Product: Sophos Anti-Virus -- Installation operation failed. Error 1708 , Failed to install Sophos Anti-Virus for Windows: setup error.

2018-04-10 09:58:35 Call to MsiGetProductInfo failed for product {132CA5D9-C745-4B0B-A3B2-8C7A6EC3EE7E} with error code: 1608
2018-04-10 09:58:35 Call to MsiGetProductInfo failed for product {6767DFEE-8909-453A-B553-C7693912B2EB} with error code: 1608
2018-04-10 09:58:35 Info: Running competitor removal tool
2018-04-10 09:58:35 Unable to delete registry value: SOFTWARE\Sophos\AutoUpdate\UpdateStatus\CrtResult, assuming it does not exist
2018-04-10 09:58:35 Searching for third-party security software.
2018-04-10 09:58:35 Return Code 10 from third-party security software removal tool.
2018-04-10 09:58:35 INFO: CRT telemetry Json file does not exist so no need to create plugin key.
2018-04-10 09:58:35 No third-party security software found.
2018-04-10 09:58:35 GetProperty() - Unable to get product-type
2018-04-10 09:58:35 Info: productType: 0
2018-04-10 09:58:35 PROCESSOR_ARCHITECTURE environment variable is: AMD64
2018-04-10 09:58:35 Info: Logging started: installing/upgrading Sophos Anti-Virus
2018-04-10 09:58:35 Info: InstallFromPath is: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\
2018-04-10 09:58:35 Info: InstallToPath is:
2018-04-10 09:58:35 Call to MsiGetProductInfo failed for product {132CA5D9-C745-4B0B-A3B2-8C7A6EC3EE7E} with error code: 1608
2018-04-10 09:58:35 Call to MsiGetProductInfo failed for product {6767DFEE-8909-453A-B553-C7693912B2EB} with error code: 1608
2018-04-10 09:58:35 Info: SAV is not installed. Installing to {InstallToPath}
2018-04-10 09:58:35 INFO: Checking the validity of the VDL manifest file.
2018-04-10 09:58:36 INFO: The manifest file has been successfully validated.
2018-04-10 09:58:36 INFO: Checking the validity of the AppFeed manifest file.
2018-04-10 09:58:36 INFO: The manifest file has been successfully validated.
2018-04-10 09:58:36 Info: Managed install (from SAU)
2018-04-10 09:58:36 Info: MSXML6 is installed
2018-04-10 09:58:36 Check for UI changes
2018-04-10 09:58:36 Info: Performing major update of Sophos Anti-Virus using msi.
2018-04-10 09:58:36 Info: Update is signalled.
2018-04-10 09:58:36 Call to MsiGetProductInfo failed for product {132CA5D9-C745-4B0B-A3B2-8C7A6EC3EE7E} with error code: 1608
2018-04-10 09:58:36 Call to MsiGetProductInfo failed for product {6767DFEE-8909-453A-B553-C7693912B2EB} with error code: 1608
2018-04-10 09:58:36 Info: Added SAVService to ServicesList.
2018-04-10 09:58:36 Info: Added SAVAdminService to ServicesList.
2018-04-10 09:58:36 Info: Added Sophos Device Control Service to ServicesList.
2018-04-10 09:58:36 Info: Added SophosBootDriver to ServicesList.
2018-04-10 09:58:36 Info: Added swi_service to ServicesList.
2018-04-10 09:58:36 Info: Added swi_filter to ServicesList.
2018-04-10 09:58:36 Info: Added Sophos Web Control Service to ServicesList.
2018-04-10 09:58:36 Info: Added SAVOnAccess to ServicesList.
2018-04-10 09:58:36 Info: component SAV is not registered - skipping.
2018-04-10 09:58:36 Info: component SDC is not registered - skipping.
2018-04-10 09:58:36 Info: component SCS is not registered - skipping.
2018-04-10 09:58:36 Info: component SWI is not registered - skipping.
2018-04-10 09:58:36 Info: component SWC is not registered - skipping.
2018-04-10 09:58:36 Info: PutSetupOptionsToRegistry
2018-04-10 09:58:36 Info: Check MSXML
2018-04-10 09:58:36 Info: MSXML6 is installed
2018-04-10 09:58:36 Info: Check boot driver and kms driver
2018-04-10 09:58:36 Info: no existing installation of Sophos Anti-Virus was found
2018-04-10 09:58:36 Info: Restart required for Data Control (clean managed full install)
2018-04-10 09:58:36 Info: Transform file returned:
2018-04-10 09:58:36 Info: SAV Setup plugin: running MsiInstallProduct (C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Sophos Anti-Virus.msi, INSTALLDIR="" ARPSYSTEMCOMPONENT=1 REBOOT=ReallySuppress UITYPE=none SYNCMODE=1 PRODUCTTYPE=0 UPDATEDRIVERS=1 UPDATECLASSFILTER=1 UPDATEBOOTDRIVERS=1 UPDATEKMSDRIVERS=1 SAVIONLY=0 MANAGED=1 RECOVERYMODE=0 DATACONTROL=1 DEVICECONTROL=1 WEBCONTROL=1)
=== Verbose logging started: 10/Apr/2018 9:58:36 Build type: SHIP UNICODE 5.00.7601.00 Calling process: C:\Program Files (x86)\Sophos\CloudInstaller\SophosSetup_Stage2.exe ===
MSI (c) (7C:E4) [09:58:36:387]: Resetting cached policy values
MSI (c) (7C:E4) [09:58:36:387]: Machine policy value 'Debug' is 0
MSI (c) (7C:E4) [09:58:36:387]: ******* RunEngine:
******* Product: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Sophos Anti-Virus.msi
******* Action:
******* CommandLine: **********
MSI (c) (7C:E4) [09:58:36:388]: Client-side and UI is none or basic: Running entire install on the server.
MSI (c) (7C:E4) [09:58:36:388]: Grabbed execution mutex.
MSI (c) (7C:E4) [09:58:36:388]: Cloaking enabled.
MSI (c) (7C:E4) [09:58:36:388]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (7C:E4) [09:58:36:388]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (30:34) [09:58:36:390]: Running installation inside multi-package transaction C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Sophos Anti-Virus.msi
MSI (s) (30:34) [09:58:36:390]: Grabbed execution mutex.
MSI (s) (30:78) [09:58:36:390]: Resetting cached policy values
MSI (s) (30:78) [09:58:36:390]: Machine policy value 'Debug' is 0
MSI (s) (30:78) [09:58:36:391]: ******* RunEngine:
******* Product: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Sophos Anti-Virus.msi
******* Action:
******* CommandLine: **********
MSI (s) (30:78) [09:58:36:391]: Machine policy value 'DisableUserInstalls' is 0
MSI (s) (30:78) [09:58:36:399]: SRSetRestorePoint skipped for this transaction.
MSI (s) (30:78) [09:58:36:400]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2
MSI (s) (30:78) [09:58:36:401]: File will have security applied from OpCode.
MSI (s) (30:78) [09:58:36:404]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Sophos Anti-Virus.msi' against software restriction policy
MSI (s) (30:78) [09:58:36:404]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Sophos Anti-Virus.msi has a digital signature
MSI (s) (30:78) [09:58:36:437]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Sophos Anti-Virus.msi is permitted to run at the 'unrestricted' authorization level.
MSI (s) (30:78) [09:58:36:437]: End dialog not enabled
MSI (s) (30:78) [09:58:36:437]: Original package ==> C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Sophos Anti-Virus.msi
MSI (s) (30:78) [09:58:36:437]: Package we're running from ==> C:\Windows\Installer\97e71b.msi
MSI (s) (30:78) [09:58:36:441]: APPCOMPAT: Compatibility mode property overrides found.
MSI (s) (30:78) [09:58:36:441]: APPCOMPAT: looking for appcompat database entry with ProductCode '{4BAF6F55-FFE4-4A3A-8367-CC2EBB0F11C3}'.
MSI (s) (30:78) [09:58:36:441]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (30:78) [09:58:36:443]: MSCOREE not loaded loading copy from system32
MSI (s) (30:78) [09:58:36:444]: Machine policy value 'TransformsSecure' is 0
MSI (s) (30:78) [09:58:36:444]: User policy value 'TransformsAtSource' is 0
MSI (s) (30:78) [09:58:36:444]: Machine policy value 'DisablePatch' is 0
MSI (s) (30:78) [09:58:36:444]: Machine policy value 'AllowLockdownPatch' is 0
MSI (s) (30:78) [09:58:36:444]: Machine policy value 'DisableLUAPatching' is 0
MSI (s) (30:78) [09:58:36:444]: Machine policy value 'DisableFlyWeightPatching' is 0
MSI (s) (30:78) [09:58:36:444]: APPCOMPAT: looking for appcompat database entry with ProductCode '{4BAF6F55-FFE4-4A3A-8367-CC2EBB0F11C3}'.
MSI (s) (30:78) [09:58:36:444]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (30:78) [09:58:36:444]: Transforms are not secure.
MSI (s) (30:78) [09:58:36:444]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\Users\User\AppData\Local\Temp\Sophos Anti-Virus Major Install Log_180410_065836.txt'.
MSI (s) (30:78) [09:58:36:444]: Command Line: INSTALLDIR= ARPSYSTEMCOMPONENT=1 REBOOT=ReallySuppress UITYPE=none SYNCMODE=1 PRODUCTTYPE=0 UPDATEDRIVERS=1 UPDATECLASSFILTER=1 UPDATEBOOTDRIVERS=1 UPDATEKMSDRIVERS=1 SAVIONLY=0 MANAGED=1 RECOVERYMODE=0 DATACONTROL=1 DEVICECONTROL=1 WEBCONTROL=1 CURRENTDIRECTORY=C:\Program Files (x86)\Sophos\CloudInstaller CLIENTUILEVEL=3 MSICLIENTUSESEXTERNALUI=1 CLIENTPROCESSID=892
MSI (s) (30:78) [09:58:36:444]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{BE492755-19BA-4258-B108-9A2CCAD60D75}'.
MSI (s) (30:78) [09:58:36:444]: Product Code passed to Engine.Initialize: ''
MSI (s) (30:78) [09:58:36:444]: Product Code from property table before transforms: '{4BAF6F55-FFE4-4A3A-8367-CC2EBB0F11C3}'
MSI (s) (30:78) [09:58:36:444]: Product Code from property table after transforms: '{4BAF6F55-FFE4-4A3A-8367-CC2EBB0F11C3}'
MSI (s) (30:78) [09:58:36:444]: Product not registered: beginning first-time install
MSI (s) (30:78) [09:58:36:445]: Product {4BAF6F55-FFE4-4A3A-8367-CC2EBB0F11C3} is not managed.
MSI (s) (30:78) [09:58:36:445]: MSI_LUA: Credential prompt not required, user is an admin
MSI (s) (30:78) [09:58:36:445]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
MSI (s) (30:78) [09:58:36:445]: Entering CMsiConfigurationManager::SetLastUsedSource.
MSI (s) (30:78) [09:58:36:445]: User policy value 'SearchOrder' is 'nmu'
MSI (s) (30:78) [09:58:36:445]: Adding new sources is allowed.
MSI (s) (30:78) [09:58:36:445]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
MSI (s) (30:78) [09:58:36:445]: Package name extracted from package path: 'Sophos Anti-Virus.msi'
MSI (s) (30:78) [09:58:36:445]: Package to be registered: 'Sophos Anti-Virus.msi'
MSI (s) (30:78) [09:58:36:446]: Note: 1: 2262 2: AdminProperties 3: -2147287038
MSI (s) (30:78) [09:58:36:446]: Machine policy value 'DisableMsi' is 0
MSI (s) (30:78) [09:58:36:446]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (30:78) [09:58:36:446]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (30:78) [09:58:36:446]: Product installation will be elevated because user is admin and product is being installed per-machine.
MSI (s) (30:78) [09:58:36:446]: Running product '{4BAF6F55-FFE4-4A3A-8367-CC2EBB0F11C3}' with elevated privileges: Product is assigned.
MSI (s) (30:78) [09:58:36:446]: PROPERTY CHANGE: Adding ARPSYSTEMCOMPONENT property. Its value is '1'.
MSI (s) (30:78) [09:58:36:446]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'ReallySuppress'.
MSI (s) (30:78) [09:58:36:446]: PROPERTY CHANGE: Modifying UITYPE property. Its current value is 'full'. Its new value: 'none'.
MSI (s) (30:78) [09:58:36:446]: PROPERTY CHANGE: Modifying SYNCMODE property. Its current value is '0'. Its new value: '1'.
MSI (s) (30:78) [09:58:36:446]: PROPERTY CHANGE: Modifying UPDATECLASSFILTER property. Its current value is '0'. Its new value: '1'.
MSI (s) (30:78) [09:58:36:446]: PROPERTY CHANGE: Adding UPDATEKMSDRIVERS property. Its value is '1'.
MSI (s) (30:78) [09:58:36:446]: PROPERTY CHANGE: Adding RECOVERYMODE property. Its value is '0'.
MSI (s) (30:78) [09:58:36:446]: PROPERTY CHANGE: Modifying DATACONTROL property. Its current value is '0'. Its new value: '1'.
MSI (s) (30:78) [09:58:36:446]: PROPERTY CHANGE: Modifying DEVICECONTROL property. Its current value is '0'. Its new value: '1'.
MSI (s) (30:78) [09:58:36:446]: PROPERTY CHANGE: Adding WEBCONTROL property. Its value is '1'.
MSI (s) (30:78) [09:58:36:446]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\Program Files (x86)\Sophos\CloudInstaller'.
MSI (s) (30:78) [09:58:36:446]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'.
MSI (s) (30:78) [09:58:36:446]: PROPERTY CHANGE: Adding MSICLIENTUSESEXTERNALUI property. Its value is '1'.
MSI (s) (30:78) [09:58:36:446]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '892'.
MSI (s) (30:78) [09:58:36:446]: Machine policy value 'DisableAutomaticApplicationShutdown' is 0
MSI (s) (30:78) [09:58:36:446]: RESTART MANAGER: Disabled by MSIRESTARTMANAGERCONTROL property; Windows Installer will use the built-in FilesInUse functionality.
MSI (s) (30:78) [09:58:36:446]: PROPERTY CHANGE: Adding MsiSystemRebootPending property. Its value is '1'.
MSI (s) (30:78) [09:58:36:446]: TRANSFORMS property is now:
MSI (s) (30:78) [09:58:36:446]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '200'.
MSI (s) (30:78) [09:58:36:447]: SHELL32::SHGetFolderPath returned: C:\Users\User\AppData\Roaming
MSI (s) (30:78) [09:58:36:447]: SHELL32::SHGetFolderPath returned: C:\Users\User\Favorites
MSI (s) (30:78) [09:58:36:448]: SHELL32::SHGetFolderPath returned: C:\Users\User\AppData\Roaming\Microsoft\Windows\Network Shortcuts
MSI (s) (30:78) [09:58:36:448]: SHELL32::SHGetFolderPath returned: C:\Users\User\Documents
MSI (s) (30:78) [09:58:36:449]: SHELL32::SHGetFolderPath returned: C:\Users\User\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
MSI (s) (30:78) [09:58:36:449]: SHELL32::SHGetFolderPath returned: C:\Users\User\AppData\Roaming\Microsoft\Windows\Recent
MSI (s) (30:78) [09:58:36:450]: SHELL32::SHGetFolderPath returned: C:\Users\User\AppData\Roaming\Microsoft\Windows\SendTo
MSI (s) (30:78) [09:58:36:451]: SHELL32::SHGetFolderPath returned: C:\Users\User\AppData\Roaming\Microsoft\Windows\Templates
MSI (s) (30:78) [09:58:36:451]: SHELL32::SHGetFolderPath returned: C:\ProgramData
MSI (s) (30:78) [09:58:36:451]: SHELL32::SHGetFolderPath returned: C:\Users\User\AppData\Local
MSI (s) (30:78) [09:58:36:452]: SHELL32::SHGetFolderPath returned: C:\Users\User\Pictures
MSI (s) (30:78) [09:58:36:453]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (s) (30:78) [09:58:36:453]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
MSI (s) (30:78) [09:58:36:454]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
MSI (s) (30:78) [09:58:36:455]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu
MSI (s) (30:78) [09:58:36:455]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop
MSI (s) (30:78) [09:58:36:456]: SHELL32::SHGetFolderPath returned: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (s) (30:78) [09:58:36:457]: SHELL32::SHGetFolderPath returned: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
MSI (s) (30:78) [09:58:36:457]: SHELL32::SHGetFolderPath returned: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
MSI (s) (30:78) [09:58:36:458]: SHELL32::SHGetFolderPath returned: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu
MSI (s) (30:78) [09:58:36:458]: SHELL32::SHGetFolderPath returned: C:\Users\User\Desktop
MSI (s) (30:78) [09:58:36:459]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates
MSI (s) (30:78) [09:58:36:459]: SHELL32::SHGetFolderPath returned: C:\Windows\Fonts
MSI (s) (30:78) [09:58:36:459]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
MSI (s) (30:78) [09:58:36:461]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated.
MSI (s) (30:78) [09:58:36:461]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'.
MSI (s) (30:78) [09:58:36:461]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
MSI (s) (30:78) [09:58:36:461]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (s) (30:78) [09:58:36:461]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'User'.
MSI (s) (30:78) [09:58:36:461]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (s) (30:78) [09:58:36:461]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\Windows\Installer\97e71b.msi'.
MSI (s) (30:78) [09:58:36:461]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Sophos Anti-Virus.msi'.
MSI (s) (30:78) [09:58:36:461]: Machine policy value 'MsiDisableEmbeddedUI' is 0
MSI (s) (30:78) [09:58:36:461]: EEUI - Disabling MsiEmbeddedUI due to existing external or embedded UI
MSI (s) (30:78) [09:58:36:461]: EEUI - Disabling MsiEmbeddedUI for service because it's not a quiet/basic install
MSI (s) (30:78) [09:58:36:462]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (30:78) [09:58:36:462]: Machine policy value 'DisableRollback' is 0
MSI (s) (30:78) [09:58:36:462]: User policy value 'DisableRollback' is 0
MSI (s) (30:78) [09:58:36:462]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
=== Logging started: 10/Apr/2018 9:58:36 ===
MSI (s) (30:78) [09:58:36:462]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
MSI (s) (30:78) [09:58:36:462]: Doing action: INSTALL
Action start 9:58:36: INSTALL.
MSI (s) (30:78) [09:58:36:462]: Running ExecuteSequence
MSI (s) (30:78) [09:58:36:463]: Doing action: AppSearch
Action start 9:58:36: AppSearch.
MSI (s) (30:78) [09:58:36:463]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (s) (30:78) [09:58:36:463]: Doing action: LaunchConditions
Action ended 9:58:36: AppSearch. Return value 1.
Action start 9:58:36: LaunchConditions.
MSI (s) (30:78) [09:58:36:463]: Skipping action: CheckUserIsSophosAdmin (condition is false)
MSI (s) (30:78) [09:58:36:463]: Skipping action: TP_CheckRemoveAllowed (condition is false)
MSI (s) (30:78) [09:58:36:463]: Doing action: FindRelatedProducts
Action ended 9:58:36: LaunchConditions. Return value 1.
MSI (s) (30:78) [09:58:36:463]: Note: 1: 2205 2: 3: Upgrade
MSI (s) (30:78) [09:58:36:464]: Note: 1: 2228 2: 3: Upgrade 4: SELECT `UpgradeCode`,`VersionMin`,`VersionMax`,`Language`,`Attributes`,`ActionProperty` FROM `Upgrade`
Action start 9:58:36: FindRelatedProducts.
MSI (s) (30:78) [09:58:36:464]: Skipping action: CCPSearch (condition is false)
MSI (s) (30:78) [09:58:36:464]: Skipping action: IsSafeToDowngrade (condition is false)
MSI (s) (30:78) [09:58:36:464]: Skipping action: RMCCPSearch (condition is false)
MSI (s) (30:78) [09:58:36:464]: Doing action: ValidateProductID
Action ended 9:58:36: FindRelatedProducts. Return value 0.
Action start 9:58:36: ValidateProductID.
MSI (s) (30:78) [09:58:36:464]: Doing action: setUserProfileNT
Action ended 9:58:36: ValidateProductID. Return value 1.
MSI (s) (30:78) [09:58:36:464]: PROPERTY CHANGE: Adding USERPROFILE property. Its value is 'C:\Users\User'.
Action start 9:58:36: setUserProfileNT.
MSI (s) (30:78) [09:58:36:464]: Skipping action: SetAllUsersProfileNT (condition is false)
MSI (s) (30:78) [09:58:36:464]: Doing action: setAllUsersProfile2K
Action ended 9:58:36: setUserProfileNT. Return value 1.
MSI (s) (30:78) [09:58:36:464]: PROPERTY CHANGE: Adding ALLUSERSPROFILE property. Its value is 'C:\ProgramData'.
Action start 9:58:36: setAllUsersProfile2K.
MSI (s) (30:78) [09:58:36:464]: Doing action: CostInitialize
Action ended 9:58:36: setAllUsersProfile2K. Return value 1.
MSI (s) (30:78) [09:58:36:464]: Machine policy value 'MaxPatchCacheSize' is 10
MSI (s) (30:78) [09:58:36:465]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'D:\'.
MSI (s) (30:78) [09:58:36:465]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'.
MSI (s) (30:78) [09:58:36:465]: Note: 1: 2205 2: 3: Patch
MSI (s) (30:78) [09:58:36:465]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (30:78) [09:58:36:466]: Note: 1: 2205 2: 3: MsiPatchHeaders
MSI (s) (30:78) [09:58:36:466]: Note: 1: 2205 2: 3: __MsiPatchFileList
MSI (s) (30:78) [09:58:36:466]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (30:78) [09:58:36:466]: Note: 1: 2228 2: 3: PatchPackage 4: SELECT `DiskId`, `PatchId`, `LastSequence` FROM `Media`, `PatchPackage` WHERE `Media`.`DiskId`=`PatchPackage`.`Media_` ORDER BY `DiskId`
MSI (s) (30:78) [09:58:36:466]: Note: 1: 2205 2: 3: Patch
Action start 9:58:36: CostInitialize.
MSI (s) (30:78) [09:58:36:466]: Doing action: FileCost
Action ended 9:58:36: CostInitialize. Return value 1.
MSI (s) (30:78) [09:58:36:466]: Note: 1: 2205 2: 3: MsiAssembly
MSI (s) (30:78) [09:58:36:467]: Note: 1: 2205 2: 3: Class
MSI (s) (30:78) [09:58:36:467]: Note: 1: 2205 2: 3: Extension
MSI (s) (30:78) [09:58:36:467]: Note: 1: 2205 2: 3: TypeLib
Action start 9:58:36: FileCost.
MSI (s) (30:78) [09:58:36:467]: Doing action: SetMFC71
Action ended 9:58:36: FileCost. Return value 1.
Action start 9:58:36: SetMFC71.
MSI (s) (30:78) [09:58:36:468]: Doing action: IsolateComponents
Action ended 9:58:36: SetMFC71. Return value 1.
Action start 9:58:36: IsolateComponents.
MSI (s) (30:78) [09:58:36:468]: Doing action: CostFinalize
Action ended 9:58:36: IsolateComponents. Return value 0.
MSI (s) (30:78) [09:58:36:468]: PROPERTY CHANGE: Adding OutOfDiskSpace property. Its value is '0'.
MSI (s) (30:78) [09:58:36:468]: PROPERTY CHANGE: Adding OutOfNoRbDiskSpace property. Its value is '0'.
MSI (s) (30:78) [09:58:36:468]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceAvailable property. Its value is '0'.
MSI (s) (30:78) [09:58:36:468]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRequired property. Its value is '0'.
MSI (s) (30:78) [09:58:36:468]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRemaining property. Its value is '0'.
MSI (s) (30:78) [09:58:36:468]: Note: 1: 2205 2: 3: Patch
MSI (s) (30:78) [09:58:36:468]: Note: 1: 2205 2: 3: Condition
MSI (s) (30:78) [09:58:36:468]: PROPERTY CHANGE: Adding TARGETDIR property. Its value is 'D:\'.
MSI (s) (30:78) [09:58:36:468]: PROPERTY CHANGE: Adding newfolder1 property. Its value is 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\'.
MSI (s) (30:78) [09:58:36:468]: PROPERTY CHANGE: Adding newfolder2 property. Its value is 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\Sophos Endpoint Security and Control\'.
MSI (s) (30:78) [09:58:36:468]: PROPERTY CHANGE: Adding NEW_DIRECTORY2 property. Its value is 'C:\ProgramData\Microsoft\Windows\Start Menu\Sophos\'.
MSI (s) (30:78) [09:58:36:468]: PROPERTY CHANGE: Adding System16Folder property. Its value is 'D:\'.
MSI (s) (30:78) [09:58:36:469]: WIN64DUALFOLDERS: 'C:\Program Files (x86)\' will substitute 17 characters in 'C:\Program Files\' folder path. (mask argument = 0, the folder pair's iSwapAttrib member = 0).
MSI (s) (30:78) [09:58:36:469]: PROPERTY CHANGE: Modifying ProgramFiles64Folder property. Its current value is 'C:\Program Files\'. Its new value: 'C:\Program Files (x86)\'.
MSI (s) (30:78) [09:58:36:469]: PROPERTY CHANGE: Adding PrimaryVolumePath property. Its value is 'D:\'.
MSI (s) (30:78) [09:58:36:469]: PROPERTY CHANGE: Adding GlobalAssemblyCache property. Its value is 'D:\'.
MSI (s) (30:78) [09:58:36:469]: WIN64DUALFOLDERS: 'C:\Program Files (x86)\' will substitute 17 characters in 'C:\Program Files\Common Files\' folder path. (mask argument = 0, the folder pair's iSwapAttrib member = 0).
MSI (s) (30:78) [09:58:36:469]: PROPERTY CHANGE: Modifying CommonFiles64Folder property. Its current value is 'C:\Program Files\Common Files\'. Its new value: 'C:\Program Files (x86)\Common Files\'.
MSI (s) (30:78) [09:58:36:469]: PROPERTY CHANGE: Modifying USERPROFILE property. Its current value is 'C:\Users\User'. Its new value: 'C:\Users\User\'.
MSI (s) (30:78) [09:58:36:469]: PROPERTY CHANGE: Modifying ALLUSERSPROFILE property. Its current value is 'C:\ProgramData'. Its new value: 'C:\ProgramData\'.
MSI (s) (30:78) [09:58:36:469]: WIN64DUALFOLDERS: 'C:\Windows\SysWOW64\' will substitute 20 characters in 'C:\Windows\system32\' folder path. (mask argument = 0, the folder pair's iSwapAttrib member = 1).
MSI (s) (30:78) [09:58:36:469]: PROPERTY CHANGE: Modifying System64Folder property. Its current value is 'C:\Windows\system32\'. Its new value: 'C:\Windows\SysWOW64\'.
MSI (s) (30:78) [09:58:36:469]: PROPERTY CHANGE: Adding SOPHOS property. Its value is 'C:\Program Files (x86)\Sophos\'.
MSI (s) (30:78) [09:58:36:469]: PROPERTY CHANGE: Adding SOPHOS_ANTI_VIRUS property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
MSI (s) (30:78) [09:58:36:469]: PROPERTY CHANGE: Adding INSTALLDIR property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
MSI (s) (30:78) [09:58:36:469]: PROPERTY CHANGE: Adding SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\'.
MSI (s) (30:78) [09:58:36:469]: PROPERTY CHANGE: Adding SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\x64\'.
MSI (s) (30:78) [09:58:36:469]: PROPERTY CHANGE: Adding WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (30:78) [09:58:36:469]: PROPERTY CHANGE: Adding INSTALLDIR_HOME property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
MSI (s) (30:78) [09:58:36:469]: PROPERTY CHANGE: Adding INSTALLDIR_X64 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
MSI (s) (30:78) [09:58:36:469]: PROPERTY CHANGE: Adding INSTALLDIR_WIN32 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
MSI (s) (30:78) [09:58:36:469]: PROPERTY CHANGE: Adding Microsoft.VC90.CRT property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\'.
MSI (s) (30:78) [09:58:36:469]: PROPERTY CHANGE: Adding Microsoft.VC90.ATL property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\'.
MSI (s) (30:78) [09:58:36:469]: PROPERTY CHANGE: Adding NEW_DIRECTORY1 property. Its value is 'C:\ProgramData\Sophos\'.
MSI (s) (30:78) [09:58:36:469]: PROPERTY CHANGE: Adding SOPHOS_TAMPER_PROTECTION property. Its value is 'C:\ProgramData\Sophos\Sophos Tamper Protection\'.
MSI (s) (30:78) [09:58:36:469]: PROPERTY CHANGE: Adding LOGS3 property. Its value is 'C:\ProgramData\Sophos\Sophos Tamper Protection\logs\'.
MSI (s) (30:78) [09:58:36:469]: PROPERTY CHANGE: Adding SOPHOS_DEVICE_CONTROL property. Its value is 'C:\ProgramData\Sophos\Sophos Device Control\'.
MSI (s) (30:78) [09:58:36:469]: PROPERTY CHANGE: Adding LOGS2 property. Its value is 'C:\ProgramData\Sophos\Sophos Device Control\logs\'.
MSI (s) (30:78) [09:58:36:469]: PROPERTY CHANGE: Adding SOPHOS_DATA_CONTROL property. Its value is 'C:\ProgramData\Sophos\Sophos Data Control\'.
MSI (s) (30:78) [09:58:36:469]: PROPERTY CHANGE: Adding LOGS1 property. Its value is 'C:\ProgramData\Sophos\Sophos Data Control\logs\'.
MSI (s) (30:78) [09:58:36:469]: PROPERTY CHANGE: Adding RESOURCES property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\'.
MSI (s) (30:78) [09:58:36:469]: PROPERTY CHANGE: Adding RES property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Res\'.
MSI (s) (30:78) [09:58:36:469]: PROPERTY CHANGE: Adding NEW_DIRECTORY3 property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Res\'.
MSI (s) (30:78) [09:58:36:469]: PROPERTY CHANGE: Adding CACHE property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\'.
MSI (s) (30:78) [09:58:36:469]: PROPERTY CHANGE: Adding TEMP property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\'.
MSI (s) (30:78) [09:58:36:469]: PROPERTY CHANGE: Adding SAFESTORE property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\'.
MSI (s) (30:78) [09:58:36:469]: PROPERTY CHANGE: Adding LOGS property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\logs\'.
MSI (s) (30:78) [09:58:36:469]: PROPERTY CHANGE: Adding INFECTED property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\'.
MSI (s) (30:78) [09:58:36:469]: PROPERTY CHANGE: Adding LOW property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\Low\'.
MSI (s) (30:78) [09:58:36:469]: PROPERTY CHANGE: Adding CONFIG property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config\'.
MSI (s) (30:78) [09:58:36:469]: Target path resolution complete. Dumping Directory table...
MSI (s) (30:78) [09:58:36:469]: Note: target paths subject to change (via custom actions or browsing)
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: TARGETDIR , Object: D:\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: ProgramMenuFolder , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: newfolder1 , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: newfolder2 , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\Sophos Endpoint Security and Control\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: StartMenuFolder , Object: C:\ProgramData\Microsoft\Windows\Start Menu\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: NEW_DIRECTORY2 , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Sophos\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: WindowsVolume , Object: C:\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: WindowsFolder , Object: C:\Windows\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: TemplateFolder , Object: C:\ProgramData\Microsoft\Windows\Templates\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: TempFolder , Object: C:\Users\User\AppData\Local\Temp\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: System16Folder , Object: D:\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: StartupFolder , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: SendToFolder , Object: C:\Users\User\AppData\Roaming\Microsoft\Windows\SendTo\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: ProgramFiles64Folder , Object: C:\Program Files (x86)\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: PrimaryVolumePath , Object: D:\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: LocalAppDataFolder , Object: C:\Users\User\AppData\Local\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: GlobalAssemblyCache , Object: D:\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: FontsFolder , Object: C:\Windows\Fonts\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: FavoritesFolder , Object: C:\Users\User\Favorites\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: DesktopFolder , Object: C:\Users\Public\Desktop\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: CommonFiles64Folder , Object: C:\Program Files (x86)\Common Files\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: AdminToolsFolder , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: USERPROFILE , Object: C:\Users\User\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: ALLUSERSPROFILE , Object: C:\ProgramData\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: SystemFolder , Object: C:\Windows\SysWOW64\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: System64Folder , Object: C:\Windows\SysWOW64\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: ProgramFilesFolder , Object: C:\Program Files (x86)\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: SOPHOS , Object: C:\Program Files (x86)\Sophos\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: SOPHOS_ANTI_VIRUS , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: INSTALLDIR , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\x64\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: INSTALLDIR_HOME , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: INSTALLDIR_X64 , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: INSTALLDIR_WIN32 , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: Microsoft.VC90.CRT , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: Microsoft.VC90.ATL , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: CommonAppDataFolder , Object: C:\ProgramData\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: NEW_DIRECTORY1 , Object: C:\ProgramData\Sophos\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: SOPHOS_TAMPER_PROTECTION , Object: C:\ProgramData\Sophos\Sophos Tamper Protection\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: LOGS3 , Object: C:\ProgramData\Sophos\Sophos Tamper Protection\logs\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: SOPHOS_DEVICE_CONTROL , Object: C:\ProgramData\Sophos\Sophos Device Control\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: LOGS2 , Object: C:\ProgramData\Sophos\Sophos Device Control\logs\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: SOPHOS_DATA_CONTROL , Object: C:\ProgramData\Sophos\Sophos Data Control\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: LOGS1 , Object: C:\ProgramData\Sophos\Sophos Data Control\logs\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: RESOURCES , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: RES , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Res\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: NEW_DIRECTORY3 , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Res\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: CACHE , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: TEMP , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: SAFESTORE , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: LOGS , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\logs\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: INFECTED , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: LOW , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\Low\
MSI (s) (30:78) [09:58:36:469]: Dir (target): Key: CONFIG , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Config\
MSI (s) (30:78) [09:58:36:469]: Note: 1: 2205 2: 3: MsiAssembly
MSI (s) (30:78) [09:58:36:469]: Note: 1: 2228 2: 3: MsiAssembly 4: SELECT `MsiAssembly`.`Attributes`, `MsiAssembly`.`File_Application`, `MsiAssembly`.`File_Manifest`, `Component`.`KeyPath` FROM `MsiAssembly`, `Component` WHERE `MsiAssembly`.`Component_` = `Component`.`Component` AND `MsiAssembly`.`Component_` = ?
Action start 9:58:36: CostFinalize.
MSI (s) (30:78) [09:58:36:472]: Doing action: SetSwiDir64.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 9:58:36: CostFinalize. Return value 1.
MSI (s) (30:78) [09:58:36:472]: PROPERTY CHANGE: Modifying SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its current value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\x64\'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\'.
Action start 9:58:36: SetSwiDir64.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (30:78) [09:58:36:472]: Doing action: ResolveSource
Action ended 9:58:36: SetSwiDir64.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
MSI (s) (30:78) [09:58:36:473]: Resolving source.
MSI (s) (30:78) [09:58:36:473]: Resolving source to launched-from source.
MSI (s) (30:78) [09:58:36:473]: Setting launched-from source as last-used.
MSI (s) (30:78) [09:58:36:473]: PROPERTY CHANGE: Adding SourceDir property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\'.
MSI (s) (30:78) [09:58:36:473]: PROPERTY CHANGE: Adding SOURCEDIR property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\'.
MSI (s) (30:78) [09:58:36:473]: PROPERTY CHANGE: Adding SourcedirProduct property. Its value is '{4BAF6F55-FFE4-4A3A-8367-CC2EBB0F11C3}'.
MSI (s) (30:78) [09:58:36:473]: SOURCEDIR ==> C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\
MSI (s) (30:78) [09:58:36:473]: SOURCEDIR product ==> {4BAF6F55-FFE4-4A3A-8367-CC2EBB0F11C3}
MSI (s) (30:78) [09:58:36:473]: Determining source type
MSI (s) (30:78) [09:58:36:473]: Source type from package 'Sophos Anti-Virus.msi': 0
MSI (s) (30:78) [09:58:36:473]: Source path resolution complete. Dumping Directory table...
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: TARGETDIR , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\ , LongSubPath: , ShortSubPath:
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: ProgramMenuFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Programs\ , LongSubPath: Programs\ , ShortSubPath:
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: newfolder1 , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Programs\Sophos\ , LongSubPath: Programs\Sophos\ , ShortSubPath:
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: newfolder2 , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Programs\Sophos\Sophos Endpoint Security and Control\ , LongSubPath: Programs\Sophos\Sophos Endpoint Security and Control\ , ShortSubPath: Programs\Sophos\SOPHOS~1\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: StartMenuFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Start Menu\ , LongSubPath: Start Menu\ , ShortSubPath: STARTM~1\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: NEW_DIRECTORY2 , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Start Menu\Sophos\ , LongSubPath: Start Menu\Sophos\ , ShortSubPath: STARTM~1\Sophos\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: WindowsVolume , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\WinRoot\ , LongSubPath: WinRoot\ , ShortSubPath:
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: WindowsFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Windows\ , LongSubPath: Windows\ , ShortSubPath:
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: TemplateFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\ShellNew\ , LongSubPath: ShellNew\ , ShortSubPath:
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: TempFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Temp\ , LongSubPath: Temp\ , ShortSubPath:
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: System16Folder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\System\ , LongSubPath: System\ , ShortSubPath:
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: StartupFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\StartUp\ , LongSubPath: StartUp\ , ShortSubPath:
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: SendToFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\SendTo\ , LongSubPath: SendTo\ , ShortSubPath:
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: ProgramFiles64Folder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Program Files 64\ , LongSubPath: Program Files 64\ , ShortSubPath: Prog64~1\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: PrimaryVolumePath , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\PrimaryVolumePath\ , LongSubPath: PrimaryVolumePath\ , ShortSubPath: Primar~1\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: LocalAppDataFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\LocalAppData\ , LongSubPath: LocalAppData\ , ShortSubPath: LocalA~1\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: GlobalAssemblyCache , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\GlobalAssemblyCache\ , LongSubPath: GlobalAssemblyCache\ , ShortSubPath: Global~1\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: FontsFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Fonts\ , LongSubPath: Fonts\ , ShortSubPath:
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: FavoritesFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Favorites\ , LongSubPath: Favorites\ , ShortSubPath: FAVORI~1\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: DesktopFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Desktop\ , LongSubPath: Desktop\ , ShortSubPath:
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: CommonFiles64Folder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Common64\ , LongSubPath: Common64\ , ShortSubPath:
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: AdminToolsFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\AdminTools\ , LongSubPath: AdminTools\ , ShortSubPath: Admint~1\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: USERPROFILE , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\UserProfile\ , LongSubPath: UserProfile\ , ShortSubPath: USERPR~1\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: ALLUSERSPROFILE , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\All Users\ , LongSubPath: All Users\ , ShortSubPath: ALLUSE~1\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: SystemFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\System32\ , LongSubPath: System32\ , ShortSubPath:
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: System64Folder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\System64\ , LongSubPath: System64\ , ShortSubPath:
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: ProgramFilesFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\program files\ , LongSubPath: program files\ , ShortSubPath: PROGRA~1\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: SOPHOS , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\program files\Sophos\ , LongSubPath: program files\Sophos\ , ShortSubPath: PROGRA~1\Sophos\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: SOPHOS_ANTI_VIRUS , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\program files\Sophos\Sophos Anti-Virus\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: INSTALLDIR , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\program files\Sophos\Sophos Anti-Virus\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\program files\Sophos\Sophos Anti-Virus\Web Intelligence\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\Web Intelligence\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\program files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\x64\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\Web Control\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\j-0b_jsi\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: INSTALLDIR_HOME , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\program files\Sophos\Sophos Anti-Virus\Home\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\Home\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\Home\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: INSTALLDIR_X64 , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\program files\Sophos\Sophos Anti-Virus\WSC_X64\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\WSC_X64\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\WSC_X64\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: INSTALLDIR_WIN32 , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\program files\Sophos\Sophos Anti-Virus\WSC_Win32\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\WSC_Win32\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\jwgiamqy\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: Microsoft.VC90.CRT , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\oeg2ttzz\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: Microsoft.VC90.ATL , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\l3j1top6\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: CommonAppDataFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\CommonAppData\ , LongSubPath: CommonAppData\ , ShortSubPath: Common~1\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: NEW_DIRECTORY1 , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\CommonAppData\Sophos\ , LongSubPath: CommonAppData\Sophos\ , ShortSubPath: Common~1\Sophos\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: SOPHOS_TAMPER_PROTECTION , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\CommonAppData\Sophos\Sophos Tamper Protection\ , LongSubPath: CommonAppData\Sophos\Sophos Tamper Protection\ , ShortSubPath: Common~1\Sophos\SOPHOS~4\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: LOGS3 , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\CommonAppData\Sophos\Sophos Tamper Protection\logs\ , LongSubPath: CommonAppData\Sophos\Sophos Tamper Protection\logs\ , ShortSubPath: Common~1\Sophos\SOPHOS~4\logs\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: SOPHOS_DEVICE_CONTROL , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\CommonAppData\Sophos\Sophos Device Control\ , LongSubPath: CommonAppData\Sophos\Sophos Device Control\ , ShortSubPath: Common~1\Sophos\SOPHOS~3\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: LOGS2 , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\CommonAppData\Sophos\Sophos Device Control\logs\ , LongSubPath: CommonAppData\Sophos\Sophos Device Control\logs\ , ShortSubPath: Common~1\Sophos\SOPHOS~3\logs\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: SOPHOS_DATA_CONTROL , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\CommonAppData\Sophos\Sophos Data Control\ , LongSubPath: CommonAppData\Sophos\Sophos Data Control\ , ShortSubPath: Common~1\Sophos\SOPHOS~2\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: LOGS1 , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\CommonAppData\Sophos\Sophos Data Control\logs\ , LongSubPath: CommonAppData\Sophos\Sophos Data Control\logs\ , ShortSubPath: Common~1\Sophos\SOPHOS~2\logs\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: RESOURCES , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\CommonAppData\Sophos\Sophos Anti-Virus\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: RES , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Res\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Res\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Res\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: NEW_DIRECTORY3 , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Res\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Res\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Res\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: CACHE , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Cache\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Cache\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Cache\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: TEMP , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Temp\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Temp\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Temp\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: SAFESTORE , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Safestore\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Safestore\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\ynotdaxl\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: LOGS , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\CommonAppData\Sophos\Sophos Anti-Virus\logs\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\logs\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\logs\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: INFECTED , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\CommonAppData\Sophos\Sophos Anti-Virus\INFECTED\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\INFECTED\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\INFECTED\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: LOW , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\CommonAppData\Sophos\Sophos Anti-Virus\INFECTED\Low\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\INFECTED\Low\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\INFECTED\Low\
MSI (s) (30:78) [09:58:36:473]: Dir (source): Key: CONFIG , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Config\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Config\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Config\
Action start 9:58:36: ResolveSource.
MSI (s) (30:78) [09:58:36:473]: Doing action: SetInstallDir
Action ended 9:58:36: ResolveSource. Return value 1.
Action start 9:58:36: SetInstallDir.
MSI (s) (30:78) [09:58:36:474]: Skipping action: UninstallDowngradeCheck (condition is false)
MSI (s) (30:78) [09:58:36:474]: Doing action: SetScriptProperty
Action ended 9:58:36: SetInstallDir. Return value 1.
MSI (s) (30:78) [09:58:36:474]: PROPERTY CHANGE: Adding RunPreLaunchScript property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\""10.8.1.217"'.
Action start 9:58:36: SetScriptProperty.
MSI (s) (30:78) [09:58:36:474]: Skipping action: CheckForSophosClientFirewall (condition is false)
MSI (s) (30:78) [09:58:36:474]: Doing action: ISInitAllUsers
Action ended 9:58:36: SetScriptProperty. Return value 1.
MSI (s) (30:78) [09:58:36:474]: PROPERTY CHANGE: Modifying ALLUSERS property. Its current value is '1'. Its new value: '2'.
Action start 9:58:36: ISInitAllUsers.
MSI (s) (30:78) [09:58:36:474]: Doing action: SetODBCFolders
Action ended 9:58:36: ISInitAllUsers. Return value 1.
MSI (s) (30:78) [09:58:36:474]: Note: 1: 2205 2: 3: ODBCDriver
MSI (s) (30:78) [09:58:36:474]: Note: 1: 2228 2: 3: ODBCDriver 4: SELECT `ComponentId`,`Description`,`Directory_`, `ActionRequest`, `Installed`, `Attributes` FROM `ODBCDriver`, `Component` WHERE `ODBCDriver`.`Component_` = `Component` AND (`ActionRequest` = 1 OR `ActionRequest` = 2)
MSI (s) (30:78) [09:58:36:474]: Note: 1: 2205 2: 3: ODBCTranslator
MSI (s) (30:78) [09:58:36:474]: Note: 1: 2228 2: 3: ODBCTranslator 4: SELECT `ComponentId`,`Description`,`Directory_`, `ActionRequest`, `Installed`, `Attributes` FROM `ODBCTranslator`, `Component` WHERE `ODBCTranslator`.`Component_` = `Component` AND (`ActionRequest` = 1 OR `ActionRequest` = 2)
Action start 9:58:36: SetODBCFolders.
MSI (s) (30:78) [09:58:36:474]: Doing action: MigrateFeatureStates
Action ended 9:58:36: SetODBCFolders. Return value 0.
Action start 9:58:36: MigrateFeatureStates.
MSI (s) (30:78) [09:58:36:475]: Doing action: InstallValidate
Action ended 9:58:36: MigrateFeatureStates. Return value 0.
MSI (s) (30:78) [09:58:36:475]: Note: 1: 2205 2: 3: Dialog
MSI (s) (30:78) [09:58:36:475]: Feature: SAVService; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Feature: MainComponents; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Feature: HomeEdition; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Feature: ConfigFiles; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Feature: Resources; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Feature: EngineFiles; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Feature: ServiceComponents; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: ConfigFilesNoReplace; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: ConfigFilesReplace; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: ConfigFilesReplaceHome; Installed: Absent; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: AllOtherFiles2; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: AllOtherFiles9; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: AllOtherFiles1; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: SAFESTOREDIR; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: AllOtherFiles3; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: AllOtherFiles8; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: AllOtherFiles5; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: AllOtherFiles6; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: AllOtherFiles7; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: ControlSAVAdminService; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: ControlSAVService; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: SophosCleanupService.exe; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: scs_integrity_dat; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: SophosOfficeAV.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: SophosOfficeAVx64.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: sav32cli.exe; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: bpaif.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: AllOtherFiles4; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: SAVHelpChs.chm; Installed: Absent; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: SAVHelpCht.chm; Installed: Absent; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: SAVHelpDeu.chm; Installed: Absent; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: SAVHelpEsp.chm; Installed: Absent; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: SAVHelpFra.chm; Installed: Absent; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: SAVHelpIta.chm; Installed: Absent; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: SAVHelpJap.chm; Installed: Absent; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: SCF.dat; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: SOF.dat; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: SavHelpEng.chm; Installed: Absent; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: SavShellExtx64; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: TamperProtectionControlx64; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: Shortcut_de; Installed: Absent; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: Shortcut_es; Installed: Absent; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: Shortcut_fr; Installed: Absent; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: Shortcut_it; Installed: Absent; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: Shortcut_ja; Installed: Absent; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: Shortcut_zh_cn; Installed: Absent; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: Shortcut_zh_tw; Installed: Absent; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: Shortcuts; Installed: Absent; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: Categories.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: SavNeutralRes.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: SavRes.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: SavResChs.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: SavResCht.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: SavResDeu.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: SavResEng.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: SavResEsp.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: SavResFra.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: SavResIt.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: SavResJap.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: BackgroundScanClient.exe; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: SavAdapter.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: SecurityProductInformationReplace; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: Microsoft.VC90.ATL.manifest; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: atl90.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: Microsoft.VC90.CRT.manifest; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: msvcm90.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: msvcp90.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: msvcr90.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: PsRootCertificate; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: PsCertificateRevocationList; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: integrity_dat; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: ForceUpdateAlongSideSGN.exe; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: WSCClientW32; Installed: Absent; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: WSCClientX64; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: SecurityProductInformationReplaceHome; Installed: Absent; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: SAVService; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: SAVAdminService; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: AllOtherFiles; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: AuthorisedLists.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: AppFeedManager.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: ApplicationManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: DCManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: DataControlManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: DataControlPlugin.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: DetectionFeedback.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: DeviceControlPlugin.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: BHOManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: BackgroundScanning.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: ComponentManager.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: Configuration.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: DesktopMessaging.dll; Installed: Absent; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: SAVUserContext.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: DriveProcessor.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: EEConsumer.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: FSDecomposer.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: FilterProcessors.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: ICAdapter.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: ICManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: ICProcessors.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: Instrumentation.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: Instrumentation.man; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: LegacyConsumers.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: Localisation.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: Logging.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: Persistance.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: SAVControl.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: SavPlugin.dll; Installed: Absent; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: SIPSManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: SWIManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: SavMain.exe; Installed: Absent; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: SavProgress.exe; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: SavShellExt.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: SAVTelem.exe; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: ScanEditExports.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: ScanEditFacade.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: ScanManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: SavSecurity.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: SophtainerAdapter.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: SystemInformation.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: TamperProtectionControl.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: TamperProtectionManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: TamperProtectionPlugin.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: ThreatDetection.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: ThreatManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: Translators.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: VEController.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: SEDManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: VirusDetection.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: SafeStore32.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: SafeStore64.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: ssr32.exe; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: ssr64.exe; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: HomeEditionComponent; Installed: Absent; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: swc_service_exe.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: integrity_dat.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: SWCAdapter_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: WebControlPlugin_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: WCPResChs_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: WCPResCht_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: WCPResDeu_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: WCPResEng_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: WCPResEsp_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: WCPResFra_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: WCPResIt_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: WCPResJap_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: WebControlMessaging_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: WCMResEng_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: WCMResFra_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: WCMResDeu_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: WCMResJap_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: WCMResEsp_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: WCMResIt_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: WCMResChs_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: WCMResCht_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: WebControlAvailable.reg.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: SavWebControlKey.reg.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: WebControlPlugin.reg.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: WebControlMessaging_dll_reg.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: SwiCallout64.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: SwiDi.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: Difx_dll_64.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: SwiComponentCommon.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: SwiComponent32OnlyNotWFP_SwiUpdate32.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: SwiComponent64.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: SwiCallout_cat.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: Swi_di.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: Difx_dll.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: SwiProxy.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: SwiProxyChild.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: integrity.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: __Shortcuts65; Installed: Null; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: __Shortcut_de65; Installed: Null; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: __Shortcuts66; Installed: Null; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: __Shortcuts67; Installed: Null; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: __SavMain.exe65; Installed: Null; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: __Shortcut_es65; Installed: Null; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: __Shortcut_fr65; Installed: Null; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: __Shortcut_it65; Installed: Null; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: __Shortcut_ja65; Installed: Null; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: __Shortcut_zh_cn65; Installed: Null; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: __Shortcut_zh_tw65; Installed: Null; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: __SAFESTOREDIR65; Installed: Null; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: __SAVService65; Installed: Null; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: __SWIManagement.dll65; Installed: Null; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: __SAVTelem.exe65; Installed: Null; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: __VirusDetection.dll65; Installed: Null; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: __SafeStore32.dll65; Installed: Null; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: __WebControlAvailable.reg.92A5750A_B99C_4D18_8E96_314353D4097A65; Installed: Null; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: __SavWebControlKey.reg.92A5750A_B99C_4D18_8E96_314353D4097A65; Installed: Null; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: __WebControlPlugin.reg.92A5750A_B99C_4D18_8E96_314353D4097A65; Installed: Null; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: __WebControlPlugin_dll.92A5750A_B99C_4D18_8E96_314353D4097A65; Installed: Null; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: __SwiComponentCommon.11DACB83_28A7_4FA6_AF5B_C006E340C10165; Installed: Null; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: __SavShellExt.dll65; Installed: Null; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: __SavMain.exe66; Installed: Null; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: __SavProgress.exe65; Installed: Null; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: __DesktopMessaging.dll65; Installed: Null; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: __SavPlugin.dll65; Installed: Null; Request: Local; Action: Null
MSI (s) (30:78) [09:58:36:475]: Component: __DataControlManagement.dll65; Installed: Null; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Component: __DCManagement.dll65; Installed: Null; Request: Local; Action: Local
MSI (s) (30:78) [09:58:36:475]: Note: 1: 2205 2: 3: BindImage
MSI (s) (30:78) [09:58:36:475]: Note: 1: 2205 2: 3: ProgId
MSI (s) (30:78) [09:58:36:475]: Note: 1: 2205 2: 3: PublishComponent
MSI (s) (30:78) [09:58:36:475]: Note: 1: 2205 2: 3: SelfReg
MSI (s) (30:78) [09:58:36:475]: Note: 1: 2205 2: 3: Extension
MSI (s) (30:78) [09:58:36:475]: Note: 1: 2205 2: 3: Font
MSI (s) (30:78) [09:58:36:475]: Note: 1: 2205 2: 3: Class
MSI (s) (30:78) [09:58:36:476]: Note: 1: 2205 2: 3: TypeLib
Action start 9:58:36: InstallValidate.
MSI (s) (30:78) [09:58:36:476]: Note: 1: 2205 2: 3: _RemoveFilePath
MSI (s) (30:78) [09:58:36:489]: PROPERTY CHANGE: Modifying CostingComplete property. Its current value is '0'. Its new value: '1'.
MSI (s) (30:78) [09:58:36:489]: Note: 1: 2205 2: 3: BindImage
MSI (s) (30:78) [09:58:36:489]: Note: 1: 2205 2: 3: ProgId
MSI (s) (30:78) [09:58:36:489]: Note: 1: 2205 2: 3: PublishComponent
MSI (s) (30:78) [09:58:36:489]: Note: 1: 2205 2: 3: SelfReg
MSI (s) (30:78) [09:58:36:489]: Note: 1: 2205 2: 3: Extension
MSI (s) (30:78) [09:58:36:489]: Note: 1: 2205 2: 3: Font
MSI (s) (30:78) [09:58:36:489]: Note: 1: 2205 2: 3: Class
MSI (s) (30:78) [09:58:36:489]: Note: 1: 2205 2: 3: TypeLib
MSI (s) (30:78) [09:58:36:489]: Note: 1: 2727 2:
MSI (s) (30:78) [09:58:36:490]: Note: 1: 2727 2:
MSI (s) (30:78) [09:58:36:490]: Doing action: SetARPINSTALLLOCATION
Action ended 9:58:36: InstallValidate. Return value 1.
MSI (s) (30:78) [09:58:36:490]: PROPERTY CHANGE: Adding ARPINSTALLLOCATION property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 9:58:36: SetARPINSTALLLOCATION.
MSI (s) (30:78) [09:58:36:490]: Skipping action: SetSAVSERVICEUSER (condition is false)
MSI (s) (30:78) [09:58:36:490]: Doing action: RemoveExistingProducts
Action ended 9:58:36: SetARPINSTALLLOCATION. Return value 1.
MSI (s) (30:78) [09:58:36:490]: Note: 1: 2205 2: 3: Upgrade
MSI (s) (30:78) [09:58:36:490]: Note: 1: 2228 2: 3: Upgrade 4: SELECT `Attributes`, `ActionProperty`, `Remove` FROM `Upgrade`
Action start 9:58:36: RemoveExistingProducts.
MSI (s) (30:78) [09:58:36:490]: Doing action: InstallInitialize
Action ended 9:58:36: RemoveExistingProducts. Return value 0.
MSI (s) (30:78) [09:58:36:490]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (30:78) [09:58:36:490]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (30:78) [09:58:36:490]: BeginTransaction: Locking Server
MSI (s) (30:78) [09:58:36:491]: SRSetRestorePoint skipped for this transaction.
MSI (s) (30:78) [09:58:36:491]: Server not locked: locking for product {4BAF6F55-FFE4-4A3A-8367-CC2EBB0F11C3}
Action start 9:58:36: InstallInitialize.
MSI (s) (30:78) [09:58:37:097]: Doing action: SetUpdateFailed
Action ended 9:58:37: InstallInitialize. Return value 1.
MSI (s) (30:78) [09:58:37:099]: Note: 1: 2205 2: 3: MsiPatchCertificate
MSI (s) (30:78) [09:58:37:099]: LUA patching is disabled: missing MsiPatchCertificate table
Action start 9:58:37: SetUpdateFailed.
MSI (s) (30:78) [09:58:37:113]: Doing action: SetRestoreMovedFiles
Action ended 9:58:37: SetUpdateFailed. Return value 1.
MSI (s) (30:78) [09:58:37:115]: PROPERTY CHANGE: Adding RestoreMovedFiles property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 9:58:37: SetRestoreMovedFiles.
MSI (s) (30:78) [09:58:37:115]: Doing action: RestoreMovedFiles
Action ended 9:58:37: SetRestoreMovedFiles. Return value 1.
Action start 9:58:37: RestoreMovedFiles.
MSI (s) (30:78) [09:58:37:127]: Doing action: CheckRegForNullDACLs
Action ended 9:58:37: RestoreMovedFiles. Return value 1.
Action start 9:58:37: CheckRegForNullDACLs.
MSI (s) (30:78) [09:58:37:134]: Doing action: SetErrorScriptProperty
Action ended 9:58:37: CheckRegForNullDACLs. Return value 1.
MSI (s) (30:78) [09:58:37:135]: PROPERTY CHANGE: Adding RunErrorScript property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\""10.8.1.217"'.
Action start 9:58:37: SetErrorScriptProperty.
MSI (s) (30:78) [09:58:37:135]: Doing action: RunErrorScript
Action ended 9:58:37: SetErrorScriptProperty. Return value 1.
Action start 9:58:37: RunErrorScript.
MSI (s) (30:78) [09:58:37:140]: Doing action: ExtractClassicConfig
Action ended 9:58:37: RunErrorScript. Return value 1.
MSI (s) (30:A4) [09:58:37:144]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIB5A6.tmp, Entrypoint: ExtractClassicConfig
MSI (s) (30:70) [09:58:37:144]: Generating random cookie.
MSI (s) (30:70) [09:58:37:146]: Created Custom Action Server with PID 2248 (0x8C8).
MSI (s) (30:88) [09:58:37:171]: Running as a service.
MSI (s) (30:88) [09:58:37:172]: Hello, I'm your 32bit Impersonated custom action server.
Action start 9:58:37: ExtractClassicConfig.
MSI (s) (30:78) [09:58:37:313]: Doing action: PreInstallChecks
Action ended 9:58:37: ExtractClassicConfig. Return value 1.
MSI (s) (30:C4) [09:58:37:318]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIB653.tmp, Entrypoint: PreInstallChecks
Action start 9:58:37: PreInstallChecks.
MSI (s) (30:78) [09:58:37:452]: Skipping action: SetUpdateBegin (condition is false)
MSI (s) (30:78) [09:58:37:452]: Doing action: SetBootDriverStartupProperty
Action ended 9:58:37: PreInstallChecks. Return value 1.
MSI (s) (30:14) [09:58:37:458]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIB6E0.tmp, Entrypoint: SetBootDriverStartupProperty
Action start 9:58:37: SetBootDriverStartupProperty.
MSI (s) (30:78) [09:58:37:523]: Skipping action: CloseSavMainWindow (condition is false)
MSI (s) (30:78) [09:58:37:523]: Doing action: AllocateRegistrySpace
Action ended 9:58:37: SetBootDriverStartupProperty. Return value 1.
Action start 9:58:37: AllocateRegistrySpace.
MSI (s) (30:78) [09:58:37:525]: Doing action: ProcessComponents
Action ended 9:58:37: AllocateRegistrySpace. Return value 1.
Action start 9:58:37: ProcessComponents.
MSI (s) (30:78) [09:58:37:551]: Doing action: UnpublishComponents
Action ended 9:58:37: ProcessComponents. Return value 1.
MSI (s) (30:78) [09:58:37:551]: Note: 1: 2205 2: 3: PublishComponent
MSI (s) (30:78) [09:58:37:551]: Note: 1: 2228 2: 3: PublishComponent 4: SELECT `PublishComponent`.`ComponentId`, `PublishComponent`.`Qualifier`, `PublishComponent`.`AppData`, `Feature`, `Component`.`ComponentId`, `Component`.`RuntimeFlags` FROM `PublishComponent`, `Component`, `Feature` WHERE `PublishComponent`.`Component_` = `Component`.`Component` AND `PublishComponent`.`Feature_` = `Feature`.`Feature` AND (`Feature`.`Action` = 0 OR ((`Feature`.`Action` = NULL OR `Feature`.`Action` = 3) AND `Component`.`Action` = 0 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)))
Action start 9:58:37: UnpublishComponents.
MSI (s) (30:78) [09:58:37:552]: Doing action: MsiUnpublishAssemblies
Action ended 9:58:37: UnpublishComponents. Return value 0.
MSI (s) (30:78) [09:58:37:553]: Note: 1: 2205 2: 3: MsiAssembly
MSI (s) (30:78) [09:58:37:553]: Note: 1: 2228 2: 3: MsiAssembly 4: SELECT null, null, `Component`.`Component`, `Feature`, `Component`.`ComponentId`, `Component`.`RuntimeFlags` FROM `MsiAssembly`, `Component`, `Feature` WHERE `MsiAssembly`.`Component_` = `Component`.`Component` AND `MsiAssembly`.`Feature_` = `Feature`.`Feature` AND `MsiAssembly`.`File_Application` = null AND (`Feature`.`Action` = 0 OR ((`Feature`.`Action` = NULL OR `Feature`.`Action` = 3) AND `Component`.`Action` = 0 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)))
Action start 9:58:37: MsiUnpublishAssemblies.
MSI (s) (30:78) [09:58:37:553]: Doing action: UnpublishFeatures
Action ended 9:58:37: MsiUnpublishAssemblies. Return value 0.
Action start 9:58:37: UnpublishFeatures.
MSI (s) (30:78) [09:58:37:554]: Doing action: SchedSecureObjectsRollback
Action ended 9:58:37: UnpublishFeatures. Return value 1.
MSI (s) (30:A0) [09:58:37:558]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIB73F.tmp, Entrypoint: SchedSecureObjectsRollback
Action start 9:58:37: SchedSecureObjectsRollback.
SchedSecureObjectsRollback: Failed to store ACL rollback information with error 0x80070003 - continuing
SchedSecureObjectsRollback: Failed to store ACL rollback information with error 0x80070002 - continuing
SchedSecureObjectsRollback: Failed to store ACL rollback information with error 0x80070002 - continuing
SchedSecureObjectsRollback: Failed to store ACL rollback information with error 0x80070002 - continuing
MSI (s) (30:78) [09:58:37:638]: Skipping action: RollbackDisableServices (condition is false)
MSI (s) (30:78) [09:58:37:638]: Skipping action: DisableServices (condition is false)
MSI (s) (30:78) [09:58:37:638]: Doing action: SwcDisableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 9:58:37: SchedSecureObjectsRollback. Return value 1.
MSI (s) (30:CC) [09:58:37:643]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIB79D.tmp, Entrypoint: SwcDisableSwcServiceStart
Action start 9:58:37: SwcDisableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (30:78) [09:58:37:678]: Skipping action: SwiServiceUnregister.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (30:78) [09:58:37:678]: Skipping action: SwiServiceUnregister.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (30:78) [09:58:37:678]: Doing action: StopServices
Action ended 9:58:37: SwcDisableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
Action start 9:58:37: StopServices.
MSI (s) (30:78) [09:58:37:682]: Skipping action: DeleteSwiFc.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (30:78) [09:58:37:682]: Skipping action: DeleteSwiFc.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (30:78) [09:58:37:682]: Skipping action: DeleteScfDotDat.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (30:78) [09:58:37:682]: Skipping action: DeleteScfDotDat.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (30:78) [09:58:37:682]: Skipping action: SwiCalloutUninstallCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (30:78) [09:58:37:682]: Skipping action: SwiFilterUninstallCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (30:78) [09:58:37:682]: Skipping action: SwiFilterUninstall.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (30:78) [09:58:37:682]: Skipping action: SwiCalloutUninstall.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (30:78) [09:58:37:682]: Skipping action: ForceStopSAVService (condition is false)
MSI (s) (30:78) [09:58:37:682]: Doing action: WaitForSAVService
Action ended 9:58:37: StopServices. Return value 1.
Action start 9:58:37: WaitForSAVService.
MSI (s) (30:78) [09:58:37:692]: Skipping action: CleanUpSsspUserAccount.SetProperty (condition is false)
MSI (s) (30:78) [09:58:37:692]: Skipping action: CleanUpSsspUserAccountRollback.SetProperty (condition is false)
MSI (s) (30:78) [09:58:37:692]: Skipping action: CleanUpSsspUserAccountRollback (condition is false)
MSI (s) (30:78) [09:58:37:692]: Skipping action: CleanUpSsspUserAccount (condition is false)
MSI (s) (30:78) [09:58:37:692]: Skipping action: RemoveSIPSSubmitterUserAccount.SetProperty (condition is false)
MSI (s) (30:78) [09:58:37:692]: Skipping action: RemoveSIPSSubmitterUserAccountRollback.SetProperty (condition is false)
MSI (s) (30:78) [09:58:37:692]: Skipping action: RemoveSIPSSubmitterUserAccountRollback (condition is false)
MSI (s) (30:78) [09:58:37:692]: Skipping action: RemoveSIPSSubmitterUserAccount (condition is false)
MSI (s) (30:78) [09:58:37:692]: Skipping action: RemoveTamperProtectionRegKeyRollback (condition is false)
MSI (s) (30:78) [09:58:37:692]: Skipping action: RemoveTamperProtectionRegKey (condition is false)
MSI (s) (30:78) [09:58:37:692]: Doing action: DeleteServices
Action ended 9:58:37: WaitForSAVService. Return value 1.
Action start 9:58:37: DeleteServices.
MSI (s) (30:78) [09:58:37:695]: Skipping action: RemoveSophosCleanupService (condition is false)
MSI (s) (30:78) [09:58:37:695]: Doing action: UnregisterComPlus
Action ended 9:58:37: DeleteServices. Return value 1.
MSI (s) (30:78) [09:58:37:695]: Note: 1: 2205 2: 3: Complus
MSI (s) (30:78) [09:58:37:695]: Note: 1: 2228 2: 3: Complus 4: SELECT `ComponentId`, `FileName`, `Component`.`Directory_`, `ExpType`, `Component`.`Action`, `Component`.`Installed` FROM `Complus`, `Component`, `File` WHERE `Complus`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND `Action` = 0
Action start 9:58:37: UnregisterComPlus.
MSI (s) (30:78) [09:58:37:696]: Doing action: SelfUnregModules
Action ended 9:58:37: UnregisterComPlus. Return value 0.
MSI (s) (30:78) [09:58:37:696]: Note: 1: 2205 2: 3: SelfReg
MSI (s) (30:78) [09:58:37:696]: Note: 1: 2228 2: 3: SelfReg 4: Select `File`.`FileName`,`Component`.`Directory_`,`Component`.`Installed`, `File`.`Component_`,`SelfReg`.`File_` From `SelfReg`, `File`, `Component` Where `SelfReg`.`File_` = `File`.`File` And `File`.`Component_` = `Component`.`Component` And `Component`.`Action` = 0
Action start 9:58:37: SelfUnregModules.
MSI (s) (30:78) [09:58:37:696]: Doing action: UnregisterTypeLibraries
Action ended 9:58:37: SelfUnregModules. Return value 1.
MSI (s) (30:78) [09:58:37:697]: Note: 1: 2205 2: 3: TypeLib
MSI (s) (30:78) [09:58:37:697]: Note: 1: 2228 2: 3: TypeLib 4: SELECT `LibID`, `TypeLib`.`Version`, `TypeLib`.`Language`, `TypeLib`.`Directory_`, `FileName`, `Component`.`Directory_`, `Component`.`Action`, `Component`.`Installed`, `BinaryType`, `Component`.`Component`, `Component`.`Attributes` FROM `TypeLib`, `Component`, `File` WHERE `TypeLib`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND (`Component`.`Action`=0)
Action start 9:58:37: UnregisterTypeLibraries.
MSI (s) (30:78) [09:58:37:697]: Doing action: RemoveODBC
Action ended 9:58:37: UnregisterTypeLibraries. Return value 0.
MSI (s) (30:78) [09:58:37:698]: Note: 1: 2205 2: 3: ODBCDataSource
MSI (s) (30:78) [09:58:37:698]: Note: 1: 2228 2: 3: ODBCDataSource 4: SELECT `DataSource`,`ComponentId`,`DriverDescription`,`Description`,`Registration` FROM `ODBCDataSource`, `Component` WHERE `Component_` = `Component` AND `Component`.`Action` = 0 AND `BinaryType` = ?
MSI (s) (30:78) [09:58:37:698]: Note: 1: 2205 2: 3: ODBCDataSource
MSI (s) (30:78) [09:58:37:698]: Note: 1: 2228 2: 3: ODBCDataSource 4: SELECT `DataSource`,`ComponentId`,`DriverDescription`,`Description`,`Registration` FROM `ODBCDataSource`, `Component` WHERE `Component_` = `Component` AND `Component`.`Action` = 0 AND `BinaryType` = ?
MSI (s) (30:78) [09:58:37:698]: Note: 1: 2205 2: 3: ODBCTranslator
MSI (s) (30:78) [09:58:37:698]: Note: 1: 2228 2: 3: ODBCTranslator 4: SELECT `Translator`,`Component`.`ComponentId`,`Description`, `RuntimeFlags`, `Component`.`Attributes` FROM `ODBCTranslator`, `Component` WHERE `Component_` = `Component` AND `Component`.`ActionRequest` = 0 AND `BinaryType` = ?
MSI (s) (30:78) [09:58:37:698]: Note: 1: 2205 2: 3: ODBCTranslator
MSI (s) (30:78) [09:58:37:698]: Note: 1: 2228 2: 3: ODBCTranslator 4: SELECT `Translator`,`Component`.`ComponentId`,`Description`, `RuntimeFlags`, `Component`.`Attributes` FROM `ODBCTranslator`, `Component` WHERE `Component_` = `Component` AND `Component`.`ActionRequest` = 0 AND `BinaryType` = ?
MSI (s) (30:78) [09:58:37:698]: Note: 1: 2205 2: 3: ODBCDriver
MSI (s) (30:78) [09:58:37:698]: Note: 1: 2228 2: 3: ODBCDriver 4: SELECT `Driver`,`ComponentId`,`Description`, `RuntimeFlags`, `Component`.`Attributes` FROM `ODBCDriver`, `Component` WHERE `Component_` = `Component` AND `Component`.`ActionRequest` = 0 AND `BinaryType` = ?
MSI (s) (30:78) [09:58:37:698]: Note: 1: 2205 2: 3: ODBCDriver
MSI (s) (30:78) [09:58:37:698]: Note: 1: 2228 2: 3: ODBCDriver 4: SELECT `Driver`,`ComponentId`,`Description`, `RuntimeFlags`, `Component`.`Attributes` FROM `ODBCDriver`, `Component` WHERE `Component_` = `Component` AND `Component`.`ActionRequest` = 0 AND `BinaryType` = ?
MSI (s) (30:78) [09:58:37:698]: Note: 1: 2711 2: ODBCDriverManager
Action start 9:58:37: RemoveODBC.
MSI (s) (30:78) [09:58:37:699]: Note: 1: 2711 2: ODBCDriverManager64
MSI (s) (30:78) [09:58:37:699]: Doing action: UnregisterFonts
Action ended 9:58:37: RemoveODBC. Return value 1.
MSI (s) (30:78) [09:58:37:700]: Note: 1: 2205 2: 3: Font
MSI (s) (30:78) [09:58:37:700]: Note: 1: 2228 2: 3: Font 4: SELECT `FontTitle`, `FileName`, `Directory_`, `Installed`From `Font`, `FileAction` Where `Font`.`File_` = `FileAction`.`File` And `FileAction`.`Action` = 0 ORDER BY `FileAction`.`Directory_`
Action start 9:58:37: UnregisterFonts.
MSI (s) (30:78) [09:58:37:700]: Skipping action: UninstallSecurityCenter (condition is false)
MSI (s) (30:78) [09:58:37:700]: Doing action: RemoveRegistryValues
Action ended 9:58:37: UnregisterFonts. Return value 1.
Action start 9:58:37: RemoveRegistryValues.
MSI (s) (30:78) [09:58:37:732]: Skipping action: SwcPauseForUnload.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false)
MSI (s) (30:78) [09:58:37:732]: Doing action: SwcDeleteRegProp.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 9:58:37: RemoveRegistryValues. Return value 1.
Action start 9:58:37: SwcDeleteRegProp.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (30:78) [09:58:37:732]: Skipping action: SwcDeleteReg.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false)
MSI (s) (30:78) [09:58:37:732]: Skipping action: SwcService_unreg_rb.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false)
MSI (s) (30:78) [09:58:37:732]: Skipping action: SwcService_unregister.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false)
MSI (s) (30:78) [09:58:37:732]: Skipping action: Swc_postcleanup.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false)
MSI (s) (30:78) [09:58:37:732]: Doing action: Swc_postupgrade.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 9:58:37: SwcDeleteRegProp.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
Action start 9:58:37: Swc_postupgrade.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (30:78) [09:58:37:734]: Doing action: ConfigureEventManifestUnregister
Action ended 9:58:37: Swc_postupgrade.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
MSI (s) (30:C4) [09:58:37:736]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIB7FC.tmp, Entrypoint: ConfigureEventManifestUnregister
Action start 9:58:37: ConfigureEventManifestUnregister.
MSI (s) (30:78) [09:58:37:868]: Doing action: UnregisterClassInfo
Action ended 9:58:37: ConfigureEventManifestUnregister. Return value 1.
MSI (s) (30:78) [09:58:37:868]: Note: 1: 2205 2: 3: Class
MSI (s) (30:78) [09:58:37:868]: Note: 1: 2228 2: 3: Class 4: SELECT `BinaryType`, `CLSID`, `ProgId_Default`, `Class`.`Description`, `Context`, `Feature_`, `ComponentId`, `Component`, `Class`.`Attributes`, `AppId_`, `FileTypeMask`, `Icon_`, `IconIndex`, `DefInprocHandler`, `Argument`, `Component`.`RuntimeFlags`, `FileName`, `Component`.`Directory_`, `Component`.`Action`, `Component`.`Installed`, `Feature`.`Action`, `Component`.`Attributes` FROM `Class`, `Component`, `File`, `Feature` WHERE `Feature_` = `Feature` AND `Class`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND (`Feature`.`Action` = 0 OR (`Feature`.`Action` = 4 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)) OR ((`Feature`.`Action` = NULL OR `Feature`.`Action` = 3) AND `Component`.`Action` = 0 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)))
Action start 9:58:37: UnregisterClassInfo.
MSI (s) (30:78) [09:58:37:868]: Doing action: UnregisterExtensionInfo
Action ended 9:58:37: UnregisterClassInfo. Return value 0.
MSI (s) (30:78) [09:58:37:868]: Note: 1: 2205 2: 3: Extension
MSI (s) (30:78) [09:58:37:868]: Note: 1: 2228 2: 3: Extension 4: SELECT `Extension`, `BinaryType`, `ProgId_`, null, null, `MIME_`, `Feature_`, `ComponentId`, `Component`.`RuntimeFlags`, `Component`.`Component`, `Component`.`Attributes`, `FileName`, `Component`.`Directory_`, `Component`.`Action`, `Component`.`Installed`, `Feature`.`Action` FROM `Extension`, `Component`, `File`, `Feature` WHERE `Feature_` = `Feature` AND `Extension`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND (`Feature`.`Action` = 0 OR (`Feature`.`Action` = 4 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)) OR ((`Feature`.`Action` = NULL OR `Feature`.`Action` = 3) AND `Component`.`Action` = 0 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)))
Action start 9:58:37: UnregisterExtensionInfo.
MSI (s) (30:78) [09:58:37:868]: Doing action: UnregisterProgIdInfo
Action ended 9:58:37: UnregisterExtensionInfo. Return value 0.
MSI (s) (30:78) [09:58:37:869]: Note: 1: 2205 2: 3: ProgId
MSI (s) (30:78) [09:58:37:869]: Note: 1: 2228 2: 3: ProgId 4: SELECT DISTINCT `BinaryType`, `ProgId`, `Class_`, `ProgId`.`Description`, `ProgId`.`Icon_`, `ProgId`.`IconIndex`, null, `Component`.`RuntimeFlags` , `Component`.`Component`, `Component`.`Attributes` FROM `ProgId`, `Class`, `Feature`, `Component` WHERE `ProgId`.`Class_` = `Class`.`CLSID` AND `Class`.`Feature_` = `Feature` AND `Class`.`Component_` = `Component` AND (`Feature`.`Action` = 0 OR (`Feature`.`Action` = 4 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)) OR ((`Feature`.`Action` = NULL OR `Feature`.`Action` = 3) AND `Component`.`Action` = 0 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)))
Action start 9:58:37: UnregisterProgIdInfo.
MSI (s) (30:78) [09:58:37:869]: Doing action: UnregisterMIMEInfo
Action ended 9:58:37: UnregisterProgIdInfo. Return value 0.
MSI (s) (30:78) [09:58:37:869]: Note: 1: 2205 2: 3: MIME
MSI (s) (30:78) [09:58:37:869]: Note: 1: 2228 2: 3: MIME 4: SELECT `BinaryType`, `ContentType`, `Extension`.`Extension`, `MIME`.`CLSID`, `Component`.`RuntimeFlags`, `Component`.`Component`, `Component`.`Attributes` FROM `MIME`, `Extension`, `Feature`, `Component` WHERE `MIME`.`Extension_` = `Extension`.`Extension` AND `Feature_` = `Feature` AND `Extension`.`Component_` = `Component` AND (`Feature`.`Action` = 0 OR (`Feature`.`Action` = 4 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)) OR ((`Feature`.`Action` = NULL OR `Feature`.`Action` = 3) AND `Component`.`Action` = 0 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)))
Action start 9:58:37: UnregisterMIMEInfo.
MSI (s) (30:78) [09:58:37:869]: Doing action: RemoveIniValues
Action ended 9:58:37: UnregisterMIMEInfo. Return value 0.
MSI (s) (30:78) [09:58:37:869]: Note: 1: 2205 2: 3: IniFile
MSI (s) (30:78) [09:58:37:869]: Note: 1: 2228 2: 3: IniFile 4: SELECT `FileName`,`IniFile`.`DirProperty`,`Section`,`IniFile`.`Key`,`IniFile`.`Value`,`IniFile`.`Action` FROM `IniFile`, `Component` WHERE `Component`=`Component_` AND `Component`.`Action`=0 ORDER BY `FileName`,`Section`
Action start 9:58:37: RemoveIniValues.
MSI (s) (30:78) [09:58:37:869]: Doing action: RemoveShortcuts
Action ended 9:58:37: RemoveIniValues. Return value 1.
Action start 9:58:37: RemoveShortcuts.
MSI (s) (30:78) [09:58:37:869]: Doing action: RemoveEnvironmentStrings
Action ended 9:58:37: RemoveShortcuts. Return value 1.
MSI (s) (30:78) [09:58:37:870]: Note: 1: 2205 2: 3: Environment
MSI (s) (30:78) [09:58:37:870]: Note: 1: 2228 2: 3: Environment 4: SELECT `Name`,`Value` FROM `Environment`,`Component` WHERE `Component_`=`Component` AND (`Component`.`Action` = 0)
Action start 9:58:37: RemoveEnvironmentStrings.
MSI (s) (30:78) [09:58:37:870]: Doing action: SetRemoveSAVIProperty
Action ended 9:58:37: RemoveEnvironmentStrings. Return value 1.
MSI (s) (30:78) [09:58:37:870]: PROPERTY CHANGE: Modifying RemoveSAVI property. Its current value is 'INSTALLDIR'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 9:58:37: SetRemoveSAVIProperty.
MSI (s) (30:78) [09:58:37:870]: Skipping action: RemoveSAVI (condition is false)
MSI (s) (30:78) [09:58:37:870]: Doing action: SetUninstallDriverFilesOnUpdateProperty
Action ended 9:58:37: SetRemoveSAVIProperty. Return value 1.
MSI (s) (30:78) [09:58:37:870]: PROPERTY CHANGE: Adding UninstallDriverFilesOnUpdate property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF'.
Action start 9:58:37: SetUninstallDriverFilesOnUpdateProperty.
MSI (s) (30:78) [09:58:37:870]: Doing action: SetUninstallBootDriverProperty
Action ended 9:58:37: SetUninstallDriverFilesOnUpdateProperty. Return value 1.
MSI (s) (30:78) [09:58:37:870]: PROPERTY CHANGE: Adding UninstallBootDriver property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF'.
Action start 9:58:37: SetUninstallBootDriverProperty.
MSI (s) (30:78) [09:58:37:870]: Doing action: SetUninstallBootDriverOnUpdateProperty
Action ended 9:58:37: SetUninstallBootDriverProperty. Return value 1.
MSI (s) (30:78) [09:58:37:871]: PROPERTY CHANGE: Adding UninstallBootDriverOnUpdate property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF'.
Action start 9:58:37: SetUninstallBootDriverOnUpdateProperty.
MSI (s) (30:78) [09:58:37:871]: Doing action: SetUninstallKMSDriverProperty
Action ended 9:58:37: SetUninstallBootDriverOnUpdateProperty. Return value 1.
MSI (s) (30:78) [09:58:37:871]: PROPERTY CHANGE: Adding UninstallKMSDriver property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SKMSCAN.INF'.
Action start 9:58:37: SetUninstallKMSDriverProperty.
MSI (s) (30:78) [09:58:37:871]: Doing action: SetUninstallKMSDriverOnUpdateProperty
Action ended 9:58:37: SetUninstallKMSDriverProperty. Return value 1.
MSI (s) (30:78) [09:58:37:871]: PROPERTY CHANGE: Adding UninstallKMSDriverOnUpdate property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SKMSCAN.INF'.
Action start 9:58:37: SetUninstallKMSDriverOnUpdateProperty.
MSI (s) (30:78) [09:58:37:871]: Doing action: SetUninstallDriverFilesVistaProperty
Action ended 9:58:37: SetUninstallKMSDriverOnUpdateProperty. Return value 1.
MSI (s) (30:78) [09:58:37:871]: PROPERTY CHANGE: Adding UninstallDriverFilesVista property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF'.
Action start 9:58:37: SetUninstallDriverFilesVistaProperty.
MSI (s) (30:78) [09:58:37:871]: Doing action: SetUninstallClassFilterVistaProperty
Action ended 9:58:37: SetUninstallDriverFilesVistaProperty. Return value 1.
MSI (s) (30:78) [09:58:37:871]: PROPERTY CHANGE: Adding UninstallClassFilterVista property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sdcfilter.inf'.
Action start 9:58:37: SetUninstallClassFilterVistaProperty.
MSI (s) (30:78) [09:58:37:872]: Doing action: SetClassFilterPresentProperty
Action ended 9:58:37: SetUninstallClassFilterVistaProperty. Return value 1.
MSI (s) (30:1C) [09:58:37:873]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIB889.tmp, Entrypoint: SetClassFilterPresentProperty
Action start 9:58:37: SetClassFilterPresentProperty.
MSI (s) (30:78) [09:58:37:941]: Doing action: CheckUninstallDrivers
Action ended 9:58:37: SetClassFilterPresentProperty. Return value 1.
Action start 9:58:37: CheckUninstallDrivers.
MSI (s) (30:78) [09:58:37:946]: Skipping action: UninstallDriverFilesOnUpdate (condition is false)
MSI (s) (30:78) [09:58:37:946]: Skipping action: UninstallDriverFiles64OnUpdate (condition is false)
MSI (s) (30:78) [09:58:37:946]: Skipping action: UninstallDriverFiles (condition is false)
MSI (s) (30:78) [09:58:37:946]: Skipping action: UninstallDriverFiles64 (condition is false)
MSI (s) (30:78) [09:58:37:946]: Skipping action: UninstallDriverFilesVista (condition is false)
MSI (s) (30:78) [09:58:37:946]: Skipping action: UninstallDriverFiles64Vista (condition is false)
MSI (s) (30:78) [09:58:37:946]: Skipping action: UninstallBootDriverOnUpdate (condition is false)
MSI (s) (30:78) [09:58:37:946]: Skipping action: UninstallBootDriverOnUpdate64 (condition is false)
MSI (s) (30:78) [09:58:37:946]: Skipping action: UninstallBootDriver (condition is false)
MSI (s) (30:78) [09:58:37:946]: Skipping action: UninstallBootDriver64 (condition is false)
MSI (s) (30:78) [09:58:37:946]: Skipping action: UninstallClassFilterCleanReg (condition is false)
MSI (s) (30:78) [09:58:37:946]: Skipping action: UninstallClassFilter64 (condition is false)
MSI (s) (30:78) [09:58:37:946]: Skipping action: UninstallClassFilter64Vista (condition is false)
MSI (s) (30:78) [09:58:37:946]: Skipping action: UninstallClassFilter (condition is false)
MSI (s) (30:78) [09:58:37:946]: Skipping action: UninstallClassFilterVista (condition is false)
MSI (s) (30:78) [09:58:37:946]: Skipping action: UninstallKMSDriver (condition is false)
MSI (s) (30:78) [09:58:37:946]: Skipping action: UninstallKMSDriverOnUpdate (condition is false)
MSI (s) (30:78) [09:58:37:946]: Skipping action: UnregisterTamperProtectionControlX64 (condition is false)
MSI (s) (30:78) [09:58:37:946]: Skipping action: UnregisterSavShellExtX64 (condition is false)
MSI (s) (30:78) [09:58:37:946]: Skipping action: UnregisterSophosOfficeAV (condition is false)
MSI (s) (30:78) [09:58:37:946]: Skipping action: UnregisterSophosOfficeAVX64 (condition is false)
MSI (s) (30:78) [09:58:37:946]: Doing action: SetUninstallDeviceControlProperty
Action ended 9:58:37: CheckUninstallDrivers. Return value 1.
MSI (s) (30:78) [09:58:37:947]: PROPERTY CHANGE: Adding UninstallDeviceControl property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\Sophos Anti-Virus\Config"'.
Action start 9:58:37: SetUninstallDeviceControlProperty.
MSI (s) (30:78) [09:58:37:947]: Skipping action: UninstallDeviceControl (condition is false)
MSI (s) (30:78) [09:58:37:947]: Doing action: SetDeleteDriverKeysProperty
Action ended 9:58:37: SetUninstallDeviceControlProperty. Return value 1.
MSI (s) (30:78) [09:58:37:947]: PROPERTY CHANGE: Adding DeleteDriverKeys property. Its value is '0'.
Action start 9:58:37: SetDeleteDriverKeysProperty.
MSI (s) (30:78) [09:58:37:948]: Skipping action: DeleteDriverKeys (condition is false)
MSI (s) (30:78) [09:58:37:948]: Skipping action: DeleteSKMScanDriverKeys (condition is false)
MSI (s) (30:78) [09:58:37:948]: Skipping action: DeleteSDCFilterDriverKeys (condition is false)
MSI (s) (30:78) [09:58:37:948]: Skipping action: DeleteSDCFilterDriverFiles (condition is false)
MSI (s) (30:78) [09:58:37:948]: Doing action: SetUnregisterBufferOverflowProtection
Action ended 9:58:37: SetDeleteDriverKeysProperty. Return value 1.
MSI (s) (30:78) [09:58:37:948]: PROPERTY CHANGE: Adding UnregisterBufferOverflowProtection property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 9:58:37: SetUnregisterBufferOverflowProtection.
MSI (s) (30:78) [09:58:37:948]: Skipping action: UnregisterBufferOverflowProtection (condition is false)
MSI (s) (30:78) [09:58:37:948]: Doing action: SetDeleteNonEngineFilesProperty
Action ended 9:58:37: SetUnregisterBufferOverflowProtection. Return value 1.
MSI (s) (30:78) [09:58:37:948]: PROPERTY CHANGE: Adding DeleteNonEngineFiles property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 9:58:37: SetDeleteNonEngineFilesProperty.
MSI (s) (30:78) [09:58:37:949]: Skipping action: DeleteNonEngineFiles (condition is false)
MSI (s) (30:78) [09:58:37:949]: Doing action: SetDeleteOtherFilesProperty
Action ended 9:58:37: SetDeleteNonEngineFilesProperty. Return value 1.
MSI (s) (30:78) [09:58:37:949]: PROPERTY CHANGE: Adding DeleteOtherFiles property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 9:58:37: SetDeleteOtherFilesProperty.
MSI (s) (30:78) [09:58:37:949]: Skipping action: DeleteOtherFiles (condition is false)
MSI (s) (30:78) [09:58:37:949]: Skipping action: CreateRebootTestFile (condition is false)
MSI (s) (30:78) [09:58:37:949]: Skipping action: CheckCTAInstalled (condition is false)
MSI (s) (30:78) [09:58:37:949]: Doing action: RemoveDuplicateFiles
Action ended 9:58:37: SetDeleteOtherFilesProperty. Return value 1.
Action start 9:58:37: RemoveDuplicateFiles.
MSI (s) (30:78) [09:58:37:949]: Skipping action: EnableWindowsDefender (condition is false)
MSI (s) (30:78) [09:58:37:949]: Skipping action: SwiUpdateCleanup.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (30:78) [09:58:37:949]: Skipping action: SwiUpdateCleanup.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (30:78) [09:58:37:949]: Skipping action: Win8Cleanup.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (30:78) [09:58:37:949]: Skipping action: SwiUpdateCleanup64.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (30:78) [09:58:37:949]: Skipping action: SwiUpdateCleanup64.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (30:78) [09:58:37:949]: Doing action: RemoveFiles
Action ended 9:58:37: RemoveDuplicateFiles. Return value 1.
Action start 9:58:37: RemoveFiles.
MSI (s) (30:78) [09:58:37:950]: Doing action: RemoveFolders
Action ended 9:58:37: RemoveFiles. Return value 1.
Action start 9:58:37: RemoveFolders.
MSI (s) (30:78) [09:58:37:950]: Doing action: CreateFolders
Action ended 9:58:37: RemoveFolders. Return value 1.
Action start 9:58:37: CreateFolders.
MSI (s) (30:78) [09:58:37:951]: Doing action: SetDeleteIDEsProperty
Action ended 9:58:37: CreateFolders. Return value 1.
MSI (s) (30:78) [09:58:37:951]: PROPERTY CHANGE: Modifying DeleteIDEs property. Its current value is '0'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 9:58:37: SetDeleteIDEsProperty.
MSI (s) (30:78) [09:58:37:951]: Doing action: DeleteIDEs
Action ended 9:58:37: SetDeleteIDEsProperty. Return value 1.
Action start 9:58:37: DeleteIDEs.
MSI (s) (30:78) [09:58:37:955]: Doing action: SetDeleteBDLsProperty
Action ended 9:58:37: DeleteIDEs. Return value 1.
MSI (s) (30:78) [09:58:37:955]: PROPERTY CHANGE: Modifying DeleteBDLs property. Its current value is '0'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 9:58:37: SetDeleteBDLsProperty.
MSI (s) (30:78) [09:58:37:955]: Doing action: DeleteBDLs
Action ended 9:58:37: SetDeleteBDLsProperty. Return value 1.
Action start 9:58:37: DeleteBDLs.
MSI (s) (30:78) [09:58:37:958]: Doing action: SetDeleteHIPSConfigProperty
Action ended 9:58:37: DeleteBDLs. Return value 1.
MSI (s) (30:78) [09:58:37:959]: PROPERTY CHANGE: Adding DeleteHIPSConfig property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 9:58:37: SetDeleteHIPSConfigProperty.
MSI (s) (30:78) [09:58:37:959]: Doing action: DeleteHIPSConfig
Action ended 9:58:37: SetDeleteHIPSConfigProperty. Return value 1.
Action start 9:58:37: DeleteHIPSConfig.
MSI (s) (30:78) [09:58:37:962]: Doing action: SetRemoveFilesOnUpgradeProperty
Action ended 9:58:37: DeleteHIPSConfig. Return value 1.
MSI (s) (30:78) [09:58:37:962]: PROPERTY CHANGE: Adding RemoveFilesOnUpgrade property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 9:58:37: SetRemoveFilesOnUpgradeProperty.
MSI (s) (30:78) [09:58:37:963]: Skipping action: RemoveFilesOnUpgrade (condition is false)
MSI (s) (30:78) [09:58:37:963]: Doing action: SetRollbackForceProperty
Action ended 9:58:37: SetRemoveFilesOnUpgradeProperty. Return value 1.
MSI (s) (30:78) [09:58:37:963]: PROPERTY CHANGE: Adding RollbackForceDeleteFiles property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 9:58:37: SetRollbackForceProperty.
MSI (s) (30:78) [09:58:37:963]: Doing action: RollbackForceDeleteFiles
Action ended 9:58:37: SetRollbackForceProperty. Return value 1.
Action start 9:58:37: RollbackForceDeleteFiles.
MSI (s) (30:78) [09:58:37:967]: Doing action: SetRollbackForceUserProperty
Action ended 9:58:37: RollbackForceDeleteFiles. Return value 1.
MSI (s) (30:78) [09:58:37:967]: PROPERTY CHANGE: Adding RollbackForceDeleteUserPlugin property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 9:58:37: SetRollbackForceUserProperty.
MSI (s) (30:78) [09:58:37:968]: Doing action: RollbackForceDeleteUserPlugin
Action ended 9:58:37: SetRollbackForceUserProperty. Return value 1.
Action start 9:58:37: RollbackForceDeleteUserPlugin.
MSI (s) (30:78) [09:58:37:971]: Doing action: SetRollbackOtherFilesProperty
Action ended 9:58:37: RollbackForceDeleteUserPlugin. Return value 1.
MSI (s) (30:78) [09:58:37:971]: PROPERTY CHANGE: Modifying RollbackOtherFiles property. Its current value is '0'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 9:58:37: SetRollbackOtherFilesProperty.
MSI (s) (30:78) [09:58:37:971]: Doing action: RollbackOtherFiles
Action ended 9:58:37: SetRollbackOtherFilesProperty. Return value 1.
Action start 9:58:37: RollbackOtherFiles.
MSI (s) (30:78) [09:58:37:974]: Doing action: SetRollbackUpdateSavAdapterDllProperty
Action ended 9:58:37: RollbackOtherFiles. Return value 1.
MSI (s) (30:78) [09:58:37:974]: PROPERTY CHANGE: Adding RollbackUpdateSavAdapterDll property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 9:58:37: SetRollbackUpdateSavAdapterDllProperty.
MSI (s) (30:78) [09:58:37:974]: Doing action: RollbackUpdateSavAdapterDll
Action ended 9:58:37: SetRollbackUpdateSavAdapterDllProperty. Return value 1.
Action start 9:58:37: RollbackUpdateSavAdapterDll.
MSI (s) (30:78) [09:58:37:977]: Doing action: SetUpdateSavAdapterDllProperty
Action ended 9:58:37: RollbackUpdateSavAdapterDll. Return value 1.
MSI (s) (30:78) [09:58:37:977]: PROPERTY CHANGE: Adding UpdateSavAdapterDll property. Its value is ';10.8.1.217;'.
Action start 9:58:37: SetUpdateSavAdapterDllProperty.
MSI (s) (30:78) [09:58:37:977]: Doing action: UpdateSavAdapterDll
Action ended 9:58:37: SetUpdateSavAdapterDllProperty. Return value 1.
Action start 9:58:37: UpdateSavAdapterDll.
MSI (s) (30:78) [09:58:37:980]: Doing action: SetRollbackUpdateDesktopMessagingProperty
Action ended 9:58:37: UpdateSavAdapterDll. Return value 1.
MSI (s) (30:78) [09:58:37:980]: PROPERTY CHANGE: Adding RollbackUpdateDesktopMessaging property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 9:58:37: SetRollbackUpdateDesktopMessagingProperty.
MSI (s) (30:78) [09:58:37:980]: Doing action: RollbackUpdateDesktopMessaging
Action ended 9:58:37: SetRollbackUpdateDesktopMessagingProperty. Return value 1.
Action start 9:58:37: RollbackUpdateDesktopMessaging.
MSI (s) (30:78) [09:58:37:983]: Doing action: SetUpdateDesktopMessagingProperty
Action ended 9:58:37: RollbackUpdateDesktopMessaging. Return value 1.
MSI (s) (30:78) [09:58:37:983]: PROPERTY CHANGE: Adding UpdateDesktopMessaging property. Its value is ';10.8.1.217;'.
Action start 9:58:37: SetUpdateDesktopMessagingProperty.
MSI (s) (30:78) [09:58:37:984]: Doing action: UpdateDesktopMessaging
Action ended 9:58:37: SetUpdateDesktopMessagingProperty. Return value 1.
Action start 9:58:37: UpdateDesktopMessaging.
MSI (s) (30:78) [09:58:37:986]: Doing action: SetInitialDriverProperty
Action ended 9:58:37: UpdateDesktopMessaging. Return value 1.
Action start 9:58:37: SetInitialDriverProperty.
MSI (s) (30:78) [09:58:37:987]: Doing action: SetInstallDriverProperty
Action ended 9:58:37: SetInitialDriverProperty. Return value 1.
MSI (s) (30:94) [09:58:37:988]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIB8F7.tmp, Entrypoint: SetDriverProperty
MSI (s) (30!A4) [09:58:38:023]: PROPERTY CHANGE: Modifying DRIVERVERSION property. Its current value is '0'. Its new value: 'WIN7_AMD64'.
MSI (s) (30!A4) [09:58:38:023]: PROPERTY CHANGE: Modifying BOOTDRIVERSIGNED property. Its current value is '0'. Its new value: '1'.
Action start 9:58:37: SetInstallDriverProperty.
MSI (s) (30:78) [09:58:38:024]: Doing action: SetProcessorProperties
Action ended 9:58:38: SetInstallDriverProperty. Return value 1.
MSI (s) (30:88) [09:58:38:026]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIB918.tmp, Entrypoint: SetProcessorProperties
MSI (s) (30!54) [09:58:38:075]: PROPERTY CHANGE: Modifying PROCESSOR_NX_ENABLED property. Its current value is '0'. Its new value: '1'.
Action start 9:58:38: SetProcessorProperties.
MSI (s) (30:78) [09:58:38:079]: Doing action: SetCopyOtherFilesProperty
Action ended 9:58:38: SetProcessorProperties. Return value 1.
MSI (s) (30:78) [09:58:38:080]: PROPERTY CHANGE: Adding CopyOtherFiles property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\""WIN7_AMD64"'.
Action start 9:58:38: SetCopyOtherFilesProperty.
MSI (s) (30:78) [09:58:38:081]: Doing action: CopyOtherFiles
Action ended 9:58:38: SetCopyOtherFilesProperty. Return value 1.
Action start 9:58:38: CopyOtherFiles.
MSI (s) (30:78) [09:58:38:091]: Doing action: SetForceDeleteUserPluginProperty
Action ended 9:58:38: CopyOtherFiles. Return value 1.
MSI (s) (30:78) [09:58:38:093]: PROPERTY CHANGE: Adding ForceDeleteUserPlugin property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 9:58:38: SetForceDeleteUserPluginProperty.
MSI (s) (30:78) [09:58:38:093]: Skipping action: ForceDeleteUserPlugin (condition is false)
MSI (s) (30:78) [09:58:38:093]: Doing action: SetRegisterBufferOverflowProtection
Action ended 9:58:38: SetForceDeleteUserPluginProperty. Return value 1.
MSI (s) (30:78) [09:58:38:094]: PROPERTY CHANGE: Adding RegisterBufferOverflowProtection property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 9:58:38: SetRegisterBufferOverflowProtection.
MSI (s) (30:78) [09:58:38:095]: Doing action: RegisterBufferOverflowProtection
Action ended 9:58:38: SetRegisterBufferOverflowProtection. Return value 1.
Action start 9:58:38: RegisterBufferOverflowProtection.
MSI (s) (30:78) [09:58:38:102]: Skipping action: RollbackClassFilter (condition is false)
MSI (s) (30:78) [09:58:38:102]: Skipping action: RollbackClassFilter64 (condition is false)
MSI (s) (30:78) [09:58:38:102]: Doing action: RollbackClassFilter64Vista
Action ended 9:58:38: RegisterBufferOverflowProtection. Return value 1.
Action start 9:58:38: RollbackClassFilter64Vista.
MSI (s) (30:78) [09:58:38:105]: Skipping action: RollbackDriverFiles (condition is false)
MSI (s) (30:78) [09:58:38:105]: Skipping action: RollbackBootDriver (condition is false)
MSI (s) (30:78) [09:58:38:105]: Doing action: SetRestoreExcludedProcessesProperty
Action ended 9:58:38: RollbackClassFilter64Vista. Return value 1.
MSI (s) (30:14) [09:58:38:109]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIB976.tmp, Entrypoint: SetRestoreExcludedProcessesProperty
Action start 9:58:38: SetRestoreExcludedProcessesProperty.
MSI (s) (30:78) [09:58:38:178]: Skipping action: RollbackDriverFiles64 (condition is false)
MSI (s) (30:78) [09:58:38:178]: Skipping action: RollbackBootDriver64 (condition is false)
MSI (s) (30:78) [09:58:38:178]: Skipping action: RollbackKMSDriver (condition is false)
MSI (s) (30:78) [09:58:38:178]: Doing action: SetRollbackDriverFilesVistaProperty
Action ended 9:58:38: SetRestoreExcludedProcessesProperty. Return value 1.
MSI (s) (30:78) [09:58:38:180]: PROPERTY CHANGE: Adding RollbackDriverFilesVista property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF'.
Action start 9:58:38: SetRollbackDriverFilesVistaProperty.
MSI (s) (30:78) [09:58:38:180]: Doing action: SetRollbackBootDriverVistaProperty
Action ended 9:58:38: SetRollbackDriverFilesVistaProperty. Return value 1.
MSI (s) (30:78) [09:58:38:182]: PROPERTY CHANGE: Adding RollbackBootDriverVista property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF'.
Action start 9:58:38: SetRollbackBootDriverVistaProperty.
MSI (s) (30:78) [09:58:38:182]: Doing action: SetRollbackClassFilterVistaProperty
Action ended 9:58:38: SetRollbackBootDriverVistaProperty. Return value 1.
MSI (s) (30:78) [09:58:38:183]: PROPERTY CHANGE: Adding RollbackClassFilterVista property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sdcfilter.inf'.
Action start 9:58:38: SetRollbackClassFilterVistaProperty.
MSI (s) (30:78) [09:58:38:184]: Doing action: SetRollbackKMSDriverVistaProperty
Action ended 9:58:38: SetRollbackClassFilterVistaProperty. Return value 1.
MSI (s) (30:78) [09:58:38:185]: PROPERTY CHANGE: Adding RollbackKMSDriverVista property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\skmscan.inf'.
Action start 9:58:38: SetRollbackKMSDriverVistaProperty.
MSI (s) (30:78) [09:58:38:186]: Skipping action: RollbackBootDriverVista (condition is false)
MSI (s) (30:78) [09:58:38:186]: Skipping action: RollbackDriverFilesVista (condition is false)
MSI (s) (30:78) [09:58:38:186]: Skipping action: RollbackClassFilterVista (condition is false)
MSI (s) (30:78) [09:58:38:186]: Doing action: RollbackBootDriver64Vista
Action ended 9:58:38: SetRollbackKMSDriverVistaProperty. Return value 1.
Action start 9:58:38: RollbackBootDriver64Vista.
MSI (s) (30:78) [09:58:38:188]: Doing action: RollbackDriverFiles64Vista
Action ended 9:58:38: RollbackBootDriver64Vista. Return value 1.
Action start 9:58:38: RollbackDriverFiles64Vista.
MSI (s) (30:78) [09:58:38:191]: Doing action: RestoreExcludedProcesses
Action ended 9:58:38: RollbackDriverFiles64Vista. Return value 1.
Action start 9:58:38: RestoreExcludedProcesses.
MSI (s) (30:78) [09:58:38:202]: Skipping action: RollbackKMSDriverVista (condition is false)
MSI (s) (30:78) [09:58:38:202]: Skipping action: InstallDriverFilesXP (condition is false)
MSI (s) (30:78) [09:58:38:202]: Skipping action: InstallBootDriverXP (condition is false)
MSI (s) (30:78) [09:58:38:202]: Doing action: SetInstallDriverFilesVistaProperty
Action ended 9:58:38: RestoreExcludedProcesses. Return value 1.
MSI (s) (30:78) [09:58:38:204]: PROPERTY CHANGE: Adding InstallDriverFilesVista property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\drivers\onaccess\wlh_i386\SAVONACCESSDRIV.INF'.
Action start 9:58:38: SetInstallDriverFilesVistaProperty.
MSI (s) (30:78) [09:58:38:204]: Skipping action: InstallDriverFilesVista (condition is false)
MSI (s) (30:78) [09:58:38:204]: Doing action: SetInstallDriverFilesWin7Property
Action ended 9:58:38: SetInstallDriverFilesVistaProperty. Return value 1.
MSI (s) (30:78) [09:58:38:206]: PROPERTY CHANGE: Adding InstallDriverFilesWin7 property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\drivers\onaccess\win7_i386\SAVONACCESSDRIV.INF'.
Action start 9:58:38: SetInstallDriverFilesWin7Property.
MSI (s) (30:78) [09:58:38:206]: Skipping action: InstallDriverFilesWin7 (condition is false)
MSI (s) (30:78) [09:58:38:207]: Doing action: SetInstallClassFilterVistaProperty
Action ended 9:58:38: SetInstallDriverFilesWin7Property. Return value 1.
MSI (s) (30:78) [09:58:38:208]: PROPERTY CHANGE: Adding InstallClassFilterVista property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\drivers\sdcfilter\wxp_i386\sdcfilter.inf'.
Action start 9:58:38: SetInstallClassFilterVistaProperty.
MSI (s) (30:78) [09:58:38:208]: Doing action: SetInstallClassFilterWin7Property
Action ended 9:58:38: SetInstallClassFilterVistaProperty. Return value 1.
MSI (s) (30:78) [09:58:38:210]: PROPERTY CHANGE: Adding InstallClassFilterWin7 property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\drivers\sdcfilter\win7_i386\sdcfilter.inf'.
Action start 9:58:38: SetInstallClassFilterWin7Property.
MSI (s) (30:78) [09:58:38:210]: Skipping action: InstallClassFilterVista (condition is false)
MSI (s) (30:78) [09:58:38:210]: Skipping action: InstallClassFilterWin7 (condition is false)
MSI (s) (30:78) [09:58:38:210]: Doing action: SetInstallBootDriverVistaProperty
Action ended 9:58:38: SetInstallClassFilterWin7Property. Return value 1.
MSI (s) (30:78) [09:58:38:211]: PROPERTY CHANGE: Adding InstallBootDriverVista property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\drivers\boottasks\wxp_i386\SOPHOSBOOTDRIVER.INF'.
Action start 9:58:38: SetInstallBootDriverVistaProperty.
MSI (s) (30:78) [09:58:38:212]: Doing action: SetInstallBootDriverWin7Property
Action ended 9:58:38: SetInstallBootDriverVistaProperty. Return value 1.
MSI (s) (30:78) [09:58:38:213]: PROPERTY CHANGE: Adding InstallBootDriverWin7 property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\drivers\boottasks\win7_i386\SOPHOSBOOTDRIVER.INF'.
Action start 9:58:38: SetInstallBootDriverWin7Property.
MSI (s) (30:78) [09:58:38:214]: Skipping action: InstallBootDriverVista (condition is false)
MSI (s) (30:78) [09:58:38:214]: Skipping action: InstallBootDriverWin7 (condition is false)
MSI (s) (30:78) [09:58:38:214]: Skipping action: InstallBootDriverAMD64 (condition is false)
MSI (s) (30:78) [09:58:38:214]: Skipping action: InstallDriverFilesAMD64 (condition is false)
MSI (s) (30:78) [09:58:38:214]: Skipping action: InstallBootDriverAMD64Vista (condition is false)
MSI (s) (30:78) [09:58:38:214]: Doing action: InstallBootDriverAMD64Win7
Action ended 9:58:38: SetInstallBootDriverWin7Property. Return value 1.
Action start 9:58:38: InstallBootDriverAMD64Win7.
MSI (s) (30:78) [09:58:38:216]: Skipping action: InstallDriverFilesAMD64Vista (condition is false)
MSI (s) (30:78) [09:58:38:216]: Doing action: InstallDriverFilesAMD64Win7
Action ended 9:58:38: InstallBootDriverAMD64Win7. Return value 1.
Action start 9:58:38: InstallDriverFilesAMD64Win7.
MSI (s) (30:78) [09:58:38:219]: Doing action: SetInstallUnsignedBootDriver
Action ended 9:58:38: InstallDriverFilesAMD64Win7. Return value 1.
MSI (s) (30:78) [09:58:38:220]: PROPERTY CHANGE: Adding InstallUnsignedBootDriver property. Its value is '"C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\""WIN7_AMD64"'.
Action start 9:58:38: SetInstallUnsignedBootDriver.
MSI (s) (30:78) [09:58:38:220]: Doing action: SetInstallUnsignedDrivers
Action ended 9:58:38: SetInstallUnsignedBootDriver. Return value 1.
MSI (s) (30:78) [09:58:38:221]: PROPERTY CHANGE: Adding InstallUnsignedDrivers property. Its value is '"C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\""WIN7_AMD64"'.
Action start 9:58:38: SetInstallUnsignedDrivers.
MSI (s) (30:78) [09:58:38:222]: Skipping action: InstallUnsignedBootDriver (condition is false)
MSI (s) (30:78) [09:58:38:222]: Skipping action: InstallUnsignedDrivers (condition is false)
MSI (s) (30:78) [09:58:38:222]: Skipping action: InstallUnsignedBootDriverAMD64 (condition is false)
MSI (s) (30:78) [09:58:38:222]: Skipping action: InstallUnsignedDriversAMD64 (condition is false)
MSI (s) (30:78) [09:58:38:222]: Skipping action: InstallClassFilterXP (condition is false)
MSI (s) (30:78) [09:58:38:222]: Skipping action: InstallClassFilterAMD64 (condition is false)
MSI (s) (30:78) [09:58:38:222]: Skipping action: InstallClassFilterAMD64Vista (condition is false)
MSI (s) (30:78) [09:58:38:222]: Doing action: InstallClassFilterAMD64Win7
Action ended 9:58:38: SetInstallUnsignedDrivers. Return value 1.
Action start 9:58:38: InstallClassFilterAMD64Win7.
MSI (s) (30:78) [09:58:38:225]: Doing action: SetInstallKMSDriverProperty
Action ended 9:58:38: InstallClassFilterAMD64Win7. Return value 1.
MSI (s) (30:78) [09:58:38:226]: PROPERTY CHANGE: Adding InstallKMSDriver property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\drivers\kms\wxp_i386\skmscan.inf'.
Action start 9:58:38: SetInstallKMSDriverProperty.
MSI (s) (30:78) [09:58:38:226]: Skipping action: InstallKMSDriver (condition is false)
MSI (s) (30:78) [09:58:38:226]: Doing action: SetInstallKMSDriverWin7Property
Action ended 9:58:38: SetInstallKMSDriverProperty. Return value 1.
MSI (s) (30:78) [09:58:38:227]: PROPERTY CHANGE: Adding InstallKMSDriverWin7 property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\drivers\kms\win7_i386\skmscan.inf'.
Action start 9:58:38: SetInstallKMSDriverWin7Property.
MSI (s) (30:78) [09:58:38:228]: Skipping action: InstallKMSDriverWin7 (condition is false)
MSI (s) (30:78) [09:58:38:228]: Doing action: SetStartDriverServicesProperty
Action ended 9:58:38: SetInstallKMSDriverWin7Property. Return value 1.
MSI (s) (30:78) [09:58:38:229]: PROPERTY CHANGE: Adding StartDriverServices property. Its value is 'WIN7_AMD64'.
Action start 9:58:38: SetStartDriverServicesProperty.
MSI (s) (30:78) [09:58:38:229]: Doing action: StartDriverServices
Action ended 9:58:38: SetStartDriverServicesProperty. Return value 1.
Action start 9:58:38: StartDriverServices.
MSI (s) (30:78) [09:58:38:241]: Doing action: SetMoveLockedFiles
Action ended 9:58:38: StartDriverServices. Return value 1.
MSI (s) (30:78) [09:58:38:242]: PROPERTY CHANGE: Adding MoveLockedFiles property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\|'.
Action start 9:58:38: SetMoveLockedFiles.
MSI (s) (30:78) [09:58:38:243]: Skipping action: MoveLockedFiles (condition is false)
MSI (s) (30:78) [09:58:38:243]: Doing action: MoveFiles
Action ended 9:58:38: SetMoveLockedFiles. Return value 1.
Action start 9:58:38: MoveFiles.
MSI (s) (30:78) [09:58:38:245]: Doing action: SwcUnhookSAU.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 9:58:38: MoveFiles. Return value 1.
MSI (s) (30:E8) [09:58:38:251]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIBA04.tmp, Entrypoint: SwcDeleteSAUPluginRegistry
Action start 9:58:38: SwcUnhookSAU.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (30:78) [09:58:38:283]: Doing action: SwcUnhookRMS.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 9:58:38: SwcUnhookSAU.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
MSI (s) (30:B8) [09:58:38:289]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIBA24.tmp, Entrypoint: SwcDeleteRMSPluginRegistry
Action start 9:58:38: SwcUnhookRMS.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (30:78) [09:58:38:317]: Doing action: SwcUnhookWait.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 9:58:38: SwcUnhookRMS.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
MSI (s) (30:E8) [09:58:38:324]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIBA44.tmp, Entrypoint: SwcPauseForUnhook
Action start 9:58:38: SwcUnhookWait.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (30:78) [09:58:43:481]: Doing action: InstallFiles
Action ended 9:58:43: SwcUnhookWait.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
Action start 9:58:43: InstallFiles.
MSI (s) (30:78) [09:58:43:496]: Note: 1: 2205 2: 3: Patch
MSI (s) (30:78) [09:58:43:496]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`File_`, `Patch`.`Header`, `Patch`.`Attributes`, `Patch`.`Sequence`, `Patch`.`StreamRef_` FROM `Patch` WHERE `Patch`.`File_` = ? AND `Patch`.`#_MsiActive`=? ORDER BY `Patch`.`Sequence`
MSI (s) (30:78) [09:58:43:496]: Note: 1: 2205 2: 3: MsiSFCBypass
MSI (s) (30:78) [09:58:43:496]: Note: 1: 2228 2: 3: MsiSFCBypass 4: SELECT `File_` FROM `MsiSFCBypass` WHERE `File_` = ?
MSI (s) (30:78) [09:58:43:496]: Note: 1: 2205 2: 3: MsiPatchHeaders
MSI (s) (30:78) [09:58:43:496]: Note: 1: 2228 2: 3: MsiPatchHeaders 4: SELECT `Header` FROM `MsiPatchHeaders` WHERE `StreamRef` = ?
MSI (s) (30:78) [09:58:43:498]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (30:78) [09:58:43:498]: Note: 1: 2205 2: 3: MsiPatchHeaders
MSI (s) (30:78) [09:58:43:498]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (30:78) [09:58:43:542]: Skipping action: SwcService_unreg_nc.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false)
MSI (s) (30:78) [09:58:43:542]: Doing action: SwcService_reg_rb.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 9:58:43: InstallFiles. Return value 1.
Action start 9:58:43: SwcService_reg_rb.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (30:78) [09:58:43:544]: Doing action: SwcService_register.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 9:58:43: SwcService_reg_rb.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
Action start 9:58:43: SwcService_register.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (30:78) [09:58:43:546]: Skipping action: SwcDeleteRegExceptId.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false)
MSI (s) (30:78) [09:58:43:546]: Doing action: PatchFiles
Action ended 9:58:43: SwcService_register.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
MSI (s) (30:78) [09:58:43:546]: Note: 1: 2205 2: 3: Patch
MSI (s) (30:78) [09:58:43:546]: Note: 1: 2228 2: 3: Patch 4: SELECT `File`,`FileName`,`FileSize`,`Directory_`,`PatchSize`,`File`.`Attributes`,`Patch`.`Attributes`,`Patch`.`Sequence`,`Component`.`Component`,`Component`.`ComponentId` FROM `File`,`Component`,`Patch` WHERE `Patch`.`#_MsiActive`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
Action start 9:58:43: PatchFiles.
MSI (s) (30:78) [09:58:43:547]: Doing action: DuplicateFiles
Action ended 9:58:43: PatchFiles. Return value 0.
Action start 9:58:43: DuplicateFiles.
MSI (s) (30:78) [09:58:43:547]: Doing action: SchedXmlFile
Action ended 9:58:43: DuplicateFiles. Return value 1.
MSI (s) (30:AC) [09:58:43:552]: Invoking remote custom action. DLL: C:\Windows\Installer\MSICEBF.tmp, Entrypoint: SchedXmlFile
MSI (s) (30!8C) [09:58:43:570]: PROPERTY CHANGE: Adding ExecXmlFile property. Its value is '1€0€C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man€7€1€/*/*/*/*[@messageFileName]€messageFileName€C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll€7€1€/*/*/*/*[@parameterFileName]€parameterFileName€C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll€1€0€C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man€7€1€/*/*/*/*[@resourceFileName]€resourceFileName€C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll'.
Action start 9:58:43: SchedXmlFile.
MSI (s) (30!8C) [09:58:43:572]: Doing action: ExecXmlFile
Action start 9:58:43: ExecXmlFile.
Action ended 9:58:43: ExecXmlFile. Return value 1.
MSI (s) (30:78) [09:58:43:580]: Doing action: ConfigureEventManifestRegister
Action ended 9:58:43: SchedXmlFile. Return value 1.
MSI (s) (30:B4) [09:58:43:586]: Invoking remote custom action. DLL: C:\Windows\Installer\MSICEDF.tmp, Entrypoint: ConfigureEventManifestRegister
MSI (s) (30!F8) [09:58:43:607]: PROPERTY CHANGE: Adding RollbackRegisterEventManifest property. Its value is '"wevtutil.exe" um "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man"'.
Action start 9:58:43: ConfigureEventManifestRegister.
MSI (s) (30!F8) [09:58:43:609]: Doing action: RollbackRegisterEventManifest
Action start 9:58:43: RollbackRegisterEventManifest.
MSI (s) (30!F8) [09:58:43:615]: PROPERTY CHANGE: Adding RegisterEventManifest property. Its value is '"wevtutil.exe" im "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man"'.
Action ended 9:58:43: RollbackRegisterEventManifest. Return value 1.
MSI (s) (30!F8) [09:58:43:616]: Doing action: RegisterEventManifest
Action start 9:58:43: RegisterEventManifest.
Action ended 9:58:43: RegisterEventManifest. Return value 1.
MSI (s) (30:78) [09:58:43:623]: Skipping action: DeleteUserGroups (condition is false)
MSI (s) (30:78) [09:58:43:623]: Doing action: RollbackUserGroups
Action ended 9:58:43: ConfigureEventManifestRegister. Return value 1.
Action start 9:58:43: RollbackUserGroups.
MSI (s) (30:78) [09:58:43:633]: Doing action: SetUserGroupsProperty
Action ended 9:58:43: RollbackUserGroups. Return value 1.
MSI (s) (30:78) [09:58:43:634]: PROPERTY CHANGE: Adding CreateUserGroups property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config'.
Action start 9:58:43: SetUserGroupsProperty.
MSI (s) (30:78) [09:58:43:635]: Doing action: CreateUserGroups
Action ended 9:58:43: SetUserGroupsProperty. Return value 1.
Action start 9:58:43: CreateUserGroups.
MSI (s) (30:78) [09:58:43:645]: Doing action: PurgeIOfficeAVCache
Action ended 9:58:43: CreateUserGroups. Return value 1.
Action start 9:58:43: PurgeIOfficeAVCache.
MSI (s) (30:78) [09:58:43:655]: Doing action: EnableAttachmentScanning
Action ended 9:58:43: PurgeIOfficeAVCache. Return value 1.
Action start 9:58:43: EnableAttachmentScanning.
MSI (s) (30:78) [09:58:43:666]: Doing action: AddDomainGroups
Action ended 9:58:43: EnableAttachmentScanning. Return value 1.
Action start 9:58:43: AddDomainGroups.
MSI (s) (30:78) [09:58:43:673]: Doing action: BindImage
Action ended 9:58:43: AddDomainGroups. Return value 1.
Action start 9:58:43: BindImage.
MSI (s) (30:78) [09:58:43:674]: Doing action: CreateShortcuts
Action ended 9:58:43: BindImage. Return value 1.
Action start 9:58:43: CreateShortcuts.
MSI (s) (30:78) [09:58:43:682]: Doing action: RegisterClassInfo
Action ended 9:58:43: CreateShortcuts. Return value 1.
MSI (s) (30:78) [09:58:43:683]: Note: 1: 2205 2: 3: Class
MSI (s) (30:78) [09:58:43:683]: Note: 1: 2228 2: 3: Class 4: SELECT `BinaryType`, `CLSID`, `ProgId_Default`, `Class`.`Description`, `Context`, `Feature_`, `ComponentId`, `Component`, `Class`.`Attributes`, `AppId_`, `FileTypeMask`, `Icon_`, `IconIndex`, `DefInprocHandler`, `Argument`, `Component`.`RuntimeFlags`, `FileName`, `Component`.`Directory_`, `Component`.`Action`, `Component`.`Installed`, `Feature`.`Action`, `Component`.`Attributes` FROM `Class`, `Component`, `File`, `Feature` WHERE `Feature_` = `Feature` AND `Class`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND ((`Feature`.`Action` = 1 OR `Feature`.`Action` = 2) OR (`Feature`.`Action` = 4 AND `Feature`.`Installed` = 0) OR (`Feature`.`Action` = 3 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4)) OR (`Feature`.`Action` = NULL AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2) AND ((`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4))))
Action start 9:58:43: RegisterClassInfo.
MSI (s) (30:78) [09:58:43:683]: Doing action: RegisterExtensionInfo
Action ended 9:58:43: RegisterClassInfo. Return value 0.
MSI (s) (30:78) [09:58:43:684]: Note: 1: 2205 2: 3: Extension
MSI (s) (30:78) [09:58:43:684]: Note: 1: 2228 2: 3: Extension 4: SELECT `Extension`, `BinaryType`, `ProgId_`, null, null, `MIME_`, `Feature_`, `ComponentId`, `Component`.`RuntimeFlags`, `Component`.`Component`, `Component`.`Attributes`, `FileName`, `Component`.`Directory_`, `Component`.`Action`, `Component`.`Installed`, `Feature`.`Action` FROM `Extension`, `Component`, `File`, `Feature` WHERE `Feature_` = `Feature` AND `Extension`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND ((`Feature`.`Action` = 1 OR `Feature`.`Action` = 2) OR (`Feature`.`Action` = 4 AND `Feature`.`Installed` = 0) OR (`Feature`.`Action` = 3 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4)) OR (`Feature`.`Action` = NULL AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2) AND ((`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4))))
Action start 9:58:43: RegisterExtensionInfo.
MSI (s) (30:78) [09:58:43:685]: Doing action: RegisterProgIdInfo
Action ended 9:58:43: RegisterExtensionInfo. Return value 0.
MSI (s) (30:78) [09:58:43:686]: Note: 1: 2205 2: 3: ProgId
MSI (s) (30:78) [09:58:43:686]: Note: 1: 2228 2: 3: ProgId 4: SELECT DISTINCT `BinaryType`, `ProgId`, `Class_`, `ProgId`.`Description`, `ProgId`.`Icon_`, `ProgId`.`IconIndex`, null, `Component`.`RuntimeFlags`, `Component`.`Component`, `Component`.`Attributes` FROM `ProgId`, `Class`, `Feature`, `Component` WHERE `ProgId`.`Class_` = `Class`.`CLSID` AND `Class`.`Feature_` = `Feature` AND `Class`.`Component_` = `Component` AND ((`Feature`.`Action` = 1 OR `Feature`.`Action` = 2) OR (`Feature`.`Action` = 4 AND `Feature`.`Installed` = 0) OR (`Feature`.`Action` = 3 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4)) OR (`Feature`.`Action` = NULL AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2) AND ((`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4))))
Action start 9:58:43: RegisterProgIdInfo.
MSI (s) (30:78) [09:58:43:686]: Doing action: RegisterMIMEInfo
Action ended 9:58:43: RegisterProgIdInfo. Return value 0.
MSI (s) (30:78) [09:58:43:687]: Note: 1: 2205 2: 3: MIME
MSI (s) (30:78) [09:58:43:687]: Note: 1: 2228 2: 3: MIME 4: SELECT `BinaryType`, `ContentType`, `Extension`.`Extension`, `MIME`.`CLSID`, `Component`.`RuntimeFlags`, `Component`.`Component`, `Component`.`Attributes` FROM `MIME`, `Extension`, `Feature`, `Component` WHERE `MIME`.`Extension_` = `Extension`.`Extension` AND `Feature_` = `Feature` AND `Extension`.`Component_` = `Component` AND ((`Feature`.`Action` = 1 OR `Feature`.`Action` = 2) OR (`Feature`.`Action` = 4 AND `Feature`.`Installed` = 0) OR (`Feature`.`Action` = 3 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4)) OR (`Feature`.`Action` = NULL AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2) AND ((`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4))))
Action start 9:58:43: RegisterMIMEInfo.
MSI (s) (30:78) [09:58:43:688]: Doing action: SwcPauseForUnload_rollback.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 9:58:43: RegisterMIMEInfo. Return value 0.
Action start 9:58:43: SwcPauseForUnload_rollback.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (30:78) [09:58:43:690]: Doing action: SwcHookSAUProp.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 9:58:43: SwcPauseForUnload_rollback.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
MSI (s) (30:78) [09:58:43:691]: PROPERTY CHANGE: Adding SwcHookSAU.92A5750A_B99C_4D18_8E96_314353D4097A property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlMessaging.dll'.
Action start 9:58:43: SwcHookSAUProp.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (30:78) [09:58:43:691]: Doing action: SwcHookSAU.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 9:58:43: SwcHookSAUProp.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
Action start 9:58:43: SwcHookSAU.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (30:78) [09:58:43:693]: Doing action: SwcHookRMSProp.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 9:58:43: SwcHookSAU.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
MSI (s) (30:78) [09:58:43:693]: PROPERTY CHANGE: Adding SwcHookRMS.92A5750A_B99C_4D18_8E96_314353D4097A property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\SWCAdapter.dll'.
Action start 9:58:43: SwcHookRMSProp.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (30:78) [09:58:43:693]: Doing action: SwcHookRMS.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 9:58:43: SwcHookRMSProp.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
Action start 9:58:43: SwcHookRMS.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (30:78) [09:58:43:695]: Doing action: WriteRegistryValues
Action ended 9:58:43: SwcHookRMS.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
Action start 9:58:43: WriteRegistryValues.
MSI (s) (30:78) [09:58:44:155]: Doing action: SetSAVAdminUpdateBegin
Action ended 9:58:44: WriteRegistryValues. Return value 1.
Action start 9:58:44: SetSAVAdminUpdateBegin.
MSI (s) (30:78) [09:58:44:157]: Doing action: SetRollBackSaviProperty
Action ended 9:58:44: SetSAVAdminUpdateBegin. Return value 1.
MSI (s) (30:78) [09:58:44:158]: PROPERTY CHANGE: Modifying RollbackSavi property. Its current value is '0'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 9:58:44: SetRollBackSaviProperty.
MSI (s) (30:78) [09:58:44:158]: Doing action: RollbackSavi
Action ended 9:58:44: SetRollBackSaviProperty. Return value 1.
Action start 9:58:44: RollbackSavi.
MSI (s) (30:78) [09:58:44:160]: Doing action: SetUpdateSaviProperty
Action ended 9:58:44: RollbackSavi. Return value 1.
MSI (s) (30:78) [09:58:44:161]: PROPERTY CHANGE: Modifying UpdateSAVI property. Its current value is '0'. Its new value: '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\"'.
Action start 9:58:44: SetUpdateSaviProperty.
MSI (s) (30:78) [09:58:44:161]: Doing action: UpdateSAVI
Action ended 9:58:44: SetUpdateSaviProperty. Return value 1.
Action start 9:58:44: UpdateSAVI.
MSI (s) (30:78) [09:58:44:163]: Doing action: SetSetFolderPermissions
Action ended 9:58:44: UpdateSAVI. Return value 1.
MSI (s) (30:78) [09:58:44:164]: PROPERTY CHANGE: Adding SetFolderPermissions property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 9:58:44: SetSetFolderPermissions.
MSI (s) (30:78) [09:58:44:164]: Doing action: SetFolderPermissions
Action ended 9:58:44: SetSetFolderPermissions. Return value 1.
Action start 9:58:44: SetFolderPermissions.
MSI (s) (30:78) [09:58:44:167]: Doing action: WriteIniValues
Action ended 9:58:44: SetFolderPermissions. Return value 1.
MSI (s) (30:78) [09:58:44:167]: Note: 1: 2205 2: 3: IniFile
MSI (s) (30:78) [09:58:44:167]: Note: 1: 2228 2: 3: IniFile 4: SELECT `FileName`,`IniFile`.`DirProperty`,`Section`,`IniFile`.`Key`,`IniFile`.`Value`,`IniFile`.`Action` FROM `IniFile`, `Component` WHERE `Component`=`Component_` AND (`Component`.`Action`=1 OR `Component`.`Action`=2) ORDER BY `FileName`,`Section`
Action start 9:58:44: WriteIniValues.
MSI (s) (30:78) [09:58:44:167]: Doing action: WriteEnvironmentStrings
Action ended 9:58:44: WriteIniValues. Return value 1.
MSI (s) (30:78) [09:58:44:167]: Note: 1: 2205 2: 3: Environment
MSI (s) (30:78) [09:58:44:167]: Note: 1: 2228 2: 3: Environment 4: SELECT `Name`,`Value` FROM `Environment`,`Component` WHERE `Component_`=`Component` AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2)
Action start 9:58:44: WriteEnvironmentStrings.
MSI (s) (30:78) [09:58:44:167]: Doing action: RegisterFonts
Action ended 9:58:44: WriteEnvironmentStrings. Return value 1.
MSI (s) (30:78) [09:58:44:167]: Note: 1: 2205 2: 3: Font
MSI (s) (30:78) [09:58:44:167]: Note: 1: 2228 2: 3: Font 4: SELECT `FontTitle`, `FileName`, `Directory_`, `Action` From `Font`, `FileAction` Where `Font`.`File_` = `FileAction`.`File` And (`FileAction`.`Action` = 1 Or `FileAction`.`Action` = 2) ORDER BY `FileAction`.`Directory_`
Action start 9:58:44: RegisterFonts.
MSI (s) (30:78) [09:58:44:167]: Doing action: InstallODBC
Action ended 9:58:44: RegisterFonts. Return value 1.
MSI (s) (30:78) [09:58:44:167]: Note: 1: 2711 2: ODBCDriverManager
MSI (s) (30:78) [09:58:44:168]: Note: 1: 2711 2: ODBCDriverManager64
MSI (s) (30:78) [09:58:44:168]: Note: 1: 2205 2: 3: ODBCDriver
MSI (s) (30:78) [09:58:44:168]: Note: 1: 2228 2: 3: ODBCDriver 4: SELECT `Driver`,`ComponentId`,`Description`,`RuntimeFlags`,`Directory_`,`FileName`,`File_Setup`,`Action` FROM `ODBCDriver`, `File`, `Component` WHERE `File_` = `File` AND `ODBCDriver`.`Component_` = `Component` AND (`Component`.`ActionRequest` = 1 OR `Component`.`ActionRequest` = 2) AND `BinaryType` = ?
MSI (s) (30:78) [09:58:44:168]: Note: 1: 2205 2: 3: ODBCDriver
MSI (s) (30:78) [09:58:44:168]: Note: 1: 2228 2: 3: ODBCDriver 4: SELECT `Driver`,`ComponentId`,`Description`,`RuntimeFlags`,`Directory_`,`FileName`,`File_Setup`,`Action` FROM `ODBCDriver`, `File`, `Component` WHERE `File_` = `File` AND `ODBCDriver`.`Component_` = `Component` AND (`Component`.`ActionRequest` = 1 OR `Component`.`ActionRequest` = 2) AND `BinaryType` = ?
MSI (s) (30:78) [09:58:44:168]: Note: 1: 2205 2: 3: ODBCTranslator
MSI (s) (30:78) [09:58:44:168]: Note: 1: 2228 2: 3: ODBCTranslator 4: SELECT `Translator`,`Component`.`ComponentId`,`Description`,`RuntimeFlags`,`Directory_`,`FileName`,`File_Setup`,`Action` FROM `ODBCTranslator`, `File`, `Component` WHERE `File_` = `File` AND `ODBCTranslator`.`Component_` = `Component` AND (`Component`.`ActionRequest` = 1 OR `Component`.`ActionRequest` = 2) AND `BinaryType` = ?
MSI (s) (30:78) [09:58:44:168]: Note: 1: 2205 2: 3: ODBCTranslator
MSI (s) (30:78) [09:58:44:168]: Note: 1: 2228 2: 3: ODBCTranslator 4: SELECT `Translator`,`Component`.`ComponentId`,`Description`,`RuntimeFlags`,`Directory_`,`FileName`,`File_Setup`,`Action` FROM `ODBCTranslator`, `File`, `Component` WHERE `File_` = `File` AND `ODBCTranslator`.`Component_` = `Component` AND (`Component`.`ActionRequest` = 1 OR `Component`.`ActionRequest` = 2) AND `BinaryType` = ?
MSI (s) (30:78) [09:58:44:168]: Note: 1: 2205 2: 3: ODBCDataSource
MSI (s) (30:78) [09:58:44:168]: Note: 1: 2228 2: 3: ODBCDataSource 4: SELECT `DataSource`,`ComponentId`,`DriverDescription`,`Description`,`Registration` FROM `ODBCDataSource`, `Component` WHERE `Component_` = `Component` AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2) AND `BinaryType` = ?
MSI (s) (30:78) [09:58:44:168]: Note: 1: 2205 2: 3: ODBCDataSource
MSI (s) (30:78) [09:58:44:168]: Note: 1: 2228 2: 3: ODBCDataSource 4: SELECT `DataSource`,`ComponentId`,`DriverDescription`,`Description`,`Registration` FROM `ODBCDataSource`, `Component` WHERE `Component_` = `Component` AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2) AND `BinaryType` = ?
Action start 9:58:44: InstallODBC.
MSI (s) (30:78) [09:58:44:168]: Doing action: RegisterTypeLibraries
Action ended 9:58:44: InstallODBC. Return value 0.
MSI (s) (30:78) [09:58:44:168]: Note: 1: 2205 2: 3: TypeLib
MSI (s) (30:78) [09:58:44:168]: Note: 1: 2228 2: 3: TypeLib 4: SELECT `LibID`, `TypeLib`.`Version`, `TypeLib`.`Language`, `TypeLib`.`Directory_`, `FileName`, `Component`.`Directory_`, `Component`.`Action`, `Component`.`Installed`, `BinaryType`, `Component`.`Component`, `Component`.`Attributes`, `Component`.`RuntimeFlags` FROM `TypeLib`, `Component`, `File` WHERE `TypeLib`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND ((`Component`.`Action`=1 OR `Component`.`Action`=2) OR (`Component`.`Action` = null AND (`Component`.`ActionRequest` = 1 OR `Component`.`ActionRequest` = 2)))
Action start 9:58:44: RegisterTypeLibraries.
MSI (s) (30:78) [09:58:44:168]: Doing action: RegisterComPlus
Action ended 9:58:44: RegisterTypeLibraries. Return value 0.
MSI (s) (30:78) [09:58:44:168]: Note: 1: 2205 2: 3: Complus
MSI (s) (30:78) [09:58:44:168]: Note: 1: 2228 2: 3: Complus 4: SELECT `ComponentId`, `FileName`, `Component`.`Directory_`, `ExpType`, `Component`.`Action`, `Component`.`Installed` FROM `Complus`, `Component`, `File` WHERE `Complus`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND (`Action` = 1 OR `Action` = 2)
Action start 9:58:44: RegisterComPlus.
MSI (s) (30:78) [09:58:44:168]: Doing action: SelfRegModules
Action ended 9:58:44: RegisterComPlus. Return value 0.
MSI (s) (30:78) [09:58:44:168]: Note: 1: 2205 2: 3: SelfReg
MSI (s) (30:78) [09:58:44:168]: Note: 1: 2228 2: 3: SelfReg 4: Select `FileAction`.`FileName`,`FileAction`.`Directory_`,`FileAction`.`Action`, `FileAction`.`Component_`,`SelfReg`.`File_` From `SelfReg`, `FileAction` Where `SelfReg`.`File_` = `FileAction`.`File` And (`FileAction`.`Action` = 1 OR `FileAction`.`Action` = 2)
Action start 9:58:44: SelfRegModules.
MSI (s) (30:78) [09:58:44:168]: Doing action: InstallServices
Action ended 9:58:44: SelfRegModules. Return value 1.
Action start 9:58:44: InstallServices.
MSI (s) (30:78) [09:58:44:169]: Doing action: SetServiceXP
Action ended 9:58:44: InstallServices. Return value 1.
Action start 9:58:44: SetServiceXP.
MSI (s) (30:78) [09:58:44:171]: Doing action: CreateTamperProtectionRegKeyRollback
Action ended 9:58:44: SetServiceXP. Return value 1.
Action start 9:58:44: CreateTamperProtectionRegKeyRollback.
MSI (s) (30:78) [09:58:44:174]: Doing action: CreateTamperProtectionRegKey
Action ended 9:58:44: CreateTamperProtectionRegKeyRollback. Return value 1.
Action start 9:58:44: CreateTamperProtectionRegKey.
MSI (s) (30:78) [09:58:44:177]: Doing action: SchedSecureObjects
Action ended 9:58:44: CreateTamperProtectionRegKey. Return value 1.
MSI (s) (30:D4) [09:58:44:179]: Invoking remote custom action. DLL: C:\Windows\Installer\MSID131.tmp, Entrypoint: SchedSecureObjects
MSI (s) (30:88) [09:58:44:200]: PROPERTY CHANGE: Adding ExecSecureObjects property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\€CreateFolder€€NT SERVICE\SavService€268435456€MACHINE\SOFTWARE\Sophos\SAVService\Config€Registry€€NT SERVICE\SavService€268435456€MACHINE\SOFTWARE\Sophos\SAVService\Telemetry€Registry€€NT SERVICE\SavService€268435456€MACHINE\SOFTWARE\Sophos\SAVService\ThreatLifetime€Registry€€NT SERVICE\SavService€268435456'.
Action start 9:58:44: SchedSecureObjects.
MSI (s) (30:88) [09:58:44:200]: Doing action: ExecSecureObjects
Action start 9:58:44: ExecSecureObjects.
Action ended 9:58:44: ExecSecureObjects. Return value 1.
MSI (s) (30:78) [09:58:44:201]: Doing action: SetSAVServiceSID
Action ended 9:58:44: SchedSecureObjects. Return value 1.
Action start 9:58:44: SetSAVServiceSID.
MSI (s) (30:78) [09:58:44:204]: Doing action: AddSIPSSubmitterUserAccount.SetProperty
Action ended 9:58:44: SetSAVServiceSID. Return value 1.
MSI (s) (30:78) [09:58:44:204]: PROPERTY CHANGE: Adding AddSIPSSubmitterUserAccount property. Its value is 'NT SERVICE\SAVService'.
Action start 9:58:44: AddSIPSSubmitterUserAccount.SetProperty.
MSI (s) (30:78) [09:58:44:204]: Doing action: AddSIPSSubmitterUserAccountRollback.SetProperty
Action ended 9:58:44: AddSIPSSubmitterUserAccount.SetProperty. Return value 1.
MSI (s) (30:78) [09:58:44:204]: PROPERTY CHANGE: Adding AddSIPSSubmitterUserAccountRollback property. Its value is 'NT SERVICE\SAVService'.
Action start 9:58:44: AddSIPSSubmitterUserAccountRollback.SetProperty.
MSI (s) (30:78) [09:58:44:204]: Doing action: AddSIPSSubmitterUserAccountRollback
Action ended 9:58:44: AddSIPSSubmitterUserAccountRollback.SetProperty. Return value 1.
Action start 9:58:44: AddSIPSSubmitterUserAccountRollback.
MSI (s) (30:78) [09:58:44:205]: Doing action: AddSIPSSubmitterUserAccount
Action ended 9:58:44: AddSIPSSubmitterUserAccountRollback. Return value 1.
Action start 9:58:44: AddSIPSSubmitterUserAccount.
MSI (s) (30:78) [09:58:44:206]: Doing action: SetupSspUserAccount.SetProperty
Action ended 9:58:44: AddSIPSSubmitterUserAccount. Return value 1.
MSI (s) (30:78) [09:58:44:206]: PROPERTY CHANGE: Adding SetupSspUserAccount property. Its value is 'NT SERVICE\SAVService'.
Action start 9:58:44: SetupSspUserAccount.SetProperty.
MSI (s) (30:78) [09:58:44:206]: Doing action: SetupSspUserAccountRollback.SetProperty
Action ended 9:58:44: SetupSspUserAccount.SetProperty. Return value 1.
MSI (s) (30:78) [09:58:44:206]: PROPERTY CHANGE: Adding SetupSspUserAccountRollback property. Its value is 'NT SERVICE\SAVService'.
Action start 9:58:44: SetupSspUserAccountRollback.SetProperty.
MSI (s) (30:78) [09:58:44:207]: Doing action: SetupSspUserAccountRollback
Action ended 9:58:44: SetupSspUserAccountRollback.SetProperty. Return value 1.
Action start 9:58:44: SetupSspUserAccountRollback.
MSI (s) (30:78) [09:58:44:208]: Doing action: SetupSspUserAccount
Action ended 9:58:44: SetupSspUserAccountRollback. Return value 1.
Action start 9:58:44: SetupSspUserAccount.
MSI (s) (30:78) [09:58:44:209]: Skipping action: RestartDriversAfterSecurityChange (condition is false)
MSI (s) (30:78) [09:58:44:209]: Doing action: SetServiceSecurity
Action ended 9:58:44: SetupSspUserAccount. Return value 1.
Action start 9:58:44: SetServiceSecurity.
MSI (s) (30:78) [09:58:44:212]: Doing action: SetServiceRecoveryActions
Action ended 9:58:44: SetServiceSecurity. Return value 1.
Action start 9:58:44: SetServiceRecoveryActions.
MSI (s) (30:78) [09:58:44:215]: Doing action: SetRollbackInstallDeviceControlProperty
Action ended 9:58:44: SetServiceRecoveryActions. Return value 1.
MSI (s) (30:78) [09:58:44:215]: PROPERTY CHANGE: Adding RollBackInstallDeviceControl property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 9:58:44: SetRollbackInstallDeviceControlProperty.
MSI (s) (30:78) [09:58:44:215]: Doing action: RollbackInstallDeviceControl
Action ended 9:58:44: SetRollbackInstallDeviceControlProperty. Return value 1.
Action start 9:58:44: RollbackInstallDeviceControl.
MSI (s) (30:78) [09:58:44:218]: Doing action: SetInstallDeviceControlProperty
Action ended 9:58:44: RollbackInstallDeviceControl. Return value 1.
MSI (s) (30:78) [09:58:44:218]: PROPERTY CHANGE: Adding InstallDeviceControl property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\"'.
Action start 9:58:44: SetInstallDeviceControlProperty.
MSI (s) (30:78) [09:58:44:218]: Doing action: InstallDeviceControl
Action ended 9:58:44: SetInstallDeviceControlProperty. Return value 1.
Action start 9:58:44: InstallDeviceControl.
MSI (s) (30:78) [09:58:44:221]: Doing action: SetAdminGroupDescription
Action ended 9:58:44: InstallDeviceControl. Return value 1.
Action start 9:58:44: SetAdminGroupDescription.
MSI (s) (30:78) [09:58:44:224]: Doing action: SetPowerGroupDescription
Action ended 9:58:44: SetAdminGroupDescription. Return value 1.
Action start 9:58:44: SetPowerGroupDescription.
MSI (s) (30:78) [09:58:44:226]: Doing action: SetUserGroupDescription
Action ended 9:58:44: SetPowerGroupDescription. Return value 1.
Action start 9:58:44: SetUserGroupDescription.
MSI (s) (30:78) [09:58:44:229]: Doing action: MsiConfigureServices
Action ended 9:58:44: SetUserGroupDescription. Return value 1.
Action start 9:58:44: MsiConfigureServices.
MSI (s) (30:78) [09:58:44:230]: Note: 1: 2205 2: 3: MsiServiceConfigFailureActions
MSI (s) (30:78) [09:58:44:230]: Note: 1: 2228 2: 3: MsiServiceConfigFailureActions 4: SELECT `Name`, `Event`, `ResetPeriod`, `RebootMessage`,`Command`, `Actions`, `DelayActions`, `Action` FROM `MsiServiceConfigFailureActions`, `Component` WHERE `Component_` = `Component` AND (`Action` = 0 OR `Action` = 1 OR `Action` = 3)
MSI (s) (30:78) [09:58:44:230]: Doing action: SetOnAccessGroupDescription
Action ended 9:58:44: MsiConfigureServices. Return value 1.
Action start 9:58:44: SetOnAccessGroupDescription.
MSI (s) (30:78) [09:58:44:233]: Skipping action: DisableOnAccess (condition is false)
MSI (s) (30:78) [09:58:44:233]: Doing action: DisablePUADetection_setprop
Action ended 9:58:44: SetOnAccessGroupDescription. Return value 1.
MSI (s) (30:78) [09:58:44:233]: PROPERTY CHANGE: Adding DisablePUADetection property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config'.
Action start 9:58:44: DisablePUADetection_setprop.
MSI (s) (30:78) [09:58:44:233]: Doing action: DisablePUADetection
Action ended 9:58:44: DisablePUADetection_setprop. Return value 1.
Action start 9:58:44: DisablePUADetection.
MSI (s) (30:78) [09:58:44:236]: Doing action: DeleteExpiredCaches
Action ended 9:58:44: DisablePUADetection. Return value 1.
Action start 9:58:44: DeleteExpiredCaches.
MSI (s) (30:78) [09:58:44:239]: Doing action: EnableJournals
Action ended 9:58:44: DeleteExpiredCaches. Return value 1.
Action start 9:58:44: EnableJournals.
MSI (s) (30:78) [09:58:44:242]: Doing action: DisableWebProtection_setprop
Action ended 9:58:44: EnableJournals. Return value 1.
MSI (s) (30:78) [09:58:44:242]: PROPERTY CHANGE: Adding DisableWebProtection property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config'.
Action start 9:58:44: DisableWebProtection_setprop.
MSI (s) (30:78) [09:58:44:242]: Doing action: DisableWebProtection
Action ended 9:58:44: DisableWebProtection_setprop. Return value 1.
Action start 9:58:44: DisableWebProtection.
MSI (s) (30:78) [09:58:44:245]: Doing action: DisableSxlLookups_setprop
Action ended 9:58:44: DisableWebProtection. Return value 1.
MSI (s) (30:78) [09:58:44:246]: PROPERTY CHANGE: Adding DisableSxlLookups property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config'.
Action start 9:58:44: DisableSxlLookups_setprop.
MSI (s) (30:78) [09:58:44:246]: Doing action: DisableSxlLookups
Action ended 9:58:44: DisableSxlLookups_setprop. Return value 1.
Action start 9:58:44: DisableSxlLookups.
MSI (s) (30:78) [09:58:44:248]: Doing action: CheckSNMPDLLPresence_setprop
Action ended 9:58:44: DisableSxlLookups. Return value 1.
MSI (s) (30:78) [09:58:44:249]: PROPERTY CHANGE: Adding CheckSNMPDLLPresence property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config'.
Action start 9:58:44: CheckSNMPDLLPresence_setprop.
MSI (s) (30:78) [09:58:44:249]: Doing action: CheckSNMPDLLPresence
Action ended 9:58:44: CheckSNMPDLLPresence_setprop. Return value 1.
Action start 9:58:44: CheckSNMPDLLPresence.
MSI (s) (30:78) [09:58:44:251]: Doing action: SetUpdateSXLServerList
Action ended 9:58:44: CheckSNMPDLLPresence. Return value 1.
MSI (s) (30:78) [09:58:44:251]: PROPERTY CHANGE: Adding UpdateSXLServerList property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\Sophos Anti-Virus\Config"'.
Action start 9:58:44: SetUpdateSXLServerList.
MSI (s) (30:78) [09:58:44:252]: Doing action: UpdateSXLServerList
Action ended 9:58:44: SetUpdateSXLServerList. Return value 1.
Action start 9:58:44: UpdateSXLServerList.
MSI (s) (30:78) [09:58:44:254]: Doing action: SetApplySAVControlFile
Action ended 9:58:44: UpdateSXLServerList. Return value 1.
MSI (s) (30:78) [09:58:44:254]: PROPERTY CHANGE: Adding ApplySAVControlFile property. Its value is '"C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\""C:\ProgramData\Sophos\Sophos Anti-Virus\Config"'.
Action start 9:58:44: SetApplySAVControlFile.
MSI (s) (30:78) [09:58:44:254]: Doing action: ApplySAVControlFile
Action ended 9:58:44: SetApplySAVControlFile. Return value 1.
Action start 9:58:44: ApplySAVControlFile.
MSI (s) (30:78) [09:58:44:257]: Doing action: GenerateSavMachineId
Action ended 9:58:44: ApplySAVControlFile. Return value 1.
Action start 9:58:44: GenerateSavMachineId.
MSI (s) (30:78) [09:58:44:259]: Doing action: RegisterUser
Action ended 9:58:44: GenerateSavMachineId. Return value 1.
Action start 9:58:44: RegisterUser.
MSI (s) (30:78) [09:58:44:260]: Skipping action: ConfigureScanMyComputerScan_setprop (condition is false)
MSI (s) (30:78) [09:58:44:260]: Skipping action: ConfigureScanMyComputerScan (condition is false)
MSI (s) (30:78) [09:58:44:260]: Skipping action: DisableWindowsDefender (condition is false)
MSI (s) (30:78) [09:58:44:260]: Doing action: RegisterProduct
Action ended 9:58:44: RegisterUser. Return value 1.
Action start 9:58:44: RegisterProduct.
MSI (s) (30:78) [09:58:44:261]: PROPERTY CHANGE: Adding ProductToBeRegistered property. Its value is '1'.
MSI (s) (30:78) [09:58:44:261]: Doing action: PublishComponents
Action ended 9:58:44: RegisterProduct. Return value 1.
MSI (s) (30:78) [09:58:44:261]: Note: 1: 2205 2: 3: PublishComponent
MSI (s) (30:78) [09:58:44:261]: Note: 1: 2228 2: 3: PublishComponent 4: SELECT `PublishComponent`.`ComponentId`, `PublishComponent`.`Qualifier`, `PublishComponent`.`AppData`, `Feature`, `Component`.`ComponentId`, `Component`.`RuntimeFlags` FROM `PublishComponent`, `Component`, `Feature` WHERE `PublishComponent`.`Component_` = `Component`.`Component` AND `PublishComponent`.`Feature_` = `Feature`.`Feature` AND ((`Feature`.`Action` = 1 OR `Feature`.`Action` = 2) OR (`Feature`.`Action` = 4 AND `Feature`.`Installed` = 0) OR (`Feature`.`Action` = 3 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4)))
Action start 9:58:44: PublishComponents.
MSI (s) (30:78) [09:58:44:261]: Doing action: MsiPublishAssemblies
Action ended 9:58:44: PublishComponents. Return value 0.
MSI (s) (30:78) [09:58:44:261]: Note: 1: 2205 2: 3: MsiAssembly
MSI (s) (30:78) [09:58:44:261]: Note: 1: 2228 2: 3: MsiAssembly 4: SELECT null, null, `Component`.`Component`, `Feature`, `Component`.`ComponentId`, `Component`.`RuntimeFlags` FROM `MsiAssembly`, `Component`, `Feature` WHERE `MsiAssembly`.`Component_` = `Component`.`Component` AND `MsiAssembly`.`Feature_` = `Feature`.`Feature` AND `MsiAssembly`.`File_Application` = null AND ((`Feature`.`Action` = 1 OR `Feature`.`Action` = 2) OR (`Feature`.`Action` = 4 AND `Feature`.`Installed` = 0) OR (`Feature`.`Action` = 3 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4)))
Action start 9:58:44: MsiPublishAssemblies.
MSI (s) (30:78) [09:58:44:261]: Doing action: PublishFeatures
Action ended 9:58:44: MsiPublishAssemblies. Return value 0.
Action start 9:58:44: PublishFeatures.
MSI (s) (30:78) [09:58:44:263]: Doing action: PublishProduct
Action ended 9:58:44: PublishFeatures. Return value 1.
Action start 9:58:44: PublishProduct.
MSI (s) (30:78) [09:58:44:263]: Doing action: RollbackRegisterTamperProtectionControlX64
Action ended 9:58:44: PublishProduct. Return value 1.
Action start 9:58:44: RollbackRegisterTamperProtectionControlX64.
MSI (s) (30:78) [09:58:44:264]: Doing action: RollbackRegisterSavShellExtX64
Action ended 9:58:44: RollbackRegisterTamperProtectionControlX64. Return value 1.
Action start 9:58:44: RollbackRegisterSavShellExtX64.
MSI (s) (30:78) [09:58:44:264]: Doing action: RollbackRegisterSophosOfficeAV
Action ended 9:58:44: RollbackRegisterSavShellExtX64. Return value 1.
Action start 9:58:44: RollbackRegisterSophosOfficeAV.
MSI (s) (30:78) [09:58:44:264]: Doing action: RollbackRegisterSophosOfficeAVX64
Action ended 9:58:44: RollbackRegisterSophosOfficeAV. Return value 1.
Action start 9:58:44: RollbackRegisterSophosOfficeAVX64.
MSI (s) (30:78) [09:58:44:265]: Doing action: RegisterTamperProtectionControlX64
Action ended 9:58:44: RollbackRegisterSophosOfficeAVX64. Return value 1.
Action start 9:58:44: RegisterTamperProtectionControlX64.
MSI (s) (30:78) [09:58:44:265]: Doing action: RegisterSavShellExtX64
Action ended 9:58:44: RegisterTamperProtectionControlX64. Return value 1.
Action start 9:58:44: RegisterSavShellExtX64.
MSI (s) (30:78) [09:58:44:266]: Doing action: RegisterSophosOfficeAV
Action ended 9:58:44: RegisterSavShellExtX64. Return value 1.
Action start 9:58:44: RegisterSophosOfficeAV.
MSI (s) (30:78) [09:58:44:266]: Doing action: RegisterSophosOfficeAVX64
Action ended 9:58:44: RegisterSophosOfficeAV. Return value 1.
Action start 9:58:44: RegisterSophosOfficeAVX64.
MSI (s) (30:78) [09:58:44:266]: Doing action: RollbackInstallSecurityCenter
Action ended 9:58:44: RegisterSophosOfficeAVX64. Return value 1.
Action start 9:58:44: RollbackInstallSecurityCenter.
MSI (s) (30:78) [09:58:44:269]: Doing action: SetRestoreFirstInstallTimeProperty
Action ended 9:58:44: RollbackInstallSecurityCenter. Return value 1.
MSI (s) (30:78) [09:58:44:269]: PROPERTY CHANGE: Adding RestoreFirstInstallTime property. Its value is '0'.
Action start 9:58:44: SetRestoreFirstInstallTimeProperty.
MSI (s) (30:78) [09:58:44:269]: Skipping action: RestoreFirstInstallTime (condition is false)
MSI (s) (30:78) [09:58:44:269]: Doing action: SetSAVAdminUpdateComplete
Action ended 9:58:44: SetRestoreFirstInstallTimeProperty. Return value 1.
Action start 9:58:44: SetSAVAdminUpdateComplete.
MSI (s) (30:78) [09:58:44:271]: Doing action: RunPreLaunchScript
Action ended 9:58:44: SetSAVAdminUpdateComplete. Return value 1.
Action start 9:58:44: RunPreLaunchScript.
MSI (s) (30:78) [09:58:44:274]: Doing action: RegisterDCIfEnabled
Action ended 9:58:44: RunPreLaunchScript. Return value 1.
Action start 9:58:44: RegisterDCIfEnabled.
MSI (s) (30:78) [09:58:44:276]: Doing action: StartSAVServices
Action ended 9:58:44: RegisterDCIfEnabled. Return value 1.
Action start 9:58:44: StartSAVServices.
MSI (s) (30:78) [09:58:44:278]: Skipping action: ApplyCachedPolicies (condition is false)
MSI (s) (30:78) [09:58:44:278]: Skipping action: CopySwiFcRollbackCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (30:78) [09:58:44:278]: Skipping action: CopySwiFcRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (30:78) [09:58:44:278]: Skipping action: CopySwiFcToProgramData.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (30:78) [09:58:44:278]: Skipping action: CopySwiFcToProgramData.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (30:78) [09:58:44:278]: Skipping action: CopyScfDotDatToProgramData.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (30:78) [09:58:44:278]: Skipping action: CopyScfDotDatToProgramData.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (30:78) [09:58:44:278]: Doing action: SwiServiceRollback.P.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 9:58:44: StartSAVServices. Return value 1.
MSI (s) (30:78) [09:58:44:278]: PROPERTY CHANGE: Adding SwiServiceRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is 'swi_service'.
Action start 9:58:44: SwiServiceRollback.P.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (30:78) [09:58:44:278]: Doing action: SwiServiceRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 9:58:44: SwiServiceRollback.P.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
Action start 9:58:44: SwiServiceRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (30:78) [09:58:44:280]: Doing action: SwiServiceRegister.P.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 9:58:44: SwiServiceRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
MSI (s) (30:78) [09:58:44:280]: PROPERTY CHANGE: Adding SwiServiceRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe" /registerService'.
Action start 9:58:44: SwiServiceRegister.P.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (30:78) [09:58:44:280]: Doing action: SwiServiceRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 9:58:44: SwiServiceRegister.P.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
Action start 9:58:44: SwiServiceRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (30:78) [09:58:44:281]: Skipping action: SwiCalloutInstallCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (30:78) [09:58:44:281]: Skipping action: SwiCalloutRollback.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (30:78) [09:58:44:281]: Skipping action: SwiCalloutRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (30:78) [09:58:44:281]: Skipping action: SwiCalloutInstall.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (30:78) [09:58:44:281]: Skipping action: SwiFilterRegister.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (30:78) [09:58:44:281]: Skipping action: SwiFilterRollbackCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (30:78) [09:58:44:281]: Skipping action: SwiFilterRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (30:78) [09:58:44:281]: Skipping action: SwiFilterRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (30:78) [09:58:44:281]: Doing action: StartServices
Action ended 9:58:44: SwiServiceRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
Action start 9:58:44: StartServices.
MSI (s) (30:78) [09:58:44:281]: Doing action: SwiUpdateInstallRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 9:58:44: StartServices. Return value 1.
Action start 9:58:44: SwiUpdateInstallRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (30:78) [09:58:44:282]: Skipping action: SwiUpdateInstall.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (30:78) [09:58:44:282]: Skipping action: SwiUpdateInstall.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (30:78) [09:58:44:282]: Doing action: SwiUpdateInstall64.P.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 9:58:44: SwiUpdateInstallRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
MSI (s) (30:78) [09:58:44:283]: PROPERTY CHANGE: Adding SwiUpdateInstall64.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update_64.exe" /update'.
Action start 9:58:44: SwiUpdateInstall64.P.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (30:78) [09:58:44:283]: Doing action: SwiUpdateInstall64.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 9:58:44: SwiUpdateInstall64.P.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
Action start 9:58:44: SwiUpdateInstall64.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (30:78) [09:58:44:283]: Skipping action: SwiUpdateUpgradeRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (30:78) [09:58:44:284]: Skipping action: SwiUpdateUpgrade.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (30:78) [09:58:44:284]: Skipping action: SwiUpdateUpgrade.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (30:78) [09:58:44:284]: Skipping action: SwiUpdateUpgrade64.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (30:78) [09:58:44:284]: Skipping action: SwiUpdateUpgrade64.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (30:78) [09:58:44:284]: Doing action: SwcEnableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 9:58:44: SwiUpdateInstall64.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
MSI (s) (30:10) [09:58:44:285]: Invoking remote custom action. DLL: C:\Windows\Installer\MSID19F.tmp, Entrypoint: SwcEnableSwcServiceStart
Action start 9:58:44: SwcEnableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (30:78) [09:58:44:307]: Doing action: BootDriverStartup
Action ended 9:58:44: SwcEnableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
Action start 9:58:44: BootDriverStartup.
MSI (s) (30:78) [09:58:44:310]: Doing action: SetUpdateDriversProperty
Action ended 9:58:44: BootDriverStartup. Return value 1.
MSI (s) (30:78) [09:58:44:310]: PROPERTY CHANGE: Modifying UPDATEDRIVERS property. Its current value is '1'. Its new value: '0'.
Action start 9:58:44: SetUpdateDriversProperty.
MSI (s) (30:78) [09:58:44:310]: Doing action: SetConfigureSAVProperty
Action ended 9:58:44: SetUpdateDriversProperty. Return value 1.
MSI (s) (30:78) [09:58:44:311]: PROPERTY CHANGE: Adding ConfigureSAV property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""0"'.
Action start 9:58:44: SetConfigureSAVProperty.
MSI (s) (30:78) [09:58:44:311]: Skipping action: ScheduleReboot (condition is false)
MSI (s) (30:78) [09:58:44:311]: Doing action: ConfigureSAV
Action ended 9:58:44: SetConfigureSAVProperty. Return value 1.
Action start 9:58:44: ConfigureSAV.
MSI (s) (30:78) [09:58:44:313]: Skipping action: SetUpdateFinished (condition is false)
MSI (s) (30:78) [09:58:44:313]: Doing action: SetInstallationComplete
Action ended 9:58:44: ConfigureSAV. Return value 1.
Action start 9:58:44: SetInstallationComplete.
MSI (s) (30:78) [09:58:44:315]: Doing action: SetCreateSavAdapterDllRegistryEntryProperty
Action ended 9:58:44: SetInstallationComplete. Return value 1.
MSI (s) (30:78) [09:58:44:316]: PROPERTY CHANGE: Adding CreateSavAdapterDllRegistryEntry property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 9:58:44: SetCreateSavAdapterDllRegistryEntryProperty.
MSI (s) (30:78) [09:58:44:316]: Doing action: CreateSavAdapterDllRegistryEntry
Action ended 9:58:44: SetCreateSavAdapterDllRegistryEntryProperty. Return value 1.
Action start 9:58:44: CreateSavAdapterDllRegistryEntry.
MSI (s) (30:78) [09:58:44:318]: Doing action: SetForceDeleteFilesProperty
Action ended 9:58:44: CreateSavAdapterDllRegistryEntry. Return value 1.
MSI (s) (30:78) [09:58:44:318]: PROPERTY CHANGE: Adding ForceDeleteFiles property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 9:58:44: SetForceDeleteFilesProperty.
MSI (s) (30:78) [09:58:44:318]: Skipping action: ForceDeleteFiles (condition is false)
MSI (s) (30:78) [09:58:44:318]: Doing action: SetAfterScriptProperty
Action ended 9:58:44: SetForceDeleteFilesProperty. Return value 1.
MSI (s) (30:78) [09:58:44:319]: PROPERTY CHANGE: Adding RunAfterScript property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\""10.8.1.217"'.
Action start 9:58:44: SetAfterScriptProperty.
MSI (s) (30:78) [09:58:44:319]: Doing action: RunAfterScript
Action ended 9:58:44: SetAfterScriptProperty. Return value 1.
Action start 9:58:44: RunAfterScript.
MSI (s) (30:78) [09:58:44:321]: Doing action: SetCopySavSyncFileProperty
Action ended 9:58:44: RunAfterScript. Return value 1.
MSI (s) (30:78) [09:58:44:321]: PROPERTY CHANGE: Adding CopySAVSyncFile property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\"'.
Action start 9:58:44: SetCopySavSyncFileProperty.
MSI (s) (30:78) [09:58:44:322]: Doing action: CopySAVSyncFile
Action ended 9:58:44: SetCopySavSyncFileProperty. Return value 1.
Action start 9:58:44: CopySAVSyncFile.
MSI (s) (30:78) [09:58:44:324]: Skipping action: RestoreWindowsDefender (condition is false)
MSI (s) (30:78) [09:58:44:324]: Skipping action: WixFailWhenDeferred (condition is false)
MSI (s) (30:78) [09:58:44:324]: Doing action: InstallFinalize
Action ended 9:58:44: CopySAVSyncFile. Return value 1.
MSI (s) (30:78) [09:58:44:324]: Running Script: C:\Windows\Installer\MSIB576.tmp
MSI (s) (30:78) [09:58:44:324]: PROPERTY CHANGE: Adding UpdateStarted property. Its value is '1'.
MSI (s) (30:78) [09:58:44:324]: Machine policy value 'DisableRollback' is 0
MSI (s) (30:78) [09:58:44:326]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (30:78) [09:58:44:327]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1284132691,LangId=1033,Platform=0,ScriptType=1,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1)
Action start 9:58:44: InstallFinalize.
MSI (s) (30:78) [09:58:44:327]: Executing op: ProductInfo(ProductKey={4BAF6F55-FFE4-4A3A-8367-CC2EBB0F11C3},ProductName=Sophos Anti-Virus,PackageName=Sophos Anti-Virus.msi,Language=1033,Version=168296449,Assignment=1,ObsoleteArg=0,ProductIcon=ARPPRODUCTICON.exe,,PackageCode={BE492755-19BA-4258-B108-9A2CCAD60D75},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0,ProductDeploymentFlags=3)
MSI (s) (30:78) [09:58:44:327]: Executing op: DialogInfo(Type=0,Argument=1033)
MSI (s) (30:78) [09:58:44:327]: Executing op: DialogInfo(Type=1,Argument=Sophos Anti-Virus)
MSI (s) (30:78) [09:58:44:327]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1])
MSI (s) (30:78) [09:58:44:327]: Executing op: SetBaseline(Baseline=0,)
MSI (s) (30:78) [09:58:44:327]: Executing op: SetBaseline(Baseline=1,)
MSI (s) (30:78) [09:58:44:327]: Executing op: ActionStart(Name=SetUpdateFailed,,)
MSI (s) (30:78) [09:58:44:328]: Executing op: CustomActionSchedule(Action=SetUpdateFailed,ActionType=1281,Source=BinaryData,Target=SetUpdateFailed,)
MSI (s) (30:78) [09:58:44:329]: Executing op: ActionStart(Name=RestoreMovedFiles,,)
MSI (s) (30:78) [09:58:44:330]: Executing op: CustomActionSchedule(Action=RestoreMovedFiles,ActionType=1281,Source=BinaryData,Target=RestoreMovedFiles,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (30:78) [09:58:44:331]: Executing op: ActionStart(Name=CheckRegForNullDACLs,,)
MSI (s) (30:78) [09:58:44:331]: Executing op: CustomActionSchedule(Action=CheckRegForNullDACLs,ActionType=1025,Source=BinaryData,Target=CheckRegForNullDACLs,)
MSI (s) (30:1C) [09:58:44:333]: Invoking remote custom action. DLL: C:\Windows\Installer\MSID1D0.tmp, Entrypoint: CheckRegForNullDACLs
MSI (s) (30!EC) [09:58:44:344]: Product: Sophos Anti-Virus -- Error 3004.Sophos Anti-Virus cannot be installed. Some registry keys do not have the correct permissions. Contact your support personnel.

CustomAction CheckRegForNullDACLs returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
MSI (s) (30:78) [09:58:44:349]: User policy value 'DisableRollback' is 0
MSI (s) (30:78) [09:58:44:349]: Machine policy value 'DisableRollback' is 0
Action ended 9:58:44: InstallFinalize. Return value 3.
MSI (s) (30:78) [09:58:44:350]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1284132695,LangId=1033,Platform=0,ScriptType=2,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1)
MSI (s) (30:78) [09:58:44:350]: Executing op: DialogInfo(Type=0,Argument=1033)
MSI (s) (30:78) [09:58:44:350]: Executing op: DialogInfo(Type=1,Argument=Sophos Anti-Virus)
MSI (s) (30:78) [09:58:44:350]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1])
MSI (s) (30:78) [09:58:44:350]: Executing op: ActionStart(Name=CheckRegForNullDACLs,,)
MSI (s) (30:78) [09:58:44:350]: Executing op: ProductInfo(ProductKey={4BAF6F55-FFE4-4A3A-8367-CC2EBB0F11C3},ProductName=Sophos Anti-Virus,PackageName=Sophos Anti-Virus.msi,Language=1033,Version=168296449,Assignment=1,ObsoleteArg=0,ProductIcon=ARPPRODUCTICON.exe,,PackageCode={BE492755-19BA-4258-B108-9A2CCAD60D75},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0,ProductDeploymentFlags=3)
MSI (s) (30:78) [09:58:44:351]: Executing op: ActionStart(Name=RestoreMovedFiles,,)
MSI (s) (30:78) [09:58:44:351]: Executing op: CustomActionRollback(Action=RestoreMovedFiles,ActionType=1281,Source=BinaryData,Target=RestoreMovedFiles,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (30:34) [09:58:44:352]: Invoking remote custom action. DLL: C:\Windows\Installer\MSID1E0.tmp, Entrypoint: RestoreMovedFiles
MSI (s) (30:78) [09:58:44:365]: Executing op: ActionStart(Name=SetUpdateFailed,,)
MSI (s) (30:78) [09:58:44:365]: Executing op: CustomActionRollback(Action=SetUpdateFailed,ActionType=1281,Source=BinaryData,Target=SetUpdateFailed,)
MSI (s) (30:64) [09:58:44:366]: Invoking remote custom action. DLL: C:\Windows\Installer\MSID1F1.tmp, Entrypoint: SetUpdateFailed
MSI (s) (30:78) [09:58:44:380]: Executing op: End(Checksum=0,ProgressTotalHDWord=0,ProgressTotalLDWord=0)
MSI (s) (30:78) [09:58:44:380]: Error in rollback skipped. Return: 5
MSI (s) (30:78) [09:58:44:382]: Note: 1: 2318 2:
MSI (s) (30:78) [09:58:44:382]: No System Restore sequence number for this installation.
MSI (s) (30:78) [09:58:44:382]: Unlocking Server
MSI (s) (30:78) [09:58:44:472]: PROPERTY CHANGE: Deleting UpdateStarted property. Its current value is '1'.
Action ended 9:58:44: INSTALL. Return value 3.
Property(S): DiskPrompt = [1]
Property(S): CONFIG = C:\ProgramData\Sophos\Sophos Anti-Virus\Config\
Property(S): INFECTED = C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\
Property(S): LOW = C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\Low\
Property(S): LOGS = C:\ProgramData\Sophos\Sophos Anti-Virus\logs\
Property(S): SAFESTORE = C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\
Property(S): TEMP = C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\
Property(S): CACHE = C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\
Property(S): LOGS1 = C:\ProgramData\Sophos\Sophos Data Control\logs\
Property(S): LOGS2 = C:\ProgramData\Sophos\Sophos Device Control\logs\
Property(S): LOGS3 = C:\ProgramData\Sophos\Sophos Tamper Protection\logs\
Property(S): INSTALLDIR = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): MsiAMD64 = 6
Property(S): Microsoft.VC90.ATL = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\
Property(S): Microsoft.VC90.CRT = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\
Property(S): INSTALLDIR_WIN32 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): INSTALLDIR_X64 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): VersionNT64 = 601
Property(S): INSTALLDIR_HOME = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): BootDriverStartup = 0
Property(S): CheckSNMPDLLPresence = C:\ProgramData\Sophos\Sophos Anti-Virus\Config
Property(S): ConfigureSAV = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""0"
Property(S): CopyOtherFiles = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\""WIN7_AMD64"
Property(S): CopySAVSyncFile = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\"
Property(S): CreateSavAdapterDllRegistryEntry = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): CreateUserGroups = C:\ProgramData\Sophos\Sophos Anti-Virus\Config
Property(S): DeleteBDLs = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): DeleteDriverKeys = 0
Property(S): DeleteHIPSConfig = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): DeleteIDEs = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): DeleteNonEngineFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): DeleteOtherFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): DisablePUADetection = C:\ProgramData\Sophos\Sophos Anti-Virus\Config
Property(S): DisableSxlLookups = C:\ProgramData\Sophos\Sophos Anti-Virus\Config
Property(S): DisableWebProtection = C:\ProgramData\Sophos\Sophos Anti-Virus\Config
Property(S): ForceDeleteFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): ForceDeleteUserPlugin = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): ALLUSERS = 2
Property(S): System64Folder = C:\Windows\SysWOW64\
Property(S): InstallBootDriverVista = C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\drivers\boottasks\wxp_i386\SOPHOSBOOTDRIVER.INF
Property(S): InstallBootDriverWin7 = C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\drivers\boottasks\win7_i386\SOPHOSBOOTDRIVER.INF
Property(S): SystemFolder = C:\Windows\SysWOW64\
Property(S): InstallClassFilterVista = C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\drivers\sdcfilter\wxp_i386\sdcfilter.inf
Property(S): InstallClassFilterWin7 = C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\drivers\sdcfilter\win7_i386\sdcfilter.inf
Property(S): InstallDeviceControl = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\"
Property(S): InstallDriverFilesVista = C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\drivers\onaccess\wlh_i386\SAVONACCESSDRIV.INF
Property(S): InstallDriverFilesWin7 = C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\drivers\onaccess\win7_i386\SAVONACCESSDRIV.INF
Property(S): InstallKMSDriver = C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\drivers\kms\wxp_i386\skmscan.inf
Property(S): InstallKMSDriverWin7 = C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\drivers\kms\win7_i386\skmscan.inf
Property(S): InstallUnsignedBootDriver = "C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\""WIN7_AMD64"
Property(S): InstallUnsignedDrivers = "C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\""WIN7_AMD64"
Property(S): MoveLockedFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\|
Property(S): RegisterBufferOverflowProtection = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): RemoveFilesOnUpgrade = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): RemoveSAVI = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): RestoreFirstInstallTime = 0
Property(S): RestoreMovedFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): RollbackBootDriverVista = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF
Property(S): RollbackClassFilterVista = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sdcfilter.inf
Property(S): RollbackDriverFilesVista = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF
Property(S): RollbackForceDeleteFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): RollbackForceDeleteUserPlugin = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): RollbackKMSDriverVista = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\skmscan.inf
Property(S): RollbackOtherFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): RollbackSavi = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): RollbackUpdateSavAdapterDll = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): RollbackUpdateDesktopMessaging = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): UpdateDesktopMessaging = ;10.8.1.217;
Property(S): RunAfterScript = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\""10.8.1.217"
Property(S): RunErrorScript = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\""10.8.1.217"
Property(S): RunPreLaunchScript = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\""10.8.1.217"
Property(S): SetAdminGroupDescription = SophosAdministrators may run Sophos Anti-Virus with complete access
Property(S): ALLUSERSPROFILE = C:\ProgramData\
Property(S): SetFolderPermissions = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): UPDATEDRIVERS = 0
Property(S): TARGETDIR = D:\
Property(S): SetOnAccessGroupDescription = Contains accounts used by Sophos Anti-Virus when it performs threat scanning and cleanup functions
Property(S): SetPowerGroupDescription = SophosPowerUsers may run Sophos Anti-Virus with the access that SophosUsers have, plus greater access to cleanup
Property(S): RollBackInstallDeviceControl = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): StartDriverServices = WIN7_AMD64
Property(S): UninstallBootDriverOnUpdate = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF
Property(S): UninstallBootDriver = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF
Property(S): UninstallClassFilterVista = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sdcfilter.inf
Property(S): UninstallDeviceControl = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\Sophos Anti-Virus\Config"
Property(S): UninstallDriverFilesOnUpdate = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF
Property(S): UninstallDriverFilesVista = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF
Property(S): UninstallKMSDriverOnUpdate = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SKMSCAN.INF
Property(S): UninstallKMSDriver = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SKMSCAN.INF
Property(S): UnregisterBufferOverflowProtection = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): UpdateSXLServerList = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\Sophos Anti-Virus\Config"
Property(S): ApplySAVControlFile = "C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\""C:\ProgramData\Sophos\Sophos Anti-Virus\Config"
Property(S): UpdateSAVI = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\"
Property(S): SetUserGroupDescription = SophosUsers may run Sophos Anti-Virus with limited access to scanning configuration and cleanup
Property(S): UpdateSavAdapterDll = ;10.8.1.217;
Property(S): USERPROFILE = C:\Users\User\
Property(S): EventType = BEGIN_SYSTEM_CHANGE
Property(S): SetupSspUserAccount = NT SERVICE\SAVService
Property(S): SetupSspUserAccountRollback = NT SERVICE\SAVService
Property(S): AddSIPSSubmitterUserAccount = NT SERVICE\SAVService
Property(S): AddSIPSSubmitterUserAccountRollback = NT SERVICE\SAVService
Property(S): ARPINSTALLLOCATION = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): SAVSERVICEUSER = NT SERVICE\SavService
Property(S): ExecSecureObjects = C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\€CreateFolder€€NT SERVICE\SavService€268435456€MACHINE\SOFTWARE\Sophos\SAVService\Config€Registry€€NT SERVICE\SavService€268435456€MACHINE\SOFTWARE\Sophos\SAVService\Telemetry€Registry€€NT SERVICE\SavService€268435456€MACHINE\SOFTWARE\Sophos\SAVService\ThreatLifetime€Registry€€NT SERVICE\SavService€268435456
Property(S): RegisterEventManifest = "wevtutil.exe" im "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man"
Property(S): RollbackRegisterEventManifest = "wevtutil.exe" um "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man"
Property(S): ExecXmlFile = 1€0€C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man€7€1€/*/*/*/*[@messageFileName]€messageFileName€C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll€7€1€/*/*/*/*[@parameterFileName]€parameterFileName€C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll€1€0€C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man€7€1€/*/*/*/*[@resourceFileName]€resourceFileName€C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll
Property(S): AdminToolsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\
Property(S): CommonFiles64Folder = C:\Program Files (x86)\Common Files\
Property(S): DesktopFolder = C:\Users\Public\Desktop\
Property(S): FavoritesFolder = C:\Users\User\Favorites\
Property(S): FontsFolder = C:\Windows\Fonts\
Property(S): GlobalAssemblyCache = D:\
Property(S): LocalAppDataFolder = C:\Users\User\AppData\Local\
Property(S): PrimaryVolumePath = D:\
Property(S): ProgramFiles64Folder = C:\Program Files (x86)\
Property(S): SendToFolder = C:\Users\User\AppData\Roaming\Microsoft\Windows\SendTo\
Property(S): StartupFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Property(S): System16Folder = D:\
Property(S): TempFolder = C:\Users\User\AppData\Local\Temp\
Property(S): TemplateFolder = C:\ProgramData\Microsoft\Windows\Templates\
Property(S): WindowsFolder = C:\Windows\
Property(S): WindowsVolume = C:\
Property(S): RESOURCES = C:\ProgramData\Sophos\Sophos Anti-Virus\
Property(S): NEW_DIRECTORY3 = C:\ProgramData\Sophos\Sophos Anti-Virus\Res\
Property(S): RES = C:\ProgramData\Sophos\Sophos Anti-Virus\Res\
Property(S): NEW_DIRECTORY1 = C:\ProgramData\Sophos\
Property(S): SOPHOS_DATA_CONTROL = C:\ProgramData\Sophos\Sophos Data Control\
Property(S): SOPHOS_DEVICE_CONTROL = C:\ProgramData\Sophos\Sophos Device Control\
Property(S): SOPHOS_TAMPER_PROTECTION = C:\ProgramData\Sophos\Sophos Tamper Protection\
Property(S): CommonAppDataFolder = C:\ProgramData\
Property(S): SOPHOS_ANTI_VIRUS = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): SOPHOS = C:\Program Files (x86)\Sophos\
Property(S): ProgramFilesFolder = C:\Program Files (x86)\
Property(S): NEW_DIRECTORY2 = C:\ProgramData\Microsoft\Windows\Start Menu\Sophos\
Property(S): StartMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\
Property(S): newfolder2 = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\Sophos Endpoint Security and Control\
Property(S): newfolder1 = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\
Property(S): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
Property(S): SourceDir = C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\
Property(S): VersionNT = 601
Property(S): AdminUser = 1
Property(S): Manufacturer = Sophos Limited
Property(S): ProductCode = {4BAF6F55-FFE4-4A3A-8367-CC2EBB0F11C3}
Property(S): ProductLanguage = 1033
Property(S): ProductName = Sophos Anti-Virus
Property(S): ProductVersion = 10.8.1.217
Property(S): UpgradeCode = {597B239E-3032-491A-A322-817737925E8A}
Property(S): _IsMaintenance = Change
Property(S): _IsSetupTypeMin = Typical
Property(S): AFTERREBOOT = 0
Property(S): AgreeToLicense = No
Property(S): ApplicationUsers = AllUsers
Property(S): APPLYCLASSICCONFIG = 0
Property(S): ARPCOMMENTS = Protects your computer and network from threats
Property(S): ARPCONTACT = Sophos Technical Support
Property(S): ARPHELPLINK = http://www.sophos.com/support
Property(S): ARPHELPTELEPHONE =
Property(S): ARPNOMODIFY = 1
Property(S): ARPNOREPAIR = 1
Property(S): ARPPRODUCTICON = ARPPRODUCTICON.exe
Property(S): ARPURLINFOABOUT = http://www.sophos.com
Property(S): ARPURLUPDATEINFO = www.sophos.com/.../updates
Property(S): BOOTDRIVERSIGNED = 1
Property(S): CHECKFORCOMPETITORS = 1
Property(S): CHECKFORSCF = 1
Property(S): CLASSFILTERPRESENT = 0
Property(S): CopyBDLs = 0
Property(S): CopyIDEs = 0
Property(S): DATACONTROL = 1
Property(S): DefaultUIFont = Tahoma8
Property(S): DEVICECONTROL = 1
Property(S): DialogCaption = Sophos Installer
Property(S): DISABLEONACCESS = 0
Property(S): Display_IsBitmapDlg = 1
Property(S): DisplayNameCustom = Custom
Property(S): DisplayNameMinimal = Minimal
Property(S): DisplayNameTypical = Typical
Property(S): DRIVERVERSION = WIN7_AMD64
Property(S): FIRST_INSTALL_DATE = 0
Property(S): IDEONLY = 0
Property(S): InstallChoice = AR
Property(S): INSTALLLEVEL = 100
Property(S): IS_COMPLUS_PROGRESSTEXT_COST = Costing COM+ application: [1]
Property(S): IS_COMPLUS_PROGRESSTEXT_INSTALL = Installing COM+ application: [1]
Property(S): IS_COMPLUS_PROGRESSTEXT_UNINSTALL = Uninstalling COM+ application: [1]
Property(S): IS_PROGMSG_XML_COSTING = Costing XML files...
Property(S): IS_PROGMSG_XML_CREATE_FILE = Creating XML file %s...
Property(S): IS_PROGMSG_XML_FILES = Performing XML file changes...
Property(S): IS_PROGMSG_XML_REMOVE_FILE = Removing XML file %s...
Property(S): IS_PROGMSG_XML_ROLLBACK_FILES = Rolling back XML file changes...
Property(S): IS_PROGMSG_XML_UPDATE_FILE = Updating XML file %s...
Property(S): IS_SQLSERVER_AUTHENTICATION = 0
Property(S): IS_SQLSERVER_USERNAME = sa
Property(S): ISReleaseFlags = SAV
Property(S): ISVROOT_PORT_NO = 0
Property(S): MAJORUPGRADE = 0
Property(S): MANAGED = 1
Property(S): MSIRESTARTMANAGERCONTROL = Disable
Property(S): NEEDREBOOT = 0
Property(S): PIDTemplate = 12345<###-%%%%%%%>@@@@@
Property(S): PRODUCTTYPE = 0
Property(S): PROCESSOR_NX_ENABLED = 1
Property(S): PROGMSG_IIS_CREATEAPPPOOL = Creating application pool %s
Property(S): PROGMSG_IIS_CREATEAPPPOOLS = Creating application Pools...
Property(S): PROGMSG_IIS_CREATEVROOT = Creating IIS virtual directory %s
Property(S): PROGMSG_IIS_CREATEVROOTS = Creating IIS virtual directories...
Property(S): PROGMSG_IIS_CREATEWEBSERVICEEXTENSION = Creating web service extension
Property(S): PROGMSG_IIS_CREATEWEBSERVICEEXTENSIONS = Creating web service extensions...
Property(S): PROGMSG_IIS_EXTRACT = Extracting information for IIS virtual directories...
Property(S): PROGMSG_IIS_EXTRACTDONE = Extracted information for IIS virtual directories...
Property(S): PROGMSG_IIS_REMOVEAPPPOOL = Removing application pool
Property(S): PROGMSG_IIS_REMOVEAPPPOOLS = Removing application pools...
Property(S): PROGMSG_IIS_REMOVESITE = Removing web site at port %d
Property(S): PROGMSG_IIS_REMOVEVROOT = Removing IIS virtual directory %s
Property(S): PROGMSG_IIS_REMOVEVROOTS = Removing IIS virtual directories...
Property(S): PROGMSG_IIS_REMOVEWEBSERVICEEXTENSION = Removing web service extension
Property(S): PROGMSG_IIS_REMOVEWEBSERVICEEXTENSIONS = Removing web service extensions...
Property(S): PROGMSG_IIS_ROLLBACKAPPPOOLS = Rolling back application pools...
Property(S): PROGMSG_IIS_ROLLBACKVROOTS = Rolling back virtual directory and web site changes...
Property(S): PROGMSG_IIS_ROLLBACKWEBSERVICEEXTENSIONS = Rolling back web service extensions...
Property(S): ProgressType0 = install
Property(S): ProgressType1 = Installing
Property(S): ProgressType2 = installed
Property(S): ProgressType3 = installs
Property(S): RebootYesNo = Yes
Property(S): Registration = No
Property(S): ReinstallModeText = omus
Property(S): SAVIONLY = 0
Property(S): SCRIPTDIR = [SOURCEDIR]
Property(S): SequenceNumber = 0
Property(S): SetupType = Typical
Property(S): SYNCMODE = 1
Property(S): UITYPE = none
Property(S): UNINSTALLBOOTDRIVERS = 1
Property(S): UNINSTALLCLASSFILTER = 1
Property(S): UNINSTALLDRIVERS = 1
Property(S): UNINSTALLERROR = An older version of Sophos Anti-Virus has not been fully removed from your machine. Please reboot your machine before attempting to install Sophos Anti-Virus.
Property(S): UNINSTALLKMSDRIVERS = 1
Property(S): UPDATEBOOTDRIVERS = 1
Property(S): UPDATECLASSFILTER = 1
Property(S): VIRUSDATAUPDATE = 0
Property(S): SecureCustomProperties = EXCLUDEDPROCESSES;INSTALLINGVERSION;MAJORUPGRADE;WEBCONTROL
Property(S): WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\
Property(S): SwcHookSAU.92A5750A_B99C_4D18_8E96_314353D4097A = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlMessaging.dll
Property(S): SwcHookRMS.92A5750A_B99C_4D18_8E96_314353D4097A = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\SWCAdapter.dll
Property(S): SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\
Property(S): SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\
Property(S): SwiServiceRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 = swi_service
Property(S): SwiServiceRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101 = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe" /registerService
Property(S): SwiUpdateInstall64.11DACB83_28A7_4FA6_AF5B_C006E340C101 = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update_64.exe" /update
Property(S): REBOOTREQUIREDFILE.11DACB83_28A7_4FA6_AF5B_C006E340C101 = SwiRebootRequired.txt
Property(S): MsiLogFileLocation = C:\Users\User\AppData\Local\Temp\Sophos Anti-Virus Major Install Log_180410_065836.txt
Property(S): PackageCode = {BE492755-19BA-4258-B108-9A2CCAD60D75}
Property(S): ProductState = -1
Property(S): PackagecodeChanging = 1
Property(S): ARPSYSTEMCOMPONENT = 1
Property(S): REBOOT = ReallySuppress
Property(S): UPDATEKMSDRIVERS = 1
Property(S): RECOVERYMODE = 0
Property(S): WEBCONTROL = 1
Property(S): CURRENTDIRECTORY = C:\Program Files (x86)\Sophos\CloudInstaller
Property(S): CLIENTUILEVEL = 3
Property(S): MSICLIENTUSESEXTERNALUI = 1
Property(S): CLIENTPROCESSID = 892
Property(S): MsiSystemRebootPending = 1
Property(S): VersionDatabase = 200
Property(S): VersionMsi = 5.00
Property(S): WindowsBuild = 7601
Property(S): ServicePackLevel = 1
Property(S): ServicePackLevelMinor = 0
Property(S): MsiNTProductType = 1
Property(S): RemoteAdminTS = 1
Property(S): CommonFilesFolder = C:\Program Files (x86)\Common Files\
Property(S): AppDataFolder = C:\Users\User\AppData\Roaming\
Property(S): NetHoodFolder = C:\Users\User\AppData\Roaming\Microsoft\Windows\Network Shortcuts\
Property(S): PersonalFolder = C:\Users\User\Documents\
Property(S): PrintHoodFolder = C:\Users\User\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\
Property(S): RecentFolder = C:\Users\User\AppData\Roaming\Microsoft\Windows\Recent\
Property(S): MyPicturesFolder = C:\Users\User\Pictures\
Property(S): GPTSupport = 1
Property(S): OLEAdvtSupport = 1
Property(S): ShellAdvtSupport = 1
Property(S): Msix64 = 6
Property(S): Intel = 6
Property(S): PhysicalMemory = 8100
Property(S): VirtualMemory = 13634
Property(S): MsiTrueAdminUser = 1
Property(S): LogonUser = User
Property(S): UserSID = S-1-5-21-2592158397-2460924496-3104589336-1000
Property(S): UserLanguageID = 1033
Property(S): ComputerName = B-SHOP
Property(S): SystemLanguageID = 1033
Property(S): ScreenX = 1024
Property(S): ScreenY = 768
Property(S): CaptionHeight = 22
Property(S): BorderTop = 1
Property(S): BorderSide = 1
Property(S): TextHeight = 16
Property(S): TextInternalLeading = 3
Property(S): ColorBits = 32
Property(S): TTCSupport = 1
Property(S): Time = 9:58:44
Property(S): Date = 4/10/2018
Property(S): MsiNetAssemblySupport = 2.0.50727.4927
Property(S): MsiWin32AssemblySupport = 6.1.7601.17514
Property(S): RedirectedDllSupport = 2
Property(S): MsiRunningElevated = 1
Property(S): Privileged = 1
Property(S): USERNAME = User
Property(S): DATABASE = C:\Windows\Installer\97e71b.msi
Property(S): OriginalDatabase = C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Sophos Anti-Virus.msi
Property(S): UILevel = 2
Property(S): ACTION = INSTALL
Property(S): ROOTDRIVE = D:\
Property(S): CostingComplete = 1
Property(S): OutOfDiskSpace = 0
Property(S): OutOfNoRbDiskSpace = 0
Property(S): PrimaryVolumeSpaceAvailable = 0
Property(S): PrimaryVolumeSpaceRequired = 0
Property(S): PrimaryVolumeSpaceRemaining = 0
Property(S): SOURCEDIR = C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\
Property(S): SourcedirProduct = {4BAF6F55-FFE4-4A3A-8367-CC2EBB0F11C3}
Property(S): ProductToBeRegistered = 1
MSI (s) (30:78) [09:58:44:540]: Note: 1: 1708
MSI (s) (30:78) [09:58:44:541]: Product: Sophos Anti-Virus -- Installation operation failed.

MSI (s) (30:78) [09:58:44:541]: Windows Installer installed the product. Product Name: Sophos Anti-Virus. Product Version: 10.8.1.217. Product Language: 1033. Manufacturer: Sophos Limited. Installation success or error status: 1603.

MSI (s) (30:78) [09:58:44:544]: Deferring clean up of packages/files, if any exist
MSI (s) (30:78) [09:58:44:544]: MainEngineThread is returning 1603
MSI (s) (30:34) [09:58:44:544]: No System Restore sequence number for this installation.
=== Logging stopped: 10/Apr/2018 9:58:44 ===
MSI (s) (30:34) [09:58:44:545]: User policy value 'DisableRollback' is 0
MSI (s) (30:34) [09:58:44:545]: Machine policy value 'DisableRollback' is 0
MSI (s) (30:34) [09:58:44:545]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (30:34) [09:58:44:545]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (30:34) [09:58:44:545]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (30:34) [09:58:44:545]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (s) (30:34) [09:58:44:545]: Restoring environment variables
MSI (s) (30:34) [09:58:44:546]: Destroying RemoteAPI object.
MSI (s) (30:70) [09:58:44:546]: Custom Action Manager thread ending.
MSI (c) (7C:E4) [09:58:44:546]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (c) (7C:E4) [09:58:44:547]: MainEngineThread is returning 1603
=== Verbose logging stopped: 10/Apr/2018 9:58:44 ===

2018-04-10 09:58:44 ERROR: Installation failed
2018-04-10 09:58:44 ERROR: SetupPlugin: Unable to get buffer size for Application registry key Path value.
2018-04-10 09:58:44 ERROR: Failed to get current install location to register with tamper protection. Error 0x80070002