2020-09-01 12:17:56 Info: Detected version of SAV has major version number: 10 2020-09-01 12:17:56 Info: Using Sophos updating modes (MSI: N, VDL: 2, IDE: 2) 2020-09-01 12:17:56 GetProperty() - Unable to get product-type 2020-09-01 12:17:56 Info: productType: 0 2020-09-01 12:17:56 PROCESSOR_ARCHITECTURE environment variable is: AMD64 2020-09-01 12:17:56 Info: Logging started: installing/upgrading Sophos Anti-Virus 2020-09-01 12:17:56 Info: InstallFromPath is: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\ 2020-09-01 12:17:56 Info: InstallToPath is: 2020-09-01 12:17:56 Info: Detected version of SAV has major version number: 10 2020-09-01 12:17:56 Info: Detected version of SAV has minor version number: 8 2020-09-01 12:17:56 Info: registryInstallTo [overriding InstallToPath] is: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ 2020-09-01 12:17:56 Checking for problem versions of SAVI - Install path:C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ 2020-09-01 12:17:56 Veex.dll version '3.77.1.2461' 2020-09-01 12:17:56 INFO: Checking the validity of the VDL manifest file. 2020-09-01 12:17:57 INFO: The manifest file has been successfully validated. 2020-09-01 12:17:57 INFO: Checking the validity of the AppFeed manifest file. 2020-09-01 12:17:57 INFO: The manifest file has been successfully validated. 2020-09-01 12:17:57 PROCESSOR_ARCHITECTURE environment variable is: AMD64 2020-09-01 12:17:57 savonaccess.sys changed - must update on access drivers 2020-09-01 12:17:57 Info: SetupPlugin: updateProps.m_MajorUpdate = 1 2020-09-01 12:17:57 Info: SetupPlugin: updateProps.m_DataOnlyUpdate = 0 2020-09-01 12:17:57 Info: SetupPlugin: updateProps.m_OnAccessDriverUpdate = 1 2020-09-01 12:17:57 Info: SetupPlugin: updateProps.m_BootDriverUpdate = 0 2020-09-01 12:17:57 Info: SetupPlugin: updateProps.m_ClassFilterUpdate = 0 2020-09-01 12:17:57 Info: SetupPlugin: updateProps.m_KMSDriverUpdate = 0 2020-09-01 12:17:57 Info: Managed install (from SAU) 2020-09-01 12:17:57 Info: MSXML6 is installed 2020-09-01 12:17:57 Check for UI changes 2020-09-01 12:17:57 UIType in registry: full 2020-09-01 12:17:57 ProductType in registry: 0 2020-09-01 12:17:57 Checking the integrity of the extant SAV installation (noUI is 0) 2020-09-01 12:17:57 The is a complete SAV installation. Skipping recovery. 2020-09-01 12:17:57 Info: Performing major update of Sophos Anti-Virus using msi. 2020-09-01 12:17:57 Info: Update is signalled. 2020-09-01 12:17:57 In KB2918614Workaround(). 2020-09-01 12:17:57 Leaving KB2918614Workaround(). 2020-09-01 12:17:57 Product code of SAV currently installed: {01423865-551B-4C59-B44A-CC604BC21AF3} 2020-09-01 12:17:57 Product code of SAV to be installed: {3386C552-13D3-4B65-912E-8856E03E8E8B} 2020-09-01 12:17:57 ProductCode change detected 2020-09-01 12:17:57 Info: Added SAVService to ServicesList. 2020-09-01 12:17:57 Info: Added SAVAdminService to ServicesList. 2020-09-01 12:17:57 Info: Added Sophos Device Control Service to ServicesList. 2020-09-01 12:17:57 Info: Added SophosBootDriver to ServicesList. 2020-09-01 12:17:57 Info: Added swi_service to ServicesList. 2020-09-01 12:17:57 Info: Added swi_filter to ServicesList. 2020-09-01 12:17:57 Info: Added swi_callout to ServicesList. 2020-09-01 12:17:57 Info: Added swi_update to ServicesList. 2020-09-01 12:17:57 Info: Added swi_update_64 to ServicesList. 2020-09-01 12:17:57 Info: Added Sophos Web Control Service to ServicesList. 2020-09-01 12:17:57 Info: Added SAVOnAccess to ServicesList. 2020-09-01 12:17:57 Info: Added SAV to ComponentList. 2020-09-01 12:17:57 Info: component SDC is not registered - skipping. 2020-09-01 12:17:57 Info: component SCS is not registered - skipping. 2020-09-01 12:17:57 Info: Added SWI to ComponentList. 2020-09-01 12:17:57 Info: Added SWC to ComponentList. 2020-09-01 12:17:57 Info: Detected an older version of SAV, version 10.8. Doing a major update. 2020-09-01 12:17:57 Info: Set Update Begin 2020-09-01 12:17:57 Info: Added SAVService to ServicesList. 2020-09-01 12:17:57 Info: Added SAVAdminService to ServicesList. 2020-09-01 12:17:57 Info: Added Sophos Device Control Service to ServicesList. 2020-09-01 12:17:57 Info: Added SophosBootDriver to ServicesList. 2020-09-01 12:17:57 Info: Added swi_service to ServicesList. 2020-09-01 12:17:57 Info: Added swi_filter to ServicesList. 2020-09-01 12:17:57 Info: Added swi_callout to ServicesList. 2020-09-01 12:17:57 Info: swi_update was found to not be installed - skipping. 2020-09-01 12:17:57 Info: swi_update_64 was found to not be installed - skipping. 2020-09-01 12:17:57 Info: Added Sophos Web Control Service to ServicesList. 2020-09-01 12:17:57 Info: All services reported they accept stop controls. 2020-09-01 12:17:57 Info: Stop SAVService 2020-09-01 12:17:57 ForceStopService: Stopping SAVService 2020-09-01 12:17:58 ForceStopService: Checking if service is still running 2020-09-01 12:17:58 WaitForSAVService: Walking system processes... 2020-09-01 12:17:58 WaitForSAVService: Found process named SAVService.exe, waiting... 2020-09-01 12:18:01 WaitForSAVService: Finished walking system processes. 2020-09-01 12:18:01 Info: Stop SAVAdminService 2020-09-01 12:18:01 ForceStopService: Stopping SAVAdminService 2020-09-01 12:18:01 ForceStopService: Checking if service is still running 2020-09-01 12:18:01 Unregistering from SecurityCenter 2020-09-01 12:18:04 Info: unloading SAVOnAccess driver 2020-09-01 12:18:04 UnloadFilterDriver: Driver not loaded, count = 1 2020-09-01 12:18:04 Info: Convert boot tasks 2020-09-01 12:18:04 Info: CopyFilesToTemp 2020-09-01 12:18:04 ERROR: MoveFolder - failed to move sav logs directory, hr = 0x5 2020-09-01 12:18:04 Info: Reverting to copying logs instead of moving them 2020-09-01 12:18:04 Info: Backup threat lifetime data 2020-09-01 12:18:04 Info: useAMPPL is set - skipping backup of WSCClient 2020-09-01 12:18:04 UnregisterAppInitDLL: installDir: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\\, module: sophos_detoured.dll, is64bit: N 2020-09-01 12:18:04 UnregisterAppInitDLL: could not get short path to DLL. It will not be unregistered. 2020-09-01 12:18:04 Info: Reading overrides from registry 2020-09-01 12:18:04 Info: Getting registered UI plugins from registry 2020-09-01 12:18:04 Info: Loading the BypassLoopbackPort value form regsitry 2020-09-01 12:18:04 Info: Uninstall SAV 2020-09-01 12:18:04 Unable to delete registry key: SOFTWARE\Sophos\Telemetry\Plugins! 2020-09-01 12:18:04 Info: Running Uninstall of previous version using command line: msiexec.exe /x {01423865-551B-4C59-B44A-CC604BC21AF3} REBOOT=ReallySuppress /qn UNINSTALLDRIVERS=1 UNINSTALLCLASSFILTER=0 UNINSTALLBOOTDRIVERS=1 UNINSTALLKMSDRIVERS=1 CHECKFORSCF=0 INSTALLINGVERSION="10.8.9.292" /Lvp "C:\WINDOWS\TEMP\Sophos Anti-Virus Uninstall Log_200901_051804.txt" 2020-09-01 12:18:07 Info: Finished waiting for Uninstallation of previous version. Status returned was 0l. 2020-09-01 12:18:07 WARNING: SAV uninstall failed with error 1618 2020-09-01 12:18:07 Info: Detected version of SAV has major version number: 10 2020-09-01 12:18:07 Info: Detected version of SAV has minor version number: 8 2020-09-01 12:18:07 ERROR: Uninstall of SAV, version = 10.8.4, succeeded but IsSAVInstalled is true (10.8.4). 2020-09-01 12:18:07 Info: Added SAV to ComponentList. 2020-09-01 12:18:07 Info: Added SWI to ComponentList. 2020-09-01 12:18:07 Info: Added SWC to ComponentList. 2020-09-01 12:18:07 Info: Set Update Failed