API tools faq
paste
Advertisement
Guest User

malware log

a guest
Nov 16th, 2022
72
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 80.13 KB | None | 0 0
raw download clone embed print report
  1. === Verbose logging started: 22/05/2014 13:10:34 Build type: SHIP UNICODE 5.00.9200.00 Calling process: c:\windows\system32\msiexec.exe ===
  2. MSI (c) (48:F0) [13:10:34:809]: Resetting cached policy values
  3. MSI (c) (48:F0) [13:10:34:809]: Machine policy value 'Debug' is 0
  4. MSI (c) (48:F0) [13:10:34:809]: ******* RunEngine:
  5. ******* Product: c:\\temp\\InstallFilter64.msi
  6. ******* Action:
  7. ******* CommandLine: **********
  8. MSI (c) (48:F0) [13:10:34:809]: Client-side and UI is none or basic: Running entire install on the server.
  9. MSI (c) (48:F0) [13:10:34:809]: Grabbed execution mutex.
  10. MSI (c) (48:F0) [13:10:34:823]: Cloaking enabled.
  11. MSI (c) (48:F0) [13:10:34:823]: Attempting to enable all disabled privileges before calling Install on Server
  12. MSI (c) (48:F0) [13:10:34:824]: Incrementing counter to disable shutdown. Counter after increment: 0
  13. MSI (s) (00:74) [13:10:34:828]: Running installation inside multi-package transaction c:\\temp\\InstallFilter64.msi
  14. MSI (s) (00:74) [13:10:34:828]: Grabbed execution mutex.
  15. MSI (s) (00:C4) [13:10:34:829]: Resetting cached policy values
  16. MSI (s) (00:C4) [13:10:34:829]: Machine policy value 'Debug' is 0
  17. MSI (s) (00:C4) [13:10:34:829]: ******* RunEngine:
  18. ******* Product: c:\\temp\\InstallFilter64.msi
  19. ******* Action:
  20. ******* CommandLine: **********
  21. MSI (s) (00:C4) [13:10:34:829]: Machine policy value 'DisableUserInstalls' is 0
  22. MSI (s) (00:C4) [13:10:34:834]: Note: 1: 2203 2: C:\WINDOWS\Installer\inprogressinstallinfo.ipi 3: -2147287038
  23. MSI (s) (00:C4) [13:10:34:834]: SRSetRestorePoint skipped for this transaction.
  24. MSI (s) (00:C4) [13:10:34:834]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2
  25. MSI (s) (00:C4) [13:10:34:835]: File will have security applied from OpCode.
  26. MSI (s) (00:C4) [13:10:34:837]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'c:\\temp\\InstallFilter64.msi' against software restriction policy
  27. MSI (s) (00:C4) [13:10:34:838]: Note: 1: 2262 2: DigitalSignature 3: -2147287038
  28. MSI (s) (00:C4) [13:10:34:838]: SOFTWARE RESTRICTION POLICY: c:\\temp\\InstallFilter64.msi is not digitally signed
  29. MSI (s) (00:C4) [13:10:34:838]: SOFTWARE RESTRICTION POLICY: c:\\temp\\InstallFilter64.msi is permitted to run at the 'unrestricted' authorization level.
  30. MSI (s) (00:C4) [13:10:34:838]: MSCOREE not loaded loading copy from system32
  31. MSI (s) (00:C4) [13:10:34:840]: End dialog not enabled
  32. MSI (s) (00:C4) [13:10:34:840]: Original package ==> c:\\temp\\InstallFilter64.msi
  33. MSI (s) (00:C4) [13:10:34:840]: Package we're running from ==> c:\WINDOWS\Installer\3d2fe1.msi
  34. MSI (s) (00:C4) [13:10:34:840]: APPCOMPAT: Compatibility mode property overrides found.
  35. MSI (s) (00:C4) [13:10:34:840]: APPCOMPAT: looking for appcompat database entry with ProductCode '{813BA625-B0FA-48D8-9B75-59759C88C219}'.
  36. MSI (s) (00:C4) [13:10:34:841]: APPCOMPAT: no matching ProductCode found in database.
  37. MSI (s) (00:C4) [13:10:34:843]: Machine policy value 'TransformsSecure' is 0
  38. MSI (s) (00:C4) [13:10:34:843]: User policy value 'TransformsAtSource' is 0
  39. MSI (s) (00:C4) [13:10:34:843]: Machine policy value 'DisablePatch' is 0
  40. MSI (s) (00:C4) [13:10:34:843]: Machine policy value 'AllowLockdownPatch' is 0
  41. MSI (s) (00:C4) [13:10:34:843]: Machine policy value 'DisableMsi' is 0
  42. MSI (s) (00:C4) [13:10:34:843]: Machine policy value 'AlwaysInstallElevated' is 1
  43. MSI (s) (00:C4) [13:10:34:843]: User policy value 'AlwaysInstallElevated' is 1
  44. MSI (s) (00:C4) [13:10:34:843]: Running product '{813BA625-B0FA-48D8-9B75-59759C88C219}' with elevated privileges: All apps run elevated.
  45. MSI (s) (00:C4) [13:10:34:843]: Machine policy value 'DisableLUAPatching' is 0
  46. MSI (s) (00:C4) [13:10:34:843]: Machine policy value 'DisableFlyWeightPatching' is 0
  47. MSI (s) (00:C4) [13:10:34:844]: APPCOMPAT: looking for appcompat database entry with ProductCode '{813BA625-B0FA-48D8-9B75-59759C88C219}'.
  48. MSI (s) (00:C4) [13:10:34:844]: APPCOMPAT: no matching ProductCode found in database.
  49. MSI (s) (00:C4) [13:10:34:844]: Transforms are not secure.
  50. MSI (s) (00:C4) [13:10:34:844]: Note: 1: 2205 2: 3: Control
  51. MSI (s) (00:C4) [13:10:34:844]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'c:\\temp\\lsp2.txt'.
  52. MSI (s) (00:C4) [13:10:34:844]: Command Line: SOURCEGUID=BF00AFC1-57C7-4E4F-BAB9-3AE016389CBE USERGUID=B1BBED3A-DF83-660D-242A-71A07A8248C3 CURRENTDIRECTORY=C:\WINDOWS\system32 CLIENTUILEVEL=3 CLIENTPROCESSID=4424
  53. MSI (s) (00:C4) [13:10:34:844]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{4CFA2D6A-A3BC-4031-8140-E7038F611ED5}'.
  54. MSI (s) (00:C4) [13:10:34:844]: Product Code passed to Engine.Initialize: ''
  55. MSI (s) (00:C4) [13:10:34:844]: Product Code from property table before transforms: '{813BA625-B0FA-48D8-9B75-59759C88C219}'
  56. MSI (s) (00:C4) [13:10:34:844]: Product Code from property table after transforms: '{813BA625-B0FA-48D8-9B75-59759C88C219}'
  57. MSI (s) (00:C4) [13:10:34:844]: Product not registered: beginning first-time install
  58. MSI (s) (00:C4) [13:10:34:844]: Product {813BA625-B0FA-48D8-9B75-59759C88C219} is not managed.
  59. MSI (s) (00:C4) [13:10:34:844]: Machine policy value 'AlwaysInstallElevated' is 1
  60. MSI (s) (00:C4) [13:10:34:844]: User policy value 'AlwaysInstallElevated' is 1
  61. MSI (s) (00:C4) [13:10:34:844]: MSI_LUA: No credentials required as all installs will run elevated due to AlwaysInstallElevated policy setting
  62. MSI (s) (00:C4) [13:10:34:844]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
  63. MSI (s) (00:C4) [13:10:34:844]: Entering CMsiConfigurationManager::SetLastUsedSource.
  64. MSI (s) (00:C4) [13:10:34:844]: User policy value 'SearchOrder' is 'nmu'
  65. MSI (s) (00:C4) [13:10:34:844]: Adding new sources is allowed.
  66. MSI (s) (00:C4) [13:10:34:844]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
  67. MSI (s) (00:C4) [13:10:34:844]: Package name extracted from package path: 'InstallFilter64.msi'
  68. MSI (s) (00:C4) [13:10:34:844]: Package to be registered: 'InstallFilter64.msi'
  69. MSI (s) (00:C4) [13:10:34:844]: Note: 1: 2205 2: 3: Error
  70. MSI (s) (00:C4) [13:10:34:845]: Note: 1: 2262 2: AdminProperties 3: -2147287038
  71. MSI (s) (00:C4) [13:10:34:845]: Machine policy value 'AlwaysInstallElevated' is 1
  72. MSI (s) (00:C4) [13:10:34:845]: User policy value 'AlwaysInstallElevated' is 1
  73. MSI (s) (00:C4) [13:10:34:845]: Running product '{813BA625-B0FA-48D8-9B75-59759C88C219}' with elevated privileges: All apps run elevated.
  74. MSI (s) (00:C4) [13:10:34:845]: Machine policy value 'EnableUserControl' is 0
  75. MSI (s) (00:C4) [13:10:34:845]: PROPERTY CHANGE: Adding RestrictedUserControl property. Its value is '1'.
  76. MSI (s) (00:C4) [13:10:34:845]: PROPERTY CHANGE: Modifying SOURCEGUID property. Its current value is 'B6FC5278-8E2A-46DB-847C-E96A944F1446'. Its new value: 'BF00AFC1-57C7-4E4F-BAB9-3AE016389CBE'.
  77. MSI (s) (00:C4) [13:10:34:845]: PROPERTY CHANGE: Modifying USERGUID property. Its current value is 'KOMODIA-TEST'. Its new value: 'B1BBED3A-DF83-660D-242A-71A07A8248C3'.
  78. MSI (s) (00:C4) [13:10:34:845]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\WINDOWS\system32'.
  79. MSI (s) (00:C4) [13:10:34:845]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'.
  80. MSI (s) (00:C4) [13:10:34:845]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '4424'.
  81. MSI (s) (00:C4) [13:10:34:845]: Machine policy value 'DisableAutomaticApplicationShutdown' is 0
  82. MSI (s) (00:C4) [13:10:34:846]: PROPERTY CHANGE: Adding MsiRestartManagerSessionKey property. Its value is '2fefe45e68d12948a5d65ef931966a49'.
  83. MSI (s) (00:C4) [13:10:34:846]: RESTART MANAGER: Session opened.
  84. MSI (s) (00:C4) [13:10:34:846]: PROPERTY CHANGE: Adding MsiSystemRebootPending property. Its value is '1'.
  85. MSI (s) (00:C4) [13:10:34:846]: TRANSFORMS property is now:
  86. MSI (s) (00:C4) [13:10:34:846]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '300'.
  87. MSI (s) (00:C4) [13:10:34:847]: SHELL32::SHGetFolderPath returned: C:\Users\Oscar\AppData\Roaming
  88. MSI (s) (00:C4) [13:10:34:848]: SHELL32::SHGetFolderPath returned: C:\Users\Oscar\Favorites
  89. MSI (s) (00:C4) [13:10:34:848]: SHELL32::SHGetFolderPath returned: C:\Users\Oscar\AppData\Roaming\Microsoft\Windows\Network Shortcuts
  90. MSI (s) (00:C4) [13:10:34:848]: SHELL32::SHGetFolderPath returned: C:\Users\Oscar\Documents
  91. MSI (s) (00:C4) [13:10:34:849]: SHELL32::SHGetFolderPath returned: C:\Users\Oscar\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
  92. MSI (s) (00:C4) [13:10:34:849]: SHELL32::SHGetFolderPath returned: C:\Users\Oscar\AppData\Roaming\Microsoft\Windows\Recent
  93. MSI (s) (00:C4) [13:10:34:850]: SHELL32::SHGetFolderPath returned: C:\Users\Oscar\AppData\Roaming\Microsoft\Windows\SendTo
  94. MSI (s) (00:C4) [13:10:34:850]: SHELL32::SHGetFolderPath returned: C:\Users\Oscar\AppData\Roaming\Microsoft\Windows\Templates
  95. MSI (s) (00:C4) [13:10:34:850]: SHELL32::SHGetFolderPath returned: C:\ProgramData
  96. MSI (s) (00:C4) [13:10:34:850]: SHELL32::SHGetFolderPath returned: C:\Users\Oscar\AppData\Local
  97. MSI (s) (00:C4) [13:10:34:851]: SHELL32::SHGetFolderPath returned: C:\Users\Oscar\Pictures
  98. MSI (s) (00:C4) [13:10:34:852]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
  99. MSI (s) (00:C4) [13:10:34:852]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
  100. MSI (s) (00:C4) [13:10:34:853]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
  101. MSI (s) (00:C4) [13:10:34:853]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu
  102. MSI (s) (00:C4) [13:10:34:854]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop
  103. MSI (s) (00:C4) [13:10:34:854]: SHELL32::SHGetFolderPath returned: C:\Users\Oscar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
  104. MSI (s) (00:C4) [13:10:34:855]: SHELL32::SHGetFolderPath returned: C:\Users\Oscar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
  105. MSI (s) (00:C4) [13:10:34:855]: SHELL32::SHGetFolderPath returned: C:\Users\Oscar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
  106. MSI (s) (00:C4) [13:10:34:856]: SHELL32::SHGetFolderPath returned: C:\Users\Oscar\AppData\Roaming\Microsoft\Windows\Start Menu
  107. MSI (s) (00:C4) [13:10:34:856]: SHELL32::SHGetFolderPath returned: C:\Users\Oscar\Desktop
  108. MSI (s) (00:C4) [13:10:34:857]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates
  109. MSI (s) (00:C4) [13:10:34:857]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\Fonts
  110. MSI (s) (00:C4) [13:10:34:857]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
  111. MSI (s) (00:C4) [13:10:34:859]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated.
  112. MSI (s) (00:C4) [13:10:34:859]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'.
  113. MSI (s) (00:C4) [13:10:34:859]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
  114. MSI (s) (00:C4) [13:10:34:859]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
  115. MSI (s) (00:C4) [13:10:34:859]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'Windows User'.
  116. MSI (s) (00:C4) [13:10:34:859]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
  117. MSI (s) (00:C4) [13:10:34:859]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'c:\WINDOWS\Installer\3d2fe1.msi'.
  118. MSI (s) (00:C4) [13:10:34:859]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'c:\\temp\\InstallFilter64.msi'.
  119. MSI (s) (00:C4) [13:10:34:859]: Machine policy value 'MsiDisableEmbeddedUI' is 0
  120. MSI (s) (00:C4) [13:10:34:859]: EEUI - Disabling MsiEmbeddedUI for service because it's not a quiet/basic install
  121. MSI (s) (00:C4) [13:10:34:859]: Note: 1: 2205 2: 3: PatchPackage
  122. MSI (s) (00:C4) [13:10:34:859]: Machine policy value 'DisableRollback' is 0
  123. MSI (s) (00:C4) [13:10:34:859]: User policy value 'DisableRollback' is 0
  124. MSI (s) (00:C4) [13:10:34:859]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
  125. === Logging started: 22/05/2014 13:10:34 ===
  126. MSI (s) (00:C4) [13:10:34:860]: Note: 1: 2203 2: C:\WINDOWS\Installer\inprogressinstallinfo.ipi 3: -2147287038
  127. MSI (s) (00:C4) [13:10:34:860]: APPCOMPAT: [DetectVersionLaunchCondition] Launch condition already passes.
  128. MSI (s) (00:C4) [13:10:34:860]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
  129. MSI (s) (00:C4) [13:10:34:860]: Doing action: INSTALL
  130. MSI (s) (00:C4) [13:10:34:860]: Note: 1: 2205 2: 3: ActionText
  131. Action start 13:10:34: INSTALL.
  132. MSI (s) (00:C4) [13:10:34:861]: Running ExecuteSequence
  133. MSI (s) (00:C4) [13:10:34:861]: Doing action: WindowsFolder_x86_VC.1DEE2A86_2F57_3629_8107_A71DBB4DBED2
  134. MSI (s) (00:C4) [13:10:34:861]: Note: 1: 2205 2: 3: ActionText
  135. MSI (s) (00:C4) [13:10:34:861]: PROPERTY CHANGE: Adding WindowsFolder_x86_VC.1DEE2A86_2F57_3629_8107_A71DBB4DBED2 property. Its value is 'C:\WINDOWS\'.
  136. Action start 13:10:34: WindowsFolder_x86_VC.1DEE2A86_2F57_3629_8107_A71DBB4DBED2.
  137. MSI (s) (00:C4) [13:10:34:861]: Doing action: SystemFolder_x86_VC.1DEE2A86_2F57_3629_8107_A71DBB4DBED2
  138. MSI (s) (00:C4) [13:10:34:861]: Note: 1: 2205 2: 3: ActionText
  139. Action ended 13:10:34: WindowsFolder_x86_VC.1DEE2A86_2F57_3629_8107_A71DBB4DBED2. Return value 1.
  140. MSI (s) (00:C4) [13:10:34:861]: PROPERTY CHANGE: Adding SystemFolder_x86_VC.1DEE2A86_2F57_3629_8107_A71DBB4DBED2 property. Its value is 'c:\WINDOWS\SysWOW64\'.
  141. Action start 13:10:34: SystemFolder_x86_VC.1DEE2A86_2F57_3629_8107_A71DBB4DBED2.
  142. MSI (s) (00:C4) [13:10:34:861]: Doing action: DIRCA_TARGETDIR
  143. MSI (s) (00:C4) [13:10:34:861]: Note: 1: 2205 2: 3: ActionText
  144. Action ended 13:10:34: SystemFolder_x86_VC.1DEE2A86_2F57_3629_8107_A71DBB4DBED2. Return value 1.
  145. MSI (s) (00:C4) [13:10:34:861]: PROPERTY CHANGE: Adding TARGETDIR property. Its value is 'C:\Program Files\RrFilter'.
  146. Action start 13:10:34: DIRCA_TARGETDIR.
  147. MSI (s) (00:C4) [13:10:34:861]: Doing action: FindRelatedProducts
  148. MSI (s) (00:C4) [13:10:34:861]: Note: 1: 2205 2: 3: ActionText
  149. Action ended 13:10:34: DIRCA_TARGETDIR. Return value 1.
  150. Action start 13:10:34: FindRelatedProducts.
  151. MSI (s) (00:C4) [13:10:34:862]: Doing action: AppSearch
  152. MSI (s) (00:C4) [13:10:34:862]: Note: 1: 2205 2: 3: ActionText
  153. Action ended 13:10:34: FindRelatedProducts. Return value 1.
  154. Action start 13:10:34: AppSearch.
  155. MSI (s) (00:C4) [13:10:34:862]: Note: 1: 2262 2: Signature 3: -2147287038
  156. MSI (s) (00:C4) [13:10:34:862]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\VisualStudio\10.0\VC\VCRedist\x86 3: 2
  157. MSI (s) (00:C4) [13:10:34:862]: Doing action: LaunchConditions
  158. MSI (s) (00:C4) [13:10:34:862]: Note: 1: 2205 2: 3: ActionText
  159. Action ended 13:10:34: AppSearch. Return value 1.
  160. Action start 13:10:34: LaunchConditions.
  161. MSI (s) (00:C4) [13:10:34:863]: Doing action: ValidateProductID
  162. MSI (s) (00:C4) [13:10:34:863]: Note: 1: 2205 2: 3: ActionText
  163. Action ended 13:10:34: LaunchConditions. Return value 1.
  164. Action start 13:10:34: ValidateProductID.
  165. MSI (s) (00:C4) [13:10:34:863]: Doing action: CA_WindowsFolder_x86_VC.1DEE2A86_2F57_3629_8107_A71DBB4DBED2
  166. MSI (s) (00:C4) [13:10:34:863]: Note: 1: 2205 2: 3: ActionText
  167. Action ended 13:10:34: ValidateProductID. Return value 1.
  168. Action start 13:10:34: CA_WindowsFolder_x86_VC.1DEE2A86_2F57_3629_8107_A71DBB4DBED2.
  169. MSI (s) (00:C4) [13:10:34:863]: Doing action: CA_SystemFolder_x86_VC.1DEE2A86_2F57_3629_8107_A71DBB4DBED2
  170. MSI (s) (00:C4) [13:10:34:863]: Note: 1: 2205 2: 3: ActionText
  171. Action ended 13:10:34: CA_WindowsFolder_x86_VC.1DEE2A86_2F57_3629_8107_A71DBB4DBED2. Return value 1.
  172. Action start 13:10:34: CA_SystemFolder_x86_VC.1DEE2A86_2F57_3629_8107_A71DBB4DBED2.
  173. MSI (s) (00:C4) [13:10:34:863]: Doing action: CostInitialize
  174. MSI (s) (00:C4) [13:10:34:863]: Note: 1: 2205 2: 3: ActionText
  175. Action ended 13:10:34: CA_SystemFolder_x86_VC.1DEE2A86_2F57_3629_8107_A71DBB4DBED2. Return value 1.
  176. MSI (s) (00:C4) [13:10:34:864]: Machine policy value 'MaxPatchCacheSize' is 10
  177. MSI (s) (00:C4) [13:10:34:864]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'D:\'.
  178. MSI (s) (00:C4) [13:10:34:864]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'.
  179. MSI (s) (00:C4) [13:10:34:865]: Note: 1: 2205 2: 3: Patch
  180. MSI (s) (00:C4) [13:10:34:865]: Note: 1: 2205 2: 3: PatchPackage
  181. MSI (s) (00:C4) [13:10:34:865]: Note: 1: 2205 2: 3: MsiPatchHeaders
  182. MSI (s) (00:C4) [13:10:34:865]: Note: 1: 2205 2: 3: __MsiPatchFileList
  183. MSI (s) (00:C4) [13:10:34:865]: Note: 1: 2205 2: 3: PatchPackage
  184. MSI (s) (00:C4) [13:10:34:865]: Note: 1: 2228 2: 3: PatchPackage 4: SELECT `DiskId`, `PatchId`, `LastSequence` FROM `Media`, `PatchPackage` WHERE `Media`.`DiskId`=`PatchPackage`.`Media_` ORDER BY `DiskId`
  185. MSI (s) (00:C4) [13:10:34:865]: Note: 1: 2205 2: 3: Patch
  186. Action start 13:10:34: CostInitialize.
  187. MSI (s) (00:C4) [13:10:34:865]: Doing action: FileCost
  188. MSI (s) (00:C4) [13:10:34:865]: Note: 1: 2205 2: 3: ActionText
  189. Action ended 13:10:34: CostInitialize. Return value 1.
  190. MSI (s) (00:C4) [13:10:34:865]: Note: 1: 2205 2: 3: MsiAssembly
  191. MSI (s) (00:C4) [13:10:34:865]: Note: 1: 2205 2: 3: Class
  192. MSI (s) (00:C4) [13:10:34:865]: Note: 1: 2205 2: 3: Extension
  193. MSI (s) (00:C4) [13:10:34:865]: Note: 1: 2205 2: 3: TypeLib
  194. Action start 13:10:34: FileCost.
  195. MSI (s) (00:C4) [13:10:34:865]: Doing action: CostFinalize
  196. MSI (s) (00:C4) [13:10:34:865]: Note: 1: 2205 2: 3: ActionText
  197. Action ended 13:10:34: FileCost. Return value 1.
  198. MSI (s) (00:C4) [13:10:34:865]: PROPERTY CHANGE: Adding OutOfDiskSpace property. Its value is '0'.
  199. MSI (s) (00:C4) [13:10:34:865]: PROPERTY CHANGE: Adding OutOfNoRbDiskSpace property. Its value is '0'.
  200. MSI (s) (00:C4) [13:10:34:865]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceAvailable property. Its value is '0'.
  201. MSI (s) (00:C4) [13:10:34:865]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRequired property. Its value is '0'.
  202. MSI (s) (00:C4) [13:10:34:865]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRemaining property. Its value is '0'.
  203. MSI (s) (00:C4) [13:10:34:866]: Note: 1: 2205 2: 3: Patch
  204. MSI (s) (00:C4) [13:10:34:866]: PROPERTY CHANGE: Modifying TARGETDIR property. Its current value is 'C:\Program Files\RrFilter'. Its new value: 'c:\Program Files\RrFilter\'.
  205. MSI (s) (00:C4) [13:10:34:866]: PROPERTY CHANGE: Modifying WindowsFolder property. Its current value is 'C:\WINDOWS\'. Its new value: 'c:\WINDOWS\'.
  206. MSI (s) (00:C4) [13:10:34:866]: PROPERTY CHANGE: Modifying WindowsFolder_x86_VC.1DEE2A86_2F57_3629_8107_A71DBB4DBED2 property. Its current value is 'C:\WINDOWS\'. Its new value: 'c:\WINDOWS\'.
  207. MSI (s) (00:C4) [13:10:34:866]: PROPERTY CHANGE: Modifying ProgramFiles64Folder property. Its current value is 'C:\Program Files\'. Its new value: 'c:\Program Files\'.
  208. MSI (s) (00:C4) [13:10:34:866]: PROPERTY CHANGE: Adding INSTALLDIR property. Its value is 'c:\Program Files\RrFilter\'.
  209. MSI (s) (00:C4) [13:10:34:866]: PROPERTY CHANGE: Modifying System64Folder property. Its current value is 'C:\WINDOWS\system32\'. Its new value: 'c:\WINDOWS\system32\'.
  210. MSI (s) (00:C4) [13:10:34:866]: PROPERTY CHANGE: Adding DriversFolder property. Its value is 'c:\WINDOWS\system32\drivers\'.
  211. MSI (s) (00:C4) [13:10:34:866]: Target path resolution complete. Dumping Directory table...
  212. MSI (s) (00:C4) [13:10:34:866]: Note: target paths subject to change (via custom actions or browsing)
  213. MSI (s) (00:C4) [13:10:34:866]: Dir (target): Key: TARGETDIR , Object: c:\Program Files\RrFilter\
  214. MSI (s) (00:C4) [13:10:34:866]: Dir (target): Key: WindowsFolder , Object: c:\WINDOWS\
  215. MSI (s) (00:C4) [13:10:34:866]: Dir (target): Key: WindowsFolder_x86_VC.1DEE2A86_2F57_3629_8107_A71DBB4DBED2 , Object: c:\WINDOWS\
  216. MSI (s) (00:C4) [13:10:34:866]: Dir (target): Key: SystemFolder_x86_VC.1DEE2A86_2F57_3629_8107_A71DBB4DBED2 , Object: c:\WINDOWS\SysWOW64\
  217. MSI (s) (00:C4) [13:10:34:866]: Dir (target): Key: ProgramFiles64Folder , Object: c:\Program Files\
  218. MSI (s) (00:C4) [13:10:34:866]: Dir (target): Key: INSTALLDIR , Object: c:\Program Files\RrFilter\
  219. MSI (s) (00:C4) [13:10:34:866]: Dir (target): Key: System64Folder , Object: c:\WINDOWS\system32\
  220. MSI (s) (00:C4) [13:10:34:866]: Dir (target): Key: DriversFolder , Object: c:\WINDOWS\system32\drivers\
  221. MSI (s) (00:C4) [13:10:34:866]: PROPERTY CHANGE: Adding INSTALLLEVEL property. Its value is '1'.
  222. MSI (s) (00:C4) [13:10:34:866]: Note: 1: 2205 2: 3: MsiAssembly
  223. MSI (s) (00:C4) [13:10:34:866]: Note: 1: 2228 2: 3: MsiAssembly 4: SELECT `MsiAssembly`.`Attributes`, `MsiAssembly`.`File_Application`, `MsiAssembly`.`File_Manifest`, `Component`.`KeyPath` FROM `MsiAssembly`, `Component` WHERE `MsiAssembly`.`Component_` = `Component`.`Component` AND `MsiAssembly`.`Component_` = ?
  224. Action start 13:10:34: CostFinalize.
  225. MSI (s) (00:C4) [13:10:34:869]: Doing action: QtExecNFRegDrvexeSet64
  226. MSI (s) (00:C4) [13:10:34:869]: Note: 1: 2205 2: 3: ActionText
  227. Action ended 13:10:34: CostFinalize. Return value 1.
  228. MSI (s) (00:C4) [13:10:34:869]: PROPERTY CHANGE: Adding QtExecNFRegDrvexeRun64 property. Its value is '"c:\Program Files\RrFilter\nfregdrv.exe" netfilter64'.
  229. Action start 13:10:34: QtExecNFRegDrvexeSet64.
  230. MSI (s) (00:C4) [13:10:34:869]: Doing action: MigrateFeatureStates
  231. MSI (s) (00:C4) [13:10:34:869]: Note: 1: 2205 2: 3: ActionText
  232. Action ended 13:10:34: QtExecNFRegDrvexeSet64. Return value 1.
  233. Action start 13:10:34: MigrateFeatureStates.
  234. MSI (s) (00:C4) [13:10:34:869]: Doing action: InstallValidate
  235. MSI (s) (00:C4) [13:10:34:869]: Note: 1: 2205 2: 3: ActionText
  236. Action ended 13:10:34: MigrateFeatureStates. Return value 0.
  237. Action start 13:10:34: InstallValidate.
  238. MSI (s) (00:C4) [13:10:34:870]: PROPERTY CHANGE: Deleting MsiRestartManagerSessionKey property. Its current value is '2fefe45e68d12948a5d65ef931966a49'.
  239. MSI (s) (00:C4) [13:10:34:870]: Note: 1: 2205 2: 3: Dialog
  240. MSI (s) (00:C4) [13:10:34:870]: Feature: VCRedist; Installed: Absent; Request: Local; Action: Local
  241. MSI (s) (00:C4) [13:10:34:870]: Feature: LSPFeature; Installed: Absent; Request: Local; Action: Local
  242. MSI (s) (00:C4) [13:10:34:870]: Feature: WFPFeature; Installed: Absent; Request: Local; Action: Local
  243. MSI (s) (00:C4) [13:10:34:870]: Feature: MainProductFeature; Installed: Absent; Request: Local; Action: Local
  244. MSI (s) (00:C4) [13:10:34:870]: Component: TDIDriverComponent; Installed: Absent; Request: Local; Action: Null
  245. MSI (s) (00:C4) [13:10:34:870]: Component: WFPDriverComponent; Installed: Absent; Request: Local; Action: Local
  246. MSI (s) (00:C4) [13:10:34:870]: Component: RemoveAdpeakFolderOnUninstall; Installed: Absent; Request: Local; Action: Local
  247. MSI (s) (00:C4) [13:10:34:870]: Component: DriverExeComponent; Installed: Absent; Request: Local; Action: Local
  248. MSI (s) (00:C4) [13:10:34:870]: Component: RrFilterService; Installed: Absent; Request: Local; Action: Local
  249. MSI (s) (00:C4) [13:10:34:870]: Component: Installbat64dll; Installed: Absent; Request: Local; Action: Local
  250. MSI (s) (00:C4) [13:10:34:870]: Component: NFApi64Component; Installed: Absent; Request: Local; Action: Local
  251. MSI (s) (00:C4) [13:10:34:870]: Component: ProtocolFiltersComponent; Installed: Absent; Request: Local; Action: Local
  252. MSI (s) (00:C4) [13:10:34:870]: Component: WindowsInstaller; Installed: Absent; Request: Local; Action: Local
  253. MSI (s) (00:C4) [13:10:34:870]: Component: C_CENTRAL_msvcr100_x86.1DEE2A86_2F57_3629_8107_A71DBB4DBED2; Installed: Absent; Request: Local; Action: Local
  254. MSI (s) (00:C4) [13:10:34:870]: Component: C_CENTRAL_msvcp100_x86.1DEE2A86_2F57_3629_8107_A71DBB4DBED2; Installed: Absent; Request: Local; Action: Local
  255. MSI (s) (00:C4) [13:10:34:870]: Component: __RemoveAdpeakFolderOnUninstall65; Installed: Null; Request: Local; Action: Local
  256. MSI (s) (00:C4) [13:10:34:870]: Component: __RrFilterService65; Installed: Null; Request: Local; Action: Local
  257. MSI (s) (00:C4) [13:10:34:870]: Component: __WindowsInstaller65; Installed: Null; Request: Local; Action: Local
  258. MSI (s) (00:C4) [13:10:34:870]: Note: 1: 2205 2: 3: BindImage
  259. MSI (s) (00:C4) [13:10:34:870]: Note: 1: 2205 2: 3: ProgId
  260. MSI (s) (00:C4) [13:10:34:870]: Note: 1: 2205 2: 3: PublishComponent
  261. MSI (s) (00:C4) [13:10:34:870]: Note: 1: 2205 2: 3: SelfReg
  262. MSI (s) (00:C4) [13:10:34:870]: Note: 1: 2205 2: 3: Extension
  263. MSI (s) (00:C4) [13:10:34:870]: Note: 1: 2205 2: 3: Font
  264. MSI (s) (00:C4) [13:10:34:870]: Note: 1: 2205 2: 3: Shortcut
  265. MSI (s) (00:C4) [13:10:34:870]: Note: 1: 2205 2: 3: Class
  266. MSI (s) (00:C4) [13:10:34:870]: Note: 1: 2205 2: 3: TypeLib
  267. MSI (s) (00:C4) [13:10:34:870]: Note: 1: 2205 2: 3: _RemoveFilePath
  268. MSI (s) (00:C4) [13:10:34:872]: PROPERTY CHANGE: Modifying CostingComplete property. Its current value is '0'. Its new value: '1'.
  269. MSI (s) (00:C4) [13:10:34:873]: Note: 1: 2205 2: 3: BindImage
  270. MSI (s) (00:C4) [13:10:34:873]: Note: 1: 2205 2: 3: ProgId
  271. MSI (s) (00:C4) [13:10:34:873]: Note: 1: 2205 2: 3: PublishComponent
  272. MSI (s) (00:C4) [13:10:34:873]: Note: 1: 2205 2: 3: SelfReg
  273. MSI (s) (00:C4) [13:10:34:873]: Note: 1: 2205 2: 3: Extension
  274. MSI (s) (00:C4) [13:10:34:873]: Note: 1: 2205 2: 3: Font
  275. MSI (s) (00:C4) [13:10:34:873]: Note: 1: 2205 2: 3: Shortcut
  276. MSI (s) (00:C4) [13:10:34:873]: Note: 1: 2205 2: 3: Class
  277. MSI (s) (00:C4) [13:10:34:873]: Note: 1: 2205 2: 3: TypeLib
  278. MSI (s) (00:C4) [13:10:34:873]: Note: 1: 2727 2:
  279. MSI (s) (00:C4) [13:10:34:873]: Note: 1: 2205 2: 3: FilesInUse
  280. MSI (s) (00:C4) [13:10:34:876]: Note: 1: 2727 2:
  281. MSI (s) (00:C4) [13:10:34:876]: Doing action: RemoveExistingProducts
  282. MSI (s) (00:C4) [13:10:34:876]: Note: 1: 2205 2: 3: ActionText
  283. Action ended 13:10:34: InstallValidate. Return value 1.
  284. MSI (s) (00:C4) [13:10:34:876]: Note: 1: 2205 2: 3: Error
  285. MSI (s) (00:C4) [13:10:34:876]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 22
  286. Action start 13:10:34: RemoveExistingProducts.
  287. MSI (s) (00:C4) [13:10:34:876]: Note: 1: 2205 2: 3: Error
  288. MSI (s) (00:C4) [13:10:34:876]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 23
  289. MSI (s) (00:C4) [13:10:34:876]: Note: 1: 2205 2: 3: Error
  290. MSI (s) (00:C4) [13:10:34:876]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 16
  291. MSI (s) (00:C4) [13:10:34:876]: Note: 1: 2205 2: 3: Error
  292. MSI (s) (00:C4) [13:10:34:876]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 21
  293. MSI (s) (00:C4) [13:10:34:876]: Doing action: InstallInitialize
  294. MSI (s) (00:C4) [13:10:34:877]: Note: 1: 2205 2: 3: ActionText
  295. Action ended 13:10:34: RemoveExistingProducts. Return value 1.
  296. MSI (s) (00:C4) [13:10:34:877]: Machine policy value 'AlwaysInstallElevated' is 1
  297. MSI (s) (00:C4) [13:10:34:877]: User policy value 'AlwaysInstallElevated' is 1
  298. MSI (s) (00:C4) [13:10:34:877]: BeginTransaction: Locking Server
  299. MSI (s) (00:C4) [13:10:34:877]: Note: 1: 2203 2: C:\WINDOWS\Installer\inprogressinstallinfo.ipi 3: -2147287038
  300. MSI (s) (00:C4) [13:10:34:877]: SRSetRestorePoint skipped for this transaction.
  301. MSI (s) (00:C4) [13:10:34:877]: Note: 1: 2203 2: C:\WINDOWS\Installer\inprogressinstallinfo.ipi 3: -2147287038
  302. MSI (s) (00:C4) [13:10:34:877]: Server not locked: locking for product {813BA625-B0FA-48D8-9B75-59759C88C219}
  303. Action start 13:10:34: InstallInitialize.
  304. MSI (s) (00:C4) [13:10:34:881]: Doing action: ProcessComponents
  305. MSI (s) (00:C4) [13:10:34:881]: Note: 1: 2205 2: 3: ActionText
  306. Action ended 13:10:34: InstallInitialize. Return value 1.
  307. MSI (s) (00:C4) [13:10:34:882]: Note: 1: 2205 2: 3: MsiPatchCertificate
  308. MSI (s) (00:C4) [13:10:34:882]: LUA patching is disabled: missing MsiPatchCertificate table
  309. MSI (s) (00:C4) [13:10:34:882]: Resolving source.
  310. MSI (s) (00:C4) [13:10:34:882]: Resolving source to launched-from source.
  311. MSI (s) (00:C4) [13:10:34:882]: Setting launched-from source as last-used.
  312. MSI (s) (00:C4) [13:10:34:882]: PROPERTY CHANGE: Adding SourceDir property. Its value is 'c:\\temp\\'.
  313. MSI (s) (00:C4) [13:10:34:882]: PROPERTY CHANGE: Adding SOURCEDIR property. Its value is 'c:\\temp\\'.
  314. MSI (s) (00:C4) [13:10:34:882]: PROPERTY CHANGE: Adding SourcedirProduct property. Its value is '{813BA625-B0FA-48D8-9B75-59759C88C219}'.
  315. MSI (s) (00:C4) [13:10:34:882]: SOURCEDIR ==> c:\\temp\\
  316. MSI (s) (00:C4) [13:10:34:882]: SOURCEDIR product ==> {813BA625-B0FA-48D8-9B75-59759C88C219}
  317. MSI (s) (00:C4) [13:10:34:882]: Determining source type
  318. MSI (s) (00:C4) [13:10:34:882]: Source type from package 'InstallFilter64.msi': 2
  319. MSI (s) (00:C4) [13:10:34:882]: Source path resolution complete. Dumping Directory table...
  320. MSI (s) (00:C4) [13:10:34:882]: Dir (source): Key: TARGETDIR , Object: c:\temp\ , LongSubPath: , ShortSubPath:
  321. MSI (s) (00:C4) [13:10:34:882]: Dir (source): Key: WindowsFolder , Object: c:\temp\ , LongSubPath: , ShortSubPath:
  322. MSI (s) (00:C4) [13:10:34:882]: Dir (source): Key: WindowsFolder_x86_VC.1DEE2A86_2F57_3629_8107_A71DBB4DBED2 , Object: c:\temp\ , LongSubPath: Win\ , ShortSubPath:
  323. MSI (s) (00:C4) [13:10:34:882]: Dir (source): Key: SystemFolder_x86_VC.1DEE2A86_2F57_3629_8107_A71DBB4DBED2 , Object: c:\temp\ , LongSubPath: Win\System\ , ShortSubPath:
  324. MSI (s) (00:C4) [13:10:34:882]: Dir (source): Key: ProgramFiles64Folder , Object: c:\temp\ , LongSubPath: , ShortSubPath:
  325. MSI (s) (00:C4) [13:10:34:882]: Dir (source): Key: INSTALLDIR , Object: c:\temp\ , LongSubPath: RrFilter\ , ShortSubPath:
  326. MSI (s) (00:C4) [13:10:34:882]: Dir (source): Key: System64Folder , Object: c:\temp\ , LongSubPath: System64Folder\ , ShortSubPath: yllfinnk\
  327. MSI (s) (00:C4) [13:10:34:882]: Dir (source): Key: DriversFolder , Object: c:\temp\ , LongSubPath: System64Folder\drivers\ , ShortSubPath: yllfinnk\drivers\
  328. MSI (s) (00:C4) [13:10:34:882]: Note: 1: 2205 2: 3: ActionText
  329. MSI (s) (00:C4) [13:10:34:882]: Note: 1: 2205 2: 3: ActionText
  330. MSI (s) (00:C4) [13:10:34:883]: Note: 1: 2205 2: 3: ActionText
  331. Action start 13:10:34: ProcessComponents.
  332. MSI (s) (00:C4) [13:10:34:885]: Doing action: UnpublishFeatures
  333. MSI (s) (00:C4) [13:10:34:885]: Note: 1: 2205 2: 3: ActionText
  334. Action ended 13:10:34: ProcessComponents. Return value 1.
  335. Action start 13:10:34: UnpublishFeatures.
  336. MSI (s) (00:C4) [13:10:34:885]: Doing action: StopServices
  337. MSI (s) (00:C4) [13:10:34:885]: Note: 1: 2205 2: 3: ActionText
  338. Action ended 13:10:34: UnpublishFeatures. Return value 1.
  339. Action start 13:10:34: StopServices.
  340. MSI (s) (00:C4) [13:10:34:886]: Doing action: DeleteServices
  341. MSI (s) (00:C4) [13:10:34:886]: Note: 1: 2205 2: 3: ActionText
  342. Action ended 13:10:34: StopServices. Return value 1.
  343. Action start 13:10:34: DeleteServices.
  344. MSI (s) (00:C4) [13:10:34:886]: Skipping action: SetParamsCleanupRegistryAndFiles64 (condition is false)
  345. MSI (s) (00:C4) [13:10:34:886]: Skipping action: CleanupRegistryAndFiles64 (condition is false)
  346. MSI (s) (00:C4) [13:10:34:886]: Doing action: RemoveRegistryValues
  347. MSI (s) (00:C4) [13:10:34:886]: Note: 1: 2205 2: 3: ActionText
  348. Action ended 13:10:34: DeleteServices. Return value 1.
  349. Action start 13:10:34: RemoveRegistryValues.
  350. MSI (s) (00:C4) [13:10:34:886]: Skipping action: QtExecNFRegDrvuninstallSet64 (condition is false)
  351. MSI (s) (00:C4) [13:10:34:886]: Skipping action: QtExecNFRegDrvuninstallRun64 (condition is false)
  352. MSI (s) (00:C4) [13:10:34:886]: Skipping action: QtExecServiceUninstallSet64 (condition is false)
  353. MSI (s) (00:C4) [13:10:34:886]: Skipping action: QtExecServiceUninstallRun64 (condition is false)
  354. MSI (s) (00:C4) [13:10:34:886]: Skipping action: SetStatusUninstalledParam (condition is false)
  355. MSI (s) (00:C4) [13:10:34:886]: Skipping action: SetStatusUninstalled (condition is false)
  356. MSI (s) (00:C4) [13:10:34:886]: Skipping action: SetParamsSendStatusUninstalled (condition is false)
  357. MSI (s) (00:C4) [13:10:34:886]: Skipping action: SendStatusUninstalled (condition is false)
  358. MSI (s) (00:C4) [13:10:34:886]: Doing action: RemoveFiles
  359. MSI (s) (00:C4) [13:10:34:886]: Note: 1: 2205 2: 3: ActionText
  360. Action ended 13:10:34: RemoveRegistryValues. Return value 1.
  361. Action start 13:10:34: RemoveFiles.
  362. MSI (s) (00:C4) [13:10:34:887]: Doing action: InstallFiles
  363. MSI (s) (00:C4) [13:10:34:887]: Note: 1: 2205 2: 3: ActionText
  364. Action ended 13:10:34: RemoveFiles. Return value 1.
  365. Action start 13:10:34: InstallFiles.
  366. MSI (s) (00:C4) [13:10:34:888]: Note: 1: 2205 2: 3: Patch
  367. MSI (s) (00:C4) [13:10:34:888]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`File_`, `Patch`.`Header`, `Patch`.`Attributes`, `Patch`.`Sequence`, `Patch`.`StreamRef_` FROM `Patch` WHERE `Patch`.`File_` = ? AND `Patch`.`#_MsiActive`=? ORDER BY `Patch`.`Sequence`
  368. MSI (s) (00:C4) [13:10:34:888]: Note: 1: 2205 2: 3: Error
  369. MSI (s) (00:C4) [13:10:34:888]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1302
  370. MSI (s) (00:C4) [13:10:34:888]: Note: 1: 2205 2: 3: MsiSFCBypass
  371. MSI (s) (00:C4) [13:10:34:888]: Note: 1: 2228 2: 3: MsiSFCBypass 4: SELECT `File_` FROM `MsiSFCBypass` WHERE `File_` = ?
  372. MSI (s) (00:C4) [13:10:34:888]: Note: 1: 2205 2: 3: MsiPatchHeaders
  373. MSI (s) (00:C4) [13:10:34:888]: Note: 1: 2228 2: 3: MsiPatchHeaders 4: SELECT `Header` FROM `MsiPatchHeaders` WHERE `StreamRef` = ?
  374. MSI (s) (00:C4) [13:10:34:888]: Note: 1: 2205 2: 3: PatchPackage
  375. MSI (s) (00:C4) [13:10:34:888]: Note: 1: 2205 2: 3: MsiPatchHeaders
  376. MSI (s) (00:C4) [13:10:34:888]: Note: 1: 2205 2: 3: PatchPackage
  377. MSI (s) (00:C4) [13:10:34:889]: Note: 1: 2205 2: 3: Patch
  378. MSI (s) (00:C4) [13:10:34:889]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
  379. MSI (s) (00:C4) [13:10:34:893]: Note: 1: 2205 2: 3: Patch
  380. MSI (s) (00:C4) [13:10:34:893]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
  381. MSI (s) (00:C4) [13:10:34:895]: Doing action: QtExecNFRegDrvexeRun64
  382. MSI (s) (00:C4) [13:10:34:895]: Note: 1: 2205 2: 3: ActionText
  383. Action ended 13:10:34: InstallFiles. Return value 1.
  384. Action start 13:10:34: QtExecNFRegDrvexeRun64.
  385. MSI (s) (00:C4) [13:10:34:896]: Doing action: QtExecServiceInstallSet64
  386. MSI (s) (00:C4) [13:10:34:896]: Note: 1: 2205 2: 3: ActionText
  387. Action ended 13:10:34: QtExecNFRegDrvexeRun64. Return value 1.
  388. MSI (s) (00:C4) [13:10:34:896]: PROPERTY CHANGE: Adding QtExecServiceInstallRun64 property. Its value is '"c:\Program Files\RrFilter\RrFilterService64.exe" install'.
  389. Action start 13:10:34: QtExecServiceInstallSet64.
  390. MSI (s) (00:C4) [13:10:34:896]: Doing action: QtExecServiceInstallRun64
  391. MSI (s) (00:C4) [13:10:34:896]: Note: 1: 2205 2: 3: ActionText
  392. Action ended 13:10:34: QtExecServiceInstallSet64. Return value 1.
  393. Action start 13:10:34: QtExecServiceInstallRun64.
  394. MSI (s) (00:C4) [13:10:34:897]: Doing action: SetParamsAddRegistrySettings64
  395. MSI (s) (00:C4) [13:10:34:897]: Note: 1: 2205 2: 3: ActionText
  396. Action ended 13:10:34: QtExecServiceInstallRun64. Return value 1.
  397. MSI (s) (00:C4) [13:10:34:897]: PROPERTY CHANGE: Adding AddRegistrySettings64 property. Its value is 'Url:http://d.quikcdn.com/xuiow/ UserGUID:B1BBED3A-DF83-660D-242A-71A07A8248C3 SourceGUID:BF00AFC1-57C7-4E4F-BAB9-3AE016389CBE LogVerbose:'.
  398. Action start 13:10:34: SetParamsAddRegistrySettings64.
  399. MSI (s) (00:C4) [13:10:34:897]: Doing action: AddRegistrySettings64
  400. MSI (s) (00:C4) [13:10:34:897]: Note: 1: 2205 2: 3: ActionText
  401. Action ended 13:10:34: SetParamsAddRegistrySettings64. Return value 1.
  402. Action start 13:10:34: AddRegistrySettings64.
  403. MSI (s) (00:C4) [13:10:34:897]: Doing action: SetStatusInstalledParam
  404. MSI (s) (00:C4) [13:10:34:897]: Note: 1: 2205 2: 3: ActionText
  405. Action ended 13:10:34: AddRegistrySettings64. Return value 1.
  406. MSI (s) (00:C4) [13:10:34:898]: PROPERTY CHANGE: Adding SetStatusInstalled property. Its value is 'UserGUID:B1BBED3A-DF83-660D-242A-71A07A8248C3 SourceGUID:BF00AFC1-57C7-4E4F-BAB9-3AE016389CBE StatusCode:3'.
  407. Action start 13:10:34: SetStatusInstalledParam.
  408. MSI (s) (00:C4) [13:10:34:898]: Doing action: SetStatusInstalled
  409. MSI (s) (00:C4) [13:10:34:898]: Note: 1: 2205 2: 3: ActionText
  410. Action ended 13:10:34: SetStatusInstalledParam. Return value 1.
  411. Action start 13:10:34: SetStatusInstalled.
  412. MSI (s) (00:C4) [13:10:34:898]: Doing action: WriteRegistryValues
  413. MSI (s) (00:C4) [13:10:34:898]: Note: 1: 2205 2: 3: ActionText
  414. Action ended 13:10:34: SetStatusInstalled. Return value 1.
  415. Action start 13:10:34: WriteRegistryValues.
  416. MSI (s) (00:C4) [13:10:34:899]: Doing action: StartServices
  417. MSI (s) (00:C4) [13:10:34:899]: Note: 1: 2205 2: 3: ActionText
  418. Action ended 13:10:34: WriteRegistryValues. Return value 1.
  419. Action start 13:10:34: StartServices.
  420. MSI (s) (00:C4) [13:10:34:899]: Doing action: RegisterUser
  421. MSI (s) (00:C4) [13:10:34:899]: Note: 1: 2205 2: 3: ActionText
  422. Action ended 13:10:34: StartServices. Return value 1.
  423. Action start 13:10:34: RegisterUser.
  424. MSI (s) (00:C4) [13:10:34:900]: Doing action: RegisterProduct
  425. MSI (s) (00:C4) [13:10:34:900]: Note: 1: 2205 2: 3: ActionText
  426. Action ended 13:10:34: RegisterUser. Return value 1.
  427. MSI (s) (00:C4) [13:10:34:900]: Note: 1: 2205 2: 3: Error
  428. MSI (s) (00:C4) [13:10:34:900]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1302
  429. Action start 13:10:34: RegisterProduct.
  430. MSI (s) (00:C4) [13:10:34:901]: PROPERTY CHANGE: Adding ProductToBeRegistered property. Its value is '1'.
  431. MSI (s) (00:C4) [13:10:34:901]: Doing action: PublishFeatures
  432. MSI (s) (00:C4) [13:10:34:901]: Note: 1: 2205 2: 3: ActionText
  433. Action ended 13:10:34: RegisterProduct. Return value 1.
  434. Action start 13:10:34: PublishFeatures.
  435. MSI (s) (00:C4) [13:10:34:901]: Doing action: PublishProduct
  436. MSI (s) (00:C4) [13:10:34:901]: Note: 1: 2205 2: 3: ActionText
  437. Action ended 13:10:34: PublishFeatures. Return value 1.
  438. Action start 13:10:34: PublishProduct.
  439. MSI (s) (00:C4) [13:10:34:902]: Doing action: SetParamsSendStatusInstalled
  440. MSI (s) (00:C4) [13:10:34:902]: Note: 1: 2205 2: 3: ActionText
  441. Action ended 13:10:34: PublishProduct. Return value 1.
  442. MSI (s) (00:C4) [13:10:34:903]: PROPERTY CHANGE: Adding SendStatusInstalled property. Its value is 'UserGUID:B1BBED3A-DF83-660D-242A-71A07A8248C3 SourceGUID:BF00AFC1-57C7-4E4F-BAB9-3AE016389CBE StatusCode:3'.
  443. Action start 13:10:34: SetParamsSendStatusInstalled.
  444. MSI (s) (00:C4) [13:10:34:903]: Doing action: SendStatusInstalled
  445. MSI (s) (00:C4) [13:10:34:903]: Note: 1: 2205 2: 3: ActionText
  446. Action ended 13:10:34: SetParamsSendStatusInstalled. Return value 1.
  447. Action start 13:10:34: SendStatusInstalled.
  448. MSI (s) (00:C4) [13:10:34:903]: Doing action: InstallFinalize
  449. MSI (s) (00:C4) [13:10:34:903]: Note: 1: 2205 2: 3: ActionText
  450. Action ended 13:10:34: SendStatusInstalled. Return value 1.
  451. MSI (s) (00:C4) [13:10:34:903]: Running Script: C:\WINDOWS\Installer\MSI3010.tmp
  452. MSI (s) (00:C4) [13:10:34:903]: PROPERTY CHANGE: Adding UpdateStarted property. Its value is '1'.
  453. MSI (s) (00:C4) [13:10:34:914]: Note: 1: 2265 2: 3: -2147287035
  454. MSI (s) (00:C4) [13:10:34:915]: Machine policy value 'DisableRollback' is 0
  455. MSI (s) (00:C4) [13:10:34:916]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
  456. MSI (s) (00:C4) [13:10:34:916]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1152805202,LangId=1033,Platform=589824,ScriptType=1,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1)
  457. Action start 13:10:34: InstallFinalize.
  458. MSI (s) (00:C4) [13:10:34:916]: Executing op: ProductInfo(ProductKey={813BA625-B0FA-48D8-9B75-59759C88C219},ProductName=RrFilter,PackageName=InstallFilter64.msi,Language=1033,Version=16777216,Assignment=1,ObsoleteArg=0,ProductIcon=icon64.ico,,PackageCode={4CFA2D6A-A3BC-4031-8140-E7038F611ED5},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0,ProductDeploymentFlags=3)
  459. MSI (s) (00:C4) [13:10:34:916]: Executing op: DialogInfo(Type=0,Argument=1033)
  460. MSI (s) (00:C4) [13:10:34:916]: Executing op: DialogInfo(Type=1,Argument=RrFilter)
  461. MSI (s) (00:C4) [13:10:34:916]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1])
  462. MSI (s) (00:C4) [13:10:34:917]: Executing op: SetBaseline(Baseline=0,)
  463. MSI (s) (00:C4) [13:10:34:917]: Executing op: SetBaseline(Baseline=1,)
  464. MSI (s) (00:C4) [13:10:34:917]: Executing op: ActionStart(Name=ProcessComponents,Description=Updating component registration,)
  465. MSI (s) (00:C4) [13:10:34:917]: Executing op: ProgressTotal(Total=11,Type=1,ByteEquivalent=24000)
  466. MSI (s) (00:C4) [13:10:34:917]: Executing op: ComponentRegister(ComponentId={15BDB99E-8B16-562D-B0BA-C123D223E743},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=1)
  467. MSI (s) (00:C4) [13:10:34:917]: Executing op: ComponentRegister(ComponentId={15BDB99E-8B16-562D-B0BA-C123D223E743},KeyPath=c:\WINDOWS\system32\drivers\netfilter64.sys,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
  468. MSI (s) (00:C4) [13:10:34:917]: Executing op: ComponentRegister(ComponentId={0647AD23-6E21-4F4D-88AA-1D316DAFA444},KeyPath=c:\Program Files\RrFilter\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
  469. MSI (s) (00:C4) [13:10:34:917]: Executing op: ComponentRegister(ComponentId={2997768B-53E9-5370-B260-D1E49F22BE6A},KeyPath=c:\Program Files\RrFilter\nfregdrv.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
  470. MSI (s) (00:C4) [13:10:34:917]: Executing op: ComponentRegister(ComponentId={3EA767FA-88C6-4592-A7DC-174A42A9249B},KeyPath=c:\Program Files\RrFilter\RrFilterService64.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
  471. MSI (s) (00:C4) [13:10:34:918]: Executing op: ComponentRegister(ComponentId={6256C511-650B-5990-A21B-8CA7AC50F3BE},KeyPath=c:\Program Files\RrFilter\Installbat64.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
  472. MSI (s) (00:C4) [13:10:34:918]: Executing op: ComponentRegister(ComponentId={801CA3B7-9CB9-5C1C-9A57-306110E75A6D},KeyPath=c:\Program Files\RrFilter\nfapi.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
  473. MSI (s) (00:C4) [13:10:34:918]: Executing op: ComponentRegister(ComponentId={E7EA39A5-B5CB-56D6-8D53-3F6022791F84},KeyPath=c:\Program Files\RrFilter\ProtocolFilters.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
  474. MSI (s) (00:C4) [13:10:34:918]: Executing op: ComponentRegister(ComponentId={511FB6CF-E20B-5372-A4FA-4DE46107EE11},KeyPath=c:\Program Files\RrFilter\Microsoft.Deployment.WindowsInstaller.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
  475. MSI (s) (00:C4) [13:10:34:918]: Executing op: ComponentRegister(ComponentId={9983C931-37BE-3C6E-AD32-8B6E789B6881},KeyPath=c:\WINDOWS\SysWOW64\msvcr100.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
  476. MSI (s) (00:C4) [13:10:34:918]: WIN64DUALFOLDERS: 'C:\WINDOWS\system32\' will substitute 20 characters in 'c:\WINDOWS\SysWOW64\msvcr100.dll' folder path. (mask argument = 1, the folder pair's iSwapAttrib member = 1).
  477. MSI (s) (00:C4) [13:10:34:918]: WIN64DUALFOLDERS: 'C:\WINDOWS\system32\' will substitute 20 characters in 'c:\WINDOWS\SysWOW64\msvcr100.dll' folder path. (mask argument = 1, the folder pair's iSwapAttrib member = 1).
  478. MSI (s) (00:C4) [13:10:34:918]: Executing op: ComponentRegister(ComponentId={E822F933-C70D-3CF4-A92D-7263B8ACCF30},KeyPath=c:\WINDOWS\SysWOW64\msvcp100.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
  479. MSI (s) (00:C4) [13:10:34:919]: WIN64DUALFOLDERS: 'C:\WINDOWS\system32\' will substitute 20 characters in 'c:\WINDOWS\SysWOW64\msvcp100.dll' folder path. (mask argument = 1, the folder pair's iSwapAttrib member = 1).
  480. MSI (s) (00:C4) [13:10:34:919]: WIN64DUALFOLDERS: 'C:\WINDOWS\system32\' will substitute 20 characters in 'c:\WINDOWS\SysWOW64\msvcp100.dll' folder path. (mask argument = 1, the folder pair's iSwapAttrib member = 1).
  481. MSI (s) (00:C4) [13:10:34:919]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=13200)
  482. MSI (s) (00:C4) [13:10:34:919]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs,,BinaryType=0,,)
  483. MSI (s) (00:C4) [13:10:34:919]: Executing op: ProgressTick()
  484. MSI (s) (00:C4) [13:10:34:919]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=13200)
  485. MSI (s) (00:C4) [13:10:34:919]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs,,BinaryType=0,,)
  486. MSI (s) (00:C4) [13:10:34:919]: Executing op: ProgressTick()
  487. MSI (s) (00:C4) [13:10:34:919]: Executing op: ActionStart(Name=InstallFiles,Description=Copying new files,Template=File: [1], Directory: [9], Size: [6])
  488. MSI (s) (00:C4) [13:10:34:919]: Executing op: ProgressTotal(Total=2707831,Type=0,ByteEquivalent=1)
  489. MSI (s) (00:C4) [13:10:34:919]: Executing op: SetTargetFolder(Folder=c:\Program Files\RrFilter\)
  490. MSI (s) (00:C4) [13:10:34:919]: Executing op: SetSourceFolder(Folder=1\RrFilter\)
  491. MSI (s) (00:C4) [13:10:34:919]: Executing op: ChangeMedia(,MediaPrompt=Please insert the disk: ,MediaCabinet=cab1.cab,BytesPerTick=65536,CopierType=2,ModuleFileName=c:\WINDOWS\Installer\3d2fe1.msi,,,,,IsFirstPhysicalMedia=1)
  492. MSI (s) (00:C4) [13:10:34:919]: Executing op: FileCopy(SourceName=nfregdrv.exe,SourceCabKey=DriverExe,DestName=nfregdrv.exe,Attributes=512,FileSize=45568,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1013171302,HashPart2=-1956826937,HashPart3=-1473175687,HashPart4=1213265417,,)
  493. MSI (s) (00:C4) [13:10:34:919]: File: c:\Program Files\RrFilter\nfregdrv.exe; To be installed; Won't patch; No existing file
  494. MSI (s) (00:C4) [13:10:34:919]: Source for file 'DriverExe' is compressed
  495. MSI (s) (00:C4) [13:10:34:937]: Executing op: SetTargetFolder(Folder=c:\WINDOWS\SysWOW64\)
  496. MSI (s) (00:C4) [13:10:34:937]: Executing op: SetSourceFolder(Folder=1\Win\System\)
  497. MSI (s) (00:C4) [13:10:34:937]: Executing op: RegisterSharedComponentProvider(,,File=F_CENTRAL_msvcp100_x86.1DEE2A86_2F57_3629_8107_A71DBB4DBED2,Component={E822F933-C70D-3CF4-A92D-7263B8ACCF30},ComponentVersion=10.0.40219.325,ProductCode={813BA625-B0FA-48D8-9B75-59759C88C219},ProductVersion=1.0.0,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
  498. MSI (s) (00:C4) [13:10:34:938]: Executing op: FileCopy(SourceName=msvcp100.dll,SourceCabKey=F_CENTRAL_msvcp100_x86.1DEE2A86_2F57_3629_8107_A71DBB4DBED2,DestName=msvcp100.dll,Attributes=512,FileSize=421200,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.0.40219.325,Language=1033,InstallMode=58982400,,,,,,,)
  499. MSI (s) (00:C4) [13:10:34:938]: File: c:\WINDOWS\SysWOW64\msvcp100.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
  500. MSI (s) (00:C4) [13:10:34:938]: Executing op: RegisterSharedComponentProvider(,,File=F_CENTRAL_msvcr100_x86.1DEE2A86_2F57_3629_8107_A71DBB4DBED2,Component={9983C931-37BE-3C6E-AD32-8B6E789B6881},ComponentVersion=10.0.40219.325,ProductCode={813BA625-B0FA-48D8-9B75-59759C88C219},ProductVersion=1.0.0,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
  501. MSI (s) (00:C4) [13:10:34:938]: Executing op: FileCopy(SourceName=msvcr100.dll,SourceCabKey=F_CENTRAL_msvcr100_x86.1DEE2A86_2F57_3629_8107_A71DBB4DBED2,DestName=msvcr100.dll,Attributes=512,FileSize=773968,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.0.40219.325,Language=1033,InstallMode=58982400,,,,,,,)
  502. MSI (s) (00:C4) [13:10:34:938]: File: c:\WINDOWS\SysWOW64\msvcr100.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
  503. MSI (s) (00:C4) [13:10:34:938]: Executing op: SetTargetFolder(Folder=c:\Program Files\RrFilter\)
  504. MSI (s) (00:C4) [13:10:34:938]: Executing op: SetSourceFolder(Folder=1\RrFilter\)
  505. MSI (s) (00:C4) [13:10:34:938]: Executing op: FileCopy(SourceName=bsy1qo20.dll|Installbat64.dll,SourceCabKey=Installbat64dll,DestName=Installbat64.dll,Attributes=512,FileSize=154624,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1052016402,HashPart2=-1997908569,HashPart3=1978183993,HashPart4=-1200315601,,)
  506. MSI (s) (00:C4) [13:10:34:939]: File: c:\Program Files\RrFilter\Installbat64.dll; To be installed; Won't patch; No existing file
  507. MSI (s) (00:C4) [13:10:34:939]: Source for file 'Installbat64dll' is compressed
  508. MSI (s) (00:C4) [13:10:34:962]: Executing op: FileCopy(SourceName=sample.dll,SourceCabKey=Messagedll,DestName=sample.dll,Attributes=512,FileSize=1024,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-333144211,HashPart2=671879083,HashPart3=1104592820,HashPart4=-1813108986,,)
  509. MSI (s) (00:C4) [13:10:34:962]: File: c:\Program Files\RrFilter\sample.dll; To be installed; Won't patch; No existing file
  510. MSI (s) (00:C4) [13:10:34:962]: Source for file 'Messagedll' is compressed
  511. MSI (s) (00:C4) [13:10:34:966]: Executing op: FileCopy(SourceName=nfapi.dll,SourceCabKey=NFApiDll,DestName=nfapi.dll,Attributes=512,FileSize=110080,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=933728209,HashPart2=2001951912,HashPart3=140295901,HashPart4=-1535333916,,)
  512. MSI (s) (00:C4) [13:10:34:966]: File: c:\Program Files\RrFilter\nfapi.dll; To be installed; Won't patch; No existing file
  513. MSI (s) (00:C4) [13:10:34:966]: Source for file 'NFApiDll' is compressed
  514. MSI (s) (00:C4) [13:10:35:603]: Executing op: FileCopy(SourceName=lwbo0kaf.dll|ProtocolFilters.dll,SourceCabKey=ProtocolFiltersDll,DestName=ProtocolFilters.dll,Attributes=512,FileSize=317952,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=113725251,HashPart2=1198011183,HashPart3=746635027,HashPart4=1577444644,,)
  515. MSI (s) (00:C4) [13:10:35:603]: File: c:\Program Files\RrFilter\ProtocolFilters.dll; To be installed; Won't patch; No existing file
  516. MSI (s) (00:C4) [13:10:35:603]: Source for file 'ProtocolFiltersDll' is compressed
  517. MSI (s) (00:C4) [13:10:35:632]: Executing op: FileCopy(SourceName=gfgyvnx2.exe|RrFilterService64.exe,SourceCabKey=RrFilterService,DestName=RrFilterService64.exe,Attributes=512,FileSize=171008,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1065518420,HashPart2=-1930217217,HashPart3=-89382062,HashPart4=1156578149,,)
  518. MSI (s) (00:C4) [13:10:35:632]: File: c:\Program Files\RrFilter\RrFilterService64.exe; To be installed; Won't patch; No existing file
  519. MSI (s) (00:C4) [13:10:35:632]: Source for file 'RrFilterService' is compressed
  520. MSI (s) (00:C4) [13:10:35:647]: Executing op: SetTargetFolder(Folder=c:\WINDOWS\system32\drivers\)
  521. MSI (s) (00:C4) [13:10:35:647]: Executing op: SetSourceFolder(Folder=1\yllfinnk\drivers\|System64Folder\drivers\)
  522. MSI (s) (00:C4) [13:10:35:647]: Executing op: FileCopy(SourceName=85bjxtlc.sys|netfilter64.sys,SourceCabKey=WFPDriver,DestName=netfilter64.sys,Attributes=512,FileSize=46376,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.4.3.1,Language=1033,InstallMode=58982400,,,,,,,)
  523. MSI (s) (00:C4) [13:10:35:650]: File: c:\WINDOWS\system32\drivers\netfilter64.sys; To be installed; Won't patch; No existing file
  524. MSI (s) (00:C4) [13:10:35:650]: Source for file 'WFPDriver' is compressed
  525. MSI (s) (00:C4) [13:10:35:668]: Executing op: SetTargetFolder(Folder=c:\Program Files\RrFilter\)
  526. MSI (s) (00:C4) [13:10:35:669]: Executing op: SetSourceFolder(Folder=1\RrFilter\)
  527. MSI (s) (00:C4) [13:10:35:669]: Executing op: FileCopy(SourceName=fxikpzso.dll|Microsoft.Deployment.WindowsInstaller.dll,SourceCabKey=WindowsInstallerdll,DestName=Microsoft.Deployment.WindowsInstaller.dll,Attributes=512,FileSize=180224,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=3.6.3303.0,Language=0,InstallMode=58982400,,,,,,,)
  528. MSI (s) (00:C4) [13:10:35:669]: File: c:\Program Files\RrFilter\Microsoft.Deployment.WindowsInstaller.dll; To be installed; Won't patch; No existing file
  529. MSI (s) (00:C4) [13:10:35:669]: Source for file 'WindowsInstallerdll' is compressed
  530. MSI (s) (00:C4) [13:10:35:677]: Executing op: FileCopy(SourceName=bgof2com.xml|Microsoft.Deployment.WindowsInstaller.xml,SourceCabKey=WindowsInstallerxml,DestName=Microsoft.Deployment.WindowsInstaller.xml,Attributes=512,FileSize=485807,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-529702913,HashPart2=120212815,HashPart3=-1778603535,HashPart4=-1307356715,,)
  531. MSI (s) (00:C4) [13:10:35:677]: File: c:\Program Files\RrFilter\Microsoft.Deployment.WindowsInstaller.xml; To be installed; Won't patch; No existing file
  532. MSI (s) (00:C4) [13:10:35:677]: Source for file 'WindowsInstallerxml' is compressed
  533. MSI (s) (00:C4) [13:10:35:686]: Executing op: CacheSizeFlush(,)
  534. MSI (s) (00:C4) [13:10:35:686]: Executing op: ActionStart(Name=QtExecNFRegDrvexeRun64,,)
  535. MSI (s) (00:C4) [13:10:35:687]: Executing op: CustomActionSchedule(Action=QtExecNFRegDrvexeRun64,ActionType=3073,Source=BinaryData,Target=CAQuietExec64,CustomActionData="c:\Program Files\RrFilter\nfregdrv.exe" netfilter64)
  536. MSI (s) (00:78) [13:10:35:700]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI333E.tmp, Entrypoint: CAQuietExec64
  537. MSI (s) (00:84) [13:10:35:700]: Generating random cookie.
  538. MSI (s) (00:84) [13:10:35:701]: Created Custom Action Server with PID 7128 (0x1BD8).
  539. MSI (s) (00:0C) [13:10:35:711]: Running as a service.
  540. MSI (s) (00:0C) [13:10:35:712]: Hello, I'm your 32bit Elevated custom action server.
  541. MSI (s) (00:C4) [13:10:35:747]: Executing op: ActionStart(Name=QtExecServiceInstallRun64,,)
  542. MSI (s) (00:C4) [13:10:35:747]: Executing op: CustomActionSchedule(Action=QtExecServiceInstallRun64,ActionType=3073,Source=BinaryData,Target=CAQuietExec64,CustomActionData="c:\Program Files\RrFilter\RrFilterService64.exe" install)
  543. MSI (s) (00:A0) [13:10:35:760]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI337E.tmp, Entrypoint: CAQuietExec64
  544. MSI (s) (00:C4) [13:10:35:786]: Executing op: ActionStart(Name=AddRegistrySettings64,,)
  545. MSI (s) (00:C4) [13:10:35:786]: Executing op: CustomActionSchedule(Action=AddRegistrySettings64,ActionType=3089,Source=c:\Program Files\RrFilter\Installbat64.dll,Target=AddRegistrySettings,CustomActionData=Url:http://d.quikcdn.com/xuiow/ UserGUID:B1BBED3A-DF83-660D-242A-71A07A8248C3 SourceGUID:BF00AFC1-57C7-4E4F-BAB9-3AE016389CBE LogVerbose:)
  546. MSI (s) (00:3C) [13:10:35:786]: Invoking remote custom action. DLL: c:\Program Files\RrFilter\Installbat64.dll, Entrypoint: AddRegistrySettings
  547. MSI (s) (00:84) [13:10:35:786]: Generating random cookie.
  548. MSI (s) (00:84) [13:10:35:787]: Created Custom Action Server with PID 7744 (0x1E40).
  549. MSI (s) (00:0C) [13:10:35:795]: Running as a service.
  550. MSI (s) (00:0C) [13:10:35:795]: Hello, I'm your 64bit Elevated custom action server.
  551. AddRegistrySettings: Custom Action Data = 'Url:http://d.quikcdn.com/xuiow/ UserGUID:B1BBED3A-DF83-660D-242A-71A07A8248C3 SourceGUID:BF00AFC1-57C7-4E4F-BAB9-3AE016389CBE LogVerbose:'.
  552. AddRegistrySettings: In GetParameters
  553. AddRegistrySettings: argc = 4
  554. AddRegistrySettings: i = 0, argv=Url:http://d.quikcdn.com/xuiow/
  555. AddRegistrySettings: URL = http://d.quikcdn.com/xuiow/
  556. AddRegistrySettings: i = 1, argv=UserGUID:B1BBED3A-DF83-660D-242A-71A07A8248C3
  557. AddRegistrySettings: UserGUID = B1BBED3A-DF83-660D-242A-71A07A8248C3
  558. AddRegistrySettings: i = 2, argv=SourceGUID:BF00AFC1-57C7-4E4F-BAB9-3AE016389CBE
  559. AddRegistrySettings: SourceGUID = BF00AFC1-57C7-4E4F-BAB9-3AE016389CBE
  560. AddRegistrySettings: i = 3, argv=LogVerbose:
  561. AddRegistrySettings: Found LogVerbose arg
  562. AddRegistrySettings: LogVerbose length 0
  563. AddRegistrySettings: LogVerbose length >0
  564. AddRegistrySettings: Completed GetParameters
  565. AddRegistrySettings: Calling SetStringRegistryKey(SOFTWARE\Wow6432Node\RrFilter\RrFilter", "INSTALLRRFILTERSTATUS", "TRUE")
  566. AddRegistrySettings: In SetStringRegistryKey, value = TRUE
  567. AddRegistrySettings: In SetStringRegistryKey, attempting to create key SOFTWARE\Wow6432Node\RrFilter\RrFilter
  568. AddRegistrySettings: In SetStringRegistryKey, RegCreateKey succeeded.
  569. AddRegistrySettings: In SetStringRegistryKey, attempting to set registry value TRUE
  570. AddRegistrySettings: In SetStringRegistryKey, set registry value SOFTWARE\Wow6432Node\RrFilter\RrFilter\INSTALLRRFILTERSTATUS = TRUE
  571. AddRegistrySettings: RegCloseKey called
  572. AddRegistrySettings: Set the INSTALLRRFILTERSTATUS registry key
  573. AddRegistrySettings: http://d.quikcdn.com/xuiow/
  574. AddRegistrySettings: Calling SetRegistryKey(true, SOFTWARE\Wow6432Node\RrFilter\RrFilter, P, http://d.quikcdn.com/xuiow/)
  575. AddRegistrySettings: In SetByteRegistryKey, value = 104
  576. AddRegistrySettings: In SetByteRegistryKey, attempting to create key SOFTWARE\Wow6432Node\RrFilter\RrFilter
  577. AddRegistrySettings: In SetByteRegistryKey, RegCreateKey succeeded.
  578. AddRegistrySettings: In SetByteRegistryKey, attempting to set registry value 104
  579. AddRegistrySettings: In SetByteRegistryKey, set registry value SOFTWARE\Wow6432Node\RrFilter\RrFilter\P = 104
  580. AddRegistrySettings: RegCloseKey called
  581. AddRegistrySettings: Completed SetRegistryKey
  582. AddRegistrySettings: Wrote the url into the registry
  583. AddRegistrySettings: In SetByteRegistryKey, value = 66
  584. AddRegistrySettings: In SetByteRegistryKey, attempting to create key SOFTWARE\Wow6432Node\RrFilter\RrFilter
  585. AddRegistrySettings: In SetByteRegistryKey, RegCreateKey succeeded.
  586. AddRegistrySettings: In SetByteRegistryKey, attempting to set registry value 66
  587. AddRegistrySettings: In SetByteRegistryKey, set registry value SOFTWARE\Wow6432Node\RrFilter\RrFilter\U = 66
  588. AddRegistrySettings: RegCloseKey called
  589. AddRegistrySettings: Completed SetRegistryKey
  590. AddRegistrySettings: Wrote the user guid into the registry
  591. AddRegistrySettings: Calling SetRegistryKey(true, SOFTWARE\Wow6432Node\RrFilter\RrFilter, T, 1400789435)
  592. AddRegistrySettings: In SetByteRegistryKey, value = 49
  593. AddRegistrySettings: In SetByteRegistryKey, attempting to create key SOFTWARE\Wow6432Node\RrFilter\RrFilter
  594. AddRegistrySettings: In SetByteRegistryKey, RegCreateKey succeeded.
  595. AddRegistrySettings: In SetByteRegistryKey, attempting to set registry value 49
  596. AddRegistrySettings: In SetByteRegistryKey, set registry value SOFTWARE\Wow6432Node\RrFilter\RrFilter\T = 49
  597. AddRegistrySettings: RegCloseKey called
  598. AddRegistrySettings: Completed SetRegistryKey
  599. AddRegistrySettings: Wrote the timeStamp into the registry
  600. AddRegistrySettings: In SetByteRegistryKey, value = 66
  601. AddRegistrySettings: In SetByteRegistryKey, attempting to create key SOFTWARE\Wow6432Node\RrFilter\RrFilter
  602. AddRegistrySettings: In SetByteRegistryKey, RegCreateKey succeeded.
  603. AddRegistrySettings: In SetByteRegistryKey, attempting to set registry value 66
  604. AddRegistrySettings: In SetByteRegistryKey, set registry value SOFTWARE\Wow6432Node\RrFilter\RrFilter\S = 66
  605. AddRegistrySettings: RegCloseKey called
  606. AddRegistrySettings: Completed SetRegistryKey
  607. AddRegistrySettings: Wrote the source guid into the registry
  608. AddRegistrySettings: In SetByteRegistryKey, value = 66
  609. AddRegistrySettings: In SetByteRegistryKey, attempting to create key SOFTWARE\Rr Savings\
  610. AddRegistrySettings: In SetByteRegistryKey, RegCreateKey succeeded.
  611. AddRegistrySettings: In SetByteRegistryKey, attempting to set registry value 66
  612. AddRegistrySettings: In SetByteRegistryKey, set registry value SOFTWARE\Rr Savings\\key = 66
  613. AddRegistrySettings: RegCloseKey called
  614. AddRegistrySettings: Completed SetRegistryKey
  615. AddRegistrySettings: In SetRegistrySettings, wrote the source guid into the registry for partners (first location)
  616. AddRegistrySettings: In SetByteRegistryKey, value = 66
  617. AddRegistrySettings: In SetByteRegistryKey, attempting to create key SOFTWARE\AppDataLow\Software\Rr Savings\
  618. AddRegistrySettings: In SetByteRegistryKey, RegCreateKey succeeded.
  619. AddRegistrySettings: In SetByteRegistryKey, attempting to set registry value 66
  620. AddRegistrySettings: In SetByteRegistryKey, set registry value SOFTWARE\AppDataLow\Software\Rr Savings\\key = 66
  621. AddRegistrySettings: RegCloseKey called
  622. AddRegistrySettings: Completed SetRegistryKey
  623. MSI (s) (00:C4) [13:10:35:821]: Executing op: ActionStart(Name=SetStatusInstalled,,)
  624. AddRegistrySettings: Wrote the source guid into the registry for partners (second location)
  625. MSI (s) (00:C4) [13:10:35:821]: Executing op: CustomActionSchedule(Action=SetStatusInstalled,ActionType=3089,Source=c:\Program Files\RrFilter\Installbat64.dll,Target=StatusToRegistry,CustomActionData=UserGUID:B1BBED3A-DF83-660D-242A-71A07A8248C3 SourceGUID:BF00AFC1-57C7-4E4F-BAB9-3AE016389CBE StatusCode:3)
  626. MSI (s) (00:C0) [13:10:35:822]: Invoking remote custom action. DLL: c:\Program Files\RrFilter\Installbat64.dll, Entrypoint: StatusToRegistry
  627. StatusToRegistry: Custom Action Data = 'UserGUID:B1BBED3A-DF83-660D-242A-71A07A8248C3 SourceGUID:BF00AFC1-57C7-4E4F-BAB9-3AE016389CBE StatusCode:3'.
  628. StatusToRegistry: Getting status code parameter
  629. StatusToRegistry: argc = 3
  630. StatusToRegistry: i = 0, argv=UserGUID:B1BBED3A-DF83-660D-242A-71A07A8248C3
  631. StatusToRegistry: i = 1, argv=SourceGUID:BF00AFC1-57C7-4E4F-BAB9-3AE016389CBE
  632. StatusToRegistry: i = 2, argv=StatusCode:3
  633. StatusToRegistry: StatusCode label found
  634. StatusToRegistry: StatusCode: 3
  635. StatusToRegistry: StatusCode = 3
  636. StatusToRegistry: Calling SetByteRegistryKey(SOFTWARE\Wow6432Node\RrFilter\RrFilter", "STATUSCODE", 3)
  637. StatusToRegistry: In SetByteRegistryKey, value = 3
  638. StatusToRegistry: In SetByteRegistryKey, attempting to create key SOFTWARE\Wow6432Node\RrFilter\RrFilter
  639. StatusToRegistry: In SetByteRegistryKey, RegCreateKey succeeded.
  640. StatusToRegistry: In SetByteRegistryKey, attempting to set registry value 3
  641. StatusToRegistry: In SetByteRegistryKey, set registry value SOFTWARE\Wow6432Node\RrFilter\RrFilter\STATUSCODE = 3
  642. StatusToRegistry: RegCloseKey called
  643. StatusToRegistry: Completed SetRegistryKey
  644. StatusToRegistry: Wrote the status code 3 into the registry
  645. MSI (s) (00:C4) [13:10:35:825]: Executing op: ActionStart(Name=WriteRegistryValues,Description=Writing system registry values,Template=Key: [1], Name: [2], Value: [3])
  646. StatusToRegistry: Calling SetByteRegistryKey(SOFTWARE\Wow6432Node\RrFilter\RrFilter", "STATUSCODE", 3)
  647. MSI (s) (00:C4) [13:10:35:826]: Executing op: ProgressTotal(Total=7,Type=1,ByteEquivalent=13200)
  648. MSI (s) (00:C4) [13:10:35:826]: Executing op: RegOpenKey(Root=-2147483646,Key=System\CurrentControlSet\Services\netfilter64,,BinaryType=1,,)
  649. MSI (s) (00:C4) [13:10:35:826]: Executing op: RegOpenKey(Root=-2147483646,Key=SYSTEM\CurrentControlSet\Services\EventLog\Application\RrFilterService64,,BinaryType=1,,)
  650. MSI (s) (00:C4) [13:10:35:826]: Executing op: RegAddValue(Name=EventMessageFile,Value=c:\Program Files\RrFilter\sample.dll,)
  651. MSI (s) (00:C4) [13:10:35:826]: Executing op: RegAddValue(Name=TypesSupported,Value=##x00000007,)
  652. MSI (s) (00:C4) [13:10:35:826]: Executing op: RegAddValue(Name=CategoryCount,Value=#1,)
  653. MSI (s) (00:C4) [13:10:35:826]: Executing op: RegAddValue(Name=CategoryMessageFile,Value=c:\Program Files\RrFilter\sample.dll,)
  654. MSI (s) (00:C4) [13:10:35:826]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\RrFilter\RrFilter,,BinaryType=1,,)
  655. MSI (s) (00:C4) [13:10:35:826]: Executing op: RegCreateKey()
  656. MSI (s) (00:C4) [13:10:35:826]: Executing op: ActionStart(Name=StartServices,Description=Starting services,Template=Service: [1])
  657. MSI (s) (00:C4) [13:10:35:826]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=1300000)
  658. MSI (s) (00:C4) [13:10:35:827]: Executing op: ServiceControl(,Name=RrFilterService64,Action=1,Wait=0,)
  659. MSI (s) (00:C4) [13:10:35:833]: Executing op: ActionStart(Name=RegisterProduct,Description=Registering product,Template=[1])
  660. MSI (s) (00:C4) [13:10:35:833]: Executing op: ChangeMedia(,MediaPrompt=Please insert the disk: ,MediaCabinet=cab1.cab,BytesPerTick=0,CopierType=2,ModuleFileName=c:\WINDOWS\Installer\3d2fe1.msi,,,,,IsFirstPhysicalMedia=1)
  661. MSI (s) (00:C4) [13:10:35:833]: Executing op: DatabaseCopy(DatabasePath=c:\WINDOWS\Installer\3d2fe1.msi,ProductCode={813BA625-B0FA-48D8-9B75-59759C88C219},,,)
  662. MSI (s) (00:C4) [13:10:35:833]: Note: 1: 1402 2: UNKNOWN\Products\526AB318AF0B8D84B9579557C9882C91\InstallProperties 3: 2
  663. MSI (s) (00:C4) [13:10:35:834]: File will have security applied from OpCode.
  664. MSI (s) (00:C4) [13:10:35:837]: Executing op: ProductRegister(UpgradeCode={E6E9C226-F485-4899-A295-EBCA87F57AC9},VersionString=1.0.0.0,HelpLink=http://www.rrsavings.com/,,,InstallSource=c:\temp\,Publisher=RrFilter,,,,NoModify=1,NoRepair=1,,,,,,SystemComponent=1,EstimatedSize=2643,,,,)
  665. MSI (s) (00:C4) [13:10:35:839]: Executing op: ProductCPDisplayInfoRegister()
  666. MSI (s) (00:C4) [13:10:35:839]: Executing op: ActionStart(Name=PublishFeatures,Description=Publishing Product Features,Template=Feature: [1])
  667. MSI (s) (00:C4) [13:10:35:839]: Executing op: FeaturePublish(Feature=VCRedist,,Absent=2,Component=@]qDYt,uK7W@xTK}UAZQaoe[s)b9Z7%3izG4qOc3)
  668. MSI (s) (00:C4) [13:10:35:840]: Executing op: FeaturePublish(Feature=LSPFeature,,Absent=2,Component=S2y})M7@dCy{oQ.Ie%o9)
  669. MSI (s) (00:C4) [13:10:35:840]: Executing op: FeaturePublish(Feature=WFPFeature,,Absent=2,Component=S2y})M7@dCy{oQ.Ie%o9)
  670. MSI (s) (00:C4) [13:10:35:841]: Executing op: FeaturePublish(Feature=MainProductFeature,,Absent=2,Component=FlW$%TfNQAT@lk3)%=(=@78G1$dNnBGH'Vriu*BJq(_.8OQ_F=d@0n?$}DrYcNS[G(5lkDpY5q^(4WGfvEs2QL@I[EVk*8G9,O0K**aUs'dDvCSZGxFhPNORu96)B,sfnBOR%Hr7uni()
  671. MSI (s) (00:C4) [13:10:35:841]: Executing op: ActionStart(Name=PublishProduct,Description=Publishing product information,)
  672. MSI (s) (00:C4) [13:10:35:841]: Executing op: IconCreate(Icon=icon64.ico,Data=BinaryData)
  673. MSI (s) (00:C4) [13:10:35:844]: Executing op: CleanupConfigData()
  674. MSI (s) (00:C4) [13:10:35:844]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\526AB318AF0B8D84B9579557C9882C91\Patches 3: 2
  675. MSI (s) (00:C4) [13:10:35:844]: Executing op: RegisterPatchOrder(Continue=0,SequenceType=1,Remove=0)
  676. MSI (s) (00:C4) [13:10:35:844]: Note: 1: 1402 2: UNKNOWN\Products\526AB318AF0B8D84B9579557C9882C91\Patches 3: 2
  677. MSI (s) (00:C4) [13:10:35:844]: Executing op: ProductPublish(PackageKey={4CFA2D6A-A3BC-4031-8140-E7038F611ED5})
  678. MSI (s) (00:C4) [13:10:35:844]: Note: 1: 1402 2: UNKNOWN\Installer\Products\526AB318AF0B8D84B9579557C9882C91 3: 2
  679. MSI (s) (00:C4) [13:10:35:844]: Note: 1: 1402 2: UNKNOWN\Installer\Products\526AB318AF0B8D84B9579557C9882C91 3: 2
  680. MSI (s) (00:C4) [13:10:35:844]: Note: 1: 1402 2: UNKNOWN\Installer\Products\526AB318AF0B8D84B9579557C9882C91 3: 2
  681. MSI (s) (00:C4) [13:10:35:844]: Note: 1: 1402 2: UNKNOWN\Installer\Products\526AB318AF0B8D84B9579557C9882C91 3: 2
  682. MSI (s) (00:C4) [13:10:35:844]: Note: 1: 1402 2: UNKNOWN\Installer\Products\526AB318AF0B8D84B9579557C9882C91 3: 2
  683. MSI (s) (00:C4) [13:10:35:844]: Note: 1: 1402 2: UNKNOWN\Installer\Products\526AB318AF0B8D84B9579557C9882C91 3: 2
  684. MSI (s) (00:C4) [13:10:35:844]: Note: 1: 1402 2: UNKNOWN\Installer\Products\526AB318AF0B8D84B9579557C9882C91 3: 2
  685. MSI (s) (00:C4) [13:10:35:844]: Note: 1: 1402 2: UNKNOWN\Installer\Products\526AB318AF0B8D84B9579557C9882C91 3: 2
  686. MSI (s) (00:C4) [13:10:35:844]: Note: 1: 1402 2: UNKNOWN\Installer\Products\526AB318AF0B8D84B9579557C9882C91 3: 2
  687. MSI (s) (00:C4) [13:10:35:844]: Note: 1: 1402 2: UNKNOWN\Installer\Products\526AB318AF0B8D84B9579557C9882C91 3: 2
  688. MSI (s) (00:C4) [13:10:35:844]: Note: 1: 1402 2: UNKNOWN\Installer\Products\526AB318AF0B8D84B9579557C9882C91 3: 2
  689. MSI (s) (00:C4) [13:10:35:845]: Executing op: UpgradeCodePublish(UpgradeCode={E6E9C226-F485-4899-A295-EBCA87F57AC9})
  690. MSI (s) (00:C4) [13:10:35:845]: Executing op: SourceListPublish(,,,,NumberOfDisks=1)
  691. MSI (s) (00:C4) [13:10:35:845]: Note: 1: 1402 2: UNKNOWN\Installer\Products\526AB318AF0B8D84B9579557C9882C91\SourceList 3: 2
  692. MSI (s) (00:C4) [13:10:35:845]: Executing op: ProductPublishClient(,,)
  693. MSI (s) (00:C4) [13:10:35:845]: Executing op: SourceListRegisterLastUsed(SourceProduct={813BA625-B0FA-48D8-9B75-59759C88C219},LastUsedSource=c:\\temp\\)
  694. MSI (s) (00:C4) [13:10:35:845]: Entering CMsiConfigurationManager::SetLastUsedSource.
  695. MSI (s) (00:C4) [13:10:35:845]: Specifed source is not already in a list.
  696. MSI (s) (00:C4) [13:10:35:845]: User policy value 'SearchOrder' is 'nmu'
  697. MSI (s) (00:C4) [13:10:35:845]: Adding new sources is allowed.
  698. MSI (s) (00:C4) [13:10:35:845]: Added new source 'c:\\temp\\' with index '2'
  699. MSI (s) (00:C4) [13:10:35:845]: Set LastUsedSource to: c:\temp\.
  700. MSI (s) (00:C4) [13:10:35:845]: Set LastUsedType to: n.
  701. MSI (s) (00:C4) [13:10:35:845]: Set LastUsedIndex to: 2.
  702. MSI (s) (00:C4) [13:10:35:846]: Executing op: ActionStart(Name=SendStatusInstalled,,)
  703. MSI (s) (00:C4) [13:10:35:846]: Executing op: CustomActionSchedule(Action=SendStatusInstalled,ActionType=3089,Source=c:\Program Files\RrFilter\Installbat64.dll,Target=SendStatus,CustomActionData=UserGUID:B1BBED3A-DF83-660D-242A-71A07A8248C3 SourceGUID:BF00AFC1-57C7-4E4F-BAB9-3AE016389CBE StatusCode:3)
  704. MSI (s) (00:E4) [13:10:35:846]: Invoking remote custom action. DLL: c:\Program Files\RrFilter\Installbat64.dll, Entrypoint: SendStatus
  705. SendStatus: Initialized.
  706. SendStatus: Custom Action Data = 'UserGUID:B1BBED3A-DF83-660D-242A-71A07A8248C3 SourceGUID:BF00AFC1-57C7-4E4F-BAB9-3AE016389CBE StatusCode:3'.
  707. SendStatus: In SendStatus, calling SendStatusCode.
  708. SendStatus: In SendStatusCode.
  709. SendStatus: Getting parameters
  710. SendStatus: argc = 3
  711. SendStatus: i = 0, argv=UserGUID:B1BBED3A-DF83-660D-242A-71A07A8248C3
  712. SendStatus: UserGUID = B1BBED3A-DF83-660D-242A-71A07A8248C3
  713. SendStatus: i = 1, argv=SourceGUID:BF00AFC1-57C7-4E4F-BAB9-3AE016389CBE
  714. SendStatus: SourceGUID = BF00AFC1-57C7-4E4F-BAB9-3AE016389CBE
  715. SendStatus: i = 2, argv=StatusCode:3
  716. SendStatus: StatusCode label found
  717. SendStatus: StatusCode: 3
  718. SendStatus: StatusCode = 3
  719. SendStatus: In SendCode.
  720. SendStatus: WinHttpClient URL = ?u=B1BBED3A-DF83-660D-242A-71A07A8248C3&s=BF00AFC1-57C7-4E4F-BAB9-3AE016389CBE&a=3.
  721. SendStatus: In SendCode, set additional data: ?u=B1BBED3A-DF83-660D-242A-71A07A8248C3&s=BF00AFC1-57C7-4E4F-BAB9-3AE016389CBE&a=3, 82 chars
  722. SendStatus: In SendCode, sending post request.
  723. SendStatus: In SendHttpRequest
  724. SendStatus: In SendHttpRequest, should have valid session handle now
  725. SendStatus: In SendHttpRequest, called WinHttpSetTimeouts
  726. SendStatus: In SendHttpRequest, called WinHttpCrackUrl
  727. SendStatus: In SendHttpRequest, called WinHttpConnect
  728. SendStatus: In SendHttpRequest, called WinHttpOpenRequest
  729. SendStatus: In SendHttpRequest, called WinHttpAddRequestHeaders
  730. SendStatus: In SendHttpRequest, called WinHttpSendRequest
  731. SendStatus: bSendRequestSucceed=1
  732. SendStatus: m_pDataToSend != NULL
  733. SendStatus: Calling WinHttpWriteData, hRequest=56901024, m_pDataToSend=?u=B1BBED3A-DF83-660D-242A-71A07A8248C3&s=BF00AFC1-57C7-4E4F-BAB9-3AE016389CBE&a=3H
  734. , m_dataToSendSize=82
  735. SendStatus: Called WinHttpWriteData, hRequest=56901024, m_pDataToSend=?u=B1BBED3A-DF83-660D-242A-71A07A8248C3&s=BF00AFC1-57C7-4E4F-BAB9-3AE016389CBE&a=3H
  736. , m_dataToSendSize=82, dwWritten=82
  737. SendStatus: In SendHttpRequest, calling WinHttpReceiveResponse
  738. SendStatus: In SendHttpRequest, called WinHttpReceiveResponse
  739. SendStatus: In SendHttpRequest, called WinHttpQueryHeaders
  740. SendStatus: SendHttpRequest WinHttpQueryHeaders failed with error 122: The data area passed to a system call is too small.
  741.  
  742. SendStatus: In SendHttpRequest, called WinHttpQueryHeaders
  743. SendStatus: In SendHttpRequest, called WinHttpQueryHeaders
  744. SendStatus: In SendHttpRequest, called WinHttpQueryHeaders
  745. SendStatus: In SendHttpRequest, called WinHttpQueryDataAvailable
  746. SendStatus: In SendHttpRequest, called WinHttpReadData
  747. SendStatus: Completed SendHttpRequest
  748. SendStatus: In SendCode, sent post request.
  749. SendStatus: In SendCode, SendHttpRequest success
  750. SendStatus: In SendCode, httpResponseHeader begin
  751. SendStatus: HTTP/1.1 200 OK
  752. Cache-Control: no-cache
  753. Connection: keep-alive
  754. Date: Thu, 22 May 2014 19:10:24 GMT
  755. Content-Length: 0
  756. Content-Type: text/plain
  757. Expires: Thu, 22 May 2014 19:10:23 GMT
  758. Server: nginx
  759.  
  760.  
  761. SendStatus: In SendCode, httpResponseHeader end
  762. SendStatus: In SendCode, httpResponseContent begin
  763. SendStatus:
  764. MSI (s) (00:C4) [13:10:36:082]: Executing op: End(Checksum=0,ProgressTotalHDWord=0,ProgressTotalLDWord=5746407)
  765. SendStatus: In SendCode, httpResponseContent end
  766. MSI (s) (00:C4) [13:10:36:086]: Note: 1: 2265 2: 3: -2147287035
  767. MSI (s) (00:C4) [13:10:36:086]: User policy value 'DisableRollback' is 0
  768. MSI (s) (00:C4) [13:10:36:086]: Machine policy value 'DisableRollback' is 0
  769. MSI (s) (00:C4) [13:10:36:088]: Note: 1: 2265 2: 3: -2147287035
  770. MSI (s) (00:C4) [13:10:36:090]: Note: 1: 2318 2:
  771. MSI (s) (00:C4) [13:10:36:091]: No System Restore sequence number for this installation.
  772. MSI (s) (00:C4) [13:10:36:091]: Unlocking Server
  773. MSI (s) (00:C4) [13:10:36:097]: PROPERTY CHANGE: Deleting UpdateStarted property. Its current value is '1'.
  774. Action ended 13:10:36: InstallFinalize. Return value 1.
  775. Action ended 13:10:36: INSTALL. Return value 1.
  776. Property(S): UpgradeCode = {E6E9C226-F485-4899-A295-EBCA87F57AC9}
  777. Property(S): DriversFolder = c:\WINDOWS\system32\drivers\
  778. Property(S): INSTALLDIR = c:\Program Files\RrFilter\
  779. Property(S): SetStatusInstalled = UserGUID:B1BBED3A-DF83-660D-242A-71A07A8248C3 SourceGUID:BF00AFC1-57C7-4E4F-BAB9-3AE016389CBE StatusCode:3
  780. Property(S): AddRegistrySettings64 = Url:http://d.quikcdn.com/xuiow/ UserGUID:B1BBED3A-DF83-660D-242A-71A07A8248C3 SourceGUID:BF00AFC1-57C7-4E4F-BAB9-3AE016389CBE LogVerbose:
  781. Property(S): QtExecNFRegDrvexeRun64 = "c:\Program Files\RrFilter\nfregdrv.exe" netfilter64
  782. Property(S): QtExecServiceInstallRun64 = "c:\Program Files\RrFilter\RrFilterService64.exe" install
  783. Property(S): SendStatusInstalled = UserGUID:B1BBED3A-DF83-660D-242A-71A07A8248C3 SourceGUID:BF00AFC1-57C7-4E4F-BAB9-3AE016389CBE StatusCode:3
  784. Property(S): TARGETDIR = c:\Program Files\RrFilter\
  785. Property(S): System64Folder = c:\WINDOWS\system32\
  786. Property(S): ProgramFiles64Folder = c:\Program Files\
  787. Property(S): SourceDir = c:\\temp\\
  788. Property(S): VersionNT = 602
  789. Property(S): ALLUSERS = 1
  790. Property(S): URL = http://d.quikcdn.com/xuiow/
  791. Property(S): STATUSCODE = 6
  792. Property(S): USERGUID = B1BBED3A-DF83-660D-242A-71A07A8248C3
  793. Property(S): SOURCEGUID = BF00AFC1-57C7-4E4F-BAB9-3AE016389CBE
  794. Property(S): Manufacturer = RrFilter
  795. Property(S): ProductCode = {813BA625-B0FA-48D8-9B75-59759C88C219}
  796. Property(S): ProductLanguage = 1033
  797. Property(S): ProductName = RrFilter
  798. Property(S): ProductVersion = 1.0.0.0
  799. Property(S): ARPSYSTEMCOMPONENT = 1
  800. Property(S): ARPPRODUCTICON = icon64.ico
  801. Property(S): ARPNOREPAIR = yes
  802. Property(S): ARPNOMODIFY = yes
  803. Property(S): ARPHELPLINK = http://www.rrsavings.com/
  804. Property(S): SecureCustomProperties = ARPNOMODIFY;ARPNOREPAIR;SOURCEGUID;STATUSCODE;URL;USERGUID;VCREDIST10INSTALLED;WIX_DOWNGRADE_DETECTED;WIX_UPGRADE_DETECTED
  805. Property(S): WixPdbPath = C:\Installer\Installer\NetFilterSDK\InstallNetFilter\bin\Release\RrFilter64.wixpdb
  806. Property(S): WindowsFolder_x86_VC.1DEE2A86_2F57_3629_8107_A71DBB4DBED2 = c:\WINDOWS\
  807. Property(S): SystemFolder_x86_VC.1DEE2A86_2F57_3629_8107_A71DBB4DBED2 = c:\WINDOWS\SysWOW64\
  808. Property(S): DirectoryTable100_x86.1DEE2A86_2F57_3629_8107_A71DBB4DBED2 = DirectoryTable
  809. Property(S): MsiLogFileLocation = c:\\temp\\lsp2.txt
  810. Property(S): PackageCode = {4CFA2D6A-A3BC-4031-8140-E7038F611ED5}
  811. Property(S): ProductState = -1
  812. Property(S): PackagecodeChanging = 1
  813. Property(S): RestrictedUserControl = 1
  814. Property(S): CURRENTDIRECTORY = C:\WINDOWS\system32
  815. Property(S): CLIENTUILEVEL = 3
  816. Property(S): CLIENTPROCESSID = 4424
  817. Property(S): MsiSystemRebootPending = 1
  818. Property(S): VersionDatabase = 300
  819. Property(S): VersionMsi = 5.00
  820. Property(S): VersionNT64 = 602
  821. Property(S): WindowsBuild = 9200
  822. Property(S): ServicePackLevel = 0
  823. Property(S): ServicePackLevelMinor = 0
  824. Property(S): MsiNTProductType = 1
  825. Property(S): MsiNTSuitePersonal = 1
  826. Property(S): WindowsFolder = c:\WINDOWS\
  827. Property(S): WindowsVolume = c:\
  828. Property(S): SystemFolder = c:\WINDOWS\SysWOW64\
  829. Property(S): RemoteAdminTS = 1
  830. Property(S): TempFolder = C:\Users\Oscar\AppData\Local\Temp\
  831. Property(S): ProgramFilesFolder = C:\Program Files (x86)\
  832. Property(S): CommonFilesFolder = C:\Program Files (x86)\Common Files\
  833. Property(S): CommonFiles64Folder = C:\Program Files\Common Files\
  834. Property(S): AppDataFolder = C:\Users\Oscar\AppData\Roaming\
  835. Property(S): FavoritesFolder = C:\Users\Oscar\Favorites\
  836. Property(S): NetHoodFolder = C:\Users\Oscar\AppData\Roaming\Microsoft\Windows\Network Shortcuts\
  837. Property(S): PersonalFolder = C:\Users\Oscar\Documents\
  838. Property(S): PrintHoodFolder = C:\Users\Oscar\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\
  839. Property(S): RecentFolder = C:\Users\Oscar\AppData\Roaming\Microsoft\Windows\Recent\
  840. Property(S): SendToFolder = C:\Users\Oscar\AppData\Roaming\Microsoft\Windows\SendTo\
  841. Property(S): TemplateFolder = C:\ProgramData\Microsoft\Windows\Templates\
  842. Property(S): CommonAppDataFolder = C:\ProgramData\
  843. Property(S): LocalAppDataFolder = C:\Users\Oscar\AppData\Local\
  844. Property(S): MyPicturesFolder = C:\Users\Oscar\Pictures\
  845. Property(S): AdminToolsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\
  846. Property(S): StartupFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
  847. Property(S): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
  848. Property(S): StartMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\
  849. Property(S): DesktopFolder = C:\Users\Public\Desktop\
  850. Property(S): FontsFolder = C:\WINDOWS\Fonts\
  851. Property(S): GPTSupport = 1
  852. Property(S): OLEAdvtSupport = 1
  853. Property(S): ShellAdvtSupport = 1
  854. Property(S): MsiAMD64 = 6
  855. Property(S): Msix64 = 6
  856. Property(S): Intel = 6
  857. Property(S): PhysicalMemory = 16335
  858. Property(S): VirtualMemory = 19112
  859. Property(S): LogonUser = Oscar
  860. Property(S): UserSID = S-1-5-21-1518187722-1024825894-3162153109-1001
  861. Property(S): UserLanguageID = 2057
  862. Property(S): ComputerName = OSCAR
  863. Property(S): SystemLanguageID = 1033
  864. Property(S): ScreenX = 1024
  865. Property(S): ScreenY = 768
  866. Property(S): CaptionHeight = 23
  867. Property(S): BorderTop = 1
  868. Property(S): BorderSide = 1
  869. Property(S): TextHeight = 16
  870. Property(S): TextInternalLeading = 3
  871. Property(S): ColorBits = 32
  872. Property(S): TTCSupport = 1
  873. Property(S): Time = 13:10:36
  874. Property(S): Date = 5/22/2014
  875. Property(S): MsiNetAssemblySupport = 4.0.30319.17929
  876. Property(S): MsiWin32AssemblySupport = 6.2.9200.16384
  877. Property(S): RedirectedDllSupport = 2
  878. Property(S): MsiRunningElevated = 1
  879. Property(S): Privileged = 1
  880. Property(S): USERNAME = Windows User
  881. Property(S): DATABASE = c:\WINDOWS\Installer\3d2fe1.msi
  882. Property(S): OriginalDatabase = c:\\temp\\InstallFilter64.msi
  883. Property(S): UILevel = 2
  884. Property(S): ACTION = INSTALL
  885. Property(S): ROOTDRIVE = D:\
  886. Property(S): CostingComplete = 1
  887. Property(S): OutOfDiskSpace = 0
  888. Property(S): OutOfNoRbDiskSpace = 0
  889. Property(S): PrimaryVolumeSpaceAvailable = 0
  890. Property(S): PrimaryVolumeSpaceRequired = 0
  891. Property(S): PrimaryVolumeSpaceRemaining = 0
  892. Property(S): INSTALLLEVEL = 1
  893. Property(S): SOURCEDIR = c:\\temp\\
  894. Property(S): SourcedirProduct = {813BA625-B0FA-48D8-9B75-59759C88C219}
  895. Property(S): ProductToBeRegistered = 1
  896. === Logging stopped: 22/05/2014 13:10:36 ===
  897. MSI (s) (00:C4) [13:10:36:103]: Note: 1: 1707
  898. MSI (s) (00:C4) [13:10:36:103]: Note: 1: 2205 2: 3: Error
  899. MSI (s) (00:C4) [13:10:36:103]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1707
  900. MSI (s) (00:C4) [13:10:36:103]: Note: 1: 2205 2: 3: Error
  901. MSI (s) (00:C4) [13:10:36:103]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1709
  902. MSI (s) (00:C4) [13:10:36:103]: Product: RrFilter -- Installation completed successfully.
  903.  
  904. MSI (s) (00:C4) [13:10:36:104]: Windows Installer installed the product. Product Name: RrFilter. Product Version: 1.0.0.0. Product Language: 1033. Manufacturer: RrFilter. Installation success or error status: 0.
  905.  
  906. MSI (s) (00:C4) [13:10:36:105]: Deferring clean up of packages/files, if any exist
  907. MSI (s) (00:C4) [13:10:36:105]: MainEngineThread is returning 0
  908. MSI (s) (00:74) [13:10:36:106]: RESTART MANAGER: Session closed.
  909. MSI (s) (00:74) [13:10:36:106]: No System Restore sequence number for this installation.
  910. MSI (s) (00:74) [13:10:36:112]: User policy value 'DisableRollback' is 0
  911. MSI (s) (00:74) [13:10:36:112]: Machine policy value 'DisableRollback' is 0
  912. MSI (s) (00:74) [13:10:36:112]: Incrementing counter to disable shutdown. Counter after increment: 0
  913. MSI (s) (00:74) [13:10:36:112]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
  914. MSI (s) (00:74) [13:10:36:113]: Note: 1: 2265 2: 3: -2147287035
  915. MSI (s) (00:74) [13:10:36:113]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
  916. MSI (s) (00:74) [13:10:36:113]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
  917. MSI (s) (00:74) [13:10:36:114]: Destroying RemoteAPI object.
  918. MSI (s) (00:84) [13:10:36:114]: Custom Action Manager thread ending.
  919. MSI (c) (48:F0) [13:10:36:115]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
  920. MSI (c) (48:F0) [13:10:36:115]: MainEngineThread is returning 0
  921. === Verbose logging stopped: 22/05/2014 13:10:36 ===
  922.  
  923.  
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!