Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- === Verbose logging started: 2/8/2016 10:37:19 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\setup.exe ===
- MSI (c) (0C:FC) [10:37:19:212]: Resetting cached policy values
- MSI (c) (0C:FC) [10:37:19:212]: Machine policy value 'Debug' is 0
- MSI (c) (0C:FC) [10:37:19:212]: ******* RunEngine:
- ******* Product: C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos Management Communications System.msi
- ******* Action:
- ******* CommandLine: **********
- MSI (c) (0C:FC) [10:37:19:212]: Client-side and UI is none or basic: Running entire install on the server.
- MSI (c) (0C:FC) [10:37:19:212]: Grabbed execution mutex.
- MSI (c) (0C:FC) [10:37:19:265]: Cloaking enabled.
- MSI (c) (0C:FC) [10:37:19:265]: Attempting to enable all disabled privileges before calling Install on Server
- MSI (c) (0C:FC) [10:37:19:265]: Incrementing counter to disable shutdown. Counter after increment: 0
- MSI (s) (C0:A8) [10:37:19:265]: Running installation inside multi-package transaction C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos Management Communications System.msi
- MSI (s) (C0:A8) [10:37:19:265]: Grabbed execution mutex.
- MSI (s) (C0:18) [10:37:19:265]: Resetting cached policy values
- MSI (s) (C0:18) [10:37:19:265]: Machine policy value 'Debug' is 0
- MSI (s) (C0:18) [10:37:19:265]: ******* RunEngine:
- ******* Product: C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos Management Communications System.msi
- ******* Action:
- ******* CommandLine: **********
- MSI (s) (C0:18) [10:37:19:281]: Machine policy value 'DisableUserInstalls' is 0
- MSI (s) (C0:18) [10:37:19:281]: Setting cached product context: User non-assigned for product: #
- MSI (s) (C0:18) [10:37:19:281]: Using cached product context: User non-assigned for product: #
- MSI (s) (C0:18) [10:37:19:281]: Setting cached product context: machine assigned for product: #
- MSI (s) (C0:18) [10:37:19:281]: Using cached product context: machine assigned for product: #
- ... ...
- MSI (s) (C0:18) [10:37:19:281]: Note: 1: 2203 2: C:\WINDOWS\Installer\inprogressinstallinfo.ipi 3: -2147287038
- MSI (s) (C0:18) [10:37:19:281]: SRSetRestorePoint skipped for this transaction.
- MSI (s) (C0:18) [10:37:19:281]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2
- MSI (s) (C0:18) [10:37:19:281]: File will have security applied from OpCode.
- MSI (s) (C0:18) [10:37:19:281]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos Management Communications System.msi' against software restriction policy
- MSI (s) (C0:18) [10:37:19:281]: SOFTWARE RESTRICTION POLICY: C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos Management Communications System.msi has a digital signature
- MSI (s) (C0:18) [10:37:19:334]: SOFTWARE RESTRICTION POLICY: C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos Management Communications System.msi is permitted to run at the 'unrestricted' authorization level.
- MSI (s) (C0:18) [10:37:19:334]: Creating MSIHANDLE (1) of type 790542 for thread 1048
- MSI (s) (C0:18) [10:37:19:334]: MSCOREE not loaded loading copy from system32
- MSI (s) (C0:18) [10:37:19:334]: End dialog not enabled
- MSI (s) (C0:18) [10:37:19:334]: Original package ==> C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos Management Communications System.msi
- MSI (s) (C0:18) [10:37:19:334]: Package we're running from ==> C:\WINDOWS\Installer\1343bf77.msi
- MSI (s) (C0:18) [10:37:19:334]: APPCOMPAT: Compatibility mode property overrides found.
- MSI (s) (C0:18) [10:37:19:334]: APPCOMPAT: looking for appcompat database entry with ProductCode '{1FFD3F20-5D24-4C9A-B9F6-A207A53CF179}'.
- MSI (s) (C0:18) [10:37:19:334]: APPCOMPAT: no matching ProductCode found in database.
- MSI (s) (C0:18) [10:37:19:350]: Machine policy value 'TransformsSecure' is 0
- MSI (s) (C0:18) [10:37:19:350]: User policy value 'TransformsAtSource' is 0
- MSI (s) (C0:18) [10:37:19:350]: Machine policy value 'DisablePatch' is 0
- MSI (s) (C0:18) [10:37:19:350]: Machine policy value 'AllowLockdownPatch' is 0
- MSI (s) (C0:18) [10:37:19:350]: Machine policy value 'DisableLUAPatching' is 0
- MSI (s) (C0:18) [10:37:19:350]: Machine policy value 'DisableFlyWeightPatching' is 0
- MSI (s) (C0:18) [10:37:19:350]: Enabling baseline caching for this transaction since all active patches are MSI 3.0 style MSPs or at least one MSI 3.0 minor update patch is active
- MSI (s) (C0:18) [10:37:19:350]: APPCOMPAT: looking for appcompat database entry with ProductCode '{#}'.
- MSI (s) (C0:18) [10:37:19:350]: APPCOMPAT: no matching ProductCode found in database.
- MSI (s) (C0:18) [10:37:19:350]: Transforms are not secure.
- MSI (s) (C0:18) [10:37:19:350]: Note: 1: 2205 2: 3: Control
- MSI (s) (C0:18) [10:37:19:350]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\Users\AndiN\AppData\Local\Temp\Sophos MCS Install Log.txt'.
- MSI (s) (C0:18) [10:37:19:350]: Command Line: REBOOT=REALLYSUPPRESS TOKEN=cfff535be855636d9cebcdf24ea26fdfa5313c75512a42bf2085f7a258cff140 SERVER=dzr-mcs-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com PROXIES= PROXYCREDENTIALS= CURRENTDIRECTORY=C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap CLIENTUILEVEL=3 CLIENTPROCESSID=3852
- MSI (s) (C0:18) [10:37:19:350]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{#}'.
- MSI (s) (C0:18) [10:37:19:350]: Product Code passed to Engine.Initialize: ''
- MSI (s) (C0:18) [10:37:19:350]: Product Code from property table before transforms: '{#}'
- MSI (s) (C0:18) [10:37:19:350]: Product Code from property table after transforms: '{#}'
- MSI (s) (C0:18) [10:37:19:350]: Product not registered: beginning first-time install
- MSI (s) (C0:18) [10:37:19:350]: Product {#} is not managed.
- MSI (s) (C0:18) [10:37:19:350]: MSI_LUA: Credential prompt not required, user is an admin
- MSI (s) (C0:18) [10:37:19:350]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
- MSI (s) (C0:18) [10:37:19:350]: Entering CMsiConfigurationManager::SetLastUsedSource.
- MSI (s) (C0:18) [10:37:19:350]: User policy value 'SearchOrder' is 'nmu'
- MSI (s) (C0:18) [10:37:19:350]: Adding new sources is allowed.
- MSI (s) (C0:18) [10:37:19:350]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
- MSI (s) (C0:18) [10:37:19:350]: Package name extracted from package path: 'Sophos Management Communications System.msi'
- MSI (s) (C0:18) [10:37:19:350]: Package to be registered: 'Sophos Management Communications System.msi'
- MSI (s) (C0:18) [10:37:19:350]: Note: 1: 2262 2: AdminProperties 3: -2147287038
- MSI (s) (C0:18) [10:37:19:350]: Machine policy value 'DisableMsi' is 0
- MSI (s) (C0:18) [10:37:19:350]: Machine policy value 'AlwaysInstallElevated' is 0
- MSI (s) (C0:18) [10:37:19:350]: User policy value 'AlwaysInstallElevated' is 0
- MSI (s) (C0:18) [10:37:19:350]: Product installation will be elevated because user is admin and product is being installed per-machine.
- MSI (s) (C0:18) [10:37:19:350]: Running product '{#}' with elevated privileges: Product is assigned.
- MSI (s) (C0:18) [10:37:19:350]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'REALLYSUPPRESS'.
- MSI (s) (C0:18) [10:37:19:350]: PROPERTY CHANGE: Adding TOKEN property. Its value is 'cfff535be855636d9cebcdf24ea26fdfa5313c75512a42bf2085f7a258cff140'.
- MSI (s) (C0:18) [10:37:19:350]: PROPERTY CHANGE: Adding SERVER property. Its value is 'dzr-mcs-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com'.
- MSI (s) (C0:18) [10:37:19:350]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap'.
- MSI (s) (C0:18) [10:37:19:350]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'.
- MSI (s) (C0:18) [10:37:19:350]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '3852'.
- MSI (s) (C0:18) [10:37:19:350]: Machine policy value 'DisableAutomaticApplicationShutdown' is 0
- MSI (s) (C0:18) [10:37:19:350]: PROPERTY CHANGE: Adding MsiRestartManagerSessionKey property. Its value is '9bd3308e921b3947b86d11c50c92722e'.
- MSI (s) (C0:18) [10:37:19:350]: RESTART MANAGER: Session opened.
- MSI (s) (C0:18) [10:37:19:350]: TRANSFORMS property is now:
- MSI (s) (C0:18) [10:37:19:350]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '300'.
- MSI (s) (C0:18) [10:37:19:350]: SHELL32::SHGetFolderPath returned: C:\Users\AndiN\AppData\Roaming
- MSI (s) (C0:18) [10:37:19:350]: SHELL32::SHGetFolderPath returned: C:\Users\AndiN\Favorites
- MSI (s) (C0:18) [10:37:19:350]: SHELL32::SHGetFolderPath returned: C:\Users\AndiN\AppData\Roaming\Microsoft\Windows\Network Shortcuts
- MSI (s) (C0:18) [10:37:19:350]: SHELL32::SHGetFolderPath returned: C:\Users\AndiN\Documents
- MSI (s) (C0:18) [10:37:19:365]: SHELL32::SHGetFolderPath returned: C:\Users\AndiN\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
- MSI (s) (C0:18) [10:37:19:365]: SHELL32::SHGetFolderPath returned: C:\Users\AndiN\AppData\Roaming\Microsoft\Windows\Recent
- MSI (s) (C0:18) [10:37:19:365]: SHELL32::SHGetFolderPath returned: C:\Users\AndiN\AppData\Roaming\Microsoft\Windows\SendTo
- MSI (s) (C0:18) [10:37:19:365]: SHELL32::SHGetFolderPath returned: C:\Users\AndiN\AppData\Roaming\Microsoft\Windows\Templates
- MSI (s) (C0:18) [10:37:19:365]: SHELL32::SHGetFolderPath returned: C:\ProgramData
- MSI (s) (C0:18) [10:37:19:365]: SHELL32::SHGetFolderPath returned: C:\Users\AndiN\AppData\Local
- MSI (s) (C0:18) [10:37:19:365]: SHELL32::SHGetFolderPath returned: C:\Users\AndiN\Pictures
- MSI (s) (C0:18) [10:37:19:365]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
- MSI (s) (C0:18) [10:37:19:365]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
- MSI (s) (C0:18) [10:37:19:365]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
- MSI (s) (C0:18) [10:37:19:365]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu
- MSI (s) (C0:18) [10:37:19:365]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop
- MSI (s) (C0:18) [10:37:19:365]: SHELL32::SHGetFolderPath returned: C:\Users\AndiN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
- MSI (s) (C0:18) [10:37:19:365]: SHELL32::SHGetFolderPath returned: C:\Users\AndiN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
- MSI (s) (C0:18) [10:37:19:365]: SHELL32::SHGetFolderPath returned: C:\Users\AndiN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
- MSI (s) (C0:18) [10:37:19:365]: SHELL32::SHGetFolderPath returned: C:\Users\AndiN\AppData\Roaming\Microsoft\Windows\Start Menu
- MSI (s) (C0:18) [10:37:19:365]: SHELL32::SHGetFolderPath returned: C:\Users\AndiN\Desktop
- MSI (s) (C0:18) [10:37:19:365]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates
- MSI (s) (C0:18) [10:37:19:365]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\Fonts
- MSI (s) (C0:18) [10:37:19:365]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
- MSI (s) (C0:18) [10:37:19:381]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated.
- MSI (s) (C0:18) [10:37:19:381]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'.
- MSI (s) (C0:18) [10:37:19:381]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
- MSI (s) (C0:18) [10:37:19:381]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
- MSI (s) (C0:18) [10:37:19:381]: PROPERTY CHANGE: Adding USERNAME property. Its value is '[email protected]'.
- MSI (s) (C0:18) [10:37:19:381]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
- MSI (s) (C0:18) [10:37:19:381]: PROPERTY CHANGE: Adding COMPANYNAME property. Its value is 'Microsoft'.
- MSI (s) (C0:18) [10:37:19:381]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\WINDOWS\Installer\1343bf77.msi'.
- MSI (s) (C0:18) [10:37:19:381]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos Management Communications System.msi'.
- MSI (s) (C0:18) [10:37:19:381]: Machine policy value 'MsiDisableEmbeddedUI' is 0
- MSI (s) (C0:18) [10:37:19:381]: EEUI - Disabling MsiEmbeddedUI for service because it's not a quiet/basic install
- MSI (s) (C0:18) [10:37:19:381]: Note: 1: 2205 2: 3: PatchPackage
- MSI (s) (C0:18) [10:37:19:381]: Machine policy value 'DisableRollback' is 0
- MSI (s) (C0:18) [10:37:19:381]: User policy value 'DisableRollback' is 0
- MSI (s) (C0:18) [10:37:19:381]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
- === Logging started: 2/8/2016 10:37:19 ===
- MSI (s) (C0:18) [10:37:19:381]: Note: 1: 2203 2: C:\WINDOWS\Installer\inprogressinstallinfo.ipi 3: -2147287038
- MSI (s) (C0:18) [10:37:19:381]: APPCOMPAT: [DetectVersionLaunchCondition] Launch condition already passes.
- MSI (s) (C0:18) [10:37:19:381]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
- MSI (s) (C0:18) [10:37:19:381]: Doing action: INSTALL
- MSI (s) (C0:18) [10:37:19:381]: Note: 1: 2205 2: 3: ActionText
- Action start 10:37:19: INSTALL.
- MSI (s) (C0:18) [10:37:19:381]: Running ExecuteSequence
- MSI (s) (C0:18) [10:37:19:381]: Doing action: SystemFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF
- MSI (s) (C0:18) [10:37:19:381]: Note: 1: 2205 2: 3: ActionText
- MSI (s) (C0:18) [10:37:19:381]: PROPERTY CHANGE: Adding SystemFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'C:\WINDOWS\SysWOW64\'.
- Action start 10:37:19: SystemFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF.
- MSI (s) (C0:18) [10:37:19:381]: Doing action: FindRelatedProducts
- MSI (s) (C0:18) [10:37:19:381]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: SystemFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF. Return value 1.
- Action start 10:37:19: FindRelatedProducts.
- MSI (s) (C0:18) [10:37:19:381]: Doing action: AppSearch
- MSI (s) (C0:18) [10:37:19:381]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: FindRelatedProducts. Return value 1.
- Action start 10:37:19: AppSearch.
- MSI (s) (C0:18) [10:37:19:381]: Note: 1: 1322 2:
- MSI (s) (C0:18) [10:37:19:381]: Note: 1: 1322 2:
- MSI (s) (C0:18) [10:37:19:381]: Doing action: LaunchConditions
- MSI (s) (C0:18) [10:37:19:381]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: AppSearch. Return value 1.
- Action start 10:37:19: LaunchConditions.
- MSI (s) (C0:18) [10:37:19:381]: Doing action: ValidateProductID
- MSI (s) (C0:18) [10:37:19:381]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: LaunchConditions. Return value 1.
- Action start 10:37:19: ValidateProductID.
- MSI (s) (C0:18) [10:37:19:381]: Doing action: WindowsFolder.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4
- MSI (s) (C0:18) [10:37:19:381]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: ValidateProductID. Return value 1.
- MSI (s) (C0:18) [10:37:19:381]: PROPERTY CHANGE: Adding WindowsFolder.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 property. Its value is 'C:\WINDOWS\'.
- Action start 10:37:19: WindowsFolder.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4.
- MSI (s) (C0:18) [10:37:19:381]: Doing action: WindowsFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF
- MSI (s) (C0:18) [10:37:19:381]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: WindowsFolder.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4. Return value 1.
- MSI (s) (C0:18) [10:37:19:381]: PROPERTY CHANGE: Adding WindowsFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'C:\WINDOWS\'.
- Action start 10:37:19: WindowsFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF.
- MSI (s) (C0:18) [10:37:19:381]: Doing action: CostInitialize
- MSI (s) (C0:18) [10:37:19:381]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: WindowsFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF. Return value 1.
- MSI (s) (C0:18) [10:37:19:381]: Machine policy value 'MaxPatchCacheSize' is 10
- MSI (s) (C0:18) [10:37:19:381]: Baseline: Sorting baselines for {1FFD3F20-5D24-4C9A-B9F6-A207A53CF179}.
- MSI (s) (C0:18) [10:37:19:381]: Baseline: New baseline 2.0.0 from transaction.
- MSI (s) (C0:18) [10:37:19:381]: Baseline: Sorted order Native: Order 0.
- MSI (s) (C0:18) [10:37:19:381]: Baseline Data Table:
- MSI (s) (C0:18) [10:37:19:381]: ProductCode: {#} Version: 2.0.0 Attributes: 0 PatchId: Native BaselineId: -2147483648 Order: 0
- MSI (s) (C0:18) [10:37:19:381]: Baseline File Table:
- MSI (s) (C0:18) [10:37:19:381]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'C:\'.
- MSI (s) (C0:18) [10:37:19:381]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'.
- MSI (s) (C0:18) [10:37:19:381]: Note: 1: 2205 2: 3: Patch
- MSI (s) (C0:18) [10:37:19:381]: Note: 1: 2205 2: 3: PatchPackage
- MSI (s) (C0:18) [10:37:19:381]: Note: 1: 2205 2: 3: MsiPatchHeaders
- MSI (s) (C0:18) [10:37:19:381]: Note: 1: 2205 2: 3: __MsiPatchFileList
- MSI (s) (C0:18) [10:37:19:381]: Note: 1: 2205 2: 3: PatchPackage
- MSI (s) (C0:18) [10:37:19:381]: Note: 1: 2228 2: 3: PatchPackage 4: SELECT `DiskId`, `PatchId`, `LastSequence` FROM `Media`, `PatchPackage` WHERE `Media`.`DiskId`=`PatchPackage`.`Media_` ORDER BY `DiskId`
- MSI (s) (C0:18) [10:37:19:381]: Delta compression fallback method for this product transaction is 'MSI 2.0 legacy obsolescence'
- MSI (s) (C0:18) [10:37:19:381]: Note: 1: 2205 2: 3: Patch
- Action start 10:37:19: CostInitialize.
- MSI (s) (C0:18) [10:37:19:381]: Doing action: FileCost
- MSI (s) (C0:18) [10:37:19:381]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: CostInitialize. Return value 1.
- MSI (s) (C0:18) [10:37:19:381]: Note: 1: 2205 2: 3: Class
- MSI (s) (C0:18) [10:37:19:381]: Note: 1: 2205 2: 3: Extension
- MSI (s) (C0:18) [10:37:19:381]: Note: 1: 2205 2: 3: TypeLib
- Action start 10:37:19: FileCost.
- MSI (s) (C0:18) [10:37:19:381]: Doing action: CostFinalize
- MSI (s) (C0:18) [10:37:19:381]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: FileCost. Return value 1.
- MSI (s) (C0:18) [10:37:19:381]: PROPERTY CHANGE: Adding OutOfDiskSpace property. Its value is '0'.
- MSI (s) (C0:18) [10:37:19:381]: PROPERTY CHANGE: Adding OutOfNoRbDiskSpace property. Its value is '0'.
- MSI (s) (C0:18) [10:37:19:381]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceAvailable property. Its value is '0'.
- MSI (s) (C0:18) [10:37:19:381]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRequired property. Its value is '0'.
- MSI (s) (C0:18) [10:37:19:381]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRemaining property. Its value is '0'.
- MSI (s) (C0:18) [10:37:19:381]: Note: 1: 2205 2: 3: Patch
- MSI (s) (C0:18) [10:37:19:381]: Note: 1: 2205 2: 3: Condition
- MSI (s) (C0:18) [10:37:19:381]: PROPERTY CHANGE: Adding TARGETDIR property. Its value is 'C:\'.
- MSI (s) (C0:18) [10:37:19:381]: PROPERTY CHANGE: Adding INSTALLDIR.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0 property. Its value is 'C:\'.
- MSI (s) (C0:18) [10:37:19:397]: PROPERTY CHANGE: Adding Sophos property. Its value is 'C:\Program Files (x86)\Sophos\'.
- MSI (s) (C0:18) [10:37:19:397]: PROPERTY CHANGE: Adding ManagementCommunicationSystem property. Its value is 'C:\Program Files (x86)\Sophos\Management Communications System\'.
- MSI (s) (C0:18) [10:37:19:397]: PROPERTY CHANGE: Adding INSTALLDIR property. Its value is 'C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\'.
- MSI (s) (C0:18) [10:37:19:397]: PROPERTY CHANGE: Adding WinSxsDirectory.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'C:\WINDOWS\winsxs\'.
- MSI (s) (C0:18) [10:37:19:397]: PROPERTY CHANGE: Adding policydir_ul.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'C:\WINDOWS\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\'.
- MSI (s) (C0:18) [10:37:19:397]: PROPERTY CHANGE: Adding WinSxsPolicies.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'C:\WINDOWS\winsxs\Policies\'.
- MSI (s) (C0:18) [10:37:19:397]: PROPERTY CHANGE: Adding policydir.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'C:\WINDOWS\winsxs\Policies\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\'.
- MSI (s) (C0:18) [10:37:19:397]: PROPERTY CHANGE: Adding WinSxsManifests.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'C:\WINDOWS\winsxs\Manifests\'.
- MSI (s) (C0:18) [10:37:19:397]: PROPERTY CHANGE: Adding payload.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'C:\WINDOWS\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\'.
- MSI (s) (C0:18) [10:37:19:397]: PROPERTY CHANGE: Adding payload_ul.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'C:\WINDOWS\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\'.
- MSI (s) (C0:18) [10:37:19:397]: PROPERTY CHANGE: Adding WinSxsDirectory.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 property. Its value is 'C:\WINDOWS\winsxs\'.
- MSI (s) (C0:18) [10:37:19:397]: PROPERTY CHANGE: Adding WinSxsPolicies.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 property. Its value is 'C:\WINDOWS\winsxs\Policies\'.
- MSI (s) (C0:18) [10:37:19:397]: PROPERTY CHANGE: Adding policydir.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 property. Its value is 'C:\WINDOWS\winsxs\Policies\x86_policy.9.0.Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_b7353f75\'.
- MSI (s) (C0:18) [10:37:19:397]: PROPERTY CHANGE: Adding payload_ul.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 property. Its value is 'C:\WINDOWS\winsxs\x86_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_f480bfaef65491a5\'.
- MSI (s) (C0:18) [10:37:19:397]: PROPERTY CHANGE: Adding SophosFolder property. Its value is 'C:\ProgramData\Sophos\'.
- MSI (s) (C0:18) [10:37:19:397]: PROPERTY CHANGE: Adding Certificates property. Its value is 'C:\ProgramData\Sophos\Certificates\'.
- MSI (s) (C0:18) [10:37:19:397]: PROPERTY CHANGE: Adding ManagementCommunicationsCertificatesFolder property. Its value is 'C:\ProgramData\Sophos\Certificates\Management Communications System\'.
- MSI (s) (C0:18) [10:37:19:397]: PROPERTY CHANGE: Adding RemoteManagementSystemFolder property. Its value is 'C:\ProgramData\Sophos\Remote Management System\'.
- MSI (s) (C0:18) [10:37:19:397]: PROPERTY CHANGE: Adding ThreeFolder property. Its value is 'C:\ProgramData\Sophos\Remote Management System\3\'.
- MSI (s) (C0:18) [10:37:19:397]: PROPERTY CHANGE: Adding AgentFolder property. Its value is 'C:\ProgramData\Sophos\Remote Management System\3\Agent\'.
- MSI (s) (C0:18) [10:37:19:397]: PROPERTY CHANGE: Adding AdapterStorageFolder property. Its value is 'C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\'.
- MSI (s) (C0:18) [10:37:19:397]: PROPERTY CHANGE: Adding ManagementCommunicationsSystemFolder property. Its value is 'C:\ProgramData\Sophos\Management Communications System\'.
- MSI (s) (C0:18) [10:37:19:397]: PROPERTY CHANGE: Adding EndpointFolder property. Its value is 'C:\ProgramData\Sophos\Management Communications System\Endpoint\'.
- MSI (s) (C0:18) [10:37:19:397]: PROPERTY CHANGE: Adding ConfigurationFolder property. Its value is 'C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\'.
- MSI (s) (C0:18) [10:37:19:397]: Target path resolution complete. Dumping Directory table...
- MSI (s) (C0:18) [10:37:19:397]: Note: target paths subject to change (via custom actions or browsing)
- MSI (s) (C0:18) [10:37:19:397]: Dir (target): Key: TARGETDIR , Object: C:\
- MSI (s) (C0:18) [10:37:19:397]: Dir (target): Key: WindowsFolder , Object: C:\WINDOWS\
- MSI (s) (C0:18) [10:37:19:397]: Dir (target): Key: INSTALLDIR.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0 , Object: C:\
- MSI (s) (C0:18) [10:37:19:397]: Dir (target): Key: ProgramFilesFolder , Object: C:\Program Files (x86)\
- MSI (s) (C0:18) [10:37:19:397]: Dir (target): Key: Sophos , Object: C:\Program Files (x86)\Sophos\
- MSI (s) (C0:18) [10:37:19:397]: Dir (target): Key: ManagementCommunicationSystem , Object: C:\Program Files (x86)\Sophos\Management Communications System\
- MSI (s) (C0:18) [10:37:19:397]: Dir (target): Key: INSTALLDIR , Object: C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\
- MSI (s) (C0:18) [10:37:19:397]: Dir (target): Key: WindowsFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF , Object: C:\WINDOWS\
- MSI (s) (C0:18) [10:37:19:397]: Dir (target): Key: WinSxsDirectory.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF , Object: C:\WINDOWS\winsxs\
- MSI (s) (C0:18) [10:37:19:397]: Dir (target): Key: policydir_ul.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF , Object: C:\WINDOWS\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\
- MSI (s) (C0:18) [10:37:19:397]: Dir (target): Key: WinSxsPolicies.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF , Object: C:\WINDOWS\winsxs\Policies\
- MSI (s) (C0:18) [10:37:19:397]: Dir (target): Key: policydir.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF , Object: C:\WINDOWS\winsxs\Policies\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\
- MSI (s) (C0:18) [10:37:19:397]: Dir (target): Key: WinSxsManifests.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF , Object: C:\WINDOWS\winsxs\Manifests\
- MSI (s) (C0:18) [10:37:19:397]: Dir (target): Key: payload.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF , Object: C:\WINDOWS\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\
- MSI (s) (C0:18) [10:37:19:397]: Dir (target): Key: payload_ul.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF , Object: C:\WINDOWS\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\
- MSI (s) (C0:18) [10:37:19:397]: Dir (target): Key: SystemFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF , Object: C:\WINDOWS\SysWOW64\
- MSI (s) (C0:18) [10:37:19:397]: Dir (target): Key: WindowsFolder.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 , Object: C:\WINDOWS\
- MSI (s) (C0:18) [10:37:19:397]: Dir (target): Key: WinSxsDirectory.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 , Object: C:\WINDOWS\winsxs\
- MSI (s) (C0:18) [10:37:19:397]: Dir (target): Key: WinSxsPolicies.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 , Object: C:\WINDOWS\winsxs\Policies\
- MSI (s) (C0:18) [10:37:19:397]: Dir (target): Key: policydir.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 , Object: C:\WINDOWS\winsxs\Policies\x86_policy.9.0.Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_b7353f75\
- MSI (s) (C0:18) [10:37:19:397]: Dir (target): Key: payload_ul.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 , Object: C:\WINDOWS\winsxs\x86_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_f480bfaef65491a5\
- MSI (s) (C0:18) [10:37:19:397]: Dir (target): Key: CommonAppDataFolder , Object: C:\ProgramData\
- MSI (s) (C0:18) [10:37:19:397]: Dir (target): Key: SophosFolder , Object: C:\ProgramData\Sophos\
- MSI (s) (C0:18) [10:37:19:397]: Dir (target): Key: Certificates , Object: C:\ProgramData\Sophos\Certificates\
- MSI (s) (C0:18) [10:37:19:397]: Dir (target): Key: ManagementCommunicationsCertificatesFolder , Object: C:\ProgramData\Sophos\Certificates\Management Communications System\
- MSI (s) (C0:18) [10:37:19:397]: Dir (target): Key: RemoteManagementSystemFolder , Object: C:\ProgramData\Sophos\Remote Management System\
- MSI (s) (C0:18) [10:37:19:397]: Dir (target): Key: ThreeFolder , Object: C:\ProgramData\Sophos\Remote Management System\3\
- MSI (s) (C0:18) [10:37:19:397]: Dir (target): Key: AgentFolder , Object: C:\ProgramData\Sophos\Remote Management System\3\Agent\
- MSI (s) (C0:18) [10:37:19:397]: Dir (target): Key: AdapterStorageFolder , Object: C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\
- MSI (s) (C0:18) [10:37:19:397]: Dir (target): Key: ManagementCommunicationsSystemFolder , Object: C:\ProgramData\Sophos\Management Communications System\
- MSI (s) (C0:18) [10:37:19:397]: Dir (target): Key: EndpointFolder , Object: C:\ProgramData\Sophos\Management Communications System\Endpoint\
- MSI (s) (C0:18) [10:37:19:397]: Dir (target): Key: ConfigurationFolder , Object: C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\
- MSI (s) (C0:18) [10:37:19:397]: PROPERTY CHANGE: Adding INSTALLLEVEL property. Its value is '1'.
- Action start 10:37:19: CostFinalize.
- MSI (s) (C0:18) [10:37:19:397]: Skipping action: IsUninstallAllowed (condition is false)
- MSI (s) (C0:18) [10:37:19:397]: Doing action: InstallValidate
- MSI (s) (C0:18) [10:37:19:397]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: CostFinalize. Return value 1.
- MSI (s) (C0:18) [10:37:19:397]: PROPERTY CHANGE: Deleting MsiRestartManagerSessionKey property. Its current value is '9bd3308e921b3947b86d11c50c92722e'.
- MSI (s) (C0:18) [10:37:19:397]: Note: 1: 2205 2: 3: Dialog
- MSI (s) (C0:18) [10:37:19:397]: Feature: ProductFeature; Installed: Absent; Request: Local; Action: Local
- MSI (s) (C0:18) [10:37:19:397]: Component: MCS_Endpoint_Folder; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
- MSI (s) (C0:18) [10:37:19:397]: Component: RMS_Adapter_Storage_Folder; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
- MSI (s) (C0:18) [10:37:19:397]: Component: MCS_Endpoint_LicenceAgreements; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
- MSI (s) (C0:18) [10:37:19:397]: Component: MCS_Endpoint_McsClientApi; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
- MSI (s) (C0:18) [10:37:19:397]: Component: MCS_Endpoint_Mcslog4cplus; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
- MSI (s) (C0:18) [10:37:19:397]: Component: MCS_Endpoint_McsClient; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
- MSI (s) (C0:18) [10:37:19:397]: Component: MCS_Endpoint_McsAgent; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
- MSI (s) (C0:18) [10:37:19:397]: Component: MCS_Endpoint_McsAdapter; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
- MSI (s) (C0:18) [10:37:19:397]: Component: MCS_Endpoint_ScfDatFile; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
- MSI (s) (C0:18) [10:37:19:397]: Component: MCS_Endpoint_SofDatFile; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
- MSI (s) (C0:18) [10:37:19:397]: Component: MCS_Endpoint_McsEvents; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
- MSI (s) (C0:18) [10:37:19:397]: Component: MCS_Endpoint_EventLog; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
- MSI (s) (C0:18) [10:37:19:397]: Component: MCS_Endpoint_RegistrationFile; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
- MSI (s) (C0:18) [10:37:19:397]: Component: MCS_Endpoint_ConfigurationFile; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
- MSI (s) (C0:18) [10:37:19:397]: Component: MCS_Certificate_Folder; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
- MSI (s) (C0:18) [10:37:19:397]: Component: MCS_Endpoint_Certificate1; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
- MSI (s) (C0:18) [10:37:19:397]: Component: MCS_Endpoint_Certificate2; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
- MSI (s) (C0:18) [10:37:19:397]: Component: uplevel.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
- MSI (s) (C0:18) [10:37:19:397]: Component: downlevel_manifest.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4; Installed: Absent; Request: Local; Action: Null; Client State: Unknown
- MSI (s) (C0:18) [10:37:19:397]: Component: uplevel.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
- MSI (s) (C0:18) [10:37:19:397]: Component: nosxs.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF; Installed: Absent; Request: Local; Action: Null; Client State: Unknown
- MSI (s) (C0:18) [10:37:19:397]: Component: downlevel_payload.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF; Installed: Absent; Request: Local; Action: Null; Client State: Unknown
- MSI (s) (C0:18) [10:37:19:397]: Component: downlevel_manifest.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF; Installed: Absent; Request: Local; Action: Null; Client State: Unknown
- MSI (s) (C0:18) [10:37:19:397]: Component: __uplevel.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC465; Installed: Null; Request: Local; Action: Local; Client State: Null
- MSI (s) (C0:18) [10:37:19:397]: Component: __uplevel.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF65; Installed: Null; Request: Local; Action: Local; Client State: Null
- MSI (s) (C0:18) [10:37:19:397]: Component: __MCS_Endpoint_RegistrationFile65; Installed: Null; Request: Local; Action: Local; Client State: Null
- MSI (s) (C0:18) [10:37:19:397]: Component: __MCS_Endpoint_McsAgent65; Installed: Null; Request: Local; Action: Local; Client State: Null
- MSI (s) (C0:18) [10:37:19:397]: Component: __MCS_Endpoint_McsAdapter65; Installed: Null; Request: Local; Action: Local; Client State: Null
- MSI (s) (C0:18) [10:37:19:397]: Component: __MCS_Endpoint_EventLog65; Installed: Null; Request: Local; Action: Local; Client State: Null
- MSI (s) (C0:18) [10:37:19:397]: Component: __downlevel_manifest.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC465; Installed: Null; Request: Local; Action: Null; Client State: Null
- MSI (s) (C0:18) [10:37:19:397]: Component: __nosxs.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF65; Installed: Null; Request: Local; Action: Null; Client State: Null
- MSI (s) (C0:18) [10:37:19:397]: Component: __downlevel_payload.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF65; Installed: Null; Request: Local; Action: Null; Client State: Null
- MSI (s) (C0:18) [10:37:19:397]: Component: __downlevel_manifest.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF65; Installed: Null; Request: Local; Action: Null; Client State: Null
- MSI (s) (C0:18) [10:37:19:397]: Note: 1: 2205 2: 3: BindImage
- MSI (s) (C0:18) [10:37:19:397]: Note: 1: 2205 2: 3: ProgId
- MSI (s) (C0:18) [10:37:19:397]: Note: 1: 2205 2: 3: PublishComponent
- MSI (s) (C0:18) [10:37:19:397]: Note: 1: 2205 2: 3: SelfReg
- MSI (s) (C0:18) [10:37:19:397]: Note: 1: 2205 2: 3: Extension
- MSI (s) (C0:18) [10:37:19:397]: Note: 1: 2205 2: 3: Font
- MSI (s) (C0:18) [10:37:19:397]: Note: 1: 2205 2: 3: Shortcut
- MSI (s) (C0:18) [10:37:19:397]: Note: 1: 2205 2: 3: Class
- MSI (s) (C0:18) [10:37:19:397]: Note: 1: 2205 2: 3: TypeLib
- Action start 10:37:19: InstallValidate.
- MSI (s) (C0:18) [10:37:19:397]: Note: 1: 2205 2: 3: _RemoveFilePath
- MSI (s) (C0:18) [10:37:19:397]: PROPERTY CHANGE: Modifying CostingComplete property. Its current value is '0'. Its new value: '1'.
- MSI (s) (C0:18) [10:37:19:397]: Note: 1: 2205 2: 3: BindImage
- MSI (s) (C0:18) [10:37:19:397]: Note: 1: 2205 2: 3: ProgId
- MSI (s) (C0:18) [10:37:19:397]: Note: 1: 2205 2: 3: PublishComponent
- MSI (s) (C0:18) [10:37:19:397]: Note: 1: 2205 2: 3: SelfReg
- MSI (s) (C0:18) [10:37:19:397]: Note: 1: 2205 2: 3: Extension
- MSI (s) (C0:18) [10:37:19:397]: Note: 1: 2205 2: 3: Font
- MSI (s) (C0:18) [10:37:19:397]: Note: 1: 2205 2: 3: Shortcut
- MSI (s) (C0:18) [10:37:19:397]: Note: 1: 2205 2: 3: Class
- MSI (s) (C0:18) [10:37:19:397]: Note: 1: 2205 2: 3: TypeLib
- MSI (s) (C0:18) [10:37:19:397]: Note: 1: 2727 2:
- MSI (s) (C0:18) [10:37:19:397]: Note: 1: 2205 2: 3: FilesInUse
- MSI (s) (C0:18) [10:37:19:412]: Note: 1: 2727 2:
- MSI (s) (C0:18) [10:37:19:412]: Doing action: SetARPINSTALLLOCATION
- MSI (s) (C0:18) [10:37:19:412]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: InstallValidate. Return value 1.
- MSI (s) (C0:18) [10:37:19:412]: PROPERTY CHANGE: Adding ARPINSTALLLOCATION property. Its value is 'C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\'.
- Action start 10:37:19: SetARPINSTALLLOCATION.
- MSI (s) (C0:18) [10:37:19:412]: Doing action: InstallInitialize
- MSI (s) (C0:18) [10:37:19:412]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: SetARPINSTALLLOCATION. Return value 1.
- MSI (s) (C0:18) [10:37:19:412]: Machine policy value 'AlwaysInstallElevated' is 0
- MSI (s) (C0:18) [10:37:19:412]: User policy value 'AlwaysInstallElevated' is 0
- MSI (s) (C0:18) [10:37:19:412]: BeginTransaction: Locking Server
- MSI (s) (C0:18) [10:37:19:412]: Note: 1: 2203 2: C:\WINDOWS\Installer\inprogressinstallinfo.ipi 3: -2147287038
- MSI (s) (C0:18) [10:37:19:412]: SRSetRestorePoint skipped for this transaction.
- MSI (s) (C0:18) [10:37:19:412]: Note: 1: 2203 2: C:\WINDOWS\Installer\inprogressinstallinfo.ipi 3: -2147287038
- MSI (s) (C0:18) [10:37:19:412]: Server not locked: locking for product {#}
- Action start 10:37:19: InstallInitialize.
- MSI (s) (C0:18) [10:37:19:412]: Skipping action: ScheduleSetPermissions.Rollback (condition is false)
- MSI (s) (C0:18) [10:37:19:412]: Skipping action: SetTokenPath (condition is false)
- MSI (s) (C0:18) [10:37:19:412]: Skipping action: ReadToken (condition is false)
- MSI (s) (C0:18) [10:37:19:412]: Doing action: ValidateToken
- MSI (s) (C0:18) [10:37:19:412]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: InstallInitialize. Return value 1.
- MSI (s) (C0:18) [10:37:19:412]: Creating MSIHANDLE (2) of type 790542 for thread 1048
- MSI (s) (C0:4C) [10:37:19:412]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSIBFF4.tmp, Entrypoint: ValidateSecurityToken
- MSI (s) (C0:B8) [10:37:19:412]: Generating random cookie.
- MSI (s) (C0:B8) [10:37:19:432]: Created Custom Action Server with PID 3640 (0xE38).
- MSI (s) (C0:64) [10:37:19:449]: Running as a service.
- MSI (s) (C0:64) [10:37:19:449]: Hello, I'm your 32bit Impersonated custom action server.
- MSI (s) (C0!44) [10:37:19:465]: Creating MSIHANDLE (3) of type 790541 for thread 6724
- MSI (s) (C0!44) [10:37:19:465]: Creating MSIHANDLE (4) of type 790531 for thread 6724
- Action start 10:37:19: ValidateToken.
- MSI (s) (C0!44) [10:37:19:465]: Closing MSIHANDLE (4) of type 790531 for thread 6724
- MSI (s) (C0!44) [10:37:19:465]: Creating MSIHANDLE (5) of type 790531 for thread 6724
- ValidateSecurityToken: Initialized.
- MSI (s) (C0!44) [10:37:19:465]: Closing MSIHANDLE (5) of type 790531 for thread 6724
- MSI (s) (C0!44) [10:37:19:465]: Closing MSIHANDLE (3) of type 790541 for thread 6724
- MSI (s) (C0:4C) [10:37:19:465]: Closing MSIHANDLE (2) of type 790542 for thread 1048
- ValidateSecurityToken: Token : cfff535be855636d9cebcdf24ea26fdfa5313c75512a42bf2085f7a258cff140
- MSI (s) (C0:18) [10:37:19:465]: Skipping action: SxsInstallCA (condition is false)
- MSI (s) (C0:18) [10:37:19:465]: Doing action: AllocateRegistrySpace
- MSI (s) (C0:18) [10:37:19:465]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: ValidateToken. Return value 1.
- Action start 10:37:19: AllocateRegistrySpace.
- MSI (s) (C0:18) [10:37:19:465]: Doing action: ProcessComponents
- MSI (s) (C0:18) [10:37:19:465]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: AllocateRegistrySpace. Return value 1.
- MSI (s) (C0:18) [10:37:19:465]: Note: 1: 2205 2: 3: MsiPatchCertificate
- MSI (s) (C0:18) [10:37:19:465]: LUA patching is disabled: missing MsiPatchCertificate table
- MSI (s) (C0:18) [10:37:19:465]: Resolving source.
- MSI (s) (C0:18) [10:37:19:465]: Resolving source to launched-from source.
- MSI (s) (C0:18) [10:37:19:465]: Setting launched-from source as last-used.
- MSI (s) (C0:18) [10:37:19:465]: PROPERTY CHANGE: Adding SourceDir property. Its value is 'C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\'.
- MSI (s) (C0:18) [10:37:19:465]: PROPERTY CHANGE: Adding SOURCEDIR property. Its value is 'C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\'.
- MSI (s) (C0:18) [10:37:19:465]: PROPERTY CHANGE: Adding SourcedirProduct property. Its value is '{#}'.
- MSI (s) (C0:18) [10:37:19:465]: SOURCEDIR ==> C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\
- MSI (s) (C0:18) [10:37:19:465]: SOURCEDIR product ==> {#}
- MSI (s) (C0:18) [10:37:19:465]: SECREPAIR: CryptAcquireContext succeeded
- MSI (s) (C0:18) [10:37:19:465]: Determining source type
- MSI (s) (C0:18) [10:37:19:465]: Source type from package 'Sophos Management Communications System.msi': 0
- MSI (s) (C0:18) [10:37:19:465]: SECREPAIR: Hash Database: C:\WINDOWS\Installer\SourceHash{#}
- MSI (s) (C0:18) [10:37:19:465]: Note: 1: 2262 2: SourceHash 3: -2147287038
- MSI (s) (C0:18) [10:37:19:481]: SECREPAIR: New Hash Database creation complete.
- MSI (s) (C0:18) [10:37:19:496]: SECREPAIR: Hash Value for the file:Sophos Management Communications System.msi is: tpADhgJQhc2cRZfopfest9VXeII3yGtxeMuH4B7LHMA=
- MSI (s) (C0:18) [10:37:19:496]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\NOTICE.txt is: 71enz3+GhFRMcx9XfEI8GL32uaAjvGwwNMlOtYh+Fqw=
- MSI (s) (C0:18) [10:37:19:496]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\McsClientApi.dll is: dnzBoTpCSt27GP32JHBcrky4Tm3JzX0DGPbPA5VvBXQ=
- MSI (s) (C0:18) [10:37:19:496]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\log4cplus.dll is: Rndu8cm9oZUUIlg2o6tMTVTDVUaWcO79m0E803ap0IA=
- MSI (s) (C0:18) [10:37:19:512]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\McsClient.exe is: aqw+k9u9v3GKHb3K0Udv2biEm1P2VsQWvRTYyb4K5SQ=
- MSI (s) (C0:18) [10:37:19:512]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\McsAgent.exe is: /gEDBO1sIsRSB99n8ZLwf14Gau9Mg2qLwGCAaAlO6GA=
- MSI (s) (C0:18) [10:37:19:512]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\McsAdapter.dll is: rE8LcEGU/WnJpOZmywDPQcxzoaBuwcbzYKXG34BdK3w=
- MSI (s) (C0:18) [10:37:19:512]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\scf.dat is: xu71p3mhpXTkZyTzTTZBYy80HL2cX0BkkndNKmciOzg=
- MSI (s) (C0:18) [10:37:19:512]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\sof.dat is: JABpGyQA0YKyUJsrzQ3IGA5mSYliu57II8FY2ztnSjA=
- MSI (s) (C0:18) [10:37:19:512]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\McsEvents.dll is: tixyVLVtTu92j83Oqujb+Mx7Ef0i0b/bWLlucq210Cw=
- MSI (s) (C0:18) [10:37:19:512]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\Config\Config.xml is: qpCRv4RCBkk2qi9Iia4rsliFKxTSQFECIn1ehDlOC4A=
- MSI (s) (C0:18) [10:37:19:512]: SECREPAIR: Hash Value for the file:Sophos\Certificates\Management Communications System\sophosca1.crt is: ZT4aWZAjseuIq5YTcjjZeFKaBwuCjdMwmAC9Ex2P+vw=
- MSI (s) (C0:18) [10:37:19:512]: SECREPAIR: Hash Value for the file:Sophos\Certificates\Management Communications System\sophosca2.crt is: kubMvoDzHbaD5MMxtZnvyR5ZM2WviJVQSpNgwIcGDUA=
- MSI (s) (C0:18) [10:37:19:512]: SECREPAIR: Hash Value for the file:Sophos\Certificates\Management Communications System\sophosca1.crl is: dQMLqkcAdTzTKf86ACvBQ7AQqOemLlz08+4HbuntzOg=
- MSI (s) (C0:18) [10:37:19:512]: SECREPAIR: Hash Value for the file:Sophos\Certificates\Management Communications System\sophosca2.crl is: 3ixZwSoXdGELbAlSreEiAo+JLcFLxrVopEsiIIlzINw=
- MSI (s) (C0:18) [10:37:19:512]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\Windows\winsxs\ulpCRTx86\9.0.30729.6161.policy is: KKquu7BoK7J7aSjZUYNcg/LT3oe2CqK5TzNOZjTSwAA=
- MSI (s) (C0:18) [10:37:19:512]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\Windows\winsxs\ulpCRTx86\9.0.30729.6161.cat is: HOybKq3szYII5IV9K3sYWt5NzerQPcDxDTorbLs/wxg=
- MSI (s) (C0:18) [10:37:19:512]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\Windows\winsxs\Policies\dlpCRTx86\9.0.30729.6161.policy is: KKquu7BoK7J7aSjZUYNcg/LT3oe2CqK5TzNOZjTSwAA=
- MSI (s) (C0:18) [10:37:19:512]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\Windows\winsxs\Policies\dlpCRTx86\9.0.30729.6161.cat is: HOybKq3szYII5IV9K3sYWt5NzerQPcDxDTorbLs/wxg=
- MSI (s) (C0:18) [10:37:19:534]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\Windows\winsxs\ulCRTx86\msvcr90.dll is: jn/hofNVDEef/Yane8nRBobUf4cnAlu4kdj08CWTVMA=
- MSI (s) (C0:18) [10:37:19:534]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\Windows\system32\msvcr90.dll is: jn/hofNVDEef/Yane8nRBobUf4cnAlu4kdj08CWTVMA=
- MSI (s) (C0:18) [10:37:19:534]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\Windows\system32\msvcp90.dll is: BpGM+ZrSbNbPEGiBwNW9shLcC6xFSYBcn1kG49A9FSA=
- MSI (s) (C0:18) [10:37:19:534]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\Windows\system32\msvcm90.dll is: enTaOJ+9EKcQwpTC6RTcbxjgXwKPB5WKL6U6xE8OS5A=
- MSI (s) (C0:18) [10:37:19:534]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\Windows\winsxs\ulCRTx86\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43.manifest is: DIOMQmL5nydJWnwqG/Tsj0gtHJvCSTw8Gbk2DxoGuOw=
- MSI (s) (C0:18) [10:37:19:534]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\Windows\winsxs\ulCRTx86\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43.cat is: 0CBq2NVC0hLWUTo7U7hHEd1gmhD7XorwXjYNnuiH/1Q=
- MSI (s) (C0:18) [10:37:19:550]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\Windows\winsxs\ulCRTx86\msvcp90.dll is: BpGM+ZrSbNbPEGiBwNW9shLcC6xFSYBcn1kG49A9FSA=
- MSI (s) (C0:18) [10:37:19:550]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\Windows\winsxs\ulCRTx86\msvcm90.dll is: enTaOJ+9EKcQwpTC6RTcbxjgXwKPB5WKL6U6xE8OS5A=
- MSI (s) (C0:18) [10:37:19:565]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\Windows\winsxs\dlCRTx86\msvcr90.dll is: jn/hofNVDEef/Yane8nRBobUf4cnAlu4kdj08CWTVMA=
- MSI (s) (C0:18) [10:37:19:565]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\Windows\winsxs\dlCRTx86\msvcp90.dll is: BpGM+ZrSbNbPEGiBwNW9shLcC6xFSYBcn1kG49A9FSA=
- MSI (s) (C0:18) [10:37:19:565]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\Windows\winsxs\dlCRTx86\msvcm90.dll is: enTaOJ+9EKcQwpTC6RTcbxjgXwKPB5WKL6U6xE8OS5A=
- MSI (s) (C0:18) [10:37:19:565]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\Windows\winsxs\Manifests\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43.manifest is: DIOMQmL5nydJWnwqG/Tsj0gtHJvCSTw8Gbk2DxoGuOw=
- MSI (s) (C0:18) [10:37:19:565]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\Windows\winsxs\Manifests\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43.cat is: 0CBq2NVC0hLWUTo7U7hHEd1gmhD7XorwXjYNnuiH/1Q=
- Action start 10:37:19: ProcessComponents.
- MSI (s) (C0:18) [10:37:19:581]: Source path resolution complete. Dumping Directory table...
- MSI (s) (C0:18) [10:37:19:581]: Dir (source): Key: TARGETDIR , Object: C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\ , LongSubPath: , ShortSubPath:
- MSI (s) (C0:18) [10:37:19:581]: Dir (source): Key: WindowsFolder , Object: C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\ , LongSubPath: , ShortSubPath:
- MSI (s) (C0:18) [10:37:19:581]: Dir (source): Key: INSTALLDIR.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0 , Object: C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\ , LongSubPath: , ShortSubPath:
- MSI (s) (C0:18) [10:37:19:581]: Dir (source): Key: ProgramFilesFolder , Object: C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\ , LongSubPath: , ShortSubPath:
- MSI (s) (C0:18) [10:37:19:581]: Dir (source): Key: Sophos , Object: C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\ , LongSubPath: Sophos\ , ShortSubPath:
- MSI (s) (C0:18) [10:37:19:581]: Dir (source): Key: ManagementCommunicationSystem , Object: C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\ , LongSubPath: Sophos\Management Communications System\ , ShortSubPath: Sophos\cxvnxvua\
- MSI (s) (C0:18) [10:37:19:581]: Dir (source): Key: INSTALLDIR , Object: C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\ , LongSubPath: Sophos\Management Communications System\Endpoint\ , ShortSubPath: Sophos\cxvnxvua\Endpoint\
- MSI (s) (C0:18) [10:37:19:581]: Dir (source): Key: WindowsFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF , Object: C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\Windows\ , LongSubPath: Sophos\Management Communications System\Endpoint\Windows\ , ShortSubPath: Sophos\cxvnxvua\Endpoint\Windows\
- MSI (s) (C0:18) [10:37:19:581]: Dir (source): Key: WinSxsDirectory.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF , Object: C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\Windows\winsxs\ , LongSubPath: Sophos\Management Communications System\Endpoint\Windows\winsxs\ , ShortSubPath: Sophos\cxvnxvua\Endpoint\Windows\winsxs\
- MSI (s) (C0:18) [10:37:19:581]: Dir (source): Key: policydir_ul.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF , Object: C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\Windows\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\ , LongSubPath: Sophos\Management Communications System\Endpoint\Windows\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\ , ShortSubPath: Sophos\cxvnxvua\Endpoint\Windows\winsxs\wve13-6h\
- MSI (s) (C0:18) [10:37:19:581]: Dir (source): Key: WinSxsPolicies.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF , Object: C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\Windows\winsxs\Policies\ , LongSubPath: Sophos\Management Communications System\Endpoint\Windows\winsxs\Policies\ , ShortSubPath: Sophos\cxvnxvua\Endpoint\Windows\winsxs\Policies\
- MSI (s) (C0:18) [10:37:19:581]: Dir (source): Key: policydir.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF , Object: C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\Windows\winsxs\Policies\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\ , LongSubPath: Sophos\Management Communications System\Endpoint\Windows\winsxs\Policies\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\ , ShortSubPath: Sophos\cxvnxvua\Endpoint\Windows\winsxs\Policies\bzvbofuw\
- MSI (s) (C0:18) [10:37:19:581]: Dir (source): Key: WinSxsManifests.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF , Object: C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\Windows\winsxs\Manifests\ , LongSubPath: Sophos\Management Communications System\Endpoint\Windows\winsxs\Manifests\ , ShortSubPath: Sophos\cxvnxvua\Endpoint\Windows\winsxs\cyt7vecb\
- MSI (s) (C0:18) [10:37:19:581]: Dir (source): Key: payload.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF , Object: C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\Windows\winsxs\dlCRTx86\ , LongSubPath: Sophos\Management Communications System\Endpoint\Windows\winsxs\dlCRTx86\ , ShortSubPath: Sophos\cxvnxvua\Endpoint\Windows\winsxs\dlCRTx86\
- MSI (s) (C0:18) [10:37:19:581]: Dir (source): Key: payload_ul.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF , Object: C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\Windows\winsxs\ulCRTx86\ , LongSubPath: Sophos\Management Communications System\Endpoint\Windows\winsxs\ulCRTx86\ , ShortSubPath: Sophos\cxvnxvua\Endpoint\Windows\winsxs\ulCRTx86\
- MSI (s) (C0:18) [10:37:19:581]: Dir (source): Key: SystemFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF , Object: C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\Windows\system32\ , LongSubPath: Sophos\Management Communications System\Endpoint\Windows\system32\ , ShortSubPath: Sophos\cxvnxvua\Endpoint\Windows\system32\
- MSI (s) (C0:18) [10:37:19:581]: Dir (source): Key: WindowsFolder.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 , Object: C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\Windows\ , LongSubPath: Sophos\Management Communications System\Endpoint\Windows\ , ShortSubPath: Sophos\cxvnxvua\Endpoint\Windows\
- MSI (s) (C0:18) [10:37:19:581]: Dir (source): Key: WinSxsDirectory.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 , Object: C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\Windows\winsxs\ , LongSubPath: Sophos\Management Communications System\Endpoint\Windows\winsxs\ , ShortSubPath: Sophos\cxvnxvua\Endpoint\Windows\winsxs\
- MSI (s) (C0:18) [10:37:19:581]: Dir (source): Key: WinSxsPolicies.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 , Object: C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\Windows\winsxs\Policies\ , LongSubPath: Sophos\Management Communications System\Endpoint\Windows\winsxs\Policies\ , ShortSubPath: Sophos\cxvnxvua\Endpoint\Windows\winsxs\Policies\
- MSI (s) (C0:18) [10:37:19:581]: Dir (source): Key: policydir.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 , Object: C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\Windows\winsxs\Policies\dlpCRTx86\ , LongSubPath: Sophos\Management Communications System\Endpoint\Windows\winsxs\Policies\dlpCRTx86\ , ShortSubPath: Sophos\cxvnxvua\Endpoint\Windows\winsxs\Policies\jhqz8wka\
- MSI (s) (C0:18) [10:37:19:581]: Dir (source): Key: payload_ul.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 , Object: C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\Windows\winsxs\ulpCRTx86\ , LongSubPath: Sophos\Management Communications System\Endpoint\Windows\winsxs\ulpCRTx86\ , ShortSubPath: Sophos\cxvnxvua\Endpoint\Windows\winsxs\uokrlnxb\
- MSI (s) (C0:18) [10:37:19:581]: Dir (source): Key: CommonAppDataFolder , Object: C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\ , LongSubPath: , ShortSubPath:
- MSI (s) (C0:18) [10:37:19:581]: Dir (source): Key: SophosFolder , Object: C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\ , LongSubPath: Sophos\ , ShortSubPath:
- MSI (s) (C0:18) [10:37:19:581]: Dir (source): Key: Certificates , Object: C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Certificates\ , LongSubPath: Sophos\Certificates\ , ShortSubPath: Sophos\kxkdnwxp\
- MSI (s) (C0:18) [10:37:19:581]: Dir (source): Key: ManagementCommunicationsCertificatesFolder , Object: C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Certificates\Management Communications System\ , LongSubPath: Sophos\Certificates\Management Communications System\ , ShortSubPath: Sophos\kxkdnwxp\dicqakrm\
- MSI (s) (C0:18) [10:37:19:581]: Dir (source): Key: RemoteManagementSystemFolder , Object: C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Remote Management System\ , LongSubPath: Sophos\Remote Management System\ , ShortSubPath: Sophos\hae2uuyn\
- MSI (s) (C0:18) [10:37:19:581]: Dir (source): Key: ThreeFolder , Object: C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Remote Management System\3\ , LongSubPath: Sophos\Remote Management System\3\ , ShortSubPath: Sophos\hae2uuyn\3\
- MSI (s) (C0:18) [10:37:19:581]: Dir (source): Key: AgentFolder , Object: C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Remote Management System\3\Agent\ , LongSubPath: Sophos\Remote Management System\3\Agent\ , ShortSubPath: Sophos\hae2uuyn\3\Agent\
- MSI (s) (C0:18) [10:37:19:581]: Dir (source): Key: AdapterStorageFolder , Object: C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Remote Management System\3\Agent\AdapterStorage\ , LongSubPath: Sophos\Remote Management System\3\Agent\AdapterStorage\ , ShortSubPath: Sophos\hae2uuyn\3\Agent\14x9gslg\
- MSI (s) (C0:18) [10:37:19:581]: Dir (source): Key: ManagementCommunicationsSystemFolder , Object: C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\ , LongSubPath: Sophos\Management Communications System\ , ShortSubPath: Sophos\rklb9z6t\
- MSI (s) (C0:18) [10:37:19:581]: Dir (source): Key: EndpointFolder , Object: C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\ , LongSubPath: Sophos\Management Communications System\Endpoint\ , ShortSubPath: Sophos\rklb9z6t\Endpoint\
- MSI (s) (C0:18) [10:37:19:581]: Dir (source): Key: ConfigurationFolder , Object: C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\Config\ , LongSubPath: Sophos\Management Communications System\Endpoint\Config\ , ShortSubPath: Sophos\rklb9z6t\Endpoint\Config\
- MSI (s) (C0:18) [10:37:19:581]: Note: 1: 2205 2: 3: ActionText
- MSI (s) (C0:18) [10:37:19:581]: Note: 1: 2205 2: 3: ActionText
- MSI (s) (C0:18) [10:37:19:581]: Note: 1: 2205 2: 3: ActionText
- MSI (s) (C0:18) [10:37:19:581]: Doing action: MsiUnpublishAssemblies
- MSI (s) (C0:18) [10:37:19:581]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: ProcessComponents. Return value 1.
- Action start 10:37:19: MsiUnpublishAssemblies.
- MSI (s) (C0:18) [10:37:19:597]: Doing action: UnpublishFeatures
- MSI (s) (C0:18) [10:37:19:597]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: MsiUnpublishAssemblies. Return value 1.
- Action start 10:37:19: UnpublishFeatures.
- MSI (s) (C0:18) [10:37:19:597]: Doing action: StopServices
- MSI (s) (C0:18) [10:37:19:597]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: UnpublishFeatures. Return value 1.
- Action start 10:37:19: StopServices.
- MSI (s) (C0:18) [10:37:19:597]: Doing action: DeleteServices
- MSI (s) (C0:18) [10:37:19:597]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: StopServices. Return value 1.
- Action start 10:37:19: DeleteServices.
- MSI (s) (C0:18) [10:37:19:597]: Doing action: RemoveRegistryValues
- MSI (s) (C0:18) [10:37:19:597]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: DeleteServices. Return value 1.
- Action start 10:37:19: RemoveRegistryValues.
- MSI (s) (C0:18) [10:37:19:597]: Doing action: RemoveIniValues
- MSI (s) (C0:18) [10:37:19:597]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: RemoveRegistryValues. Return value 1.
- Action start 10:37:19: RemoveIniValues.
- MSI (s) (C0:18) [10:37:19:597]: Doing action: RemoveFiles
- MSI (s) (C0:18) [10:37:19:597]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: RemoveIniValues. Return value 1.
- Action start 10:37:19: RemoveFiles.
- MSI (s) (C0:18) [10:37:19:597]: Skipping action: DeleteAdapterStorage_SetProps (condition is false)
- MSI (s) (C0:18) [10:37:19:597]: Skipping action: DeleteAdapterStorage (condition is false)
- MSI (s) (C0:18) [10:37:19:597]: Doing action: RemoveFolders
- MSI (s) (C0:18) [10:37:19:597]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: RemoveFiles. Return value 1.
- Action start 10:37:19: RemoveFolders.
- MSI (s) (C0:18) [10:37:19:597]: Doing action: CreateFolders
- MSI (s) (C0:18) [10:37:19:597]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: RemoveFolders. Return value 1.
- Action start 10:37:19: CreateFolders.
- MSI (s) (C0:18) [10:37:19:597]: Doing action: InstallFiles
- MSI (s) (C0:18) [10:37:19:597]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: CreateFolders. Return value 1.
- MSI (s) (C0:18) [10:37:19:597]: The file represented by File table key 'LicenceAgreements' has no eligible binary patches
- MSI (s) (C0:18) [10:37:19:597]: The file represented by File table key 'McsClientApi' has no eligible binary patches
- MSI (s) (C0:18) [10:37:19:597]: The file represented by File table key 'Mcslog4cplus' has no eligible binary patches
- MSI (s) (C0:18) [10:37:19:597]: The file represented by File table key 'Mcsclient' has no eligible binary patches
- MSI (s) (C0:18) [10:37:19:597]: The file represented by File table key 'McsAgent' has no eligible binary patches
- MSI (s) (C0:18) [10:37:19:597]: The file represented by File table key 'McsAdapter' has no eligible binary patches
- MSI (s) (C0:18) [10:37:19:597]: The file represented by File table key 'ScfDatFile' has no eligible binary patches
- MSI (s) (C0:18) [10:37:19:597]: The file represented by File table key 'SofDatFile' has no eligible binary patches
- MSI (s) (C0:18) [10:37:19:597]: The file represented by File table key 'McsEvents' has no eligible binary patches
- MSI (s) (C0:18) [10:37:19:597]: The file represented by File table key 'ConfigurationFile' has no eligible binary patches
- MSI (s) (C0:18) [10:37:19:597]: The file represented by File table key 'sophosca1.crt' has no eligible binary patches
- MSI (s) (C0:18) [10:37:19:597]: The file represented by File table key 'sophosca2.crt' has no eligible binary patches
- MSI (s) (C0:18) [10:37:19:597]: The file represented by File table key 'sophosca1.crl' has no eligible binary patches
- MSI (s) (C0:18) [10:37:19:597]: The file represented by File table key 'sophosca2.crl' has no eligible binary patches
- MSI (s) (C0:18) [10:37:19:597]: The file represented by File table key 'ul_policy.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4' has no eligible binary patches
- MSI (s) (C0:18) [10:37:19:597]: The file represented by File table key 'ul_catalog.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4' has no eligible binary patches
- MSI (s) (C0:18) [10:37:19:597]: The file represented by File table key 'policy.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4' has no eligible binary patches
- MSI (s) (C0:18) [10:37:19:597]: The file represented by File table key 'catalog.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4' has no eligible binary patches
- MSI (s) (C0:18) [10:37:19:597]: The file represented by File table key 'ul_msvcr90.dll.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF' has no eligible binary patches
- MSI (s) (C0:18) [10:37:19:597]: The file represented by File table key 'nosxs_msvcr90.dll.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF' has no eligible binary patches
- MSI (s) (C0:18) [10:37:19:597]: The file represented by File table key 'nosxs_msvcp90.dll.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF' has no eligible binary patches
- MSI (s) (C0:18) [10:37:19:597]: The file represented by File table key 'nosxs_msvcm90.dll.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF' has no eligible binary patches
- MSI (s) (C0:18) [10:37:19:597]: The file represented by File table key 'ul_manifest.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF' has no eligible binary patches
- MSI (s) (C0:18) [10:37:19:597]: The file represented by File table key 'ul_catalog.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF' has no eligible binary patches
- MSI (s) (C0:18) [10:37:19:597]: The file represented by File table key 'ul_msvcp90.dll.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF' has no eligible binary patches
- MSI (s) (C0:18) [10:37:19:597]: The file represented by File table key 'ul_msvcm90.dll.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF' has no eligible binary patches
- MSI (s) (C0:18) [10:37:19:597]: The file represented by File table key 'msvcr90.dll.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF' has no eligible binary patches
- MSI (s) (C0:18) [10:37:19:597]: The file represented by File table key 'msvcp90.dll.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF' has no eligible binary patches
- MSI (s) (C0:18) [10:37:19:597]: The file represented by File table key 'msvcm90.dll.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF' has no eligible binary patches
- MSI (s) (C0:18) [10:37:19:597]: The file represented by File table key 'manifest.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF' has no eligible binary patches
- MSI (s) (C0:18) [10:37:19:597]: The file represented by File table key 'catalog.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF' has no eligible binary patches
- Action start 10:37:19: InstallFiles.
- MSI (s) (C0:18) [10:37:19:597]: Note: 1: 2205 2: 3: Patch
- MSI (s) (C0:18) [10:37:19:597]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`File_`, `Patch`.`Header`, `Patch`.`Attributes`, `Patch`.`Sequence`, `Patch`.`StreamRef_` FROM `Patch` WHERE `Patch`.`File_` = ? AND `Patch`.`#_MsiActive`=? ORDER BY `Patch`.`Sequence`
- MSI (s) (C0:18) [10:37:19:597]: Note: 1: 2205 2: 3: MsiPatchHeaders
- MSI (s) (C0:18) [10:37:19:597]: Note: 1: 2228 2: 3: MsiPatchHeaders 4: SELECT `Header` FROM `MsiPatchHeaders` WHERE `StreamRef` = ?
- MSI (s) (C0:18) [10:37:19:597]: Note: 1: 2205 2: 3: PatchPackage
- MSI (s) (C0:18) [10:37:19:597]: Note: 1: 2205 2: 3: MsiPatchHeaders
- MSI (s) (C0:18) [10:37:19:597]: Note: 1: 2205 2: 3: PatchPackage
- MSI (s) (C0:18) [10:37:19:597]: Doing action: SetRestoreConfig
- MSI (s) (C0:18) [10:37:19:597]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: InstallFiles. Return value 1.
- MSI (s) (C0:18) [10:37:19:597]: PROPERTY CHANGE: Adding RestoreConfig property. Its value is 'C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\Config.xml'.
- Action start 10:37:19: SetRestoreConfig.
- MSI (s) (C0:18) [10:37:19:597]: Doing action: RestoreConfig
- MSI (s) (C0:18) [10:37:19:597]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: SetRestoreConfig. Return value 1.
- Action start 10:37:19: RestoreConfig.
- MSI (s) (C0:18) [10:37:19:612]: Doing action: SetUpdateConfig
- MSI (s) (C0:18) [10:37:19:612]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: RestoreConfig. Return value 1.
- MSI (s) (C0:18) [10:37:19:612]: PROPERTY CHANGE: Adding UpdateConfig property. Its value is 'C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\Config.xml,dzr-mcs-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com,,'.
- Action start 10:37:19: SetUpdateConfig.
- MSI (s) (C0:18) [10:37:19:612]: Doing action: UpdateConfig
- MSI (s) (C0:18) [10:37:19:612]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: SetUpdateConfig. Return value 1.
- Action start 10:37:19: UpdateConfig.
- MSI (s) (C0:18) [10:37:19:612]: Doing action: WriteRegistryValues
- MSI (s) (C0:18) [10:37:19:612]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: UpdateConfig. Return value 1.
- Action start 10:37:19: WriteRegistryValues.
- MSI (s) (C0:18) [10:37:19:612]: Doing action: WriteIniValues
- MSI (s) (C0:18) [10:37:19:612]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: WriteRegistryValues. Return value 1.
- Action start 10:37:19: WriteIniValues.
- MSI (s) (C0:18) [10:37:19:612]: Doing action: InstallServices
- MSI (s) (C0:18) [10:37:19:612]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: WriteIniValues. Return value 1.
- Action start 10:37:19: InstallServices.
- MSI (s) (C0:18) [10:37:19:612]: Doing action: SchedServiceConfig
- MSI (s) (C0:18) [10:37:19:612]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: InstallServices. Return value 1.
- MSI (s) (C0:18) [10:37:19:612]: Creating MSIHANDLE (6) of type 790542 for thread 1048
- MSI (s) (C0:E0) [10:37:19:612]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSIC0C1.tmp, Entrypoint: SchedServiceConfig
- MSI (s) (C0!E8) [10:37:19:612]: Creating MSIHANDLE (7) of type 790541 for thread 1512
- MSI (s) (C0!E8) [10:37:19:612]: Creating MSIHANDLE (8) of type 790540 for thread 1512
- MSI (s) (C0!E8) [10:37:19:612]: Creating MSIHANDLE (9) of type 790531 for thread 1512
- MSI (s) (C0!E8) [10:37:19:612]: Creating MSIHANDLE (10) of type 790531 for thread 1512
- MSI (s) (C0!E8) [10:37:19:628]: Closing MSIHANDLE (10) of type 790531 for thread 1512
- MSI (s) (C0!E8) [10:37:19:628]: Closing MSIHANDLE (9) of type 790531 for thread 1512
- MSI (s) (C0!E8) [10:37:19:628]: Creating MSIHANDLE (11) of type 790531 for thread 1512
- MSI (s) (C0!E8) [10:37:19:628]: Creating MSIHANDLE (12) of type 790531 for thread 1512
- MSI (s) (C0!E8) [10:37:19:628]: Closing MSIHANDLE (12) of type 790531 for thread 1512
- MSI (s) (C0!E8) [10:37:19:629]: Closing MSIHANDLE (11) of type 790531 for thread 1512
- MSI (s) (C0!E8) [10:37:19:629]: PROPERTY CHANGE: Adding RollbackServiceConfig property. Its value is 'SchedServiceConfig'.
- MSI (s) (C0!E8) [10:37:19:629]: Creating MSIHANDLE (13) of type 790531 for thread 1512
- Action start 10:37:19: SchedServiceConfig.
- MSI (s) (C0!E8) [10:37:19:629]: Closing MSIHANDLE (13) of type 790531 for thread 1512
- MSI (s) (C0!E8) [10:37:19:629]: Doing action: RollbackServiceConfig
- MSI (s) (C0!E8) [10:37:19:629]: Note: 1: 2205 2: 3: ActionText
- Action start 10:37:19: RollbackServiceConfig.
- MSI (s) (C0!E8) [10:37:19:632]: PROPERTY CHANGE: Adding ExecServiceConfig property. Its value is 'SchedServiceConfig€Sophos MCS Agent€0€restart€restart€restart€1€60€€€Sophos MCS Client€0€restart€restart€restart€1€60€€'.
- MSI (s) (C0!E8) [10:37:19:632]: Creating MSIHANDLE (14) of type 790531 for thread 1512
- Action ended 10:37:19: RollbackServiceConfig. Return value 1.
- MSI (s) (C0!E8) [10:37:19:632]: Closing MSIHANDLE (14) of type 790531 for thread 1512
- MSI (s) (C0!E8) [10:37:19:632]: Doing action: ExecServiceConfig
- MSI (s) (C0!E8) [10:37:19:633]: Note: 1: 2205 2: 3: ActionText
- Action start 10:37:19: ExecServiceConfig.
- MSI (s) (C0!E8) [10:37:19:634]: Closing MSIHANDLE (7) of type 790541 for thread 1512
- MSI (s) (C0!E8) [10:37:19:634]: Closing MSIHANDLE (8) of type 790540 for thread 1512
- MSI (s) (C0:E0) [10:37:19:634]: Closing MSIHANDLE (6) of type 790542 for thread 1048
- Action ended 10:37:19: ExecServiceConfig. Return value 1.
- MSI (s) (C0:18) [10:37:19:634]: Doing action: StartServices
- MSI (s) (C0:18) [10:37:19:634]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: SchedServiceConfig. Return value 1.
- Action start 10:37:19: StartServices.
- MSI (s) (C0:18) [10:37:19:634]: Doing action: RegisterUser
- MSI (s) (C0:18) [10:37:19:634]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: StartServices. Return value 1.
- Action start 10:37:19: RegisterUser.
- MSI (s) (C0:18) [10:37:19:634]: Doing action: RegisterProduct
- MSI (s) (C0:18) [10:37:19:634]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: RegisterUser. Return value 1.
- Action start 10:37:19: RegisterProduct.
- MSI (s) (C0:18) [10:37:19:634]: PROPERTY CHANGE: Adding ProductToBeRegistered property. Its value is '1'.
- MSI (s) (C0:18) [10:37:19:634]: Doing action: MsiPublishAssemblies
- MSI (s) (C0:18) [10:37:19:634]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: RegisterProduct. Return value 1.
- Action start 10:37:19: MsiPublishAssemblies.
- MSI (s) (C0:18) [10:37:19:634]: Doing action: PublishFeatures
- MSI (s) (C0:18) [10:37:19:634]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: MsiPublishAssemblies. Return value 1.
- Action start 10:37:19: PublishFeatures.
- MSI (s) (C0:18) [10:37:19:634]: Doing action: PublishProduct
- MSI (s) (C0:18) [10:37:19:634]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: PublishFeatures. Return value 1.
- Action start 10:37:19: PublishProduct.
- MSI (s) (C0:18) [10:37:19:634]: Doing action: InstallExecute
- MSI (s) (C0:18) [10:37:19:634]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:19: PublishProduct. Return value 1.
- MSI (s) (C0:18) [10:37:19:634]: Running Script: C:\WINDOWS\Installer\MSIC0A1.tmp
- MSI (s) (C0:18) [10:37:19:634]: PROPERTY CHANGE: Adding UpdateStarted property. Its value is '1'.
- MSI (s) (C0:18) [10:37:19:650]: Note: 1: 2265 2: 3: -2147287035
- MSI (s) (C0:18) [10:37:19:650]: Machine policy value 'DisableRollback' is 0
- MSI (s) (C0:18) [10:37:19:650]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
- MSI (s) (C0:18) [10:37:19:650]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1212699818,LangId=1033,Platform=0,ScriptType=1,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1)
- Action start 10:37:19: InstallExecute.
- MSI (s) (C0:18) [10:37:19:650]: Executing op: ProductInfo(ProductKey={#},ProductName=Sophos Management Communications System,PackageName=Sophos Management Communications System.msi,Language=1033,Version=33554432,Assignment=1,ObsoleteArg=0,ProductIcon=Sophos_MCS_Icon,,PackageCode={3B5370F7-1522-4057-BAFD-F144139D5D1E},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0,ProductDeploymentFlags=3)
- MSI (s) (C0:18) [10:37:19:650]: Executing op: DialogInfo(Type=0,Argument=1033)
- MSI (s) (C0:18) [10:37:19:650]: Executing op: DialogInfo(Type=1,Argument=Sophos Management Communications System)
- MSI (s) (C0:18) [10:37:19:650]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1])
- MSI (s) (C0:18) [10:37:19:650]: Executing op: SetBaseline(Baseline=0,)
- MSI (s) (C0:18) [10:37:19:650]: Executing op: SetBaseline(Baseline=1,)
- MSI (s) (C0:18) [10:37:19:650]: Executing op: ActionStart(Name=ProcessComponents,Description=Updating component registration,)
- MSI (s) (C0:18) [10:37:19:650]: Executing op: ProgressTotal(Total=23,Type=1,ByteEquivalent=24000)
- MSI (s) (C0:18) [10:37:19:650]: Executing op: ComponentRegister(ComponentId={#},KeyPath=C:\ProgramData\Sophos\Management Communications System\Endpoint\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
- MSI (s) (C0:18) [10:37:19:650]: Executing op: ComponentRegister(ComponentId={#},KeyPath=C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
- MSI (s) (C0:18) [10:37:19:650]: Executing op: ComponentRegister(ComponentId={#},KeyPath=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\NOTICE.txt,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
- MSI (s) (C0:18) [10:37:19:650]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\NOTICE.txt' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
- MSI (s) (C0:18) [10:37:19:650]: Executing op: ComponentRegister(ComponentId={#},KeyPath=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsClientApi.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
- MSI (s) (C0:18) [10:37:19:650]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsClientApi.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
- MSI (s) (C0:18) [10:37:19:650]: Executing op: ComponentRegister(ComponentId={#},KeyPath=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\log4cplus.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
- MSI (s) (C0:18) [10:37:19:650]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\log4cplus.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
- MSI (s) (C0:18) [10:37:19:650]: Executing op: ComponentRegister(ComponentId={#},KeyPath=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsClient.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
- MSI (s) (C0:18) [10:37:19:650]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
- MSI (s) (C0:18) [10:37:19:650]: Executing op: ComponentRegister(ComponentId={#},KeyPath=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsAgent.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
- MSI (s) (C0:18) [10:37:19:650]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsAgent.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
- MSI (s) (C0:18) [10:37:19:650]: Executing op: ComponentRegister(ComponentId={#},KeyPath=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsAdapter.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
- MSI (s) (C0:18) [10:37:19:650]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
- MSI (s) (C0:18) [10:37:19:650]: Executing op: ComponentRegister(ComponentId={#},KeyPath=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\scf.dat,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
- MSI (s) (C0:18) [10:37:19:650]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\scf.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
- MSI (s) (C0:18) [10:37:19:650]: Executing op: ComponentRegister(ComponentId={#},KeyPath=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\sof.dat,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
- MSI (s) (C0:18) [10:37:19:650]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\sof.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
- MSI (s) (C0:18) [10:37:19:650]: Executing op: ComponentRegister(ComponentId={#},KeyPath=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsEvents.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
- MSI (s) (C0:18) [10:37:19:650]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsEvents.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
- MSI (s) (C0:18) [10:37:19:650]: Executing op: ComponentRegister(ComponentId={#},KeyPath=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
- MSI (s) (C0:18) [10:37:19:650]: Executing op: ComponentRegister(ComponentId={#},KeyPath=01:\Software\Sophos\Management Communications System\Registration\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
- MSI (s) (C0:18) [10:37:19:650]: Executing op: ComponentRegister(ComponentId={#},KeyPath=C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\Config.xml,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
- MSI (s) (C0:18) [10:37:19:650]: Executing op: ComponentRegister(ComponentId={#},KeyPath=C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\Config.xml,State=3,ProductKey={00000000-0000-0000-0000-000000000000},Disk=1,SharedDllRefCount=0,BinaryType=0)
- MSI (s) (C0:18) [10:37:19:650]: Executing op: ComponentRegister(ComponentId={6122DB9B-B642-441B-98C8-347AFF15C46A},KeyPath=C:\ProgramData\Sophos\Certificates\Management Communications System\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
- MSI (s) (C0:18) [10:37:19:666]: Executing op: ComponentRegister(ComponentId={#},KeyPath=C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca1.crt,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
- MSI (s) (C0:18) [10:37:19:666]: Executing op: ComponentRegister(ComponentId={#},KeyPath=C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca2.crt,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
- MSI (s) (C0:18) [10:37:19:666]: Executing op: ComponentRegister(ComponentId={#},KeyPath=>\policy.9.0.Microsoft.VC90.CRT,version="9.0.30729.6161",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="x86",type="win32-policy",State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
- MSI (s) (C0:18) [10:37:19:666]: Executing op: ComponentRegister(ComponentId={#},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
- MSI (s) (C0:18) [10:37:19:666]: Executing op: ComponentRegister(ComponentId={#},KeyPath=>msvcr90.dll\Microsoft.VC90.CRT,version="9.0.30729.6161",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="x86",type="win32",State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
- MSI (s) (C0:18) [10:37:19:666]: Executing op: ComponentRegister(ComponentId={#},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
- MSI (s) (C0:18) [10:37:19:666]: Executing op: ComponentRegister(ComponentId={#},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
- MSI (s) (C0:18) [10:37:19:666]: Executing op: ComponentRegister(ComponentId={#},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
- MSI (s) (C0:18) [10:37:19:666]: Executing op: ActionStart(Name=StopServices,Description=Stopping services,Template=Service: [1])
- MSI (s) (C0:18) [10:37:19:666]: Executing op: ProgressTotal(Total=2,Type=1,ByteEquivalent=1300000)
- MSI (s) (C0:18) [10:37:19:666]: Executing op: ServiceControl(,Name=Sophos MCS Client,Action=2,Wait=1,)
- MSI (s) (C0:18) [10:37:19:666]: Executing op: ServiceControl(,Name=Sophos MCS Agent,Action=2,Wait=1,)
- MSI (s) (C0:18) [10:37:19:666]: Executing op: ActionStart(Name=CreateFolders,Description=Creating folders,Template=Folder: [1])
- MSI (s) (C0:18) [10:37:19:666]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Management Communications System\Endpoint\,Foreign=0,,)
- MSI (s) (C0:18) [10:37:19:666]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\,Foreign=0,,)
- MSI (s) (C0:18) [10:37:19:666]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\,Foreign=0,,)
- MSI (s) (C0:18) [10:37:19:666]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Certificates\Management Communications System\,Foreign=0,,)
- MSI (s) (C0:18) [10:37:19:666]: Executing op: ActionStart(Name=InstallFiles,Description=Copying new files,Template=File: [1], Directory: [9], Size: [6])
- MSI (s) (C0:18) [10:37:19:666]: Executing op: ProgressTotal(Total=3617762,Type=0,ByteEquivalent=1)
- MSI (s) (C0:18) [10:37:19:666]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\)
- MSI (s) (C0:18) [10:37:19:666]: Executing op: SetSourceFolder(Folder=1\Sophos\rklb9z6t\Endpoint\Config\|Sophos\Management Communications System\Endpoint\Config\)
- MSI (s) (C0:18) [10:37:19:666]: Executing op: ChangeMedia(,MediaPrompt=Please insert the disk: ,,BytesPerTick=65536,CopierType=0,,,,,,IsFirstPhysicalMedia=1)
- MSI (s) (C0:18) [10:37:19:666]: Executing op: FileCopy(SourceName=Config.xml,SourceCabKey=ConfigurationFile,DestName=Config.xml,Attributes=512,FileSize=123,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=2003253429,HashPart2=-1872430899,HashPart3=-665276381,HashPart4=851854976,,)
- MSI (s) (C0:18) [10:37:19:666]: File: C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\Config.xml; To be installed; Won't patch; No existing file
- MSI (s) (C0:18) [10:37:19:666]: Source for file 'Config.xml' is uncompressed, at 'C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\Config\'.
- MSI (s) (C0:18) [10:37:19:666]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\)
- MSI (s) (C0:18) [10:37:19:666]: Executing op: SetSourceFolder(Folder=1\Sophos\cxvnxvua\Endpoint\|Sophos\Management Communications System\Endpoint\)
- MSI (s) (C0:18) [10:37:19:666]: Executing op: FileCopy(SourceName=NOTICE.txt,SourceCabKey=LicenceAgreements,DestName=NOTICE.txt,Attributes=512,FileSize=25690,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1047785942,HashPart2=-1888213989,HashPart3=1554608402,HashPart4=1941224886,,)
- MSI (s) (C0:18) [10:37:19:666]: File: C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\NOTICE.txt; To be installed; Won't patch; No existing file
- MSI (s) (C0:18) [10:37:19:666]: Source for file 'NOTICE.txt' is uncompressed, at 'C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\'.
- MSI (s) (C0:18) [10:37:19:666]: Executing op: FileCopy(SourceName=cgjwddxm.dll|McsAdapter.dll,SourceCabKey=McsAdapter,DestName=McsAdapter.dll,Attributes=512,FileSize=212776,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=2.0.0.145,Language=2057,InstallMode=58982400,,,,,,,)
- MSI (s) (C0:18) [10:37:19:666]: File: C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsAdapter.dll; To be installed; Won't patch; No existing file
- MSI (s) (C0:18) [10:37:19:666]: Source for file 'McsAdapter.dll' is uncompressed, at 'C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\'.
- MSI (s) (C0:18) [10:37:19:681]: Executing op: FileCopy(SourceName=McsAgent.exe,SourceCabKey=McsAgent,DestName=McsAgent.exe,Attributes=512,FileSize=330536,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=2.0.0.145,Language=2057,InstallMode=58982400,,,,,,,)
- MSI (s) (C0:18) [10:37:19:681]: File: C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsAgent.exe; To be installed; Won't patch; No existing file
- MSI (s) (C0:18) [10:37:19:681]: Source for file 'McsAgent.exe' is uncompressed, at 'C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\'.
- MSI (s) (C0:18) [10:37:19:681]: Executing op: FileCopy(SourceName=k4kj-bhc.exe|McsClient.exe,SourceCabKey=Mcsclient,DestName=McsClient.exe,Attributes=512,FileSize=909608,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=2.0.0.145,Language=2057,InstallMode=58982400,,,,,,,)
- MSI (s) (C0:18) [10:37:19:681]: File: C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsClient.exe; To be installed; Won't patch; No existing file
- MSI (s) (C0:18) [10:37:19:681]: Source for file 'McsClient.exe' is uncompressed, at 'C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\'.
- MSI (s) (C0:18) [10:37:19:681]: Executing op: FileCopy(SourceName=uvi1bgwr.dll|McsClientApi.dll,SourceCabKey=McsClientApi,DestName=McsClientApi.dll,Attributes=512,FileSize=321320,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=2.0.0.145,Language=2057,InstallMode=58982400,,,,,,,)
- MSI (s) (C0:18) [10:37:19:681]: File: C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsClientApi.dll; To be installed; Won't patch; No existing file
- MSI (s) (C0:18) [10:37:19:681]: Source for file 'McsClientApi.dll' is uncompressed, at 'C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\'.
- MSI (s) (C0:18) [10:37:19:681]: Executing op: FileCopy(SourceName=gozwyxzw.dll|McsEvents.dll,SourceCabKey=McsEvents,DestName=McsEvents.dll,Attributes=512,FileSize=36648,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=2.0.0.145,Language=2057,InstallMode=58982400,,,,,,,)
- MSI (s) (C0:18) [10:37:19:681]: File: C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsEvents.dll; To be installed; Won't patch; No existing file
- MSI (s) (C0:18) [10:37:19:681]: Source for file 'McsEvents.dll' is uncompressed, at 'C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\'.
- MSI (s) (C0:18) [10:37:19:681]: Executing op: FileCopy(SourceName=rzn1jlru.dll|log4cplus.dll,SourceCabKey=Mcslog4cplus,DestName=log4cplus.dll,Attributes=512,FileSize=306472,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.0.4.11,Language=2057,InstallMode=58982400,,,,,,,)
- MSI (s) (C0:18) [10:37:19:681]: File: C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\log4cplus.dll; To be installed; Won't patch; No existing file
- MSI (s) (C0:18) [10:37:19:681]: Source for file 'log4cplus.dll' is uncompressed, at 'C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\'.
- MSI (s) (C0:18) [10:37:19:681]: Executing op: FileCopy(SourceName=scf.dat,SourceCabKey=ScfDatFile,DestName=scf.dat,Attributes=512,FileSize=2931,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1889327467,HashPart2=-687138333,HashPart3=-131907316,HashPart4=1646382487,,)
- MSI (s) (C0:18) [10:37:19:681]: File: C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\scf.dat; To be installed; Won't patch; No existing file
- MSI (s) (C0:18) [10:37:19:681]: Source for file 'scf.dat' is uncompressed, at 'C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\'.
- MSI (s) (C0:18) [10:37:19:681]: Executing op: FileCopy(SourceName=sof.dat,SourceCabKey=SofDatFile,DestName=sof.dat,Attributes=512,FileSize=2995,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-547768320,HashPart2=-2121814892,HashPart3=342981253,HashPart4=587107744,,)
- MSI (s) (C0:18) [10:37:19:681]: File: C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\sof.dat; To be installed; Won't patch; No existing file
- MSI (s) (C0:18) [10:37:19:681]: Source for file 'sof.dat' is uncompressed, at 'C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\'.
- MSI (s) (C0:18) [10:37:19:681]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Certificates\Management Communications System\)
- MSI (s) (C0:18) [10:37:19:681]: Executing op: SetSourceFolder(Folder=1\Sophos\kxkdnwxp\dicqakrm\|Sophos\Certificates\Management Communications System\)
- MSI (s) (C0:18) [10:37:19:697]: Executing op: FileCopy(SourceName=nlwxodeh.crl|sophosca1.crl,SourceCabKey=sophosca1.crl,DestName=sophosca1.crl,Attributes=512,FileSize=499,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1421245463,HashPart2=-457585657,HashPart3=1370276833,HashPart4=-312827615,,)
- MSI (s) (C0:18) [10:37:19:697]: File: C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca1.crl; To be installed; Won't patch; No existing file
- MSI (s) (C0:18) [10:37:19:697]: Source for file 'sophosca1.crl' is uncompressed, at 'C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Certificates\Management Communications System\'.
- MSI (s) (C0:18) [10:37:19:697]: Executing op: FileCopy(SourceName=yzia3nfy.crt|sophosca1.crt,SourceCabKey=sophosca1.crt,DestName=sophosca1.crt,Attributes=512,FileSize=1142,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-118683498,HashPart2=-1038483916,HashPart3=13382847,HashPart4=-1511238407,,)
- MSI (s) (C0:18) [10:37:19:697]: File: C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca1.crt; To be installed; Won't patch; No existing file
- MSI (s) (C0:18) [10:37:19:697]: Source for file 'sophosca1.crt' is uncompressed, at 'C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Certificates\Management Communications System\'.
- MSI (s) (C0:18) [10:37:19:697]: Executing op: FileCopy(SourceName=bq-jz8iz.crl|sophosca2.crl,SourceCabKey=sophosca2.crl,DestName=sophosca2.crl,Attributes=512,FileSize=475,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-540208571,HashPart2=-1606669929,HashPart3=871542603,HashPart4=-1241471107,,)
- MSI (s) (C0:18) [10:37:19:697]: File: C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca2.crl; To be installed; Won't patch; No existing file
- MSI (s) (C0:18) [10:37:19:697]: Source for file 'sophosca2.crl' is uncompressed, at 'C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Certificates\Management Communications System\'.
- MSI (s) (C0:18) [10:37:19:697]: Executing op: FileCopy(SourceName=ymsdc0ag.crt|sophosca2.crt,SourceCabKey=sophosca2.crt,DestName=sophosca2.crt,Attributes=512,FileSize=1142,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=899484485,HashPart2=1068736713,HashPart3=-85403264,HashPart4=170302114,,)
- MSI (s) (C0:18) [10:37:19:697]: File: C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca2.crt; To be installed; Won't patch; No existing file
- MSI (s) (C0:18) [10:37:19:697]: Source for file 'sophosca2.crt' is uncompressed, at 'C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Certificates\Management Communications System\'.
- MSI (s) (C0:18) [10:37:19:697]: Executing op: SetTargetFolder(Folder=C:\WINDOWS\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\)
- MSI (s) (C0:18) [10:37:19:697]: Executing op: SetSourceFolder(Folder=1\Sophos\cxvnxvua\Endpoint\Windows\winsxs\ulCRTx86\|Sophos\Management Communications System\Endpoint\Windows\winsxs\ulCRTx86\)
- MSI (s) (C0:18) [10:37:19:697]: Executing op: AssemblyCopy(SourceName=zk7sa0e7.mic|x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43.cat,SourceCabKey=ul_catalog.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF,DestName=x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43.cat,Attributes=0,FileSize=7318,PerTick=65536,,VerifyMedia=1,ElevateFlags=4,,,,ComponentId={4C3A7A77-BFE9-309A-B576-33618A5B1A67},,,,AssemblyMode=0,)
- MSI (s) (C0:18) [10:37:19:697]: Source for file 'x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43.cat' is uncompressed, at 'C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\Windows\winsxs\ulCRTx86\'.
- MSI (s) (C0:18) [10:37:19:713]: Executing op: SetTargetFolder(Folder=C:\WINDOWS\winsxs\x86_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_f480bfaef65491a5\)
- MSI (s) (C0:18) [10:37:19:713]: Executing op: SetSourceFolder(Folder=1\Sophos\cxvnxvua\Endpoint\Windows\winsxs\uokrlnxb\|Sophos\Management Communications System\Endpoint\Windows\winsxs\ulpCRTx86\)
- MSI (s) (C0:18) [10:37:19:713]: Executing op: AssemblyCopy(SourceName=bo30f-vq.pol|9.0.30729.6161.cat,SourceCabKey=ul_catalog.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4,DestName=9.0.30729.6161.cat,Attributes=0,FileSize=7367,PerTick=65536,,VerifyMedia=1,ElevateFlags=4,,,,ComponentId={B4606FC1-ADD6-3F4C-B9A7-BEA4CE07951E},,,,AssemblyMode=0,)
- MSI (s) (C0:18) [10:37:19:713]: Source for file '9.0.30729.6161.cat' is uncompressed, at 'C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\Windows\winsxs\ulpCRTx86\'.
- MSI (s) (C0:18) [10:37:19:713]: Executing op: SetTargetFolder(Folder=C:\WINDOWS\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\)
- MSI (s) (C0:18) [10:37:19:713]: Executing op: SetSourceFolder(Folder=1\Sophos\cxvnxvua\Endpoint\Windows\winsxs\ulCRTx86\|Sophos\Management Communications System\Endpoint\Windows\winsxs\ulCRTx86\)
- MSI (s) (C0:18) [10:37:19:713]: Executing op: AssemblyCopy(SourceName=hugdf4_p.mic|x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43.manifest,SourceCabKey=ul_manifest.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF,DestName=x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43.manifest,Attributes=0,FileSize=1860,PerTick=65536,,VerifyMedia=1,ElevateFlags=4,,,,ComponentId={4C3A7A77-BFE9-309A-B576-33618A5B1A67},IsManifest=1,,,AssemblyMode=0,)
- MSI (s) (C0:18) [10:37:19:713]: Source for file 'x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43.manifest' is uncompressed, at 'C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\Windows\winsxs\ulCRTx86\'.
- MSI (s) (C0:18) [10:37:19:713]: Executing op: AssemblyCopy(SourceName=cmx86.dll|msvcm90.dll,SourceCabKey=ul_msvcm90.dll.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF,DestName=msvcm90.dll,Attributes=0,FileSize=225280,PerTick=65536,,VerifyMedia=1,ElevateFlags=4,,,,ComponentId={4C3A7A77-BFE9-309A-B576-33618A5B1A67},,,,AssemblyMode=0,)
- MSI (s) (C0:18) [10:37:19:713]: Source for file 'msvcm90.dll' is uncompressed, at 'C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\Windows\winsxs\ulCRTx86\'.
- MSI (s) (C0:18) [10:37:19:734]: Executing op: AssemblyCopy(SourceName=cpx86.dll|msvcp90.dll,SourceCabKey=ul_msvcp90.dll.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF,DestName=msvcp90.dll,Attributes=0,FileSize=569680,PerTick=65536,,VerifyMedia=1,ElevateFlags=4,,,,ComponentId={4C3A7A77-BFE9-309A-B576-33618A5B1A67},,,,AssemblyMode=0,)
- MSI (s) (C0:18) [10:37:19:734]: Source for file 'msvcp90.dll' is uncompressed, at 'C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\Windows\winsxs\ulCRTx86\'.
- MSI (s) (C0:18) [10:37:19:734]: Executing op: AssemblyCopy(SourceName=crx86.dll|msvcr90.dll,SourceCabKey=ul_msvcr90.dll.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF,DestName=msvcr90.dll,Attributes=0,FileSize=653136,PerTick=65536,,VerifyMedia=1,ElevateFlags=4,,,,ComponentId={4C3A7A77-BFE9-309A-B576-33618A5B1A67},,,,AssemblyMode=0,)
- MSI (s) (C0:18) [10:37:19:734]: Source for file 'msvcr90.dll' is uncompressed, at 'C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\Windows\winsxs\ulCRTx86\'.
- MSI (s) (C0:18) [10:37:19:750]: Executing op: SetTargetFolder(Folder=C:\WINDOWS\winsxs\x86_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_f480bfaef65491a5\)
- MSI (s) (C0:18) [10:37:19:750]: Executing op: SetSourceFolder(Folder=1\Sophos\cxvnxvua\Endpoint\Windows\winsxs\uokrlnxb\|Sophos\Management Communications System\Endpoint\Windows\winsxs\ulpCRTx86\)
- MSI (s) (C0:18) [10:37:19:750]: Executing op: AssemblyCopy(SourceName=ycfchvtw.pol|9.0.30729.6161.policy,SourceCabKey=ul_policy.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4,DestName=9.0.30729.6161.policy,Attributes=0,FileSize=764,PerTick=65536,,VerifyMedia=1,ElevateFlags=4,,,,ComponentId={B4606FC1-ADD6-3F4C-B9A7-BEA4CE07951E},IsManifest=1,,,AssemblyMode=0,)
- MSI (s) (C0:18) [10:37:19:750]: Source for file '9.0.30729.6161.policy' is uncompressed, at 'C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\Windows\winsxs\ulpCRTx86\'.
- MSI (s) (C0:18) [10:37:19:766]: Executing op: CacheSizeFlush(,)
- MSI (s) (C0:18) [10:37:19:766]: Executing op: ActionStart(Name=RestoreConfig,,)
- MSI (s) (C0:18) [10:37:19:766]: Executing op: CustomActionSchedule(Action=RestoreConfig,ActionType=3329,Source=BinaryData,Target=RestoreConfigFile,CustomActionData=C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\Config.xml)
- MSI (s) (C0:18) [10:37:19:766]: Executing op: ActionStart(Name=UpdateConfig,,)
- MSI (s) (C0:18) [10:37:19:766]: Executing op: CustomActionSchedule(Action=UpdateConfig,ActionType=3073,Source=BinaryData,Target=UpdateConfigFile,CustomActionData=C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\Config.xml,dzr-mcs-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com,,)
- MSI (s) (C0:18) [10:37:19:766]: Creating MSIHANDLE (15) of type 790536 for thread 1048
- MSI (s) (C0:84) [10:37:19:766]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSIC15F.tmp, Entrypoint: UpdateConfigFile
- MSI (s) (C0:B8) [10:37:19:766]: Generating random cookie.
- MSI (s) (C0:B8) [10:37:19:766]: Created Custom Action Server with PID 6636 (0x19EC).
- MSI (s) (C0:64) [10:37:19:781]: Running as a service.
- MSI (s) (C0:64) [10:37:19:781]: Hello, I'm your 32bit Elevated Non-remapped custom action server.
- MSI (s) (C0!28) [10:37:19:781]: Creating MSIHANDLE (16) of type 790531 for thread 5160
- MSI (s) (C0!28) [10:37:19:797]: Closing MSIHANDLE (16) of type 790531 for thread 5160
- MSI (s) (C0!28) [10:37:19:797]: Creating MSIHANDLE (17) of type 790531 for thread 5160
- UpdateConfigFile: Initialized.
- MSI (s) (C0!28) [10:37:19:797]: Closing MSIHANDLE (17) of type 790531 for thread 5160
- MSI (s) (C0!28) [10:37:19:797]: Creating MSIHANDLE (18) of type 790531 for thread 5160
- UpdateConfigFile: Retrieving Custom Action Data.
- MSI (s) (C0!28) [10:37:19:797]: Closing MSIHANDLE (18) of type 790531 for thread 5160
- MSI (s) (C0!28) [10:37:19:797]: Creating MSIHANDLE (19) of type 790531 for thread 5160
- UpdateConfigFile: CustomActionData : C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\Config.xml,dzr-mcs-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com,,
- MSI (s) (C0!28) [10:37:19:797]: Closing MSIHANDLE (19) of type 790531 for thread 5160
- MSI (s) (C0!28) [10:37:19:797]: Creating MSIHANDLE (20) of type 790531 for thread 5160
- UpdateConfigFile: Data :
- MSI (s) (C0!28) [10:37:19:797]: Closing MSIHANDLE (20) of type 790531 for thread 5160
- MSI (s) (C0!28) [10:37:19:797]: Creating MSIHANDLE (21) of type 790531 for thread 5160
- UpdateConfigFile: Calling function WriteContentsInConfigFile().
- MSI (s) (C0!28) [10:37:19:797]: Closing MSIHANDLE (21) of type 790531 for thread 5160
- MSI (s) (C0:84) [10:37:19:797]: Closing MSIHANDLE (15) of type 790536 for thread 1048
- MSI (s) (C0:18) [10:37:19:797]: Executing op: ActionStart(Name=WriteRegistryValues,Description=Writing system registry values,Template=Key: [1], Name: [2], Value: [3])
- UpdateConfigFile: Creating a string to write between servers tag.
- MSI (s) (C0:18) [10:37:19:797]: Executing op: ProgressTotal(Total=11,Type=1,ByteEquivalent=13200)
- MSI (s) (C0:18) [10:37:19:797]: Executing op: RegOpenKey(Root=-2147483647,Key=Software\Sophos\Management Communications System\Registration,,BinaryType=0,,)
- MSI (s) (C0:18) [10:37:19:797]: Executing op: RegAddValue(,Value=Create registration file,)
- MSI (s) (C0:18) [10:37:19:797]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Sophos\Remote Management System,,BinaryType=0,,)
- MSI (s) (C0:18) [10:37:19:797]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:19:797]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Sophos\Remote Management System\ManagementAgent\Adapters,,BinaryType=0,,)
- MSI (s) (C0:18) [10:37:19:797]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:19:797]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Sophos\Remote Management System\ManagementAgent\Adapters\MCS,,BinaryType=0,,)
- MSI (s) (C0:18) [10:37:19:797]: Executing op: RegAddValue(Name=DllPath,Value=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsAdapter.dll,)
- MSI (s) (C0:18) [10:37:19:797]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:19:812]: Executing op: RegOpenKey(Root=-2147483646,Key=System\CurrentControlSet\Services\Eventlog\Application\Sophos Management Communications System,,BinaryType=0,,)
- MSI (s) (C0:18) [10:37:19:812]: Executing op: RegAddValue(Name=EventMessageFile,Value=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsEvents.dll,)
- MSI (s) (C0:18) [10:37:19:812]: Executing op: RegAddValue(Name=ParameterMessageFile,Value=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsEvents.dll,)
- MSI (s) (C0:18) [10:37:19:812]: Executing op: RegAddValue(Name=CategoryMessageFile,Value=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsEvents.dll,)
- MSI (s) (C0:18) [10:37:19:812]: Executing op: RegAddValue(Name=CategoryCount,Value=#2,)
- MSI (s) (C0:18) [10:37:19:812]: Executing op: RegAddValue(Name=TypesSupported,Value=#7,)
- MSI (s) (C0:18) [10:37:19:812]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:19:812]: Executing op: ActionStart(Name=WriteIniValues,Description=Writing INI files values,Template=File: [1], Section: [2], Key: [3], Value: [4])
- MSI (s) (C0:18) [10:37:19:812]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=13200)
- MSI (s) (C0:18) [10:37:19:812]: Executing op: IniFilePath(File=registration.txt,Folder=C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\)
- MSI (s) (C0:18) [10:37:19:812]: Executing op: IniWriteRemoveValue(Section=McsClient,Key=Token,Value=cfff535be855636d9cebcdf24ea26fdfa5313c75512a42bf2085f7a258cff140,Mode=0)
- MSI (s) (C0:18) [10:37:19:812]: Executing op: ActionStart(Name=InstallServices,Description=Installing new services,Template=Service: [2])
- MSI (s) (C0:18) [10:37:19:812]: Executing op: ProgressTotal(Total=2,Type=1,ByteEquivalent=1300000)
- MSI (s) (C0:18) [10:37:19:812]: Executing op: ServiceInstall(Name=Sophos MCS Client,DisplayName=Sophos MCS Client,ImagePath="C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsClient.exe",ServiceType=16,StartType=2,ErrorControl=32769,,Dependencies=[~],,StartName=NT AUTHORITY\NetworkService,Password=**********,Description=Management Communications Client.,,)
- MSI (s) (C0:18) [10:37:19:812]: Executing op: ServiceInstall(Name=Sophos MCS Agent,DisplayName=Sophos MCS Agent,ImagePath="C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsAgent.exe",ServiceType=16,StartType=2,ErrorControl=32769,,Dependencies=[~],,,Password=**********,Description=Management Communications Agent.,,)
- MSI (s) (C0:18) [10:37:19:812]: Executing op: ActionStart(Name=RollbackServiceConfig,,)
- MSI (s) (C0:18) [10:37:19:812]: Executing op: CustomActionSchedule(Action=RollbackServiceConfig,ActionType=3329,Source=BinaryData,Target=RollbackServiceConfig,CustomActionData=SchedServiceConfig)
- MSI (s) (C0:18) [10:37:19:812]: Executing op: ActionStart(Name=ExecServiceConfig,,)
- MSI (s) (C0:18) [10:37:19:812]: Executing op: CustomActionSchedule(Action=ExecServiceConfig,ActionType=3073,Source=BinaryData,Target=ExecServiceConfig,CustomActionData=SchedServiceConfig€Sophos MCS Agent€0€restart€restart€restart€1€60€€€Sophos MCS Client€0€restart€restart€restart€1€60€€)
- MSI (s) (C0:18) [10:37:19:812]: Creating MSIHANDLE (22) of type 790536 for thread 1048
- MSI (s) (C0:60) [10:37:19:828]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSIC18F.tmp, Entrypoint: ExecServiceConfig
- MSI (s) (C0!94) [10:37:19:834]: Creating MSIHANDLE (23) of type 790531 for thread 8596
- MSI (s) (C0!94) [10:37:19:834]: Closing MSIHANDLE (23) of type 790531 for thread 8596
- MSI (s) (C0!94) [10:37:19:850]: Creating MSIHANDLE (24) of type 790531 for thread 8596
- MSI (s) (C0!94) [10:37:19:850]: Closing MSIHANDLE (24) of type 790531 for thread 8596
- MSI (s) (C0:60) [10:37:19:850]: Closing MSIHANDLE (22) of type 790536 for thread 1048
- MSI (s) (C0:18) [10:37:19:850]: Executing op: ActionStart(Name=RegisterProduct,Description=Registering product,Template=[1])
- MSI (s) (C0:18) [10:37:19:850]: Executing op: ChangeMedia(,MediaPrompt=Please insert the disk: ,,BytesPerTick=0,CopierType=0,,,,,,IsFirstPhysicalMedia=1)
- MSI (s) (C0:18) [10:37:19:850]: Executing op: DatabaseCopy(DatabasePath=C:\WINDOWS\Installer\1343bf77.msi,ProductCode={1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},,,)
- MSI (s) (C0:18) [10:37:19:850]: Note: 1: 1402 2: UNKNOWN\Products\02F3DFF142D5A9C49B6F2A705AC31F97\InstallProperties 3: 2
- MSI (s) (C0:18) [10:37:19:850]: File will have security applied from OpCode.
- MSI (s) (C0:18) [10:37:19:850]: Executing op: ProductRegister(UpgradeCode={7A6045EF-603A-4648-B227-2221E4A931BB},VersionString=2.0.0,HelpLink=http://www.sophos.com/support/,,InstallLocation=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\,InstallSource=C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\,Publisher=Sophos Limited,URLInfoAbout=http://www.sophos.com/,,,NoModify=1,NoRepair=1,,Comments=Management Communications System,Contact=Sophos Technical Support,,,,EstimatedSize=3550,,,,)
- MSI (s) (C0:18) [10:37:19:865]: Executing op: ProductCPDisplayInfoRegister()
- MSI (s) (C0:18) [10:37:19:865]: Executing op: ActionStart(Name=MsiPublishAssemblies,Description=Publishing assembly information,Template=Application Context:[1], Assembly Name:[2])
- MSI (s) (C0:18) [10:37:19:865]: Executing op: AssemblyPublish(Feature=ProductFeature,Component={B4606FC1-ADD6-3F4C-B9A7-BEA4CE07951E}[~]2,AssemblyType=2,,AssemblyName=policy.9.0.Microsoft.VC90.CRT,version="9.0.30729.6161",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="x86",type="win32-policy",)
- MSI (s) (C0:18) [10:37:19:865]: Executing op: AssemblyPublish(Feature=ProductFeature,Component={4C3A7A77-BFE9-309A-B576-33618A5B1A67}[~]2,AssemblyType=2,,AssemblyName=Microsoft.VC90.CRT,version="9.0.30729.6161",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="x86",type="win32",)
- MSI (s) (C0:18) [10:37:19:865]: Executing op: ActionStart(Name=PublishFeatures,Description=Publishing Product Features,Template=Feature: [1])
- MSI (s) (C0:18) [10:37:19:865]: Executing op: FeaturePublish(Feature=ProductFeature,,Absent=2,Component=DFEQNm7@!@1*AP+@!cpEeT7*UE~X[@8N@Or8EjmaiC+}Os!ys8GpcmBqu8w37r~du5TrV@00?u!.E4^HHgGRTUTeBA@PNKWmBC'RQwovm[pV{?XXH3h]fXhEd[6*VZ11HA_LHgYwS$*T+=!MlM1{g=yE-O3JPxhkRJ2XmyGQ49N.xO&2MT7)3CLTk6~@l8kaTPmpIGAy),@2B@5=j@dCAv^M4T.SfTYbd5zLU=^%-$h=ElE7{3M$1zhwR=F(L{I}^Y*P$yEv4H6EQAE'{8D*wSkByO`6G&Y_t94fU?OmsfBJ,lP'{LJNu@!0&Jo!kvl@{Wi!r]t2o9-~`u1P%,G.ooc{b46?E8Bj_y]]~Oo,{7WiBZd@P64~7%ugXB]eKRPR@Gkn]3=+L8G6!a.Iv&w*ia}&*6m_PmuNJs'Vlx,Io(5qd3tYs0%p){^+)za.D-Qhy3`?!Q55l(Wb)
- MSI (s) (C0:18) [10:37:19:865]: Executing op: ActionStart(Name=PublishProduct,Description=Publishing product information,)
- MSI (s) (C0:18) [10:37:19:865]: Executing op: IconCreate(Icon=Sophos_MCS_Icon,Data=BinaryData)
- MSI (s) (C0:18) [10:37:19:865]: Executing op: CleanupConfigData()
- MSI (s) (C0:18) [10:37:19:865]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\02F3DFF142D5A9C49B6F2A705AC31F97\Patches 3: 2
- MSI (s) (C0:18) [10:37:19:865]: Executing op: RegisterPatchOrder(Continue=0,SequenceType=1,Remove=0)
- MSI (s) (C0:18) [10:37:19:865]: Note: 1: 1402 2: UNKNOWN\Products\02F3DFF142D5A9C49B6F2A705AC31F97\Patches 3: 2
- MSI (s) (C0:18) [10:37:19:865]: Executing op: ProductPublish(PackageKey={#})
- MSI (s) (C0:18) [10:37:19:865]: Note: 1: 1402 2: UNKNOWN\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
- MSI (s) (C0:18) [10:37:19:865]: Note: 1: 1402 2: UNKNOWN\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
- MSI (s) (C0:18) [10:37:19:865]: Note: 1: 1402 2: UNKNOWN\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
- MSI (s) (C0:18) [10:37:19:865]: Note: 1: 1402 2: UNKNOWN\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
- MSI (s) (C0:18) [10:37:19:865]: Note: 1: 1402 2: UNKNOWN\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
- MSI (s) (C0:18) [10:37:19:865]: Note: 1: 1402 2: UNKNOWN\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
- MSI (s) (C0:18) [10:37:19:865]: Note: 1: 1402 2: UNKNOWN\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
- MSI (s) (C0:18) [10:37:19:865]: Note: 1: 1402 2: UNKNOWN\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
- MSI (s) (C0:18) [10:37:19:865]: Note: 1: 1402 2: UNKNOWN\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
- MSI (s) (C0:18) [10:37:19:865]: Note: 1: 1402 2: UNKNOWN\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
- MSI (s) (C0:18) [10:37:19:865]: Note: 1: 1402 2: UNKNOWN\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
- MSI (s) (C0:18) [10:37:19:865]: Executing op: UpgradeCodePublish(UpgradeCode={#})
- MSI (s) (C0:18) [10:37:19:865]: Executing op: SourceListPublish(,,,,NumberOfDisks=1)
- MSI (s) (C0:18) [10:37:19:865]: Note: 1: 1402 2: UNKNOWN\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97\SourceList 3: 2
- MSI (s) (C0:18) [10:37:19:865]: Executing op: ProductPublishClient(,,)
- MSI (s) (C0:18) [10:37:19:865]: Executing op: SourceListRegisterLastUsed(SourceProduct={#},LastUsedSource=C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\)
- MSI (s) (C0:18) [10:37:19:865]: Entering CMsiConfigurationManager::SetLastUsedSource.
- MSI (s) (C0:18) [10:37:19:865]: Setting cached product context: machine assigned for product: 02F3DFF142D5A9C49B6F2A705AC31F97
- MSI (s) (C0:18) [10:37:19:865]: Specifed source is already in a list.
- MSI (s) (C0:18) [10:37:19:865]: User policy value 'SearchOrder' is 'nmu'
- MSI (s) (C0:18) [10:37:19:865]: Adding new sources is allowed.
- MSI (s) (C0:18) [10:37:19:865]: Set LastUsedSource to: C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\.
- MSI (s) (C0:18) [10:37:19:865]: Set LastUsedType to: n.
- MSI (s) (C0:18) [10:37:19:865]: Set LastUsedIndex to: 1.
- MSI (s) (C0:18) [10:37:19:865]: Executing op: End(Checksum=0,ProgressTotalHDWord=0,ProgressTotalLDWord=11010818)
- MSI (s) (C0:18) [10:37:21:582]: Doing action: RemoveExistingProducts
- MSI (s) (C0:18) [10:37:21:582]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:21: InstallExecute. Return value 1.
- Action start 10:37:21: RemoveExistingProducts.
- MSI (s) (C0:18) [10:37:21:582]: Doing action: ScheduleSetPermissions.Deferred
- MSI (s) (C0:18) [10:37:21:582]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:21: RemoveExistingProducts. Return value 1.
- MSI (s) (C0:18) [10:37:21:582]: Creating MSIHANDLE (25) of type 790542 for thread 1048
- MSI (s) (C0:50) [10:37:21:582]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSIC876.tmp, Entrypoint: SchedulePermissionsDeferred
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (26) of type 790541 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (27) of type 790531 for thread 236
- Action start 10:37:21: ScheduleSetPermissions.Deferred.
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (27) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (28) of type 790540 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (29) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (30) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (30) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (31) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (31) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (32) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (32) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (33) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (33) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (34) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (34) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (35) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (35) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (36) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (36) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (37) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (37) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (38) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (38) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (39) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (39) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (40) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (40) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (41) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (41) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (42) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (42) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (43) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (43) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (44) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (44) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (45) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (45) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (46) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (46) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (47) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (47) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (48) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (48) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (49) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (49) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (50) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (50) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (51) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (51) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (52) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (52) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (53) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (53) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (54) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (54) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (55) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (55) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (56) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (56) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (57) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (57) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (58) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (58) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (59) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (59) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (60) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (60) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (61) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (61) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (62) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (62) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (29) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (28) of type 790540 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (63) of type 790531 for thread 236
- SchedulePermissionsDeferred: Initialized.
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (63) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (64) of type 790531 for thread 236
- SchedulePermissionsDeferred: PopulateComponentAttributeMap: Loaded components table in a table view object.
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (64) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (65) of type 790540 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (66) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (67) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (67) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (68) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (68) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (69) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (69) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (70) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Closing MSIHANDLE (70) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:598]: Creating MSIHANDLE (71) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Closing MSIHANDLE (71) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Creating MSIHANDLE (72) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Closing MSIHANDLE (72) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Creating MSIHANDLE (73) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Closing MSIHANDLE (73) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Creating MSIHANDLE (74) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Closing MSIHANDLE (74) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Creating MSIHANDLE (75) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Closing MSIHANDLE (75) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Creating MSIHANDLE (76) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Closing MSIHANDLE (76) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Creating MSIHANDLE (77) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Closing MSIHANDLE (77) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Creating MSIHANDLE (78) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Closing MSIHANDLE (78) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Closing MSIHANDLE (66) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Closing MSIHANDLE (65) of type 790540 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Creating MSIHANDLE (79) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Closing MSIHANDLE (79) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Creating MSIHANDLE (80) of type 790540 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Creating MSIHANDLE (81) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Creating MSIHANDLE (82) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Creating MSIHANDLE (83) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Closing MSIHANDLE (83) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Creating MSIHANDLE (84) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Closing MSIHANDLE (84) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Closing MSIHANDLE (82) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Closing MSIHANDLE (81) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Closing MSIHANDLE (80) of type 790540 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Creating MSIHANDLE (85) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Closing MSIHANDLE (85) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Creating MSIHANDLE (86) of type 790540 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Creating MSIHANDLE (87) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Creating MSIHANDLE (88) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Creating MSIHANDLE (89) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Closing MSIHANDLE (89) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Creating MSIHANDLE (90) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Closing MSIHANDLE (90) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Closing MSIHANDLE (88) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Closing MSIHANDLE (87) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Closing MSIHANDLE (86) of type 790540 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Creating MSIHANDLE (91) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Closing MSIHANDLE (91) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Creating MSIHANDLE (92) of type 790540 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Creating MSIHANDLE (93) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Creating MSIHANDLE (94) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Creating MSIHANDLE (95) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Closing MSIHANDLE (95) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Creating MSIHANDLE (96) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Closing MSIHANDLE (96) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Closing MSIHANDLE (94) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Closing MSIHANDLE (93) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Closing MSIHANDLE (92) of type 790540 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Creating MSIHANDLE (97) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Closing MSIHANDLE (97) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Creating MSIHANDLE (98) of type 790540 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Creating MSIHANDLE (99) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Creating MSIHANDLE (100) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Creating MSIHANDLE (101) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Closing MSIHANDLE (101) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Creating MSIHANDLE (102) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Closing MSIHANDLE (102) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Closing MSIHANDLE (100) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Closing MSIHANDLE (99) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Closing MSIHANDLE (98) of type 790540 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Creating MSIHANDLE (103) of type 790531 for thread 236
- SchedulePermissionsDeferred: Component attributes have been loaded successfully.
- MSI (s) (C0!EC) [10:37:21:614]: Closing MSIHANDLE (103) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: Creating MSIHANDLE (104) of type 790531 for thread 236
- SchedulePermissionsDeferred: Action data construction has been completed.
- MSI (s) (C0!EC) [10:37:21:614]: Closing MSIHANDLE (104) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:614]: PROPERTY CHANGE: Adding SetPermissions.Deferred property. Its value is '2{12}2{13}8{objectid}11{objecttable}6{action}8{identity}12{identitytype}11{inheritance}10{genericall}11{genericread}12{genericwrite}14{genericexecute}6{modify}10{objectpath}5{win64}14{EndpointFolder}6{Folder}5{Clear}3{N/A}0{}2{No}0{}0{}0{}0{}0{}64{C:\ProgramData\Sophos\Management Communications System\Endpoint\}2{no}14{EndpointFolder}6{Folder}5{Allow}14{Administrators}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}64{C:\ProgramData\Sophos\Management Communications System\Endpoint\}2{no}14{EndpointFolder}6{Folder}5{Allow}15{Network Service}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}64{C:\ProgramData\Sophos\Management Communications System\Endpoint\}2{no}20{AdapterStorageFolder}6{Folder}5{Clear}3{N/A}0{}2{No}0{}0{}0{}0{}0{}70{C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\}2{no}20{AdapterStorageFolder}6{Folder}5{Allow}14{Administrators}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}70{C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\}2{no}42{ManagementCommunication
- MSI (s) (C0!EC) [10:37:21:614]: Doing action: SetPermissions.Deferred
- MSI (s) (C0!EC) [10:37:21:614]: Note: 1: 2205 2: 3: ActionText
- SchedulePermissionsDeferred: Action data serialization has been completed.
- MSI (s) (C0!EC) [10:37:21:614]: Note: 1: 2205 2: 3: MsiPatchCertificate
- MSI (s) (C0!EC) [10:37:21:614]: LUA patching is disabled: missing MsiPatchCertificate table
- MSI (s) (C0!EC) [10:37:21:614]: Note: 1: 2205 2: 3: ActionText
- MSI (s) (C0!EC) [10:37:21:614]: Note: 1: 2205 2: 3: ActionText
- MSI (s) (C0!EC) [10:37:21:630]: Note: 1: 2205 2: 3: ActionText
- Action start 10:37:21: SetPermissions.Deferred.
- MSI (s) (C0!EC) [10:37:21:633]: Creating MSIHANDLE (105) of type 790531 for thread 236
- Action ended 10:37:21: SetPermissions.Deferred. Return value 1.
- MSI (s) (C0!EC) [10:37:21:633]: Closing MSIHANDLE (105) of type 790531 for thread 236
- MSI (s) (C0!EC) [10:37:21:633]: Closing MSIHANDLE (26) of type 790541 for thread 236
- MSI (s) (C0:50) [10:37:21:634]: Closing MSIHANDLE (25) of type 790542 for thread 1048
- SchedulePermissionsDeferred: Custom action SetPermissions.Deferred has been scheduled.
- MSI (s) (C0:18) [10:37:21:635]: Doing action: DeleteBackupConfigFile
- MSI (s) (C0:18) [10:37:21:635]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:21: ScheduleSetPermissions.Deferred. Return value 1.
- Action start 10:37:21: DeleteBackupConfigFile.
- MSI (s) (C0:18) [10:37:21:636]: Doing action: SetStartMCSAgentService
- MSI (s) (C0:18) [10:37:21:636]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:21: DeleteBackupConfigFile. Return value 1.
- MSI (s) (C0:18) [10:37:21:636]: PROPERTY CHANGE: Adding StartMCSAgentService property. Its value is 'Sophos MCS Agent'.
- Action start 10:37:21: SetStartMCSAgentService.
- MSI (s) (C0:18) [10:37:21:636]: Doing action: StartMCSAgentService
- MSI (s) (C0:18) [10:37:21:636]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:21: SetStartMCSAgentService. Return value 1.
- Action start 10:37:21: StartMCSAgentService.
- MSI (s) (C0:18) [10:37:21:636]: Doing action: SetStartMCSClientService
- MSI (s) (C0:18) [10:37:21:636]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:21: StartMCSAgentService. Return value 1.
- MSI (s) (C0:18) [10:37:21:636]: PROPERTY CHANGE: Adding StartMCSClientService property. Its value is 'Sophos MCS Client'.
- Action start 10:37:21: SetStartMCSClientService.
- MSI (s) (C0:18) [10:37:21:636]: Doing action: StartMCSClientService
- MSI (s) (C0:18) [10:37:21:636]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:21: SetStartMCSClientService. Return value 1.
- Action start 10:37:21: StartMCSClientService.
- MSI (s) (C0:18) [10:37:21:636]: Skipping action: WixFailWhenDeferred (condition is false)
- MSI (s) (C0:18) [10:37:21:636]: Doing action: InstallFinalize
- MSI (s) (C0:18) [10:37:21:636]: Note: 1: 2205 2: 3: ActionText
- Action ended 10:37:21: StartMCSClientService. Return value 1.
- MSI (s) (C0:18) [10:37:21:636]: Running Script: C:\WINDOWS\Installer\MSIC896.tmp
- MSI (s) (C0:18) [10:37:21:636]: Note: 1: 2265 2: 3: -2147287035
- MSI (s) (C0:18) [10:37:21:636]: User policy value 'DisableRollback' is 0
- MSI (s) (C0:18) [10:37:21:636]: Machine policy value 'DisableRollback' is 0
- MSI (s) (C0:18) [10:37:21:636]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1212699819,LangId=1033,Platform=0,ScriptType=1,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1)
- Action start 10:37:21: InstallFinalize.
- MSI (s) (C0:18) [10:37:21:636]: Executing op: ProductInfo(ProductKey={#},ProductName=Sophos Management Communications System,PackageName=Sophos Management Communications System.msi,Language=1033,Version=33554432,Assignment=1,ObsoleteArg=0,ProductIcon=Sophos_MCS_Icon,,PackageCode={#},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0,ProductDeploymentFlags=3)
- MSI (s) (C0:18) [10:37:21:636]: Executing op: DialogInfo(Type=0,Argument=1033)
- MSI (s) (C0:18) [10:37:21:636]: Executing op: DialogInfo(Type=1,Argument=Sophos Management Communications System)
- MSI (s) (C0:18) [10:37:21:636]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1])
- MSI (s) (C0:18) [10:37:21:636]: Executing op: SetBaseline(Baseline=0,)
- MSI (s) (C0:18) [10:37:21:636]: Executing op: SetBaseline(Baseline=1,)
- MSI (s) (C0:18) [10:37:21:636]: Executing op: ActionStart(Name=SetPermissions.Deferred,,)
- MSI (s) (C0:18) [10:37:21:636]: Executing op: CustomActionSchedule(Action=SetPermissions.Deferred,ActionType=1025,Source=BinaryData,Target=SetPermissions,CustomActionData=2{12}2{13}8{objectid}11{objecttable}6{action}8{identity}12{identitytype}11{inheritance}10{genericall}11{genericread}12{genericwrite}14{genericexecute}6{modify}10{objectpath}5{win64}14{EndpointFolder}6{Folder}5{Clear}3{N/A}0{}2{No}0{}0{}0{}0{}0{}64{C:\ProgramData\Sophos\Management Communications System\Endpoint\}2{no}14{EndpointFolder}6{Folder}5{Allow}14{Administrators}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}64{C:\ProgramData\Sophos\Management Communications System\Endpoint\}2{no}14{EndpointFolder}6{Folder}5{Allow}15{Network Service}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}64{C:\ProgramData\Sophos\Management Communications System\Endpoint\}2{no}20{AdapterStorageFolder}6{Folder}5{Clear}3{N/A}0{}2{No}0{}0{}0{}0{}0{}70{C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\}2{no}20{AdapterStorageFolder}6{Folder}5{Allow}14{Administrators}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}70{C:\ProgramData\Sophos\Remote Manage
- MSI (s) (C0:18) [10:37:21:636]: Creating MSIHANDLE (106) of type 790536 for thread 1048
- MSI (s) (C0:B8) [10:37:21:636]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSIC8A8.tmp, Entrypoint: SetPermissions
- MSI (s) (C0!98) [10:37:21:651]: Creating MSIHANDLE (107) of type 790531 for thread 8088
- MSI (s) (C0!98) [10:37:21:651]: Closing MSIHANDLE (107) of type 790531 for thread 8088
- MSI (s) (C0!98) [10:37:21:651]: Creating MSIHANDLE (108) of type 790531 for thread 8088
- MSI (s) (C0!98) [10:37:21:651]: Closing MSIHANDLE (108) of type 790531 for thread 8088
- MSI (s) (C0!98) [10:37:21:651]: Creating MSIHANDLE (109) of type 790531 for thread 8088
- SetPermissions: Initialized.
- MSI (s) (C0!98) [10:37:21:651]: Closing MSIHANDLE (109) of type 790531 for thread 8088
- MSI (s) (C0!98) [10:37:21:651]: Creating MSIHANDLE (110) of type 790531 for thread 8088
- SetPermissions: ParseObjectPermissions has been entered.
- MSI (s) (C0!98) [10:37:21:651]: Closing MSIHANDLE (110) of type 790531 for thread 8088
- MSI (s) (C0!98) [10:37:21:651]: Creating MSIHANDLE (111) of type 790531 for thread 8088
- SetPermissions: ApplyObjectPermissions has been entered.
- MSI (s) (C0!98) [10:37:21:651]: Closing MSIHANDLE (111) of type 790531 for thread 8088
- MSI (s) (C0!98) [10:37:21:651]: Creating MSIHANDLE (112) of type 790531 for thread 8088
- SetPermissions: ApplyObjectPermissions has been entered.
- MSI (s) (C0!98) [10:37:21:651]: Closing MSIHANDLE (112) of type 790531 for thread 8088
- MSI (s) (C0!98) [10:37:21:651]: Creating MSIHANDLE (113) of type 790531 for thread 8088
- SetPermissions: ApplyObjectPermissions has been entered.
- MSI (s) (C0!98) [10:37:21:651]: Closing MSIHANDLE (113) of type 790531 for thread 8088
- MSI (s) (C0!98) [10:37:21:651]: Creating MSIHANDLE (114) of type 790531 for thread 8088
- SetPermissions: ApplyObjectPermissions has been entered.
- MSI (s) (C0!98) [10:37:21:651]: Closing MSIHANDLE (114) of type 790531 for thread 8088
- MSI (s) (C0:B8) [10:37:21:651]: Closing MSIHANDLE (106) of type 790536 for thread 1048
- MSI (s) (C0:18) [10:37:21:651]: Executing op: ActionStart(Name=DeleteBackupConfigFile,,)
- SetPermissions: ApplyObjectPermissions has been entered.
- MSI (s) (C0:18) [10:37:21:651]: Executing op: CustomActionSchedule(Action=DeleteBackupConfigFile,ActionType=3585,Source=BinaryData,Target=DeleteBackupConfigFile,)
- MSI (s) (C0:18) [10:37:21:651]: Executing op: ActionStart(Name=StartMCSAgentService,,)
- MSI (s) (C0:18) [10:37:21:651]: Executing op: CustomActionSchedule(Action=StartMCSAgentService,ActionType=3585,Source=BinaryData,Target=MsiStartService,CustomActionData=Sophos MCS Agent)
- MSI (s) (C0:18) [10:37:21:651]: Executing op: ActionStart(Name=StartMCSClientService,,)
- MSI (s) (C0:18) [10:37:21:651]: Executing op: CustomActionSchedule(Action=StartMCSClientService,ActionType=3585,Source=BinaryData,Target=MsiStartService,CustomActionData=Sophos MCS Client)
- MSI (s) (C0:18) [10:37:21:651]: Executing op: End(Checksum=0,ProgressTotalHDWord=0,ProgressTotalLDWord=0)
- MSI (s) (C0:18) [10:37:21:667]: Note: 1: 2265 2: 3: -2147287035
- MSI (s) (C0:18) [10:37:21:667]: User policy value 'DisableRollback' is 0
- MSI (s) (C0:18) [10:37:21:667]: Machine policy value 'DisableRollback' is 0
- MSI (s) (C0:18) [10:37:21:667]: Note: 1: 2265 2: 3: -2147287035
- MSI (s) (C0:18) [10:37:21:667]: Creating MSIHANDLE (115) of type 790536 for thread 1048
- MSI (s) (C0:18) [10:37:21:667]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSIC8C8.tmp, Entrypoint: DeleteBackupConfigFile
- MSI (s) (C0!10) [10:37:21:667]: Creating MSIHANDLE (116) of type 790531 for thread 6672
- MSI (s) (C0!10) [10:37:21:667]: Closing MSIHANDLE (116) of type 790531 for thread 6672
- MSI (s) (C0!10) [10:37:21:667]: Creating MSIHANDLE (117) of type 790531 for thread 6672
- DeleteBackupConfigFile: Initialized.
- MSI (s) (C0!10) [10:37:21:667]: Closing MSIHANDLE (117) of type 790531 for thread 6672
- MSI (s) (C0:18) [10:37:21:667]: Closing MSIHANDLE (115) of type 790536 for thread 1048
- DeleteBackupConfigFile: DeleteFile failed with errorcode : 2
- MSI (s) (C0:18) [10:37:21:683]: Creating MSIHANDLE (118) of type 790536 for thread 1048
- MSI (s) (C0:7C) [10:37:21:683]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSIC8C9.tmp, Entrypoint: MsiStartService
- MSI (s) (C0!1C) [10:37:21:683]: Creating MSIHANDLE (119) of type 790531 for thread 7452
- MSI (s) (C0!1C) [10:37:21:683]: Closing MSIHANDLE (119) of type 790531 for thread 7452
- MSI (s) (C0!1C) [10:37:21:683]: Creating MSIHANDLE (120) of type 790531 for thread 7452
- StartService: Initialized.
- MSI (s) (C0!1C) [10:37:21:683]: Closing MSIHANDLE (120) of type 790531 for thread 7452
- MSI (s) (C0:7C) [10:37:21:714]: Closing MSIHANDLE (118) of type 790536 for thread 1048
- StartService: Retrieving Custom Action Data.
- MSI (s) (C0:18) [10:37:21:714]: Creating MSIHANDLE (121) of type 790536 for thread 1048
- MSI (s) (C0:6C) [10:37:21:714]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSIC8F9.tmp, Entrypoint: MsiStartService
- MSI (s) (C0!54) [10:37:21:714]: Creating MSIHANDLE (122) of type 790531 for thread 1620
- MSI (s) (C0!54) [10:37:21:714]: Closing MSIHANDLE (122) of type 790531 for thread 1620
- MSI (s) (C0!54) [10:37:21:714]: Creating MSIHANDLE (123) of type 790531 for thread 1620
- StartService: Initialized.
- MSI (s) (C0!54) [10:37:21:714]: Closing MSIHANDLE (123) of type 790531 for thread 1620
- MSI (s) (C0!54) [10:37:21:736]: Creating MSIHANDLE (124) of type 790531 for thread 1620
- StartService: Retrieving Custom Action Data.
- MSI (s) (C0!54) [10:37:21:736]: Closing MSIHANDLE (124) of type 790531 for thread 1620
- StartService: StartServiceW failed with errorcode : 1053
- MSI (s) (C0:6C) [10:37:21:736]: Closing MSIHANDLE (121) of type 790536 for thread 1048
- CustomAction StartMCSClientService returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
- MSI (s) (C0:18) [10:37:21:752]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1212699819,LangId=1033,Platform=0,ScriptType=2,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1)
- MSI (s) (C0:18) [10:37:21:752]: Executing op: DialogInfo(Type=0,Argument=1033)
- MSI (s) (C0:18) [10:37:21:752]: Executing op: DialogInfo(Type=1,Argument=Sophos Management Communications System)
- MSI (s) (C0:18) [10:37:21:752]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1])
- MSI (s) (C0:18) [10:37:21:752]: Executing op: ActionStart(Name=StartMCSClientService,,)
- MSI (s) (C0:18) [10:37:21:752]: Executing op: ProductInfo(ProductKey={#},ProductName=Sophos Management Communications System,PackageName=Sophos Management Communications System.msi,Language=1033,Version=33554432,Assignment=1,ObsoleteArg=0,ProductIcon=Sophos_MCS_Icon,,PackageCode={#},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0,ProductDeploymentFlags=3)
- MSI (s) (C0:18) [10:37:21:752]: Executing op: ActionStart(Name=StartMCSAgentService,,)
- MSI (s) (C0:18) [10:37:21:752]: Executing op: ActionStart(Name=DeleteBackupConfigFile,,)
- MSI (s) (C0:18) [10:37:21:752]: Executing op: ActionStart(Name=SetPermissions.Deferred,,)
- MSI (s) (C0:18) [10:37:21:752]: Executing op: End(Checksum=0,ProgressTotalHDWord=0,ProgressTotalLDWord=0)
- MSI (s) (C0:18) [10:37:21:752]: Error in rollback skipped. Return: 5
- MSI (s) (C0:18) [10:37:21:752]: Note: 1: 2318 2:
- MSI (s) (C0:18) [10:37:21:752]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1212699818,LangId=1033,Platform=0,ScriptType=2,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1)
- MSI (s) (C0:18) [10:37:21:752]: Executing op: DialogInfo(Type=0,Argument=1033)
- MSI (s) (C0:18) [10:37:21:752]: Executing op: DialogInfo(Type=1,Argument=Sophos Management Communications System)
- MSI (s) (C0:18) [10:37:21:752]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1])
- MSI (s) (C0:18) [10:37:21:752]: Executing op: ActionStart(Name=PublishProduct,Description=Publishing product information,)
- MSI (s) (C0:18) [10:37:21:752]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97\SourceList\Net,SecurityDescriptor=BinaryData,BinaryType=1,,)
- MSI (s) (C0:18) [10:37:21:752]: Executing op: ProductInfo(ProductKey={#},ProductName=Sophos Management Communications System,PackageName=Sophos Management Communications System.msi,Language=1033,Version=33554432,Assignment=1,ObsoleteArg=0,ProductIcon=Sophos_MCS_Icon,,PackageCode={#},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0,ProductDeploymentFlags=3)
- MSI (s) (C0:18) [10:37:21:752]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97\SourceList,SecurityDescriptor=BinaryData,BinaryType=1,,)
- MSI (s) (C0:18) [10:37:21:752]: Executing op: RegRemoveValue(Name=LastUsedSource,Value=#%n;1;C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\,)
- MSI (s) (C0:18) [10:37:21:752]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:752]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97,SecurityDescriptor=BinaryData,BinaryType=1,,)
- MSI (s) (C0:18) [10:37:21:752]: Executing op: RegRemoveValue(Name=Clients,Value=[~]:,)
- MSI (s) (C0:18) [10:37:21:752]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:752]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97\SourceList\Media,,BinaryType=1,,)
- MSI (s) (C0:18) [10:37:21:752]: Executing op: RegRemoveValue(Name=1,Value=;,)
- MSI (s) (C0:18) [10:37:21:752]: Executing op: RegRemoveKey()
- MSI (s) (C0:18) [10:37:21:752]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97\SourceList\Media 3: 2
- MSI (s) (C0:18) [10:37:21:752]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97\SourceList\Media,,BinaryType=1,,)
- MSI (s) (C0:18) [10:37:21:752]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97\SourceList\Net,,BinaryType=1,,)
- MSI (s) (C0:18) [10:37:21:752]: Executing op: RegRemoveValue(Name=1,Value=#%C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\,)
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegRemoveKey()
- MSI (s) (C0:18) [10:37:21:768]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97\SourceList\Net 3: 2
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97\SourceList,,BinaryType=1,,)
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegRemoveValue(Name=PackageName,Value=Sophos Management Communications System.msi,)
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegRemoveKey()
- MSI (s) (C0:18) [10:37:21:768]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97\SourceList 3: 2
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97\SourceList,,BinaryType=1,,)
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegRemoveKey()
- MSI (s) (C0:18) [10:37:21:768]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97\SourceList 3: 2
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Classes\Installer\UpgradeCodes\FE5406A7A30684642B7222124E9A13BB,,BinaryType=1,,)
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegRemoveValue(Name=02F3DFF142D5A9C49B6F2A705AC31F97,,)
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegRemoveKey()
- MSI (s) (C0:18) [10:37:21:768]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Classes\Installer\UpgradeCodes\FE5406A7A30684642B7222124E9A13BB 3: 2
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97,,BinaryType=1,,)
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegRemoveValue(Name=DeploymentFlags,Value=#3,)
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegRemoveValue(Name=AuthorizedLUAApp,Value=#0,)
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegRemoveValue(Name=InstanceType,Value=#0,)
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegRemoveValue(Name=ProductIcon,Value=C:\WINDOWS\Installer\{1FFD3F20-5D24-4C9A-B9F6-A207A53CF179}\Sophos_MCS_Icon,)
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegRemoveValue(Name=AdvertiseFlags,Value=#388,)
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegRemoveValue(Name=Assignment,Value=#1,)
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegRemoveValue(Name=Version,Value=#33554432,)
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegRemoveValue(Name=Language,Value=#1033,)
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegRemoveValue(Name=PackageCode,Value=7F0735B322517504ABDF1F4431D9D5E1,)
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegRemoveValue(Name=ProductName,Value=Sophos Management Communications System,)
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegRemoveKey()
- MSI (s) (C0:18) [10:37:21:768]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97,,BinaryType=1,,)
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegRemoveKey()
- MSI (s) (C0:18) [10:37:21:768]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegRemoveKey()
- MSI (s) (C0:18) [10:37:21:768]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegRemoveKey()
- MSI (s) (C0:18) [10:37:21:768]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegRemoveKey()
- MSI (s) (C0:18) [10:37:21:768]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegRemoveKey()
- MSI (s) (C0:18) [10:37:21:768]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegRemoveKey()
- MSI (s) (C0:18) [10:37:21:768]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegRemoveKey()
- MSI (s) (C0:18) [10:37:21:768]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegRemoveKey()
- MSI (s) (C0:18) [10:37:21:768]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegRemoveKey()
- MSI (s) (C0:18) [10:37:21:768]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegRemoveKey()
- MSI (s) (C0:18) [10:37:21:768]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegRemoveKey()
- MSI (s) (C0:18) [10:37:21:768]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\02F3DFF142D5A9C49B6F2A705AC31F97\Patches,,BinaryType=1,,)
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegRemoveValue(Name=AllPatches,,)
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegRemoveKey()
- MSI (s) (C0:18) [10:37:21:768]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\02F3DFF142D5A9C49B6F2A705AC31F97\Patches 3: 2
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\02F3DFF142D5A9C49B6F2A705AC31F97\Patches,,BinaryType=1,,)
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegRemoveKey()
- MSI (s) (C0:18) [10:37:21:768]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\02F3DFF142D5A9C49B6F2A705AC31F97\Patches 3: 2
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\02F3DFF142D5A9C49B6F2A705AC31F97\Patches,,BinaryType=-1,,)
- MSI (s) (C0:18) [10:37:21:768]: Executing op: RegRemoveKey()
- MSI (s) (C0:18) [10:37:21:768]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\02F3DFF142D5A9C49B6F2A705AC31F97\Patches 3: 2
- MSI (s) (C0:18) [10:37:21:768]: Executing op: FileRemove(,FileName=C:\WINDOWS\Installer\{1FFD3F20-5D24-4C9A-B9F6-A207A53CF179}\Sophos_MCS_Icon,Elevate=1,)
- MSI (s) (C0:18) [10:37:21:768]: Note: 1: 2318 2:
- MSI (s) (C0:18) [10:37:21:783]: Executing op: ActionStart(Name=PublishFeatures,Description=Publishing Product Features,Template=Feature: [1])
- MSI (s) (C0:18) [10:37:21:783]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\02F3DFF142D5A9C49B6F2A705AC31F97\Features,,BinaryType=1,,)
- MSI (s) (C0:18) [10:37:21:783]: Executing op: RegRemoveValue(Name=ProductFeature,Value=DFEQNm7@!@1*AP+@!cpEeT7*UE~X[@8N@Or8EjmaiC+}Os!ys8GpcmBqu8w37r~du5TrV@00?u!.E4^HHgGRTUTeBA@PNKWmBC'RQwovm[pV{?XXH3h]fXhEd[6*VZ11HA_LHgYwS$*T+=!MlM1{g=yE-O3JPxhkRJ2XmyGQ49N.xO&2MT7)3CLTk6~@l8kaTPmpIGAy),@2B@5=j@dCAv^M4T.SfTYbd5zLU=^%-$h=ElE7{3M$1zhwR=F(L{I}^Y*P$yEv4H6EQAE'{8D*wSkByO`6G&Y_t94fU?OmsfBJ,lP'{LJNu@!0&Jo!kvl@{Wi!r]t2o9-~`u1P%,G.ooc{b46?E8Bj_y]]~Oo,{7WiBZd@P64~7%ugXB]eKRPR@Gkn]3=+L8G6!a.Iv&w*ia}&*6m_PmuNJs'Vlx,Io(5qd3tYs0%p){^+)za.D-Qhy3`?!Q55l(Wb,)
- MSI (s) (C0:18) [10:37:21:783]: Executing op: RegRemoveKey()
- MSI (s) (C0:18) [10:37:21:783]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\02F3DFF142D5A9C49B6F2A705AC31F97\Features 3: 2
- MSI (s) (C0:18) [10:37:21:783]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Classes\Installer\Features\02F3DFF142D5A9C49B6F2A705AC31F97,,BinaryType=1,,)
- MSI (s) (C0:18) [10:37:21:783]: Executing op: RegRemoveValue(Name=ProductFeature,,)
- MSI (s) (C0:18) [10:37:21:783]: Executing op: RegRemoveKey()
- MSI (s) (C0:18) [10:37:21:783]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Classes\Installer\Features\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
- MSI (s) (C0:18) [10:37:21:783]: Executing op: ActionStart(Name=MsiPublishAssemblies,Description=Publishing assembly information,Template=Application Context:[1], Assembly Name:[2])
- MSI (s) (C0:18) [10:37:21:783]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Classes\Installer\Win32Assemblies\Global,SecurityDescriptor=BinaryData,BinaryType=1,,)
- MSI (s) (C0:18) [10:37:21:783]: Executing op: RegRemoveValue(Name=Microsoft.VC90.CRT,version="9.0.30729.6161",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="x86",type="win32",Value=OKv?-79e]@(y]N%v$D4O>KRPR@Gkn]3=+L8G6!a.I[~],)
- MSI (s) (C0:18) [10:37:21:783]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:783]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Classes\Installer\Win32Assemblies\Global,SecurityDescriptor=BinaryData,BinaryType=1,,)
- MSI (s) (C0:18) [10:37:21:783]: Executing op: RegRemoveValue(Name=policy.9.0.Microsoft.VC90.CRT,version="9.0.30729.6161",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="x86",type="win32-policy",Value=OKv?-79e]@(y]N%v$D4O>ooc{b46?E8Bj_y]]~Oo,[~],)
- MSI (s) (C0:18) [10:37:21:783]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:783]: Executing op: ActionStart(Name=RegisterProduct,Description=Registering product,Template=[1])
- MSI (s) (C0:18) [10:37:21:783]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Microsoft\Windows\CurrentVersion\Uninstall\{1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},SecurityDescriptor=BinaryData,BinaryType=0,,)
- MSI (s) (C0:18) [10:37:21:783]: Executing op: RegRemoveValue(Name=DisplayName,Value=Sophos Management Communications System,)
- MSI (s) (C0:18) [10:37:21:783]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:783]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Microsoft\Windows\CurrentVersion\Uninstall,SecurityDescriptor=BinaryData,BinaryType=0,,)
- MSI (s) (C0:18) [10:37:21:783]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:783]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\02F3DFF142D5A9C49B6F2A705AC31F97\InstallProperties,SecurityDescriptor=BinaryData,BinaryType=1,,)
- MSI (s) (C0:18) [10:37:21:783]: Executing op: RegRemoveValue(Name=DisplayName,Value=Sophos Management Communications System,)
- MSI (s) (C0:18) [10:37:21:783]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:783]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\02F3DFF142D5A9C49B6F2A705AC31F97\Usage,,BinaryType=1,,)
- MSI (s) (C0:18) [10:37:21:783]: Executing op: RegRemoveKey()
- MSI (s) (C0:18) [10:37:21:783]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\FE5406A7A30684642B7222124E9A13BB,,BinaryType=1,,)
- MSI (s) (C0:18) [10:37:21:783]: Executing op: RegRemoveValue(Name=02F3DFF142D5A9C49B6F2A705AC31F97,,)
- MSI (s) (C0:18) [10:37:21:783]: Executing op: RegRemoveKey()
- MSI (s) (C0:18) [10:37:21:783]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\FE5406A7A30684642B7222124E9A13BB 3: 2
- MSI (s) (C0:18) [10:37:21:783]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Microsoft\Windows\CurrentVersion\Uninstall\{1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},,BinaryType=0,,)
- MSI (s) (C0:18) [10:37:21:783]: Executing op: RegRemoveValue(Name=Language,Value=#1033,)
- MSI (s) (C0:18) [10:37:21:783]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:783]: Executing op: RegRemoveValue(Name=Version,Value=#33554432,)
- MSI (s) (C0:18) [10:37:21:799]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:799]: Executing op: RegRemoveValue(Name=WindowsInstaller,Value=#1,)
- MSI (s) (C0:18) [10:37:21:799]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:799]: Executing op: RegRemoveValue(Name=VersionMinor,Value=#0,)
- MSI (s) (C0:18) [10:37:21:799]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:799]: Executing op: RegRemoveValue(Name=VersionMajor,Value=#2,)
- MSI (s) (C0:18) [10:37:21:799]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:799]: Executing op: RegRemoveValue(Name=URLUpdateInfo,,)
- MSI (s) (C0:18) [10:37:21:799]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:799]: Executing op: RegRemoveValue(Name=URLInfoAbout,Value=http://www.sophos.com/,)
- MSI (s) (C0:18) [10:37:21:799]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:799]: Executing op: RegRemoveValue(Name=UninstallString,Value=#%MsiExec.exe /X{#},)
- MSI (s) (C0:18) [10:37:21:799]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:799]: Executing op: RegRemoveValue(Name=EstimatedSize,Value=#+3550,)
- MSI (s) (C0:18) [10:37:21:799]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:799]: Executing op: RegRemoveValue(Name=Size,,)
- MSI (s) (C0:18) [10:37:21:799]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:799]: Executing op: RegRemoveValue(Name=Readme,,)
- MSI (s) (C0:18) [10:37:21:799]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:799]: Executing op: RegRemoveValue(Name=Publisher,Value=Sophos Limited,)
- MSI (s) (C0:18) [10:37:21:799]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:799]: Executing op: RegRemoveValue(Name=NoRepair,Value=#1,)
- MSI (s) (C0:18) [10:37:21:799]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:799]: Executing op: RegRemoveValue(Name=NoModify,Value=#1,)
- MSI (s) (C0:18) [10:37:21:799]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:799]: Executing op: RegRemoveValue(Name=ModifyPath,Value=#%MsiExec.exe /X{#},)
- MSI (s) (C0:18) [10:37:21:799]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:799]: Executing op: RegRemoveValue(Name=InstallSource,Value=C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\,)
- MSI (s) (C0:18) [10:37:21:799]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:799]: Executing op: RegRemoveValue(Name=InstallLocation,Value=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\,)
- MSI (s) (C0:18) [10:37:21:799]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:815]: Executing op: RegRemoveValue(Name=InstallDate,Value=20160208,)
- MSI (s) (C0:18) [10:37:21:815]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:815]: Executing op: RegRemoveValue(Name=HelpTelephone,,)
- MSI (s) (C0:18) [10:37:21:815]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:815]: Executing op: RegRemoveValue(Name=HelpLink,Value=#%http://www.sophos.com/support/,)
- MSI (s) (C0:18) [10:37:21:815]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:815]: Executing op: RegRemoveValue(Name=DisplayVersion,Value=2.0.0,)
- MSI (s) (C0:18) [10:37:21:815]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:815]: Executing op: RegRemoveValue(Name=Contact,Value=Sophos Technical Support,)
- MSI (s) (C0:18) [10:37:21:815]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:815]: Executing op: RegRemoveValue(Name=Comments,Value=Management Communications System,)
- MSI (s) (C0:18) [10:37:21:815]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:815]: Executing op: RegRemoveValue(Name=AuthorizedCDFPrefix,,)
- MSI (s) (C0:18) [10:37:21:815]: Executing op: RegRemoveKey()
- MSI (s) (C0:18) [10:37:21:815]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Microsoft\Windows\CurrentVersion\Uninstall\{#} 3: 2
- MSI (s) (C0:18) [10:37:21:815]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Microsoft\Windows\CurrentVersion\Uninstall,SecurityDescriptor=BinaryData,BinaryType=0,,)
- MSI (s) (C0:18) [10:37:21:815]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:815]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\02F3DFF142D5A9C49B6F2A705AC31F97\InstallProperties,SecurityDescriptor=BinaryData,BinaryType=1,,)
- MSI (s) (C0:18) [10:37:21:815]: Executing op: RegRemoveValue(Name=Language,Value=#1033,)
- MSI (s) (C0:18) [10:37:21:815]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:815]: Executing op: RegRemoveValue(Name=Version,Value=#33554432,)
- MSI (s) (C0:18) [10:37:21:815]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:815]: Executing op: RegRemoveValue(Name=WindowsInstaller,Value=#1,)
- MSI (s) (C0:18) [10:37:21:815]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:815]: Executing op: RegRemoveValue(Name=VersionMinor,Value=#0,)
- MSI (s) (C0:18) [10:37:21:815]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:815]: Executing op: RegRemoveValue(Name=VersionMajor,Value=#2,)
- MSI (s) (C0:18) [10:37:21:815]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:815]: Executing op: RegRemoveValue(Name=URLUpdateInfo,,)
- MSI (s) (C0:18) [10:37:21:815]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:815]: Executing op: RegRemoveValue(Name=URLInfoAbout,Value=http://www.sophos.com/,)
- MSI (s) (C0:18) [10:37:21:815]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:815]: Executing op: RegRemoveValue(Name=UninstallString,Value=#%MsiExec.exe /X{#},)
- MSI (s) (C0:18) [10:37:21:815]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:815]: Executing op: RegRemoveValue(Name=EstimatedSize,Value=#+3550,)
- MSI (s) (C0:18) [10:37:21:815]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:815]: Executing op: RegRemoveValue(Name=Size,,)
- MSI (s) (C0:18) [10:37:21:815]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:815]: Executing op: RegRemoveValue(Name=Readme,,)
- MSI (s) (C0:18) [10:37:21:815]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:830]: Executing op: RegRemoveValue(Name=Publisher,Value=Sophos Limited,)
- MSI (s) (C0:18) [10:37:21:830]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:831]: Executing op: RegRemoveValue(Name=NoRepair,Value=#1,)
- MSI (s) (C0:18) [10:37:21:831]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:831]: Executing op: RegRemoveValue(Name=NoModify,Value=#1,)
- MSI (s) (C0:18) [10:37:21:832]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:832]: Executing op: RegRemoveValue(Name=ModifyPath,Value=#%MsiExec.exe /X{#},)
- MSI (s) (C0:18) [10:37:21:832]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:833]: Executing op: RegRemoveValue(Name=InstallSource,Value=C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\,)
- MSI (s) (C0:18) [10:37:21:834]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:834]: Executing op: RegRemoveValue(Name=InstallLocation,Value=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\,)
- MSI (s) (C0:18) [10:37:21:834]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:835]: Executing op: RegRemoveValue(Name=InstallDate,Value=20160208,)
- MSI (s) (C0:18) [10:37:21:835]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:836]: Executing op: RegRemoveValue(Name=HelpTelephone,,)
- MSI (s) (C0:18) [10:37:21:837]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:837]: Executing op: RegRemoveValue(Name=HelpLink,Value=#%http://www.sophos.com/support/,)
- MSI (s) (C0:18) [10:37:21:837]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:837]: Executing op: RegRemoveValue(Name=DisplayVersion,Value=2.0.0,)
- MSI (s) (C0:18) [10:37:21:837]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:837]: Executing op: RegRemoveValue(Name=Contact,Value=Sophos Technical Support,)
- MSI (s) (C0:18) [10:37:21:837]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:837]: Executing op: RegRemoveValue(Name=Comments,Value=Management Communications System,)
- MSI (s) (C0:18) [10:37:21:837]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:837]: Executing op: RegRemoveValue(Name=AuthorizedCDFPrefix,,)
- MSI (s) (C0:18) [10:37:21:837]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:21:837]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\02F3DFF142D5A9C49B6F2A705AC31F97\InstallProperties,,BinaryType=1,,)
- MSI (s) (C0:18) [10:37:21:837]: Executing op: RegRemoveValue(Name=LocalPackage,Value=C:\WINDOWS\Installer\1343bf7a.msi,)
- MSI (s) (C0:18) [10:37:21:837]: Executing op: RegRemoveKey()
- MSI (s) (C0:18) [10:37:21:837]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\02F3DFF142D5A9C49B6F2A705AC31F97\InstallProperties 3: 2
- MSI (s) (C0:18) [10:37:21:837]: Executing op: FileRemove(,FileName=C:\WINDOWS\Installer\1343bf7a.msi,Elevate=1,)
- MSI (s) (C0:18) [10:37:21:837]: Executing op: FileRemove(,FileName=C:\WINDOWS\Installer\1343bf7a.msi,,)
- MSI (s) (C0:18) [10:37:21:837]: Executing op: ActionStart(Name=ExecServiceConfig,,)
- MSI (s) (C0:18) [10:37:21:837]: Executing op: ActionStart(Name=RollbackServiceConfig,,)
- MSI (s) (C0:18) [10:37:21:837]: Executing op: CustomActionRollback(Action=RollbackServiceConfig,ActionType=3329,Source=BinaryData,Target=RollbackServiceConfig,CustomActionData=SchedServiceConfig)
- MSI (s) (C0:18) [10:37:21:837]: Creating MSIHANDLE (125) of type 790536 for thread 1048
- MSI (s) (C0:E0) [10:37:21:837]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSIC978.tmp, Entrypoint: RollbackServiceConfig
- MSI (s) (C0!04) [10:37:21:852]: Creating MSIHANDLE (126) of type 790531 for thread 5380
- MSI (s) (C0!04) [10:37:21:852]: Closing MSIHANDLE (126) of type 790531 for thread 5380
- MSI (s) (C0!04) [10:37:21:852]: Creating MSIHANDLE (127) of type 790531 for thread 5380
- MSI (s) (C0!04) [10:37:21:852]: Closing MSIHANDLE (127) of type 790531 for thread 5380
- MSI (s) (C0:E0) [10:37:21:852]: Closing MSIHANDLE (125) of type 790536 for thread 1048
- MSI (s) (C0:18) [10:37:21:852]: Executing op: ActionStart(Name=InstallServices,Description=Installing new services,Template=Service: [2])
- MSI (s) (C0:18) [10:37:21:852]: Executing op: ServiceControl(,Name=Sophos MCS Agent,Action=8,,)
- MSI (s) (C0:18) [10:37:27:398]: Executing op: ServiceControl(,Name=Sophos MCS Client,Action=8,,)
- MSI (s) (C0:18) [10:37:27:398]: Executing op: ActionStart(Name=WriteIniValues,Description=Writing INI files values,Template=File: [1], Section: [2], Key: [3], Value: [4])
- MSI (s) (C0:18) [10:37:27:398]: Executing op: IniFilePath(File=registration.txt,Folder=C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\)
- MSI (s) (C0:18) [10:37:27:398]: Executing op: IniWriteRemoveValue(Section=McsClient,Key=Token,Value=cfff535be855636d9cebcdf24ea26fdfa5313c75512a42bf2085f7a258cff140,Mode=2)
- MSI (s) (C0:18) [10:37:27:398]: Note: 1: 2318 2:
- MSI (s) (C0:18) [10:37:27:398]: Executing op: ActionStart(Name=WriteRegistryValues,Description=Writing system registry values,Template=Key: [1], Name: [2], Value: [3])
- MSI (s) (C0:18) [10:37:27:398]: Executing op: RegOpenKey(Root=-2147483646,Key=System\CurrentControlSet\Services\Eventlog\Application\Sophos Management Communications System,,BinaryType=0,,)
- MSI (s) (C0:18) [10:37:27:398]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:27:398]: Executing op: RegRemoveValue(Name=TypesSupported,Value=#7,)
- MSI (s) (C0:18) [10:37:27:398]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:27:398]: Executing op: RegRemoveValue(Name=CategoryCount,Value=#2,)
- MSI (s) (C0:18) [10:37:27:398]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:27:398]: Executing op: RegRemoveValue(Name=CategoryMessageFile,Value=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsEvents.dll,)
- MSI (s) (C0:18) [10:37:27:398]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:27:398]: Executing op: RegRemoveValue(Name=ParameterMessageFile,Value=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsEvents.dll,)
- MSI (s) (C0:18) [10:37:27:398]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:27:398]: Executing op: RegRemoveValue(Name=EventMessageFile,Value=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsEvents.dll,)
- MSI (s) (C0:18) [10:37:27:398]: Executing op: RegRemoveKey()
- MSI (s) (C0:18) [10:37:27:398]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\System\CurrentControlSet\Services\Eventlog\Application\Sophos Management Communications System 3: 2
- MSI (s) (C0:18) [10:37:27:398]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Sophos\Remote Management System\ManagementAgent\Adapters\MCS,,BinaryType=0,,)
- MSI (s) (C0:18) [10:37:27:398]: Executing op: RegCreateKey()
- MSI (s) (C0:18) [10:37:27:398]: Executing op: RegRemoveValue(Name=DllPath,Value=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsAdapter.dll,)
- MSI (s) (C0:18) [10:37:27:398]: Executing op: RegRemoveKey()
- MSI (s) (C0:18) [10:37:27:398]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Sophos\Remote Management System\ManagementAgent\Adapters\MCS 3: 2
- MSI (s) (C0:18) [10:37:27:398]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Sophos\Remote Management System\ManagementAgent\Adapters,,BinaryType=0,,)
- MSI (s) (C0:18) [10:37:27:398]: Executing op: RegRemoveKey()
- MSI (s) (C0:18) [10:37:27:398]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Sophos\Remote Management System\ManagementAgent\Adapters 3: 2
- MSI (s) (C0:18) [10:37:27:398]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Sophos\Remote Management System,,BinaryType=0,,)
- MSI (s) (C0:18) [10:37:27:398]: Executing op: RegRemoveKey()
- MSI (s) (C0:18) [10:37:27:398]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Sophos\Remote Management System 3: 2
- MSI (s) (C0:18) [10:37:27:398]: Executing op: RegOpenKey(Root=-2147483647,Key=Software\Sophos\Management Communications System\Registration,,BinaryType=0,,)
- MSI (s) (C0:18) [10:37:27:398]: Executing op: RegRemoveValue(,Value=Create registration file,)
- MSI (s) (C0:18) [10:37:27:398]: Executing op: RegRemoveKey()
- MSI (s) (C0:18) [10:37:27:398]: Note: 1: 1402 2: HKEY_CURRENT_USER32\Software\Sophos\Management Communications System\Registration 3: 2
- MSI (s) (C0:18) [10:37:27:398]: Executing op: ActionStart(Name=UpdateConfig,,)
- MSI (s) (C0:18) [10:37:27:398]: Executing op: ActionStart(Name=RestoreConfig,,)
- MSI (s) (C0:18) [10:37:27:413]: Executing op: CustomActionRollback(Action=RestoreConfig,ActionType=3329,Source=BinaryData,Target=RestoreConfigFile,CustomActionData=C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\Config.xml)
- MSI (s) (C0:18) [10:37:27:413]: Creating MSIHANDLE (128) of type 790536 for thread 1048
- MSI (s) (C0:BC) [10:37:27:413]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSIDF43.tmp, Entrypoint: RestoreConfigFile
- MSI (s) (C0!D0) [10:37:27:413]: Creating MSIHANDLE (129) of type 790531 for thread 5072
- MSI (s) (C0!D0) [10:37:27:413]: Closing MSIHANDLE (129) of type 790531 for thread 5072
- MSI (s) (C0!D0) [10:37:27:413]: Creating MSIHANDLE (130) of type 790531 for thread 5072
- RestoreConfigFile: Initialized.
- MSI (s) (C0!D0) [10:37:27:413]: Closing MSIHANDLE (130) of type 790531 for thread 5072
- MSI (s) (C0!D0) [10:37:27:413]: Creating MSIHANDLE (131) of type 790531 for thread 5072
- RestoreConfigFile: Retrieving Custom Action Data.
- MSI (s) (C0!D0) [10:37:27:413]: Closing MSIHANDLE (131) of type 790531 for thread 5072
- MSI (s) (C0!D0) [10:37:27:413]: Creating MSIHANDLE (132) of type 790531 for thread 5072
- RestoreConfigFile: CustomActionData : C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\Config.xml
- MSI (s) (C0!D0) [10:37:27:413]: Closing MSIHANDLE (132) of type 790531 for thread 5072
- MSI (s) (C0!D0) [10:37:27:413]: Creating MSIHANDLE (133) of type 790531 for thread 5072
- RestoreConfigFile: Calling function RevertConfigFile().
- MSI (s) (C0!D0) [10:37:27:413]: Closing MSIHANDLE (133) of type 790531 for thread 5072
- RestoreConfigFile: CopyFileW failed with errorcode : 2
- MSI (s) (C0:BC) [10:37:27:413]: Closing MSIHANDLE (128) of type 790536 for thread 1048
- CustomAction RestoreConfig returned actual error code 1603 but will be translated to success due to continue marking
- MSI (s) (C0:18) [10:37:27:413]: Executing op: ActionStart(Name=InstallFiles,Description=Copying new files,Template=File: [1], Directory: [9], Size: [6])
- MSI (s) (C0:18) [10:37:27:413]: Executing op: SetTargetFolder(Folder=C:\WINDOWS\winsxs\x86_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_f480bfaef65491a5\)
- MSI (s) (C0:18) [10:37:27:413]: Executing op: SetTargetFolder(Folder=C:\WINDOWS\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\)
- MSI (s) (C0:18) [10:37:27:413]: Executing op: SetTargetFolder(Folder=C:\WINDOWS\winsxs\x86_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_f480bfaef65491a5\)
- MSI (s) (C0:18) [10:37:27:413]: Executing op: SetTargetFolder(Folder=C:\WINDOWS\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\)
- MSI (s) (C0:18) [10:37:27:413]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Certificates\Management Communications System\)
- MSI (s) (C0:18) [10:37:27:413]: Executing op: FileRemove(,FileName=C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca2.crt,,)
- MSI (s) (C0:18) [10:37:27:413]: Executing op: FileRemove(,FileName=C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca2.crl,,)
- MSI (s) (C0:18) [10:37:27:413]: Executing op: FileRemove(,FileName=C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca1.crt,,)
- MSI (s) (C0:18) [10:37:27:413]: Executing op: FileRemove(,FileName=C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca1.crl,,)
- MSI (s) (C0:18) [10:37:27:413]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\)
- MSI (s) (C0:18) [10:37:27:413]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\sof.dat,,)
- MSI (s) (C0:18) [10:37:27:413]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\scf.dat,,)
- MSI (s) (C0:18) [10:37:27:413]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\log4cplus.dll,,)
- MSI (s) (C0:18) [10:37:27:413]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsEvents.dll,,)
- MSI (s) (C0:18) [10:37:27:429]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsClientApi.dll,,)
- MSI (s) (C0:18) [10:37:27:429]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsClient.exe,,)
- MSI (s) (C0:18) [10:37:27:429]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsAgent.exe,,)
- MSI (s) (C0:18) [10:37:27:429]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsAdapter.dll,,)
- MSI (s) (C0:18) [10:37:27:429]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\NOTICE.txt,,)
- MSI (s) (C0:18) [10:37:27:429]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\)
- MSI (s) (C0:18) [10:37:27:429]: Executing op: FileRemove(,FileName=C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\Config.xml,,)
- MSI (s) (C0:18) [10:37:27:429]: Note: 1: 2318 2:
- MSI (s) (C0:18) [10:37:27:429]: Executing op: ActionStart(Name=CreateFolders,Description=Creating folders,Template=Folder: [1])
- MSI (s) (C0:18) [10:37:27:429]: Executing op: FolderRemove(Folder=C:\ProgramData\Sophos\Certificates\Management Communications System\,Foreign=0)
- MSI (s) (C0:18) [10:37:27:429]: Note: 1: 2318 2:
- MSI (s) (C0:18) [10:37:27:429]: Note: 1: 2318 2:
- MSI (s) (C0:18) [10:37:27:429]: Executing op: FolderRemove(Folder=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\,Foreign=0)
- MSI (s) (C0:18) [10:37:27:429]: Note: 1: 2318 2:
- MSI (s) (C0:18) [10:37:27:429]: Note: 1: 2318 2:
- MSI (s) (C0:18) [10:37:27:429]: Note: 1: 2318 2:
- MSI (s) (C0:18) [10:37:27:429]: Executing op: FolderRemove(Folder=C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\,Foreign=0)
- MSI (s) (C0:18) [10:37:27:429]: Note: 1: 2318 2:
- MSI (s) (C0:18) [10:37:27:429]: Executing op: FolderRemove(Folder=C:\ProgramData\Sophos\Management Communications System\Endpoint\,Foreign=0)
- MSI (s) (C0:18) [10:37:27:429]: Note: 1: 2318 2:
- MSI (s) (C0:18) [10:37:27:429]: Executing op: ActionStart(Name=StopServices,Description=Stopping services,Template=Service: [1])
- MSI (s) (C0:18) [10:37:27:429]: Executing op: ActionStart(Name=ProcessComponents,Description=Updating component registration,)
- MSI (s) (C0:18) [10:37:27:429]: Executing op: ComponentUnregister(ComponentId={#},ProductKey={#},BinaryType=0,)
- MSI (s) (C0:18) [10:37:27:429]: Executing op: ComponentUnregister(ComponentId={#},ProductKey={#},BinaryType=0,)
- MSI (s) (C0:18) [10:37:27:429]: Executing op: ComponentUnregister(ComponentId={#},ProductKey={#},BinaryType=0,)
- MSI (s) (C0:18) [10:37:27:429]: Executing op: ComponentUnregister(ComponentId={4C3A7A77-BFE9-309A-B576-33618A5B1A67},ProductKey={1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},BinaryType=0,)
- MSI (s) (C0:18) [10:37:27:429]: Executing op: ComponentUnregister(ComponentId={53426A52-E29B-397A-9556-8CEC984F99BC},ProductKey={1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},BinaryType=0,)
- MSI (s) (C0:18) [10:37:27:429]: Executing op: ComponentUnregister(ComponentId={B4606FC1-ADD6-3F4C-B9A7-BEA4CE07951E},ProductKey={1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},BinaryType=0,)
- MSI (s) (C0:18) [10:37:27:429]: Executing op: ComponentUnregister(ComponentId={E328F4A6-7B8C-43E8-8617-412B21315D23},ProductKey={1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},BinaryType=0,)
- MSI (s) (C0:18) [10:37:27:429]: Executing op: ComponentUnregister(ComponentId={FF4C7B96-DAD8-4D78-873C-0BDBAEDB284D},ProductKey={1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},BinaryType=0,)
- MSI (s) (C0:18) [10:37:27:429]: Executing op: ComponentUnregister(ComponentId={6122DB9B-B642-441B-98C8-347AFF15C46A},ProductKey={1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},BinaryType=0,)
- ...
- MSI (s) (C0:18) [10:37:27:451]: Executing op: End(Checksum=0,ProgressTotalHDWord=0,ProgressTotalLDWord=0)
- MSI (s) (C0:18) [10:37:27:451]: Error in rollback skipped. Return: 5
- MSI (s) (C0:18) [10:37:27:451]: Entering MsiProvideAssembly. AssemblyName: Microsoft.VC90.CRT,version="9.0.30729.6161",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="x86",type="win32", AppContext: , InstallMode: -4
- MSI (s) (C0:18) [10:37:27:451]: Pathbuf: 0, pcchPathBuf: 0
- MSI (s) (C0:18) [10:37:27:451]: MsiProvideAssembly is returning: 1607
- MSI (s) (C0:18) [10:37:27:451]: Entering MsiProvideAssembly. AssemblyName: Microsoft.VC90.CRT,version="9.0.30729.6161",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="x86",type="win32", AppContext: , InstallMode: -4
- MSI (s) (C0:18) [10:37:27:451]: Pathbuf: 0, pcchPathBuf: 0
- MSI (s) (C0:18) [10:37:27:451]: MsiProvideAssembly is returning: 1607
- MSI (s) (C0:18) [10:37:27:529]: Entering MsiProvideAssembly. AssemblyName: policy.9.0.Microsoft.VC90.CRT,version="9.0.30729.6161",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="x86",type="win32-policy", AppContext: , InstallMode: -4
- MSI (s) (C0:18) [10:37:27:529]: Pathbuf: 0, pcchPathBuf: 0
- MSI (s) (C0:18) [10:37:27:529]: MsiProvideAssembly is returning: 1607
- MSI (s) (C0:18) [10:37:27:529]: Entering MsiProvideAssembly. AssemblyName: policy.9.0.Microsoft.VC90.CRT,version="9.0.30729.6161",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="x86",type="win32-policy", AppContext: , InstallMode: -4
- MSI (s) (C0:18) [10:37:27:529]: Pathbuf: 0, pcchPathBuf: 0
- MSI (s) (C0:18) [10:37:27:529]: MsiProvideAssembly is returning: 1607
- MSI (s) (C0:18) [10:37:27:588]: Note: 1: 2318 2:
- MSI (s) (C0:18) [10:37:27:589]: No System Restore sequence number for this installation.
- MSI (s) (C0:18) [10:37:27:589]: Unlocking Server
- MSI (s) (C0:18) [10:37:27:596]: PROPERTY CHANGE: Deleting UpdateStarted property. Its current value is '1'.
- Action ended 10:37:27: InstallFinalize. Return value 3.
- Action ended 10:37:27: INSTALL. Return value 3.
- Property(S): UpgradeCode = {7A6045EF-603A-4648-B227-2221E4A931BB}
- Property(S): EndpointFolder = C:\ProgramData\Sophos\Management Communications System\Endpoint\
- Property(S): AdapterStorageFolder = C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\
- Property(S): INSTALLDIR = C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\
- Property(S): ConfigurationFolder = C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\
- Property(S): ManagementCommunicationsCertificatesFolder = C:\ProgramData\Sophos\Certificates\Management Communications System\
- Property(S): ARPINSTALLLOCATION = C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\
- Property(S): RestoreConfig = C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\Config.xml
- Property(S): UpdateConfig = C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\Config.xml,dzr-mcs-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com,,
- Property(S): StartMCSAgentService = Sophos MCS Agent
- Property(S): StartMCSClientService = Sophos MCS Client
- Property(S): SetPermissions.Deferred = 2{12}2{13}8{objectid}11{objecttable}6{action}8{identity}12{identitytype}11{inheritance}10{genericall}11{genericread}12{genericwrite}14{genericexecute}6{modify}10{objectpath}5{win64}14{EndpointFolder}6{Folder}5{Clear}3{N/A}0{}2{No}0{}0{}0{}0{}0{}64{C:\ProgramData\Sophos\Management Communications System\Endpoint\}2{no}14{EndpointFolder}6{Folder}5{Allow}14{Administrators}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}64{C:\ProgramData\Sophos\Management Communications System\Endpoint\}2{no}14{EndpointFolder}6{Folder}5{Allow}15{Network Service}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}64{C:\ProgramData\Sophos\Management Communications System\Endpoint\}2{no}20{AdapterStorageFolder}6{Folder}5{Clear}3{N/A}0{}2{No}0{}0{}0{}0{}0{}70{C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\}2{no}20{AdapterStorageFolder}6{Folder}5{Allow}14{Administrators}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}70{C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\}2{no}42{ManagementCommunicationsCertificatesFolder}6{Folder}5{Clear}3{N/A}0{}2{No}0{}0{}0{}0{}0{}68{C:\ProgramData\Sophos\Certificates\Management Communications System\}2{no}42{ManagementCommunicationsCertificatesFolder}6{Folder}5{Allow}14{Administrators}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}68{C:\ProgramData\Sophos\Certificates\Management Communications System\}2{no}42{ManagementCommunicationsCertificatesFolder}6{Folder}5{Allow}15{Network Service}12{WellKnownSID}0{}0{}3{Yes}0{}0{}0{}68{C:\ProgramData\Sophos\Certificates\Management Communications System\}2{no}12{McsAgent_Reg}8{Registry}5{Clear}3{N/A}0{}2{No}0{}0{}0{}0{}0{}48{MACHINE\Software\Sophos\Remote Management System}2{no}12{McsAgent_Reg}8{Registry}5{Allow}14{Administrators}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}48{MACHINE\Software\Sophos\Remote Management System}2{no}20{McsAgentAdapters_Reg}8{Registry}5{Clear}3{N/A}0{}2{No}0{}0{}0{}0{}0{}73{MACHINE\Software\Sophos\Remote Management System\ManagementAgent\Adapters}2{no}20{McsAgentAdapters_Reg}8{Registry}5{Allow}14{Administrators}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}73{MACHINE\Software\Sophos\Remote Management System\ManagementAgent\Adapters}2{no}
- Property(S): ExecServiceConfig = SchedServiceConfig€Sophos MCS Agent€0€restart€restart€restart€1€60€€€Sophos MCS Client€0€restart€restart€restart€1€60€€
- Property(S): RollbackServiceConfig = SchedServiceConfig
- Property(S): Certificates = C:\ProgramData\Sophos\Certificates\
- Property(S): SophosFolder = C:\ProgramData\Sophos\
- Property(S): ManagementCommunicationsSystemFolder = C:\ProgramData\Sophos\Management Communications System\
- Property(S): AgentFolder = C:\ProgramData\Sophos\Remote Management System\3\Agent\
- Property(S): ThreeFolder = C:\ProgramData\Sophos\Remote Management System\3\
- Property(S): RemoteManagementSystemFolder = C:\ProgramData\Sophos\Remote Management System\
- Property(S): CommonAppDataFolder = C:\ProgramData\
- Property(S): Sophos = C:\Program Files (x86)\Sophos\
- Property(S): TARGETDIR = C:\
- Property(S): ManagementCommunicationSystem = C:\Program Files (x86)\Sophos\Management Communications System\
- Property(S): ProgramFilesFolder = C:\Program Files (x86)\
- Property(S): SourceDir = C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\
- Property(S): VersionNT = 603
- Property(S): ALLUSERS = 1
- Property(S): ARPPRODUCTICON = Sophos_MCS_Icon
- Property(S): ARPCOMMENTS = Management Communications System
- Property(S): ARPCONTACT = Sophos Technical Support
- Property(S): ARPHELPLINK = http://www.sophos.com/support/
- Property(S): ARPNOMODIFY = 1
- Property(S): ARPNOREPAIR = 1
- Property(S): ARPURLINFOABOUT = http://www.sophos.com/
- Property(S): BuildReference = 99226
- Property(S): ProductFullVersion = 2.0.0.145
- Property(S): RegisterWithAutoUpdate = {8580B6E7-AD8F-4c42-8085-ABD5765C98C5};mcsep
- Property(S): Manufacturer = Sophos Limited
- Property(S): ProductCode = {1FFD3F20-5D24-4C9A-B9F6-A207A53CF179}
- Property(S): ProductLanguage = 1033
- Property(S): ProductName = Sophos Management Communications System
- Property(S): ProductVersion = 2.0.0
- Property(S): SecureCustomProperties = FOUND_NEW_PRODUCT;FOUND_OLD_PRODUCT
- Property(S): INSTALLDIR.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0 = C:\
- Property(S): WinSxsDirectory.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 = C:\WINDOWS\winsxs\
- Property(S): payload_ul.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 = C:\WINDOWS\winsxs\x86_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_f480bfaef65491a5\
- Property(S): WinSxsPolicies.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 = C:\WINDOWS\winsxs\Policies\
- Property(S): policydir.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 = C:\WINDOWS\winsxs\Policies\x86_policy.9.0.Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_b7353f75\
- Property(S): WindowsFolder.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 = C:\WINDOWS\
- Property(S): WindowsFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = C:\WINDOWS\
- Property(S): SystemFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = C:\WINDOWS\SysWOW64\
- Property(S): WinSxsDirectory.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = C:\WINDOWS\winsxs\
- Property(S): payload_ul.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = C:\WINDOWS\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\
- Property(S): payload.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = C:\WINDOWS\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\
- Property(S): WinSxsManifests.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = C:\WINDOWS\winsxs\Manifests\
- Property(S): WinSxsPolicies.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = C:\WINDOWS\winsxs\Policies\
- Property(S): policydir.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = C:\WINDOWS\winsxs\Policies\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\
- Property(S): policydir_ul.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = C:\WINDOWS\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\
- Property(S): MsiLogFileLocation = C:\Users\AndiN\AppData\Local\Temp\Sophos MCS Install Log.txt
- Property(S): PackageCode = {#}
- Property(S): ProductState = -1
- Property(S): PackagecodeChanging = 1
- Property(S): REBOOT = REALLYSUPPRESS
- Property(S): TOKEN = cfff535be855636d9cebcdf24ea26fdfa5313c75512a42bf2085f7a258cff140
- Property(S): SERVER = dzr-mcs-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com
- Property(S): CURRENTDIRECTORY = C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap
- Property(S): CLIENTUILEVEL = 3
- Property(S): CLIENTPROCESSID = 3852
- Property(S): VersionDatabase = 300
- Property(S): VersionMsi = 5.00
- Property(S): VersionNT64 = 603
- Property(S): WindowsBuild = 9600
- Property(S): ServicePackLevel = 0
- Property(S): ServicePackLevelMinor = 0
- Property(S): MsiNTProductType = 1
- Property(S): WindowsFolder = C:\WINDOWS\
- Property(S): WindowsVolume = C:\
- Property(S): System64Folder = C:\WINDOWS\system32\
- Property(S): SystemFolder = C:\WINDOWS\SysWOW64\
- Property(S): RemoteAdminTS = 1
- Property(S): TempFolder = C:\Users\AndiN\AppData\Local\Temp\
- Property(S): CommonFilesFolder = C:\Program Files (x86)\Common Files\
- Property(S): ProgramFiles64Folder = C:\Program Files\
- Property(S): CommonFiles64Folder = C:\Program Files\Common Files\
- Property(S): AppDataFolder = C:\Users\AndiN\AppData\Roaming\
- Property(S): FavoritesFolder = C:\Users\AndiN\Favorites\
- Property(S): NetHoodFolder = C:\Users\AndiN\AppData\Roaming\Microsoft\Windows\Network Shortcuts\
- Property(S): PersonalFolder = C:\Users\AndiN\Documents\
- Property(S): PrintHoodFolder = C:\Users\AndiN\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\
- Property(S): RecentFolder = C:\Users\AndiN\AppData\Roaming\Microsoft\Windows\Recent\
- Property(S): SendToFolder = C:\Users\AndiN\AppData\Roaming\Microsoft\Windows\SendTo\
- Property(S): TemplateFolder = C:\ProgramData\Microsoft\Windows\Templates\
- Property(S): LocalAppDataFolder = C:\Users\AndiN\AppData\Local\
- Property(S): MyPicturesFolder = C:\Users\AndiN\Pictures\
- Property(S): AdminToolsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\
- Property(S): StartupFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
- Property(S): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
- Property(S): StartMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\
- Property(S): DesktopFolder = C:\Users\Public\Desktop\
- Property(S): FontsFolder = C:\WINDOWS\Fonts\
- Property(S): GPTSupport = 1
- Property(S): OLEAdvtSupport = 1
- Property(S): ShellAdvtSupport = 1
- Property(S): MsiAMD64 = 6
- Property(S): Msix64 = 6
- Property(S): Intel = 6
- Property(S): PhysicalMemory = 16309
- Property(S): VirtualMemory = 15187
- Property(S): AdminUser = 1
- Property(S): MsiTrueAdminUser = 1
- Property(S): LogonUser = AndiN
- Property(S): UserSID = S-1-5-21-3560202035-1469217265-3467357285-1001
- Property(S): UserLanguageID = 1033
- Property(S): ComputerName = DESKTOP-L9NIGLF
- Property(S): SystemLanguageID = 1033
- Property(S): ScreenX = 1024
- Property(S): ScreenY = 768
- Property(S): CaptionHeight = 23
- Property(S): BorderTop = 1
- Property(S): BorderSide = 1
- Property(S): TextHeight = 16
- Property(S): TextInternalLeading = 3
- Property(S): ColorBits = 32
- Property(S): TTCSupport = 1
- Property(S): Time = 10:37:27
- Property(S): Date = 2/8/2016
- Property(S): MsiNetAssemblySupport = 4.6.1038.0
- Property(S): MsiWin32AssemblySupport = 6.3.10586.0
- Property(S): RedirectedDllSupport = 2
- Property(S): MsiRunningElevated = 1
- Property(S): Privileged = 1
- Property(S): USERNAME = [email protected]
- Property(S): COMPANYNAME = Microsoft
- Property(S): DATABASE = C:\WINDOWS\Installer\1343bf77.msi
- Property(S): OriginalDatabase = C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos Management Communications System.msi
- Property(S): UILevel = 2
- Property(S): ACTION = INSTALL
- Property(S): ROOTDRIVE = C:\
- Property(S): CostingComplete = 1
- Property(S): OutOfDiskSpace = 0
- Property(S): OutOfNoRbDiskSpace = 0
- Property(S): PrimaryVolumeSpaceAvailable = 0
- Property(S): PrimaryVolumeSpaceRequired = 0
- Property(S): PrimaryVolumeSpaceRemaining = 0
- Property(S): INSTALLLEVEL = 1
- Property(S): SOURCEDIR = C:\Users\AndiN\AppData\Local\Temp\sophos_bootstrap\mcsep\
- Property(S): SourcedirProduct = {#}
- Property(S): ProductToBeRegistered = 1
- MSI (s) (C0:18) [10:37:27:616]: Note: 1: 1708
- MSI (s) (C0:18) [10:37:27:616]: Product: Sophos Management Communications System -- Installation failed.
- MSI (s) (C0:18) [10:37:27:616]: Windows Installer installed the product. Product Name: Sophos Management Communications System. Product Version: 2.0.0. Product Language: 1033. Manufacturer: Sophos Limited. Installation success or error status: 1603.
- MSI (s) (C0:18) [10:37:27:616]: Closing MSIHANDLE (1) of type 790542 for thread 1048
- MSI (s) (C0:18) [10:37:27:641]: Deferring clean up of packages/files, if any exist
- MSI (s) (C0:18) [10:37:27:642]: MainEngineThread is returning 1603
- MSI (s) (C0:A8) [10:37:27:644]: RESTART MANAGER: Session closed.
- MSI (s) (C0:A8) [10:37:27:644]: No System Restore sequence number for this installation.
- === Logging stopped: 2/8/2016 10:37:27 ===
- MSI (s) (C0:A8) [10:37:27:646]: User policy value 'DisableRollback' is 0
- MSI (s) (C0:A8) [10:37:27:646]: Machine policy value 'DisableRollback' is 0
- MSI (s) (C0:A8) [10:37:27:646]: Incrementing counter to disable shutdown. Counter after increment: 0
- MSI (s) (C0:A8) [10:37:27:646]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
- MSI (s) (C0:A8) [10:37:27:646]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Cupting counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
- MSI (c) (0C:FC) [10:37:27:650]: MainEngineThread is returning 1603
- === Verbose logging stopped: 2/8/2016 10:37:27 ===
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement