(ComponentId={4D81D62C-8373-45B8-ABF2-0C0D6ED2DE34},ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},BinaryType=0,)
MSI (s) (74:40) [12:21:25:366]: Executing op: ComponentUnregister(ComponentId={E1E87C49-DD4A-4C77-8D42-3ACD20DBC536},ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},BinaryType=0,)
MSI (s) (74:40) [12:21:25:366]: Executing op: End(Checksum=0,ProgressTotalHDWord=0,ProgressTotalLDWord=0)
MSI (s) (74:40) [12:21:25:366]: Error in rollback skipped.	Return: 5
MSI (s) (74:40) [12:21:25:382]: Note: 1: 2318 2:  
MSI (s) (74:40) [12:21:25:382]: No System Restore sequence number for this installation.
MSI (s) (74:40) [12:21:25:382]: Unlocking Server
MSI (s) (74:40) [12:21:25:429]: PROPERTY CHANGE: Deleting UpdateStarted property. Its current value is '1'.
Action ended 12:21:25: INSTALL. Return value 3.
Property(S): UpgradeCode = {A6CF693D-C171-4DF5-AE49-223B66F65A1A}
Property(S): ProductData = C:\ProgramData\Sophos\Sophos Network Threat Protection\
Property(S): Config = C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\
Property(S): Status = C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\Status\
Property(S): Logs = C:\ProgramData\Sophos\Sophos Network Threat Protection\Logs\
Property(S): bin = C:\Program Files\Sophos\Sophos Network Threat Protection\bin\
Property(S): plugins = C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\
Property(S): INSTALLDIR = C:\Program Files\Sophos\Sophos Network Threat Protection\
Property(S): ExecSecureObjects = C:\ProgramData\Sophos\Sophos Network Threat Protection\€CreateFolder€€NT SERVICE\sntpservice€-2147483647€C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\Status\€CreateFolder€€NT SERVICE\sntpservice€278€C:\ProgramData\Sophos\Sophos Network Threat Protection\Logs\€CreateFolder€€NT SERVICE\sntpservice€278€SntpService€ServiceInstall€€Administrators€983551€SntpService€ServiceInstall€€Everyone€-2147483632
Property(S): RegisterEventManifest = "wevtutil.exe" im "C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.man"
Property(S): RollbackRegisterEventManifest = "wevtutil.exe" um "C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.man"
Property(S): ExecXmlFile = 1€0€C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.man€7€1€/*/*/*/*[@messageFileName]€messageFileName€C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.sys€1€0€C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.man€7€1€/*/*/*/*[@resourceFileName]€resourceFileName€C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.sys
Property(S): MsiInstallDrivers = 2.1
2
{76F354A6-97D5-4872-9781-2F2642A4F18A}
C:\Program Files\Sophos\Sophos Network Threat Protection\bin\
21
2
Sophos Network Threat Protection
Sophos Limited
Property(S): MsiRollbackInstall = 2.1
2
{76F354A6-97D5-4872-9781-2F2642A4F18A}
21
2
Sophos Network Threat Protection
Sophos Limited
Property(S): ExecServiceConfig = SchedServiceConfig€SntpService€0€restart€restart€none€1€120€€
Property(S): RollbackServiceConfig = SchedServiceConfig
Property(S): UnregisterManagementAdapterRollback = C:\Program Files\Sophos\Sophos Network Threat Protection\bin\NTPAdapter.dll
Property(S): RegisterManagementAdapter = C:\Program Files\Sophos\Sophos Network Threat Protection\bin\NTPAdapter.dll
Property(S): SetupSspUserAccount = NT SERVICE\sntpservice
Property(S): SetupSspUserAccountRollback = NT SERVICE\sntpservice
Property(S): gui = C:\Program Files\Sophos\Sophos Network Threat Protection\gui\
Property(S): Sophos = C:\Program Files\Sophos\
Property(S): ProgramFilesFolder = C:\Program Files\
Property(S): TARGETDIR = C:\
Property(S): SophosAppData = C:\ProgramData\Sophos\
Property(S): CommonAppDataFolder = C:\ProgramData\
Property(S): SourceDir = C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\
Property(S): VersionNT = 601
Property(S): ALLUSERS = 1
Property(S): RegisterWithAutoUpdate = NTP;ntp
Property(S): ARPCOMMENTS = Network-aware threat detection
Property(S): ARPCONTACT = Sophos Technical Support
Property(S): ARPHELPLINK = http://www.sophos.com/support
Property(S): ARPNOMODIFY = 1
Property(S): ARPNOREPAIR = 1
Property(S): ARPPRODUCTICON = shield.ico
Property(S): ARPURLINFOABOUT = http://www.sophos.com
Property(S): ARPURLUPDATEINFO = http://www.sophos.com/support/updates
Property(S): Manufacturer = Sophos Limited
Property(S): ProductCode = {66967E5F-43E8-4402-87A4-04685EE5C2CB}
Property(S): ProductLanguage = 1033
Property(S): ProductName = Sophos Network Threat Protection
Property(S): ProductVersion = 1.0.3
Property(S): MSIRESTARTMANAGERCONTROL = Disable
Property(S): SecureCustomProperties = WIX_DOWNGRADE_DETECTED;WIX_UPGRADE_DETECTED
Property(S): SystemFolder_x86_VC.194841A2_D0F2_3B96_9F71_05BA91BEA0FA = C:\Windows\system32\
Property(S): SystemFolder = C:\Windows\system32\
Property(S): DirectoryTable100_x86.194841A2_D0F2_3B96_9F71_05BA91BEA0FA = DirectoryTable
Property(S): INSTALLDIR.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0 = C:\
Property(S): MsiLogFileLocation = C:\Windows\TEMP\Sophos Network Threat Protection Install Log 20150804 122121.txt
Property(S): PackageCode = {5C68857A-F9FC-4502-8585-BCA5095113C2}
Property(S): ProductState = -1
Property(S): PackagecodeChanging = 1
Property(S): REBOOT = ReallySuppress
Property(S): INSTALLINGVERSION = 1.0.3
Property(S): CURRENTDIRECTORY = C:\Windows\system32
Property(S): CLIENTUILEVEL = 3
Property(S): MSICLIENTUSESEXTERNALUI = 1
Property(S): CLIENTPROCESSID = 1748
Property(S): VersionDatabase = 405
Property(S): VersionMsi = 5.00
Property(S): WindowsBuild = 7601
Property(S): ServicePackLevel = 1
Property(S): ServicePackLevelMinor = 0
Property(S): MsiNTProductType = 1
Property(S): WindowsFolder = C:\Windows\
Property(S): WindowsVolume = C:\
Property(S): System16Folder = C:\Windows\system\
Property(S): RemoteAdminTS = 1
Property(S): TempFolder = C:\Windows\TEMP\
Property(S): CommonFilesFolder = C:\Program Files\Common Files\
Property(S): AppDataFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\
Property(S): FavoritesFolder = C:\Windows\system32\config\systemprofile\Favorites\
Property(S): NetHoodFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts\
Property(S): PersonalFolder = C:\Windows\system32\config\systemprofile\Documents\
Property(S): PrintHoodFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\
Property(S): RecentFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent\
Property(S): SendToFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\
Property(S): TemplateFolder = C:\ProgramData\Microsoft\Windows\Templates\
Property(S): LocalAppDataFolder = C:\Windows\system32\config\systemprofile\AppData\Local\
Property(S): MyPicturesFolder = C:\Windows\system32\config\systemprofile\Pictures\
Property(S): AdminToolsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\
Property(S): StartupFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Property(S): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
Property(S): StartMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\
Property(S): DesktopFolder = C:\Users\Public\Desktop\
Property(S): FontsFolder = C:\Windows\Fonts\
Property(S): GPTSupport = 1
Property(S): OLEAdvtSupport = 1
Property(S): ShellAdvtSupport = 1
Property(S): Intel = 6
Property(S): PhysicalMemory = 3514
Property(S): VirtualMemory = 5861
Property(S): AdminUser = 1
Property(S): MsiTrueAdminUser = 1
Property(S): LogonUser = SYSTEM
Property(S): UserSID = S-1-5-18
Property(S): UserLanguageID = 1033
Property(S): ComputerName = PC
Property(S): SystemLanguageID = 1033
Property(S): ScreenX = 1024
Property(S): ScreenY = 768
Property(S): CaptionHeight = 22
Property(S): BorderTop = 1
Property(S): BorderSide = 1
Property(S): TextHeight = 16
Property(S): TextInternalLeading = 3
Property(S): ColorBits = 32
Property(S): TTCSupport = 1
Property(S): Time = 12:21:25
Property(S): Date = 8/4/2015
Property(S): MsiNetAssemblySupport = 4.0.30319.18408
Property(S): MsiWin32AssemblySupport = 6.1.7601.17514
Property(S): RedirectedDllSupport = 2
Property(S): MsiRunningElevated = 1
Property(S): Privileged = 1
Property(S): USERNAME = User
Property(S): COMPANYNAME = *****
Property(S): DATABASE = C:\Windows\Installer\23328.msi
Property(S): OriginalDatabase = C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\Sophos Network Threat Protection.msi
Property(S): UILevel = 2
Property(S): ACTION = INSTALL
Property(S): ROOTDRIVE = C:\
Property(S): CostingComplete = 1
Property(S): OutOfDiskSpace = 0
Property(S): OutOfNoRbDiskSpace = 0
Property(S): PrimaryVolumeSpaceAvailable = 0
Property(S): PrimaryVolumeSpaceRequired = 0
Property(S): PrimaryVolumeSpaceRemaining = 0
Property(S): INSTALLLEVEL = 1
Property(S): SOURCEDIR = C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp\
Property(S): SourcedirProduct = {66967E5F-43E8-4402-87A4-04685EE5C2CB}
Property(S): ProductToBeRegistered = 1
MSI (s) (74:40) [12:21:25:444]: Note: 1: 1708 
MSI (s) (74:40) [12:21:25:444]: Product: Sophos Network Threat Protection -- Installation failed.

MSI (s) (74:40) [12:21:25:444]: Windows Installer installed the product. Product Name: Sophos Network Threat Protection. Product Version: 1.0.3. Product Language: 1033. Manufacturer: Sophos Limited. Installation success or error status: 1603.

MSI (s) (74:40) [12:21:25:444]: Deferring clean up of packages/files, if any exist
MSI (s) (74:40) [12:21:25:444]: MainEngineThread is returning 1603
MSI (s) (74:80) [12:21:25:444]: No System Restore sequence number for this installation.
=== Logging stopped: 8/4/2015  12:21:25 ===
MSI (s) (74:80) [12:21:25:444]: User policy value 'DisableRollback' is 0
MSI (s) (74:80) [12:21:25:444]: Machine policy value 'DisableRollback' is 0
MSI (s) (74:80) [12:21:25:444]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (74:80) [12:21:25:444]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 
MSI (s) (74:80) [12:21:25:444]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 
MSI (s) (74:80) [12:21:25:444]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
MSI (s) (74:80) [12:21:25:444]: Restoring environment variables
MSI (s) (74:80) [12:21:25:444]: Destroying RemoteAPI object.
MSI (s) (74:F4) [12:21:25:444]: Custom Action Manager thread ending.
MSI (c) (D4:D0) [12:21:25:444]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
MSI (c) (D4:D0) [12:21:25:444]: MainEngineThread is returning 1603
=== Verbose logging stopped: 8/4/2015  12:21:25 ===

setup::MsiInstaller::installOrUpgrade: Install/upgrade returned 1603
`anonymous-namespace'::setInstallResult: Installation failed
ProductSetup::~ProductSetup: End product setup