WriteRegistryValues: Key: \Software\Fortinet\FortiClient\FA_SSOMA, Name: , Value: MSI (s) (C8:74) [13:44:31:805]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_Scheduler\000021,,BinaryType=0,,) MSI (s) (C8:74) [13:44:31:805]: Executing op: RegAddValue(Name=apptype,Value=#25,) WriteRegistryValues: Key: \Software\Fortinet\FortiClient\FA_Scheduler\000021, Name: apptype, Value: #25 MSI (s) (C8:74) [13:44:31:805]: Executing op: RegAddValue(Name=enabled,Value=#1,) WriteRegistryValues: Key: \Software\Fortinet\FortiClient\FA_Scheduler\000021, Name: enabled, Value: #1 MSI (s) (C8:74) [13:44:31:815]: Executing op: RegAddValue(Name=status,Value=#0,) WriteRegistryValues: Key: \Software\Fortinet\FortiClient\FA_Scheduler\000021, Name: status, Value: #0 MSI (s) (C8:74) [13:44:31:815]: Executing op: RegAddValue(Name=stop_flag,Value=#0,) WriteRegistryValues: Key: \Software\Fortinet\FortiClient\FA_Scheduler\000021, Name: stop_flag, Value: #0 MSI (s) (C8:74) [13:44:31:815]: Executing op: RegAddValue(Name=type,Value=#9,) WriteRegistryValues: Key: \Software\Fortinet\FortiClient\FA_Scheduler\000021, Name: type, Value: #9 MSI (s) (C8:74) [13:44:31:815]: Executing op: RegAddValue(Name=cmd,Value=FSSOMA.exe,) WriteRegistryValues: Key: \Software\Fortinet\FortiClient\FA_Scheduler\000021, Name: cmd, Value: FSSOMA.exe MSI (s) (C8:74) [13:44:31:825]: Executing op: RegAddValue(Name=param,,) WriteRegistryValues: Key: \Software\Fortinet\FortiClient\FA_Scheduler\000021, Name: param, Value: MSI (s) (C8:74) [13:44:31:825]: Executing op: RegCreateKey() WriteRegistryValues: Key: \Software\Fortinet\FortiClient\FA_Scheduler\000021, Name: , Value: MSI (s) (C8:74) [13:44:31:825]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_FW,,BinaryType=0,,) MSI (s) (C8:74) [13:44:31:825]: Executing op: RegAddValue(Name=installed,Value=#1,) WriteRegistryValues: Key: \Software\Fortinet\FortiClient\FA_FW, Name: installed, Value: #1 MSI (s) (C8:74) [13:44:31:825]: Executing op: RegAddValue(Name=enabled,Value=#1,) WriteRegistryValues: Key: \Software\Fortinet\FortiClient\FA_FW, Name: enabled, Value: #1 MSI (s) (C8:74) [13:44:31:835]: Executing op: RegAddValue(Name=logenabled,Value=#1,) WriteRegistryValues: Key: \Software\Fortinet\FortiClient\FA_FW, Name: logenabled, Value: #1 MSI (s) (C8:74) [13:44:31:835]: Executing op: RegAddValue(Name=loglevel,Value=#6,) WriteRegistryValues: Key: \Software\Fortinet\FortiClient\FA_FW, Name: loglevel, Value: #6 MSI (s) (C8:74) [13:44:31:845]: Executing op: RegCreateKey() WriteRegistryValues: Key: \Software\Fortinet\FortiClient\FA_FW, Name: , Value: MSI (s) (C8:74) [13:44:31:845]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_Scheduler\000007,,BinaryType=0,,) MSI (s) (C8:74) [13:44:31:845]: Executing op: RegAddValue(Name=apptype,Value=#10,) WriteRegistryValues: Key: \Software\Fortinet\FortiClient\FA_Scheduler\000007, Name: apptype, Value: #10 MSI (s) (C8:74) [13:44:31:845]: Executing op: RegAddValue(Name=enabled,Value=#1,) WriteRegistryValues: Key: \Software\Fortinet\FortiClient\FA_Scheduler\000007, Name: enabled, Value: #1 MSI (s) (C8:74) [13:44:31:855]: Executing op: RegAddValue(Name=status,Value=#0,) WriteRegistryValues: Key: \Software\Fortinet\FortiClient\FA_Scheduler\000007, Name: status, Value: #0 MSI (s) (C8:74) [13:44:31:855]: Executing op: RegAddValue(Name=stop_flag,Value=#0,) WriteRegistryValues: Key: \Software\Fortinet\FortiClient\FA_Scheduler\000007, Name: stop_flag, Value: #0 MSI (s) (C8:74) [13:44:31:855]: Executing op: RegAddValue(Name=type,Value=#9,) WriteRegistryValues: Key: \Software\Fortinet\FortiClient\FA_Scheduler\000007, Name: type, Value: #9 MSI (s) (C8:74) [13:44:31:865]: Executing op: RegAddValue(Name=param,,) WriteRegistryValues: Key: \Software\Fortinet\FortiClient\FA_Scheduler\000007, Name: param, Value: MSI (s) (C8:74) [13:44:31:865]: Executing op: RegAddValue(Name=cmd,Value=fortifws.exe,) WriteRegistryValues: Key: \Software\Fortinet\FortiClient\FA_Scheduler\000007, Name: cmd, Value: fortifws.exe MSI (s) (C8:74) [13:44:31:865]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_VULN,,BinaryType=0,,) MSI (s) (C8:74) [13:44:31:865]: Executing op: RegAddValue(Name=installed,Value=#1,) WriteRegistryValues: Key: \Software\Fortinet\FortiClient\FA_VULN, Name: installed, Value: #1 MSI (s) (C8:74) [13:44:31:865]: Executing op: RegAddValue(Name=enabled,Value=#1,) WriteRegistryValues: Key: \Software\Fortinet\FortiClient\FA_VULN, Name: enabled, Value: #1 MSI (s) (C8:74) [13:44:31:875]: Executing op: RegAddValue(Name=logenabled,Value=#1,) WriteRegistryValues: Key: \Software\Fortinet\FortiClient\FA_VULN, Name: logenabled, Value: #1 MSI (s) (C8:74) [13:44:31:875]: Executing op: RegAddValue(Name=loglevel,Value=#6,) WriteRegistryValues: Key: \Software\Fortinet\FortiClient\FA_VULN, Name: loglevel, Value: #6 MSI (s) (C8:74) [13:44:31:885]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_Scheduler\000020,,BinaryType=0,,) MSI (s) (C8:74) [13:44:31:885]: Executing op: RegAddValue(Name=apptype,Value=#24,) WriteRegistryValues: Key: \Software\Fortinet\FortiClient\FA_Scheduler\000020, Name: apptype, Value: #24 MSI (s) (C8:74) [13:44:31:885]: Executing op: RegAddValue(Name=enabled,Value=#0,) WriteRegistryValues: Key: \Software\Fortinet\FortiClient\FA_Scheduler\000020, Name: enabled, Value: #0 MSI (s) (C8:74) [13:44:31:885]: Executing op: RegAddValue(Name=status,Value=#0,) WriteRegistryValues: Key: \Software\Fortinet\FortiClient\FA_Scheduler\000020, Name: status, Value: #0 MSI (s) (C8:74) [13:44:31:895]: Executing op: RegAddValue(Name=stop_flag,Value=#0,) WriteRegistryValues: Key: \Software\Fortinet\FortiClient\FA_Scheduler\000020, Name: stop_flag, Value: #0 MSI (s) (C8:74) [13:44:31:895]: Executing op: RegAddValue(Name=type,Value=#2,) WriteRegistryValues: Key: \Software\Fortinet\FortiClient\FA_Scheduler\000020, Name: type, Value: #2 MSI (s) (C8:74) [13:44:31:895]: Executing op: RegAddValue(Name=cmd,Value=FCVbltScan.exe,) WriteRegistryValues: Key: \Software\Fortinet\FortiClient\FA_Scheduler\000020, Name: cmd, Value: FCVbltScan.exe MSI (s) (C8:74) [13:44:31:895]: Executing op: RegAddValue(Name=param,,) WriteRegistryValues: Key: \Software\Fortinet\FortiClient\FA_Scheduler\000020, Name: param, Value: MSI (s) (C8:74) [13:44:31:905]: Executing op: RegOpenKey(,Key=CLSID\{AC7DD106-EAB6-4b41-AC4F-D52FD62A82C7},,BinaryType=1,,) MSI (s) (C8:74) [13:44:31:905]: Executing op: RegAddValue(,Value=FortiCredentialProvider,) WriteRegistryValues: Key: \Software\Classes\CLSID\{AC7DD106-EAB6-4b41-AC4F-D52FD62A82C7}, Name: , Value: FortiCredentialProvider MSI (s) (C8:74) [13:44:31:905]: Executing op: RegCreateKey() WriteRegistryValues: Key: \Software\Classes\CLSID\{AC7DD106-EAB6-4b41-AC4F-D52FD62A82C7}, Name: , Value: MSI (s) (C8:74) [13:44:31:905]: Executing op: RegOpenKey(,Key=CLSID\{AC7DD106-EAB6-4b41-AC4F-D52FD62A82C7}\InprocServer32,,BinaryType=1,,) MSI (s) (C8:74) [13:44:31:905]: Executing op: RegAddValue(,Value=C:\Program Files (x86)\Fortinet\FortiClient\forticredentialprovider64.dll,) WriteRegistryValues: Key: \Software\Classes\CLSID\{AC7DD106-EAB6-4b41-AC4F-D52FD62A82C7}\InprocServer32, Name: , Value: C:\Program Files (x86)\Fortinet\FortiClient\forticredentialprovider64.dll MSI (s) (C8:74) [13:44:31:915]: Executing op: RegAddValue(Name=ThreadingModel,Value=Apartment,) WriteRegistryValues: Key: \Software\Classes\CLSID\{AC7DD106-EAB6-4b41-AC4F-D52FD62A82C7}\InprocServer32, Name: ThreadingModel, Value: Apartment MSI (s) (C8:74) [13:44:31:925]: Executing op: RegOpenKey(Root=-2147483647,Key=Software\Fortinet\FortiClient,,BinaryType=1,,) MSI (s) (C8:74) [13:44:31:925]: Executing op: RegAddValue(Name=installed,Value=#1,) WriteRegistryValues: Key: \Software\Fortinet\FortiClient, Name: installed, Value: #1 MSI (s) (C8:74) [13:44:31:925]: Executing op: RegAddValue(Name=installed,Value=#1,) WriteRegistryValues: Key: \Software\Fortinet\FortiClient, Name: installed, Value: #1 MSI (s) (C8:74) [13:44:31:925]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\{AC7DD106-EAB6-4b41-AC4F-D52FD62A82C7},,BinaryType=1,,) MSI (s) (C8:74) [13:44:31:925]: Executing op: RegAddValue(,Value=FortiCredentialProvider,) WriteRegistryValues: Key: \SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\{AC7DD106-EAB6-4b41-AC4F-D52FD62A82C7}, Name: , Value: FortiCredentialProvider MSI (s) (C8:74) [13:44:31:935]: Executing op: RegCreateKey() WriteRegistryValues: Key: \SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\{AC7DD106-EAB6-4b41-AC4F-D52FD62A82C7}, Name: , Value: MSI (s) (C8:74) [13:44:31:935]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Provider Filters\{AC7DD106-EAB6-4b41-AC4F-D52FD62A82C7},,BinaryType=1,,) MSI (s) (C8:74) [13:44:31:935]: Executing op: RegAddValue(,Value=FortiCredentialProvider,) WriteRegistryValues: Key: \SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Provider Filters\{AC7DD106-EAB6-4b41-AC4F-D52FD62A82C7}, Name: , Value: FortiCredentialProvider MSI (s) (C8:74) [13:44:31:935]: Executing op: RegCreateKey() WriteRegistryValues: Key: \SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Provider Filters\{AC7DD106-EAB6-4b41-AC4F-D52FD62A82C7}, Name: , Value: MSI (s) (C8:74) [13:44:31:935]: Executing op: ActionStart(Name=RegisterTypeLibraries,Description=Registering type libraries,Template=LibID: [1]) Action 13:44:31: RegisterTypeLibraries. Registering type libraries MSI (s) (C8:74) [13:44:31:945]: Executing op: TypeLibraryRegister(,,FilePath=C:\Program Files (x86)\Fortinet\FortiClient\forticontrol.dll,LibID={2FC33C7C-ACAB-4733-8C02-CEE2FF8AFD32},,,Language=0,,BinaryType=0,IgnoreRegistrationFailure=0,) RegisterTypeLibraries: LibID: {2FC33C7C-ACAB-4733-8C02-CEE2FF8AFD32} MSI (s) (C8:74) [13:44:31:945]: QueryPathOfRegTypeLib returned -2147319779 in remote context. Path is '' MSI (s) (C8:74) [13:44:31:965]: CMsiServices::ProcessTypeLibrary runs in remote context, not impersonated. MSI (s) (C8:74) [13:44:32:005]: Executing op: TypeLibraryRegister(,,FilePath=C:\Program Files (x86)\Fortinet\FortiClient\SslvpnHostCheck.dll,LibID={5F14603F-2FC5-47D5-BDE2-7693DC34E37A},,,Language=0,,BinaryType=0,IgnoreRegistrationFailure=0,) RegisterTypeLibraries: LibID: {5F14603F-2FC5-47D5-BDE2-7693DC34E37A} MSI (s) (C8:74) [13:44:32:005]: QueryPathOfRegTypeLib returned -2147319779 in remote context. Path is '' MSI (s) (C8:74) [13:44:32:025]: CMsiServices::ProcessTypeLibrary runs in remote context, not impersonated. MSI (s) (C8:74) [13:44:32:035]: Executing op: TypeLibraryRegister(,,FilePath=C:\Program Files (x86)\Fortinet\FortiClient\forticachecleaner.dll,LibID={2897EECE-8996-418B-A0D9-C638FBD221CE},,,Language=0,,BinaryType=0,IgnoreRegistrationFailure=0,) RegisterTypeLibraries: LibID: {2897EECE-8996-418B-A0D9-C638FBD221CE} MSI (s) (C8:74) [13:44:32:045]: QueryPathOfRegTypeLib returned -2147319779 in remote context. Path is '' MSI (s) (C8:74) [13:44:32:045]: CMsiServices::ProcessTypeLibrary runs in remote context, not impersonated. MSI (s) (C8:74) [13:44:32:055]: Executing op: ActionStart(Name=MSI_installdriver,,) Action 13:44:32: MSI_installdriver. MSI (s) (C8:74) [13:44:32:055]: Executing op: CustomActionSchedule(Action=MSI_installdriver,ActionType=3137,Source=BinaryData,Target=MSI_installdriver,) MSI (s) (C8:74) [13:44:32:055]: Creating MSIHANDLE (285) of type 790536 for thread 4724 MSI (s) (C8:7C) [13:44:32:055]: Invoking remote custom action. DLL: C:\Windows\Installer\MSICA96.tmp, Entrypoint: MSI_installdriver MSI (s) (C8:7C) [13:44:33:155]: Closing MSIHANDLE (285) of type 790536 for thread 4724 MSI (s) (C8:74) [13:44:33:155]: Executing op: ActionStart(Name=InstallServices,Description=Installing new services,Template=Service: [2]) Action 13:44:33: InstallServices. Installing new services MSI (s) (C8:74) [13:44:33:155]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=1300000) MSI (s) (C8:74) [13:44:33:155]: Executing op: ServiceInstall(Name=FA_Scheduler,DisplayName=FortiClient Service Scheduler,ImagePath="C:\Program Files (x86)\Fortinet\FortiClient\scheduler.exe",ServiceType=16,StartType=2,ErrorControl=1,LoadOrderGroup=SchedulerGroup,Dependencies=[~],,,Password=**********,Description=FortiClient Service Scheduler,,) InstallServices: Service: MSI (s) (C8:74) [13:44:33:205]: Executing op: ActionStart(Name=CA_InstallFCTServices_Rollback,,) Action 13:44:33: CA_InstallFCTServices_Rollback. MSI (s) (C8:74) [13:44:33:205]: Executing op: CustomActionSchedule(Action=CA_InstallFCTServices_Rollback,ActionType=3393,Source=BinaryData,Target=MSI_UninstallFCService,CustomActionData=;fortiapd;FortiFW2;fortimon2;Fortips;FortiRdr2;FortiRmon;FortiShield;FortiStat2) MSI (s) (C8:74) [13:44:33:205]: Executing op: ActionStart(Name=CA_InstallFCTServices,,) Action 13:44:33: CA_InstallFCTServices. MSI (s) (C8:74) [13:44:33:205]: Executing op: CustomActionSchedule(Action=CA_InstallFCTServices,ActionType=3073,Source=BinaryData,Target=MSI_InstallFCService,CustomActionData=;fortiapd;FortiFW2;fortimon2;Fortips;FortiRdr2;FortiRmon;FortiShield;FortiStat2) MSI (s) (C8:74) [13:44:33:205]: Creating MSIHANDLE (286) of type 790536 for thread 4724 MSI (s) (C8:34) [13:44:33:215]: Invoking remote custom action. DLL: C:\Windows\Installer\MSICF19.tmp, Entrypoint: MSI_InstallFCService MSI (s) (C8!E0) [13:44:33:215]: Creating MSIHANDLE (287) of type 790531 for thread 3808 1: [13:44:33]: FCSetupWx: MSI_InstallFCService(;fortiapd;FortiFW2;fortimon2;Fortips;FortiRdr2;FortiRmon;FortiShield;FortiStat2) MSI (s) (C8!E0) [13:44:33:225]: Closing MSIHANDLE (287) of type 790531 for thread 3808 MSI (s) (C8!E0) [13:44:33:225]: Creating MSIHANDLE (288) of type 790531 for thread 3808 1: [13:44:33]: FCSetupWx: MSI_InstallFCService, bMajorUpgrade=0 MSI (s) (C8!E0) [13:44:33:225]: Closing MSIHANDLE (288) of type 790531 for thread 3808 MSI (s) (C8!E0) [13:44:33:225]: Creating MSIHANDLE (289) of type 790531 for thread 3808 1: [13:44:33]: FCSetupWx: DriverErrorStatus=0 MSI (s) (C8!E0) [13:44:33:225]: Closing MSIHANDLE (289) of type 790531 for thread 3808 MSI (s) (C8!E0) [13:44:33:225]: Creating MSIHANDLE (290) of type 790531 for thread 3808 1: [13:44:33]: FCSetupWx: MSI_InstallFCService(;fortiapd;FortiFW2;fortimon2;Fortips;FortiRdr2;FortiRmon;FortiShield;FortiStat2) MSI (s) (C8!E0) [13:44:33:235]: Closing MSIHANDLE (290) of type 790531 for thread 3808 MSI (s) (C8!E0) [13:44:33:235]: Creating MSIHANDLE (291) of type 790531 for thread 3808 1: [13:44:33]: FCSetupWx: unknown service: MSI (s) (C8!E0) [13:44:33:235]: Closing MSIHANDLE (291) of type 790531 for thread 3808 MSI (s) (C8!E0) [13:44:33:245]: Creating MSIHANDLE (292) of type 790531 for thread 3808 1: [13:44:33]: FCSetupWx: service was successfully installed: fortiapd MSI (s) (C8!E0) [13:44:33:245]: Closing MSIHANDLE (292) of type 790531 for thread 3808 MSI (s) (C8!E0) [13:44:33:265]: Creating MSIHANDLE (293) of type 790531 for thread 3808 1: [13:44:33]: FCSetupWx: service was successfully installed: FortiFW MSI (s) (C8!E0) [13:44:33:275]: Closing MSIHANDLE (293) of type 790531 for thread 3808 MSI (s) (C8!E0) [13:44:33:285]: Creating MSIHANDLE (294) of type 790531 for thread 3808 1: [13:44:33]: FCSetupWx: service was successfully installed: FAFileMon MSI (s) (C8!E0) [13:44:33:285]: Closing MSIHANDLE (294) of type 790531 for thread 3808 MSI (s) (C8!E0) [13:44:33:305]: Creating MSIHANDLE (295) of type 790531 for thread 3808 1: [13:44:33]: FCSetupWx: service was successfully installed: Fortips MSI (s) (C8!E0) [13:44:33:305]: Closing MSIHANDLE (295) of type 790531 for thread 3808 MSI (s) (C8!E0) [13:44:33:315]: Creating MSIHANDLE (296) of type 790531 for thread 3808 1: [13:44:33]: FCSetupWx: service was successfully installed: FortiRdr MSI (s) (C8!E0) [13:44:33:315]: Closing MSIHANDLE (296) of type 790531 for thread 3808 MSI (s) (C8!E0) [13:44:33:335]: Creating MSIHANDLE (297) of type 790531 for thread 3808 1: [13:44:33]: FCSetupWx: service was successfully installed: FARegMon MSI (s) (C8!E0) [13:44:33:335]: Closing MSIHANDLE (297) of type 790531 for thread 3808 MSI (s) (C8!E0) [13:44:33:345]: Creating MSIHANDLE (298) of type 790531 for thread 3808 1: [13:44:33]: FCSetupWx: service was successfully installed: FortiShield MSI (s) (C8!E0) [13:44:33:345]: Closing MSIHANDLE (298) of type 790531 for thread 3808 MSI (s) (C8!E0) [13:44:33:365]: Creating MSIHANDLE (299) of type 790531 for thread 3808 1: [13:44:33]: FCSetupWx: service was successfully installed: FortiStat2 MSI (s) (C8!E0) [13:44:33:365]: Closing MSIHANDLE (299) of type 790531 for thread 3808 MSI (s) (C8!E0) [13:44:33:365]: Creating MSIHANDLE (300) of type 790531 for thread 3808 1: [13:44:33]: FCSetupWx: MSI_InstallFCService(),retval=0, Reboot=0 MSI (s) (C8!E0) [13:44:33:365]: Closing MSIHANDLE (300) of type 790531 for thread 3808 MSI (s) (C8:34) [13:44:33:365]: Closing MSIHANDLE (286) of type 790536 for thread 4724 MSI (s) (C8:74) [13:44:33:365]: Executing op: ActionStart(Name=CA_CreateDefaultAVScan,,) Action 13:44:33: CA_CreateDefaultAVScan. MSI (s) (C8:74) [13:44:33:375]: Executing op: CustomActionSchedule(Action=CA_CreateDefaultAVScan,ActionType=3137,Source=BinaryData,Target=MSI_CreateDefaultAVScan,) MSI (s) (C8:74) [13:44:33:375]: Creating MSIHANDLE (301) of type 790536 for thread 4724 MSI (s) (C8:F8) [13:44:33:375]: Invoking remote custom action. DLL: C:\Windows\Installer\MSICFC6.tmp, Entrypoint: MSI_CreateDefaultAVScan MSI (s) (C8:F8) [13:44:33:395]: Closing MSIHANDLE (301) of type 790536 for thread 4724 MSI (s) (C8:74) [13:44:33:395]: Executing op: ActionStart(Name=CA_PostInstCustomProperty,,) Action 13:44:33: CA_PostInstCustomProperty. MSI (s) (C8:74) [13:44:33:395]: Executing op: CustomActionSchedule(Action=CA_PostInstCustomProperty,ActionType=3137,Source=BinaryData,Target=MSI_PostInstCustomProperty,CustomActionData= INSTALLDIR=C:\Program Files (x86)\Fortinet\FortiClient\;LICENSE_TYPE=premium;LICENSE=;ADMINMODE=;USESWUID=1; FMGRFWBEHAVIOR=; COMPLIANCE_POLICY=;REORDERVNIC=;AV_BEFORE_VPN=; ENABLE_FORTIPROXY=;DISABLEPROXYSELFTEST=; DISABLESWUPDATE=;SWUPDATEREQUIRESADMIN=; UPDATEFAILOVERPORT=;UPDATEFALLBACK=;UILEVEL=5;WANACCDBDIR=; WANACCPROTOCOLS=;FMON=;ALLOW_CO_RTP=;ENABLE_REGMON=; INSTALLFCWIZARDRUNONCE=; WFENABLED=;ANCESTORFOUND=;VPNLITE42FOUND=;HIDETRAY=;NOTRAYFLASH=; WFRATEIP=;WFLOGALLURLS=;DISABLEDEADGATEWAYDETECTION=; UPDATEAFTER=;UPDATEBEFORE=;CUSTOM_NET_LOGS=;IKEVENDORID=;APPCTRLLIMIT=; LANGUAGE=;DISABLEPROXYSELFTESTBALLOON=;LOGLOCALIP=;SHOWBLACKLISTS=; FCTSSLVPNFOUND=;ASUSEIPBLACKLIST=;SOFTWARELOCK=;HTTPSPROXY=;REGISTRATIONKEY=; VPN_BEFORE_LOGON=1;FGTIP=;REDUNDANTFGTIPS=;SILENTREGISTRATION=) MSI (s) (C8:74) [13:44:33:395]: Creating MSIHANDLE (302) of type 790536 for thread 4724 MSI (s) (C8:A4) [13:44:33:395]: Invoking remote custom action. DLL: C:\Windows\Installer\MSICFD6.tmp, Entrypoint: MSI_PostInstCustomProperty MSI (s) (C8!20) [13:44:33:405]: Creating MSIHANDLE (303) of type 790531 for thread 3360 1: [13:44:33]: FCSetupWx: MSI_PostInstCustomProperty( INSTALLDIR=C:\Program Files (x86)\Fortinet\FortiClient\;LICENSE_TYPE=premium;LICENSE=;ADMINMODE=;USESWUID=1; FMGRFWBEHAVIOR=; COMPLIANCE_POLICY=;REORDERVNIC=;AV_BEFORE_VPN=; ENABLE_FORTIPROXY=;DISABLEPROXYSELFTEST=; DISABLESWUPDATE=;SWUPDATEREQUIRESADMIN=; UPDATEFAILOVERPORT=;UPDATEFALLBACK=;UILEVEL=5;WANACCDBDIR=; WANACCPROTOCOLS=;FMON=;ALLOW_CO_RTP=;ENABLE_REGMON=; INSTALLFCWIZARDRUNONCE=; WFENABLED=;ANCESTORFOUND=;VPNLITE42FOUND=;HIDETRAY=;NOTRAYFLASH=; WFRATEIP=;WFLOGALLURLS=;DISABLEDEADGATEWAYDETECTION=; UPDATEAFTER=;UPDATEBEFORE=;CUSTOM_NET_LOGS=;IKEVENDORID=;APPCTRLLIMIT=; LANGUAGE=;DISABLEPROXYSELFTESTBALLOON=;LOGLOCALIP=;SHOWBLACKLISTS=; FCTSSLVPNFOUND=;ASUSEIPBLACKLIST=;SOFTWARELOCK=;HTTPSPROXY=;REGISTRATIONKEY=; VPN_BEFORE_LOGON=1;FGTIP=;REDUNDANTFGTIPS=;SILENTREGISTRATION=) MSI (s) (C8!20) [13:44:33:405]: Closing MSIHANDLE (303) of type 790531 for thread 3360 MSI (s) (C8!20) [13:44:33:405]: Creating MSIHANDLE (304) of type 790531 for thread 3360 1: [13:44:33]: FCSetupWx: CustomPropertyHandler_ADMINMODE() MSI (s) (C8!20) [13:44:33:405]: Closing MSIHANDLE (304) of type 790531 for thread 3360 MSI (s) (C8!20) [13:44:33:405]: Creating MSIHANDLE (305) of type 790531 for thread 3360 1: [13:44:33]: FCSetupWx: CustomPropertyHandler_FCM() MSI (s) (C8!20) [13:44:33:405]: Closing MSIHANDLE (305) of type 790531 for thread 3360 MSI (s) (C8!20) [13:44:33:405]: Creating MSIHANDLE (306) of type 790531 for thread 3360 1: [13:44:33]: FCSetupWx: CustomPropertyHandler_VPN() MSI (s) (C8!20) [13:44:33:415]: Closing MSIHANDLE (306) of type 790531 for thread 3360 MSI (s) (C8!20) [13:44:33:415]: Creating MSIHANDLE (307) of type 790531 for thread 3360 1: [13:44:33]: FCSetupWx: CustomPropertyHandler_PROXY() MSI (s) (C8!20) [13:44:33:415]: Closing MSIHANDLE (307) of type 790531 for thread 3360 MSI (s) (C8!20) [13:44:33:415]: Creating MSIHANDLE (308) of type 790531 for thread 3360 1: [13:44:33]: FCSetupWx: CustomPropertyHandler_UPDATE_TASK() MSI (s) (C8!20) [13:44:33:425]: Closing MSIHANDLE (308) of type 790531 for thread 3360 MSI (s) (C8!20) [13:44:33:425]: Creating MSIHANDLE (309) of type 790531 for thread 3360 1: [13:44:33]: FCSetupWx: CustomPropertyHandler_WANACC() MSI (s) (C8!20) [13:44:33:425]: Closing MSIHANDLE (309) of type 790531 for thread 3360 MSI (s) (C8!20) [13:44:33:425]: Creating MSIHANDLE (310) of type 790531 for thread 3360 1: [13:44:33]: FCSetupWx: CustomPropertyHandler_AV() MSI (s) (C8!20) [13:44:33:425]: Closing MSIHANDLE (310) of type 790531 for thread 3360 MSI (s) (C8!20) [13:44:33:425]: Creating MSIHANDLE (311) of type 790531 for thread 3360 1: [13:44:33]: FCSetupWx: CustomPropertyHandler_FW() MSI (s) (C8!20) [13:44:33:425]: Closing MSIHANDLE (311) of type 790531 for thread 3360 MSI (s) (C8!20) [13:44:33:425]: Creating MSIHANDLE (312) of type 790531 for thread 3360 1: [13:44:33]: FCSetupWx: CustomPropertyHandler_UI() MSI (s) (C8!20) [13:44:33:435]: Closing MSIHANDLE (312) of type 790531 for thread 3360 MSI (s) (C8!20) [13:44:33:435]: Creating MSIHANDLE (313) of type 790531 for thread 3360 1: [13:44:33]: FCSetupWx: CustomPropertyHandler_WF() MSI (s) (C8!20) [13:44:33:435]: Closing MSIHANDLE (313) of type 790531 for thread 3360 MSI (s) (C8!20) [13:44:33:435]: Creating MSIHANDLE (314) of type 790531 for thread 3360 1: [13:44:33]: FCSetupWx: CustomPropertyHandler_AS() MSI (s) (C8!20) [13:44:33:435]: Closing MSIHANDLE (314) of type 790531 for thread 3360 MSI (s) (C8!20) [13:44:33:435]: Creating MSIHANDLE (315) of type 790531 for thread 3360 1: [13:44:33]: FCSetupWx: CustomPropertyHandler_Fortitray() MSI (s) (C8!20) [13:44:33:435]: Closing MSIHANDLE (315) of type 790531 for thread 3360 MSI (s) (C8!20) [13:44:33:435]: Creating MSIHANDLE (316) of type 790531 for thread 3360 1: [13:44:33]: FCSetupWx: CustomPropertyHandler_Logging() MSI (s) (C8!20) [13:44:33:435]: Closing MSIHANDLE (316) of type 790531 for thread 3360 MSI (s) (C8!20) [13:44:33:435]: Creating MSIHANDLE (317) of type 790531 for thread 3360 1: [13:44:33]: FCSetupWx: CustomPropertyHandler_AppCtrl() MSI (s) (C8!20) [13:44:33:435]: Closing MSIHANDLE (317) of type 790531 for thread 3360 MSI (s) (C8!20) [13:44:33:435]: Creating MSIHANDLE (318) of type 790531 for thread 3360 1: [13:44:33]: FCSetupWx: CustomPropertyHandler_ESNAC() MSI (s) (C8!20) [13:44:33:445]: Closing MSIHANDLE (318) of type 790531 for thread 3360 MSI (s) (C8!20) [13:44:33:445]: Creating MSIHANDLE (319) of type 790531 for thread 3360 1: [13:44:33]: FCSetupWx: CustomPropertyHandler_VPN_BEFORE_LOGON() MSI (s) (C8!20) [13:44:33:445]: Closing MSIHANDLE (319) of type 790531 for thread 3360 CustomAction CA_PostInstCustomProperty returned actual error code 1603 but will be translated to success due to continue marking MSI (s) (C8:A4) [13:44:33:445]: Closing MSIHANDLE (302) of type 790536 for thread 4724 MSI (s) (C8:74) [13:44:33:445]: Executing op: ActionStart(Name=CA_InstallConfig,,) Action 13:44:33: CA_InstallConfig. MSI (s) (C8:74) [13:44:33:445]: Executing op: CustomActionSchedule(Action=CA_InstallConfig,ActionType=3137,Source=BinaryData,Target=MSI_InstallConfig,CustomActionData=C:\Program Files (x86)\Fortinet\FortiClient\;C:\Users\ADMINI~1\AppData\Local\Temp\con844B.tmp) MSI (s) (C8:74) [13:44:33:445]: Creating MSIHANDLE (320) of type 790536 for thread 4724 MSI (s) (C8:84) [13:44:33:445]: Invoking remote custom action. DLL: C:\Windows\Installer\MSID006.tmp, Entrypoint: MSI_InstallConfig MSI (s) (C8!F8) [13:44:33:455]: Creating MSIHANDLE (321) of type 790531 for thread 3832 1: [13:44:33]: FCSetupWx: MSI_InstallConfig MSI (s) (C8!F8) [13:44:33:455]: Closing MSIHANDLE (321) of type 790531 for thread 3832 MSI (s) (C8!F8) [13:44:33:465]: Creating MSIHANDLE (322) of type 790531 for thread 3832 1: [13:44:33]: FCSetupWx: MSI_InstallConfig(C:\Program Files (x86)\Fortinet\FortiClient\;C:\Users\ADMINI~1\AppData\Local\Temp\con844B.tmp) MSI (s) (C8!F8) [13:44:33:465]: Closing MSIHANDLE (322) of type 790531 for thread 3832 MSI (s) (C8:84) [13:44:33:465]: Closing MSIHANDLE (320) of type 790536 for thread 4724 MSI (s) (C8:74) [13:44:33:465]: Executing op: ActionStart(Name=StartServices,Description=Starting services,Template=Service: [1]) Action 13:44:33: StartServices. Starting services MSI (s) (C8:74) [13:44:33:465]: Executing op: ProgressTotal(Total=8,Type=1,ByteEquivalent=1300000) MSI (s) (C8:74) [13:44:33:465]: Executing op: ServiceControl(,Name=Fortips,Action=1,Wait=0,) StartServices: Service: Fortips MSI (s) (C8:74) [13:44:33:475]: Executing op: ServiceControl(,Name=FortiRdr,Action=1,Wait=0,) StartServices: Service: FortiRdr Info 1920. Service 'FortiRdr' (FortiRdr) failed to start. Verify that you have sufficient privileges to start system services. Action ended 13:48:33: InstallFinalize. Return value 3. MSI (s) (C8:74) [13:48:33:500]: User policy value 'DisableRollback' is 0 MSI (s) (C8:74) [13:48:33:500]: Machine policy value 'DisableRollback' is 0 MSI (s) (C8:74) [13:48:33:510]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1116827017,LangId=1033,Platform=589824,ScriptType=2,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1) MSI (s) (C8:74) [13:48:33:510]: Executing op: DialogInfo(Type=0,Argument=1033) MSI (s) (C8:74) [13:48:33:510]: Executing op: DialogInfo(Type=1,Argument=FortiClient) MSI (s) (C8:74) [13:48:33:510]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1]) Action 13:48:33: Rollback. Rolling back action: Rollback: Starting services MSI (s) (C8:74) [13:48:33:510]: Executing op: ActionStart(Name=StartServices,Description=Starting services,Template=Service: [1]) MSI (s) (C8:74) [13:48:33:510]: Executing op: ProductInfo(ProductKey={863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C},ProductName=FortiClient,PackageName=FortiClient.msi,Language=1033,Version=83886082,Assignment=1,ObsoleteArg=0,ProductIcon=Icon_FCTLogo,,PackageCode={D1BE04EE-D617-40C7-9EE3-C7F75C82A341},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0,ProductDeploymentFlags=3) MSI (s) (C8:74) [13:48:33:510]: Executing op: ServiceControl(,Name=Fortips,Action=2,Wait=0,) Rollback: CA_InstallConfig MSI (s) (C8:74) [13:48:33:520]: Executing op: ActionStart(Name=CA_InstallConfig,,) Rollback: CA_PostInstCustomProperty MSI (s) (C8:74) [13:48:33:520]: Executing op: ActionStart(Name=CA_PostInstCustomProperty,,) Rollback: CA_CreateDefaultAVScan MSI (s) (C8:74) [13:48:33:520]: Executing op: ActionStart(Name=CA_CreateDefaultAVScan,,) Rollback: CA_InstallFCTServices MSI (s) (C8:74) [13:48:33:520]: Executing op: ActionStart(Name=CA_InstallFCTServices,,) Rollback: CA_InstallFCTServices_Rollback MSI (s) (C8:74) [13:48:33:520]: Executing op: ActionStart(Name=CA_InstallFCTServices_Rollback,,) MSI (s) (C8:74) [13:48:33:520]: Executing op: CustomActionRollback(Action=CA_InstallFCTServices_Rollback,ActionType=3393,Source=BinaryData,Target=MSI_UninstallFCService,CustomActionData=;fortiapd;FortiFW2;fortimon2;Fortips;FortiRdr2;FortiRmon;FortiShield;FortiStat2) MSI (s) (C8:74) [13:48:33:520]: Creating MSIHANDLE (323) of type 790536 for thread 4724 MSI (s) (C8:D8) [13:48:33:520]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI79CD.tmp, Entrypoint: MSI_UninstallFCService MSI (s) (C8!F0) [13:48:33:530]: Creating MSIHANDLE (324) of type 790531 for thread 5104 1: [13:48:33]: FCSetupWx(rollback): MSI_UninstallFCService(;fortiapd;FortiFW2;fortimon2;Fortips;FortiRdr2;FortiRmon;FortiShield;FortiStat2) MSI (s) (C8!F0) [13:48:33:530]: Closing MSIHANDLE (324) of type 790531 for thread 5104 MSI (s) (C8!F0) [13:48:33:540]: Creating MSIHANDLE (325) of type 790531 for thread 5104 1: [13:48:33]: FCSetupWx(rollback): service is successfully uninstalled: fortiapd MSI (s) (C8!F0) [13:48:33:540]: Closing MSIHANDLE (325) of type 790531 for thread 5104 MSI (s) (C8!F0) [13:48:33:540]: Creating MSIHANDLE (326) of type 790531 for thread 5104 1: [13:48:33]: FCSetupWx(rollback): service is successfully uninstalled: FortiFW MSI (s) (C8!F0) [13:48:33:540]: Closing MSIHANDLE (326) of type 790531 for thread 5104 MSI (s) (C8!F0) [13:48:33:540]: Creating MSIHANDLE (327) of type 790531 for thread 5104 1: [13:48:33]: FCSetupWx(rollback): service is successfully uninstalled: FAFileMon MSI (s) (C8!F0) [13:48:33:540]: Closing MSIHANDLE (327) of type 790531 for thread 5104 MSI (s) (C8!F0) [13:48:33:540]: Creating MSIHANDLE (328) of type 790531 for thread 5104 1: [13:48:33]: FCSetupWx(rollback): service is successfully uninstalled: Fortips MSI (s) (C8!F0) [13:48:33:540]: Closing MSIHANDLE (328) of type 790531 for thread 5104 MSI (s) (C8!F0) [13:48:33:550]: Creating MSIHANDLE (329) of type 790531 for thread 5104 1: [13:48:33]: FCSetupWx(rollback): service is successfully uninstalled: FortiRdr MSI (s) (C8!F0) [13:48:33:550]: Closing MSIHANDLE (329) of type 790531 for thread 5104 MSI (s) (C8!F0) [13:48:33:550]: Creating MSIHANDLE (330) of type 790531 for thread 5104 1: [13:48:33]: FCSetupWx(rollback): service is successfully uninstalled: FARegMon MSI (s) (C8!F0) [13:48:33:550]: Closing MSIHANDLE (330) of type 790531 for thread 5104 MSI (s) (C8!F0) [13:48:33:550]: Creating MSIHANDLE (331) of type 790531 for thread 5104 1: [13:48:33]: FCSetupWx(rollback): service is successfully uninstalled: FortiShield MSI (s) (C8!F0) [13:48:33:550]: Closing MSIHANDLE (331) of type 790531 for thread 5104 MSI (s) (C8!F0) [13:48:33:550]: Creating MSIHANDLE (332) of type 790531 for thread 5104 1: [13:48:33]: FCSetupWx(rollback): service is successfully uninstalled: FortiStat2 MSI (s) (C8!F0) [13:48:33:550]: Closing MSIHANDLE (332) of type 790531 for thread 5104 MSI (s) (C8!F0) [13:48:33:550]: Creating MSIHANDLE (333) of type 790531 for thread 5104 1: [13:48:33]: FCSetupWx(rollback): MSI_UninstallFCService(),retval=0, Reboot=1 MSI (s) (C8!F0) [13:48:33:550]: Closing MSIHANDLE (333) of type 790531 for thread 5104 MSI (s) (C8:D8) [13:48:33:560]: Closing MSIHANDLE (323) of type 790536 for thread 4724 Rollback: Installing new services MSI (s) (C8:74) [13:48:33:560]: Executing op: ActionStart(Name=InstallServices,Description=Installing new services,Template=Service: [2]) MSI (s) (C8:74) [13:48:33:560]: Executing op: ServiceInstall(Name=FA_Scheduler,DisplayName=FortiClient Service Scheduler,ImagePath="C:\Program Files (x86)\Fortinet\FortiClient\scheduler.exe",ServiceType=16,StartType=2,ErrorControl=1,LoadOrderGroup=SchedulerGroup,Dependencies=[~][~],TagId=0,StartName=LocalSystem,Password=**********,Description=FortiClient Service Scheduler,SecurityDescriptor=BinaryData,) Rollback: MSI_installdriver MSI (s) (C8:74) [13:48:33:570]: Executing op: ActionStart(Name=MSI_installdriver,,) Rollback: Registering type libraries MSI (s) (C8:74) [13:48:33:570]: Executing op: ActionStart(Name=RegisterTypeLibraries,Description=Registering type libraries,Template=LibID: [1]) MSI (s) (C8:74) [13:48:33:570]: Executing op: TypeLibraryUnregister(,,FilePath=C:\Program Files (x86)\Fortinet\FortiClient\forticachecleaner.dll,LibID={2897EECE-8996-418B-A0D9-C638FBD221CE},,,Language=0,,BinaryType=0,) MSI (s) (C8:74) [13:48:33:570]: CMsiServices::ProcessTypeLibrary runs in remote context, not impersonated. MSI (s) (C8:74) [13:48:33:570]: Executing op: TypeLibraryUnregister(,,FilePath=C:\Program Files (x86)\Fortinet\FortiClient\SslvpnHostCheck.dll,LibID={5F14603F-2FC5-47D5-BDE2-7693DC34E37A},,,Language=0,,BinaryType=0,) MSI (s) (C8:74) [13:48:33:570]: CMsiServices::ProcessTypeLibrary runs in remote context, not impersonated. MSI (s) (C8:74) [13:48:33:580]: Executing op: TypeLibraryUnregister(,,FilePath=C:\Program Files (x86)\Fortinet\FortiClient\forticontrol.dll,LibID={2FC33C7C-ACAB-4733-8C02-CEE2FF8AFD32},,,Language=0,,BinaryType=0,) MSI (s) (C8:74) [13:48:33:580]: CMsiServices::ProcessTypeLibrary runs in remote context, not impersonated. Rollback: Writing system registry values MSI (s) (C8:74) [13:48:33:580]: Executing op: ActionStart(Name=WriteRegistryValues,Description=Writing system registry values,Template=Key: [1], Name: [2], Value: [3]) MSI (s) (C8:74) [13:48:33:580]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Provider Filters\{AC7DD106-EAB6-4b41-AC4F-D52FD62A82C7},,BinaryType=1,,) MSI (s) (C8:74) [13:48:33:580]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:580]: Executing op: RegRemoveValue(,Value=FortiCredentialProvider,) MSI (s) (C8:74) [13:48:33:580]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:580]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Provider Filters\{AC7DD106-EAB6-4b41-AC4F-D52FD62A82C7} 3: 2 MSI (s) (C8:74) [13:48:33:580]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\{AC7DD106-EAB6-4b41-AC4F-D52FD62A82C7},,BinaryType=1,,) MSI (s) (C8:74) [13:48:33:580]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:580]: Executing op: RegRemoveValue(,Value=FortiCredentialProvider,) MSI (s) (C8:74) [13:48:33:580]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:580]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\{AC7DD106-EAB6-4b41-AC4F-D52FD62A82C7} 3: 2 MSI (s) (C8:74) [13:48:33:590]: Executing op: RegOpenKey(Root=-2147483647,Key=Software\Fortinet\FortiClient,,BinaryType=1,,) MSI (s) (C8:74) [13:48:33:590]: Executing op: RegRemoveValue(Name=installed,Value=#1,) MSI (s) (C8:74) [13:48:33:590]: Executing op: RegAddValue(Name=installed,Value=#1,) MSI (s) (C8:74) [13:48:33:590]: Executing op: RegRemoveValue(Name=installed,Value=#1,) MSI (s) (C8:74) [13:48:33:590]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:590]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Fortinet\FortiClient 3: 2 MSI (s) (C8:74) [13:48:33:590]: Executing op: RegOpenKey(,Key=CLSID\{AC7DD106-EAB6-4b41-AC4F-D52FD62A82C7}\InprocServer32,,BinaryType=1,,) MSI (s) (C8:74) [13:48:33:590]: Executing op: RegRemoveValue(Name=ThreadingModel,Value=Apartment,) MSI (s) (C8:74) [13:48:33:590]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:590]: Executing op: RegRemoveValue(,Value=C:\Program Files (x86)\Fortinet\FortiClient\forticredentialprovider64.dll,) MSI (s) (C8:74) [13:48:33:590]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:590]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{AC7DD106-EAB6-4b41-AC4F-D52FD62A82C7}\InprocServer32 3: 2 MSI (s) (C8:74) [13:48:33:590]: Executing op: RegOpenKey(,Key=CLSID\{AC7DD106-EAB6-4b41-AC4F-D52FD62A82C7},,BinaryType=1,,) MSI (s) (C8:74) [13:48:33:590]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:590]: Executing op: RegRemoveValue(,Value=FortiCredentialProvider,) MSI (s) (C8:74) [13:48:33:600]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:600]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{AC7DD106-EAB6-4b41-AC4F-D52FD62A82C7} 3: 2 MSI (s) (C8:74) [13:48:33:600]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_Scheduler\000020,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:600]: Executing op: RegRemoveValue(Name=param,,) MSI (s) (C8:74) [13:48:33:600]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:600]: Executing op: RegRemoveValue(Name=cmd,Value=FCVbltScan.exe,) MSI (s) (C8:74) [13:48:33:600]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:600]: Executing op: RegRemoveValue(Name=type,Value=#2,) MSI (s) (C8:74) [13:48:33:600]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:600]: Executing op: RegRemoveValue(Name=stop_flag,Value=#0,) MSI (s) (C8:74) [13:48:33:600]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:600]: Executing op: RegRemoveValue(Name=status,Value=#0,) MSI (s) (C8:74) [13:48:33:600]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:600]: Executing op: RegRemoveValue(Name=enabled,Value=#0,) MSI (s) (C8:74) [13:48:33:610]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:610]: Executing op: RegRemoveValue(Name=apptype,Value=#24,) MSI (s) (C8:74) [13:48:33:610]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:610]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_Scheduler\000020 3: 2 MSI (s) (C8:74) [13:48:33:610]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_VULN,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:610]: Executing op: RegRemoveValue(Name=loglevel,Value=#6,) MSI (s) (C8:74) [13:48:33:610]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:610]: Executing op: RegRemoveValue(Name=logenabled,Value=#1,) MSI (s) (C8:74) [13:48:33:610]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:610]: Executing op: RegRemoveValue(Name=enabled,Value=#1,) MSI (s) (C8:74) [13:48:33:610]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:610]: Executing op: RegRemoveValue(Name=installed,Value=#1,) MSI (s) (C8:74) [13:48:33:610]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:610]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_VULN 3: 2 MSI (s) (C8:74) [13:48:33:610]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_Scheduler\000007,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:610]: Executing op: RegRemoveValue(Name=cmd,Value=fortifws.exe,) MSI (s) (C8:74) [13:48:33:620]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:620]: Executing op: RegRemoveValue(Name=param,,) MSI (s) (C8:74) [13:48:33:620]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:620]: Executing op: RegRemoveValue(Name=type,Value=#9,) MSI (s) (C8:74) [13:48:33:620]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:620]: Executing op: RegRemoveValue(Name=stop_flag,Value=#0,) MSI (s) (C8:74) [13:48:33:620]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:620]: Executing op: RegRemoveValue(Name=status,Value=#0,) MSI (s) (C8:74) [13:48:33:620]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:620]: Executing op: RegRemoveValue(Name=enabled,Value=#1,) MSI (s) (C8:74) [13:48:33:620]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:620]: Executing op: RegRemoveValue(Name=apptype,Value=#10,) MSI (s) (C8:74) [13:48:33:620]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:620]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_Scheduler\000007 3: 2 MSI (s) (C8:74) [13:48:33:620]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_FW,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:620]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:630]: Executing op: RegRemoveValue(Name=loglevel,Value=#6,) MSI (s) (C8:74) [13:48:33:630]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:630]: Executing op: RegRemoveValue(Name=logenabled,Value=#1,) MSI (s) (C8:74) [13:48:33:630]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:630]: Executing op: RegRemoveValue(Name=enabled,Value=#1,) MSI (s) (C8:74) [13:48:33:630]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:630]: Executing op: RegRemoveValue(Name=installed,Value=#1,) MSI (s) (C8:74) [13:48:33:630]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:630]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_FW 3: 2 MSI (s) (C8:74) [13:48:33:630]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_Scheduler\000021,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:630]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:630]: Executing op: RegRemoveValue(Name=param,,) MSI (s) (C8:74) [13:48:33:630]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:640]: Executing op: RegRemoveValue(Name=cmd,Value=FSSOMA.exe,) MSI (s) (C8:74) [13:48:33:640]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:640]: Executing op: RegRemoveValue(Name=type,Value=#9,) MSI (s) (C8:74) [13:48:33:640]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:640]: Executing op: RegRemoveValue(Name=stop_flag,Value=#0,) MSI (s) (C8:74) [13:48:33:640]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:640]: Executing op: RegRemoveValue(Name=status,Value=#0,) MSI (s) (C8:74) [13:48:33:640]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:640]: Executing op: RegRemoveValue(Name=enabled,Value=#1,) MSI (s) (C8:74) [13:48:33:640]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:640]: Executing op: RegRemoveValue(Name=apptype,Value=#25,) MSI (s) (C8:74) [13:48:33:640]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:640]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_Scheduler\000021 3: 2 MSI (s) (C8:74) [13:48:33:640]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_SSOMA,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:640]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:650]: Executing op: RegRemoveValue(Name=logenabled,Value=#1,) MSI (s) (C8:74) [13:48:33:650]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:650]: Executing op: RegRemoveValue(Name=loglevel,Value=#6,) MSI (s) (C8:74) [13:48:33:650]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:650]: Executing op: RegRemoveValue(Name=enabled,Value=#0,) MSI (s) (C8:74) [13:48:33:650]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:650]: Executing op: RegRemoveValue(Name=installed,Value=#1,) MSI (s) (C8:74) [13:48:33:650]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:650]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_SSOMA 3: 2 MSI (s) (C8:74) [13:48:33:650]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_APPCTRL,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:650]: Executing op: RegRemoveValue(Name=installed,Value=#1,) MSI (s) (C8:74) [13:48:33:650]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:650]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_APPCTRL 3: 2 MSI (s) (C8:74) [13:48:33:650]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_Scheduler\000018,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:650]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:650]: Executing op: RegRemoveValue(Name=param,,) MSI (s) (C8:74) [13:48:33:660]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:660]: Executing op: RegRemoveValue(Name=cmd,Value=FortiESNAC.exe,) MSI (s) (C8:74) [13:48:33:660]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:660]: Executing op: RegRemoveValue(Name=type,Value=#9,) MSI (s) (C8:74) [13:48:33:660]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:660]: Executing op: RegRemoveValue(Name=stop_flag,Value=#0,) MSI (s) (C8:74) [13:48:33:660]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:660]: Executing op: RegRemoveValue(Name=status,Value=#0,) MSI (s) (C8:74) [13:48:33:660]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:660]: Executing op: RegRemoveValue(Name=enabled,Value=#1,) MSI (s) (C8:74) [13:48:33:660]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:660]: Executing op: RegRemoveValue(Name=apptype,Value=#21,) MSI (s) (C8:74) [13:48:33:660]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:660]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_Scheduler\000018 3: 2 MSI (s) (C8:74) [13:48:33:660]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_ESNAC,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:670]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:670]: Executing op: RegRemoveValue(Name=logenabled,Value=#1,) MSI (s) (C8:74) [13:48:33:670]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:670]: Executing op: RegRemoveValue(Name=loglevel,Value=#6,) MSI (s) (C8:74) [13:48:33:670]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:670]: Executing op: RegRemoveValue(Name=enabled,Value=#1,) MSI (s) (C8:74) [13:48:33:670]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:670]: Executing op: RegRemoveValue(Name=installed,Value=#1,) MSI (s) (C8:74) [13:48:33:670]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:670]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_ESNAC 3: 2 MSI (s) (C8:74) [13:48:33:670]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_Scheduler\000015,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:670]: Executing op: RegRemoveValue(Name=param,,) MSI (s) (C8:74) [13:48:33:680]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:680]: Executing op: RegRemoveValue(Name=cmd,Value=FortiWadbd.exe,) MSI (s) (C8:74) [13:48:33:680]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:680]: Executing op: RegRemoveValue(Name=type,Value=#9,) MSI (s) (C8:74) [13:48:33:680]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:680]: Executing op: RegRemoveValue(Name=stop_flag,Value=#0,) MSI (s) (C8:74) [13:48:33:680]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:680]: Executing op: RegRemoveValue(Name=status,Value=#0,) MSI (s) (C8:74) [13:48:33:680]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:680]: Executing op: RegRemoveValue(Name=enabled,Value=#1,) MSI (s) (C8:74) [13:48:33:690]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:690]: Executing op: RegRemoveValue(Name=apptype,Value=#19,) MSI (s) (C8:74) [13:48:33:690]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:690]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_Scheduler\000015 3: 2 MSI (s) (C8:74) [13:48:33:690]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_Scheduler\000014,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:690]: Executing op: RegRemoveValue(Name=param,,) MSI (s) (C8:74) [13:48:33:690]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:690]: Executing op: RegRemoveValue(Name=cmd,Value=FortiWad.exe,) MSI (s) (C8:74) [13:48:33:690]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:690]: Executing op: RegRemoveValue(Name=type,Value=#9,) MSI (s) (C8:74) [13:48:33:690]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:690]: Executing op: RegRemoveValue(Name=stop_flag,Value=#0,) MSI (s) (C8:74) [13:48:33:700]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:700]: Executing op: RegRemoveValue(Name=status,Value=#0,) MSI (s) (C8:74) [13:48:33:700]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:700]: Executing op: RegRemoveValue(Name=enabled,Value=#1,) MSI (s) (C8:74) [13:48:33:700]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:700]: Executing op: RegRemoveValue(Name=apptype,Value=#18,) MSI (s) (C8:74) [13:48:33:700]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:700]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_Scheduler\000014 3: 2 MSI (s) (C8:74) [13:48:33:700]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_WANACC,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:700]: Executing op: RegRemoveValue(Name=loglevel,Value=#6,) MSI (s) (C8:74) [13:48:33:700]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:700]: Executing op: RegRemoveValue(Name=logenabled,Value=#1,) MSI (s) (C8:74) [13:48:33:700]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:710]: Executing op: RegRemoveValue(Name=enabled,Value=#0,) MSI (s) (C8:74) [13:48:33:710]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:710]: Executing op: RegRemoveValue(Name=installed,Value=#1,) MSI (s) (C8:74) [13:48:33:710]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:710]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_WANACC 3: 2 MSI (s) (C8:74) [13:48:33:710]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\MozillaPlugins\@FortinetCacheClean,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:710]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:710]: Executing op: RegRemoveValue(Name=Vendor,Value=Fortinet Inc,) MSI (s) (C8:74) [13:48:33:710]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:710]: Executing op: RegRemoveValue(Name=Product,Value=SSL VPN Cache Cleaner,) MSI (s) (C8:74) [13:48:33:710]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:720]: Executing op: RegRemoveValue(Name=Path,Value=C:\Program Files (x86)\Fortinet\FortiClient\npccplugin.dll,) MSI (s) (C8:74) [13:48:33:720]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:720]: Executing op: RegRemoveValue(Name=Description,Value=SSL VPN Cache Cleaner,) MSI (s) (C8:74) [13:48:33:720]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:720]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\MozillaPlugins\@FortinetCacheClean 3: 2 MSI (s) (C8:74) [13:48:33:720]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\MozillaPlugins\@FortinetTunnelControl,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:720]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:720]: Executing op: RegRemoveValue(Name=Vendor,Value=Fortinet Inc,) MSI (s) (C8:74) [13:48:33:720]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:720]: Executing op: RegRemoveValue(Name=Product,Value=SSL VPN Tunnel Control Plugin,) MSI (s) (C8:74) [13:48:33:720]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:720]: Executing op: RegRemoveValue(Name=Path,Value=C:\Program Files (x86)\Fortinet\FortiClient\nptcplugin.dll,) MSI (s) (C8:74) [13:48:33:730]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:730]: Executing op: RegRemoveValue(Name=Description,Value=SSL VPN Tunnel Control Plugin,) MSI (s) (C8:74) [13:48:33:730]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:730]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\MozillaPlugins\@FortinetTunnelControl 3: 2 MSI (s) (C8:74) [13:48:33:730]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DE64E08D-8F19-4D75-A277-855E9DE74AA5},,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:730]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:730]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{91C045A0-A2A0-4FBC-9F04-01BD4E090301},,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:730]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:730]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B0882EB7-81A5-4A11-8D45-71888F973933},,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:730]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:730]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_Scheduler\000019,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:730]: Executing op: RegRemoveValue(Name=param,,) MSI (s) (C8:74) [13:48:33:740]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:740]: Executing op: RegRemoveValue(Name=cmd,Value=FortiSSLVPNdaemon.exe,) MSI (s) (C8:74) [13:48:33:740]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:740]: Executing op: RegRemoveValue(Name=type,Value=#9,) MSI (s) (C8:74) [13:48:33:740]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:740]: Executing op: RegRemoveValue(Name=stop_flag,Value=#0,) MSI (s) (C8:74) [13:48:33:740]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:740]: Executing op: RegRemoveValue(Name=status,Value=#0,) MSI (s) (C8:74) [13:48:33:740]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:740]: Executing op: RegRemoveValue(Name=enabled,Value=#1,) MSI (s) (C8:74) [13:48:33:740]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:740]: Executing op: RegRemoveValue(Name=apptype,Value=#23,) MSI (s) (C8:74) [13:48:33:740]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:740]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_Scheduler\000019 3: 2 MSI (s) (C8:74) [13:48:33:750]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_SSLVPN,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:750]: Executing op: RegRemoveValue(Name=logenabled,Value=#1,) MSI (s) (C8:74) [13:48:33:750]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:750]: Executing op: RegRemoveValue(Name=loglevel,Value=#6,) MSI (s) (C8:74) [13:48:33:750]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:750]: Executing op: RegRemoveValue(Name=enabled,Value=#1,) MSI (s) (C8:74) [13:48:33:750]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:750]: Executing op: RegRemoveValue(Name=installed,Value=#1,) MSI (s) (C8:74) [13:48:33:750]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:750]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_SSLVPN 3: 2 MSI (s) (C8:74) [13:48:33:750]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\Sslvpn,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:750]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:760]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_Scheduler\000010,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:760]: Executing op: RegRemoveValue(Name=param,,) MSI (s) (C8:74) [13:48:33:760]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:760]: Executing op: RegRemoveValue(Name=cmd,Value=fortiwf.exe,) MSI (s) (C8:74) [13:48:33:760]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:760]: Executing op: RegRemoveValue(Name=type,Value=#9,) MSI (s) (C8:74) [13:48:33:760]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:760]: Executing op: RegRemoveValue(Name=stop_flag,Value=#0,) MSI (s) (C8:74) [13:48:33:760]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:760]: Executing op: RegRemoveValue(Name=status,Value=#0,) MSI (s) (C8:74) [13:48:33:760]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:760]: Executing op: RegRemoveValue(Name=enabled,Value=#1,) MSI (s) (C8:74) [13:48:33:770]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:770]: Executing op: RegRemoveValue(Name=apptype,Value=#13,) MSI (s) (C8:74) [13:48:33:770]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:770]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_Scheduler\000010 3: 2 MSI (s) (C8:74) [13:48:33:770]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_WEBFILTER\Profiles\00000002,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:770]: Executing op: RegRemoveValue(Name=color,Value=#0,) MSI (s) (C8:74) [13:48:33:770]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:770]: Executing op: RegRemoveValue(Name=cate_ver,Value=#6,) MSI (s) (C8:74) [13:48:33:770]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:780]: Executing op: RegRemoveValue(Name=flag,Value=#0,) MSI (s) (C8:74) [13:48:33:780]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:780]: Executing op: RegRemoveValue(Name=description,Value=A profile suitable for adults,) MSI (s) (C8:74) [13:48:33:780]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:780]: Executing op: RegRemoveValue(Name=display_name,Value=Adult,) MSI (s) (C8:74) [13:48:33:780]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:780]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_WEBFILTER\Profiles\00000002 3: 2 MSI (s) (C8:74) [13:48:33:780]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_WEBFILTER\Profiles\00000000,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:780]: Executing op: RegRemoveValue(Name=color,Value=#0,) MSI (s) (C8:74) [13:48:33:780]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:780]: Executing op: RegRemoveValue(Name=cate_ver,Value=#6,) MSI (s) (C8:74) [13:48:33:780]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:790]: Executing op: RegRemoveValue(Name=flag,Value=#0,) MSI (s) (C8:74) [13:48:33:800]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:800]: Executing op: RegRemoveValue(Name=description,Value=A basic profile,) MSI (s) (C8:74) [13:48:33:810]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:810]: Executing op: RegRemoveValue(Name=display_name,Value=Basic Profile,) MSI (s) (C8:74) [13:48:33:810]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:810]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_WEBFILTER\Profiles\00000000 3: 2 MSI (s) (C8:74) [13:48:33:810]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_WEBFILTER,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:810]: Executing op: RegRemoveValue(Name=cur_profile,Value=#0,) MSI (s) (C8:74) [13:48:33:810]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:810]: Executing op: RegRemoveValue(Name=loglevel,Value=#6,) MSI (s) (C8:74) [13:48:33:810]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:810]: Executing op: RegRemoveValue(Name=logenabled,Value=#1,) MSI (s) (C8:74) [13:48:33:820]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:820]: Executing op: RegRemoveValue(Name=UrlRatingWithFortiGuard,Value=#1,) MSI (s) (C8:74) [13:48:33:820]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:820]: Executing op: RegRemoveValue(Name=enable_filter,Value=#1,) MSI (s) (C8:74) [13:48:33:820]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:820]: Executing op: RegRemoveValue(Name=enabled,Value=#1,) MSI (s) (C8:74) [13:48:33:820]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:820]: Executing op: RegRemoveValue(Name=installed,Value=#1,) MSI (s) (C8:74) [13:48:33:820]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:820]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_WEBFILTER 3: 2 MSI (s) (C8:74) [13:48:33:820]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_EXCHANGE,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:820]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:820]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_Scheduler\000005,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:820]: Executing op: RegRemoveValue(Name=param,,) MSI (s) (C8:74) [13:48:33:830]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:830]: Executing op: RegRemoveValue(Name=cmd,Value=fmon.exe,) MSI (s) (C8:74) [13:48:33:830]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:830]: Executing op: RegRemoveValue(Name=type,Value=#9,) MSI (s) (C8:74) [13:48:33:830]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:830]: Executing op: RegRemoveValue(Name=stop_flag,Value=#0,) MSI (s) (C8:74) [13:48:33:830]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:830]: Executing op: RegRemoveValue(Name=status,Value=#0,) MSI (s) (C8:74) [13:48:33:830]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:830]: Executing op: RegRemoveValue(Name=enabled,Value=#1,) MSI (s) (C8:74) [13:48:33:830]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:830]: Executing op: RegRemoveValue(Name=apptype,Value=#6,) MSI (s) (C8:74) [13:48:33:830]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:830]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_Scheduler\000005 3: 2 MSI (s) (C8:74) [13:48:33:830]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_Scheduler\000004,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:830]: Executing op: RegRemoveValue(Name=param,,) MSI (s) (C8:74) [13:48:33:840]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:840]: Executing op: RegRemoveValue(Name=cmd,Value=rmon.exe,) MSI (s) (C8:74) [13:48:33:840]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:840]: Executing op: RegRemoveValue(Name=type,Value=#9,) MSI (s) (C8:74) [13:48:33:840]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:840]: Executing op: RegRemoveValue(Name=stop_flag,Value=#0,) MSI (s) (C8:74) [13:48:33:840]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:840]: Executing op: RegRemoveValue(Name=status,Value=#0,) MSI (s) (C8:74) [13:48:33:840]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:840]: Executing op: RegRemoveValue(Name=enabled,Value=#1,) MSI (s) (C8:74) [13:48:33:840]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:840]: Executing op: RegRemoveValue(Name=apptype,Value=#9,) MSI (s) (C8:74) [13:48:33:840]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:840]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_Scheduler\000004 3: 2 MSI (s) (C8:74) [13:48:33:840]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_Scheduler\000001,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:850]: Executing op: RegRemoveValue(Name=param,,) MSI (s) (C8:74) [13:48:33:850]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:850]: Executing op: RegRemoveValue(Name=cmd,Value=av_task.exe,) MSI (s) (C8:74) [13:48:33:850]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:850]: Executing op: RegRemoveValue(Name=type,Value=#2,) MSI (s) (C8:74) [13:48:33:850]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:850]: Executing op: RegRemoveValue(Name=stop_flag,Value=#0,) MSI (s) (C8:74) [13:48:33:850]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:850]: Executing op: RegRemoveValue(Name=status,Value=#0,) MSI (s) (C8:74) [13:48:33:850]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:850]: Executing op: RegRemoveValue(Name=enabled,Value=#0,) MSI (s) (C8:74) [13:48:33:850]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:850]: Executing op: RegRemoveValue(Name=apptype,Value=#1,) MSI (s) (C8:74) [13:48:33:850]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:850]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_Scheduler\000001 3: 2 MSI (s) (C8:74) [13:48:33:850]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_EMAIL,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:860]: Executing op: RegRemoveValue(Name=scan_heuristics_action,Value=#0,) MSI (s) (C8:74) [13:48:33:860]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:860]: Executing op: RegRemoveValue(Name=scan_heuristics,Value=#0,) MSI (s) (C8:74) [13:48:33:860]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:860]: Executing op: RegRemoveValue(Name=scan_worm_action,Value=#0,) MSI (s) (C8:74) [13:48:33:860]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:860]: Executing op: RegRemoveValue(Name=scan_worm,Value=#0,) MSI (s) (C8:74) [13:48:33:860]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:860]: Executing op: RegRemoveValue(Name=scan_outlook,Value=#1,) MSI (s) (C8:74) [13:48:33:860]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:860]: Executing op: RegRemoveValue(Name=port_smtp,Value=#25,) MSI (s) (C8:74) [13:48:33:860]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:860]: Executing op: RegRemoveValue(Name=scan_smtp,Value=#1,) MSI (s) (C8:74) [13:48:33:860]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:860]: Executing op: RegRemoveValue(Name=port_pop3,Value=#110,) MSI (s) (C8:74) [13:48:33:870]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:870]: Executing op: RegRemoveValue(Name=scan_pop3,Value=#1,) MSI (s) (C8:74) [13:48:33:870]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:870]: Executing op: RegRemoveValue(Name=port_imap,Value=#143,) MSI (s) (C8:74) [13:48:33:870]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:870]: Executing op: RegRemoveValue(Name=scan_imap,Value=#0,) MSI (s) (C8:74) [13:48:33:870]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:870]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_EMAIL 3: 2 MSI (s) (C8:74) [13:48:33:870]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_REGMON,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:870]: Executing op: RegRemoveValue(Name=enabled,Value=#0,) MSI (s) (C8:74) [13:48:33:870]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:870]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_REGMON 3: 2 MSI (s) (C8:74) [13:48:33:870]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_FMON,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:870]: Executing op: RegRemoveValue(Name=auto_submit_heuristic,Value=#1,) MSI (s) (C8:74) [13:48:33:870]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:870]: Executing op: RegRemoveValue(Name=HeuristicScanningEnabled,Value=#0,) MSI (s) (C8:74) [13:48:33:880]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:880]: Executing op: RegRemoveValue(Name=OnVirusAction,Value=#5,) MSI (s) (C8:74) [13:48:33:880]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:880]: Executing op: RegRemoveValue(Name=enabled,Value=#1,) MSI (s) (C8:74) [13:48:33:880]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:880]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_FMON 3: 2 MSI (s) (C8:74) [13:48:33:880]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_AV,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:880]: Executing op: RegRemoveValue(Name=auto_submit_heuristic,Value=#1,) MSI (s) (C8:74) [13:48:33:880]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:880]: Executing op: RegRemoveValue(Name=HeuristicScanningEnabled,Value=#1,) MSI (s) (C8:74) [13:48:33:880]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:880]: Executing op: RegRemoveValue(Name=loglevel,Value=#6,) MSI (s) (C8:74) [13:48:33:880]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:880]: Executing op: RegRemoveValue(Name=logenabled,Value=#1,) MSI (s) (C8:74) [13:48:33:880]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:880]: Executing op: RegRemoveValue(Name=enabled,Value=#1,) MSI (s) (C8:74) [13:48:33:890]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:890]: Executing op: RegRemoveValue(Name=installed,Value=#1,) MSI (s) (C8:74) [13:48:33:890]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:890]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_AV 3: 2 MSI (s) (C8:74) [13:48:33:890]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Microsoft\Exchange\Client\Extensions,SecurityDescriptor=BinaryData,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:890]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:890]: Executing op: RegRemoveValue(Name=fortiece,Value=4.0;C:\Program Files (x86)\Fortinet\FortiClient\fortiece.dll;1,) MSI (s) (C8:74) [13:48:33:890]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:890]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_VPNSTARTER,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:890]: Executing op: RegRemoveValue(Name=enabled,Value=#0,) MSI (s) (C8:74) [13:48:33:890]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:890]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_VPNSTARTER 3: 2 MSI (s) (C8:74) [13:48:33:890]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_Scheduler\000002,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:890]: Executing op: RegRemoveValue(Name=param,,) MSI (s) (C8:74) [13:48:33:890]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:900]: Executing op: RegRemoveValue(Name=cmd,Value=ipsec.exe,) MSI (s) (C8:74) [13:48:33:900]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:900]: Executing op: RegRemoveValue(Name=type,Value=#2,) MSI (s) (C8:74) [13:48:33:900]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:900]: Executing op: RegRemoveValue(Name=stop_flag,Value=#0,) MSI (s) (C8:74) [13:48:33:900]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:900]: Executing op: RegRemoveValue(Name=status,Value=#0,) MSI (s) (C8:74) [13:48:33:900]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:900]: Executing op: RegRemoveValue(Name=enabled,Value=#0,) MSI (s) (C8:74) [13:48:33:900]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:900]: Executing op: RegRemoveValue(Name=apptype,Value=#3,) MSI (s) (C8:74) [13:48:33:900]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:900]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_Scheduler\000002 3: 2 MSI (s) (C8:74) [13:48:33:900]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_IKE,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:900]: Executing op: RegRemoveValue(Name=loglevel,Value=#6,) MSI (s) (C8:74) [13:48:33:900]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:910]: Executing op: RegRemoveValue(Name=logenabled,Value=#1,) MSI (s) (C8:74) [13:48:33:910]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:910]: Executing op: RegRemoveValue(Name=enabled,Value=#1,) MSI (s) (C8:74) [13:48:33:910]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:910]: Executing op: RegRemoveValue(Name=installed,Value=#1,) MSI (s) (C8:74) [13:48:33:910]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:910]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_IKE 3: 2 MSI (s) (C8:74) [13:48:33:910]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION,SecurityDescriptor=BinaryData,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:910]: Executing op: RegRemoveValue(Name=FortiClient.exe,Value=#8888,) MSI (s) (C8:74) [13:48:33:910]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:910]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_APPDB,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:910]: Executing op: RegRemoveValue(Name=loglevel,Value=#6,) MSI (s) (C8:74) [13:48:33:910]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:910]: Executing op: RegRemoveValue(Name=logenabled,Value=#1,) MSI (s) (C8:74) [13:48:33:910]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:910]: Executing op: RegRemoveValue(Name=enabled,Value=#1,) MSI (s) (C8:74) [13:48:33:920]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:920]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_APPDB 3: 2 MSI (s) (C8:74) [13:48:33:920]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_BACKUP,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:920]: Executing op: RegRemoveValue(Name=enabled,Value=#1,) MSI (s) (C8:74) [13:48:33:920]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:920]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_BACKUP 3: 2 MSI (s) (C8:74) [13:48:33:920]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_SHIELD,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:920]: Executing op: RegRemoveValue(Name=loglevel,Value=#6,) MSI (s) (C8:74) [13:48:33:920]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:920]: Executing op: RegRemoveValue(Name=logenabled,Value=#1,) MSI (s) (C8:74) [13:48:33:920]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:920]: Executing op: RegRemoveValue(Name=enabled,Value=#1,) MSI (s) (C8:74) [13:48:33:920]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:920]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_SHIELD 3: 2 MSI (s) (C8:74) [13:48:33:920]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_Scheduler\000013,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:920]: Executing op: RegRemoveValue(Name=param,,) MSI (s) (C8:74) [13:48:33:920]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:930]: Executing op: RegRemoveValue(Name=cmd,Value=FortiProxy.exe,) MSI (s) (C8:74) [13:48:33:930]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:930]: Executing op: RegRemoveValue(Name=type,Value=#9,) MSI (s) (C8:74) [13:48:33:930]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:930]: Executing op: RegRemoveValue(Name=stop_flag,Value=#0,) MSI (s) (C8:74) [13:48:33:930]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:930]: Executing op: RegRemoveValue(Name=status,Value=#0,) MSI (s) (C8:74) [13:48:33:930]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:930]: Executing op: RegRemoveValue(Name=enabled,Value=#1,) MSI (s) (C8:74) [13:48:33:930]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:930]: Executing op: RegRemoveValue(Name=apptype,Value=#17,) MSI (s) (C8:74) [13:48:33:930]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:930]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_Scheduler\000013 3: 2 MSI (s) (C8:74) [13:48:33:930]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_FORTIPROXY,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:930]: Executing op: RegRemoveValue(Name=loglevel,Value=#6,) MSI (s) (C8:74) [13:48:33:940]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:940]: Executing op: RegRemoveValue(Name=logenabled,Value=#1,) MSI (s) (C8:74) [13:48:33:940]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:940]: Executing op: RegRemoveValue(Name=enabled,Value=#1,) MSI (s) (C8:74) [13:48:33:940]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:940]: Executing op: RegRemoveValue(Name=installed,Value=#1,) MSI (s) (C8:74) [13:48:33:940]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:940]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_FORTIPROXY 3: 2 MSI (s) (C8:74) [13:48:33:940]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_FCM,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:940]: Executing op: RegRemoveValue(Name=loglevel,Value=#6,) MSI (s) (C8:74) [13:48:33:940]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:940]: Executing op: RegRemoveValue(Name=logenabled,Value=#0,) MSI (s) (C8:74) [13:48:33:940]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:940]: Executing op: RegRemoveValue(Name=enabled,Value=#0,) MSI (s) (C8:74) [13:48:33:940]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:950]: Executing op: RegRemoveValue(Name=installed,Value=#0,) MSI (s) (C8:74) [13:48:33:950]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:950]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_FCM 3: 2 MSI (s) (C8:74) [13:48:33:950]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_CONFIGD,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:950]: Executing op: RegRemoveValue(Name=loglevel,Value=#6,) MSI (s) (C8:74) [13:48:33:950]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:950]: Executing op: RegRemoveValue(Name=logenabled,Value=#1,) MSI (s) (C8:74) [13:48:33:950]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:950]: Executing op: RegRemoveValue(Name=enabled,Value=#1,) MSI (s) (C8:74) [13:48:33:950]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:950]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_CONFIGD 3: 2 MSI (s) (C8:74) [13:48:33:950]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_Scheduler\000017,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:950]: Executing op: RegRemoveValue(Name=param,,) MSI (s) (C8:74) [13:48:33:950]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:950]: Executing op: RegRemoveValue(Name=cmd,Value=fcconfig.exe,) MSI (s) (C8:74) [13:48:33:960]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:960]: Executing op: RegRemoveValue(Name=type,Value=#2,) MSI (s) (C8:74) [13:48:33:960]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:960]: Executing op: RegRemoveValue(Name=stop_flag,Value=#0,) MSI (s) (C8:74) [13:48:33:960]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:960]: Executing op: RegRemoveValue(Name=status,Value=#0,) MSI (s) (C8:74) [13:48:33:960]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:960]: Executing op: RegRemoveValue(Name=enabled,Value=#1,) MSI (s) (C8:74) [13:48:33:960]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:960]: Executing op: RegRemoveValue(Name=apptype,Value=#22,) MSI (s) (C8:74) [13:48:33:960]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:960]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_Scheduler\000017 3: 2 MSI (s) (C8:74) [13:48:33:960]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_Scheduler\000016,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:960]: Executing op: RegRemoveValue(Name=param,,) MSI (s) (C8:74) [13:48:33:960]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:970]: Executing op: RegRemoveValue(Name=cmd,Value=fcappdb.exe,) MSI (s) (C8:74) [13:48:33:970]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:970]: Executing op: RegRemoveValue(Name=type,Value=#9,) MSI (s) (C8:74) [13:48:33:970]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:970]: Executing op: RegRemoveValue(Name=stop_flag,Value=#0,) MSI (s) (C8:74) [13:48:33:970]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:970]: Executing op: RegRemoveValue(Name=status,Value=#0,) MSI (s) (C8:74) [13:48:33:970]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:970]: Executing op: RegRemoveValue(Name=enabled,Value=#1,) MSI (s) (C8:74) [13:48:33:970]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:970]: Executing op: RegRemoveValue(Name=apptype,Value=#20,) MSI (s) (C8:74) [13:48:33:970]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:970]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_Scheduler\000016 3: 2 MSI (s) (C8:74) [13:48:33:970]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_Scheduler\000011,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:970]: Executing op: RegRemoveValue(Name=param,,) MSI (s) (C8:74) [13:48:33:970]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:980]: Executing op: RegRemoveValue(Name=cmd,Value=FCDBLog.exe,) MSI (s) (C8:74) [13:48:33:980]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:980]: Executing op: RegRemoveValue(Name=type,Value=#9,) MSI (s) (C8:74) [13:48:33:980]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:980]: Executing op: RegRemoveValue(Name=stop_flag,Value=#0,) MSI (s) (C8:74) [13:48:33:980]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:980]: Executing op: RegRemoveValue(Name=status,Value=#0,) MSI (s) (C8:74) [13:48:33:980]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:980]: Executing op: RegRemoveValue(Name=enabled,Value=#1,) MSI (s) (C8:74) [13:48:33:980]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:980]: Executing op: RegRemoveValue(Name=apptype,Value=#14,) MSI (s) (C8:74) [13:48:33:980]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:980]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_Scheduler\000011 3: 2 MSI (s) (C8:74) [13:48:33:980]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_Scheduler\000008,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:980]: Executing op: RegRemoveValue(Name=param,,) MSI (s) (C8:74) [13:48:33:980]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:990]: Executing op: RegRemoveValue(Name=cmd,Value=FortiTray.exe,) MSI (s) (C8:74) [13:48:33:990]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:990]: Executing op: RegRemoveValue(Name=type,Value=#9,) MSI (s) (C8:74) [13:48:33:990]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:990]: Executing op: RegRemoveValue(Name=stop_flag,Value=#0,) MSI (s) (C8:74) [13:48:33:990]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:990]: Executing op: RegRemoveValue(Name=status,Value=#0,) MSI (s) (C8:74) [13:48:33:990]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:990]: Executing op: RegRemoveValue(Name=enabled,Value=#1,) MSI (s) (C8:74) [13:48:33:990]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:33:990]: Executing op: RegRemoveValue(Name=apptype,Value=#11,) MSI (s) (C8:74) [13:48:33:990]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:33:990]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_Scheduler\000008 3: 2 MSI (s) (C8:74) [13:48:33:990]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_Scheduler\000003,,BinaryType=0,,) MSI (s) (C8:74) [13:48:33:990]: Executing op: RegRemoveValue(Name=param,,) MSI (s) (C8:74) [13:48:33:990]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:34:000]: Executing op: RegRemoveValue(Name=cmd,Value=update_task.exe,) MSI (s) (C8:74) [13:48:34:000]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:34:000]: Executing op: RegRemoveValue(Name=type,Value=#2,) MSI (s) (C8:74) [13:48:34:000]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:34:000]: Executing op: RegRemoveValue(Name=stop_flag,Value=#0,) MSI (s) (C8:74) [13:48:34:000]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:34:000]: Executing op: RegRemoveValue(Name=status,Value=#0,) MSI (s) (C8:74) [13:48:34:000]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:34:000]: Executing op: RegRemoveValue(Name=enabled,Value=#0,) MSI (s) (C8:74) [13:48:34:000]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:34:000]: Executing op: RegRemoveValue(Name=apptype,Value=#2,) MSI (s) (C8:74) [13:48:34:000]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:000]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_Scheduler\000003 3: 2 MSI (s) (C8:74) [13:48:34:000]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_UPDATE\SoftwareUpdate,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:000]: Executing op: RegRemoveValue(Name=NotificationMode,Value=#2,) MSI (s) (C8:74) [13:48:34:010]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:010]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_UPDATE\SoftwareUpdate 3: 2 MSI (s) (C8:74) [13:48:34:010]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_UPDATE,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:010]: Executing op: RegRemoveValue(Name=loglevel,Value=#6,) MSI (s) (C8:74) [13:48:34:010]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:34:010]: Executing op: RegRemoveValue(Name=logenabled,Value=#1,) MSI (s) (C8:74) [13:48:34:010]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:34:010]: Executing op: RegRemoveValue(Name=enabled,Value=#1,) MSI (s) (C8:74) [13:48:34:010]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:010]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_UPDATE 3: 2 MSI (s) (C8:74) [13:48:34:010]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_Scheduler,SecurityDescriptor=BinaryData,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:010]: Executing op: RegRemoveValue(Name=loglevel,Value=#6,) MSI (s) (C8:74) [13:48:34:010]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:34:010]: Executing op: RegRemoveValue(Name=logenabled,Value=#1,) MSI (s) (C8:74) [13:48:34:010]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:34:020]: Executing op: RegRemoveValue(Name=enabled,Value=#1,) MSI (s) (C8:74) [13:48:34:020]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:34:020]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_UI,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:020]: Executing op: RegRemoveValue(Name=loglevel,Value=#6,) MSI (s) (C8:74) [13:48:34:020]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:34:020]: Executing op: RegRemoveValue(Name=logenabled,Value=#1,) MSI (s) (C8:74) [13:48:34:020]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:020]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_FORTITRAY,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:020]: Executing op: RegRemoveValue(Name=enabled,Value=#1,) MSI (s) (C8:74) [13:48:34:020]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:020]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_FORTITRAY 3: 2 MSI (s) (C8:74) [13:48:34:020]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_DBLOG,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:020]: Executing op: RegRemoveValue(Name=enabled,Value=#1,) MSI (s) (C8:74) [13:48:34:020]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:020]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_DBLOG 3: 2 MSI (s) (C8:74) [13:48:34:030]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_VPN,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:030]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:030]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_Scheduler\000006,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:030]: Executing op: RegRemoveValue(Name=param,,) MSI (s) (C8:74) [13:48:34:030]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:34:030]: Executing op: RegRemoveValue(Name=cmd,Value=SubmitV.exe,) MSI (s) (C8:74) [13:48:34:030]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:34:030]: Executing op: RegRemoveValue(Name=type,Value=#2,) MSI (s) (C8:74) [13:48:34:030]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:34:030]: Executing op: RegRemoveValue(Name=stop_flag,Value=#0,) MSI (s) (C8:74) [13:48:34:030]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:34:030]: Executing op: RegRemoveValue(Name=status,Value=#0,) MSI (s) (C8:74) [13:48:34:030]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:34:030]: Executing op: RegRemoveValue(Name=enabled,Value=#0,) MSI (s) (C8:74) [13:48:34:030]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:34:040]: Executing op: RegRemoveValue(Name=apptype,Value=#7,) MSI (s) (C8:74) [13:48:34:040]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:040]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_Scheduler\000006 3: 2 MSI (s) (C8:74) [13:48:34:040]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Fortinet\FortiClient\FA_SUBMIT,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:040]: Executing op: RegRemoveValue(Name=enabled,Value=#1,) MSI (s) (C8:74) [13:48:34:040]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:040]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Fortinet\FortiClient\FA_SUBMIT 3: 2 MSI (s) (C8:74) [13:48:34:040]: Executing op: RegOpenKey(,Key=CLSID\{DE64E08D-8F19-4D75-A277-855E9DE74AA5}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4},,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:040]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:040]: Executing op: RegOpenKey(,Key=CLSID\{DE64E08D-8F19-4D75-A277-855E9DE74AA5}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4},,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:040]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:040]: Executing op: RegOpenKey(,Key=CLSID\{DE64E08D-8F19-4D75-A277-855E9DE74AA5}\Control,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:040]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:040]: Executing op: RegOpenKey(,Key=CLSID\{DE64E08D-8F19-4D75-A277-855E9DE74AA5}\Version,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:040]: Executing op: RegRemoveValue(,Value=1.0,) MSI (s) (C8:74) [13:48:34:050]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:050]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\CLSID\{DE64E08D-8F19-4D75-A277-855E9DE74AA5}\Version 3: 2 MSI (s) (C8:74) [13:48:34:050]: Executing op: RegOpenKey(,Key=CLSID\{DE64E08D-8F19-4D75-A277-855E9DE74AA5}\TypeLib,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:050]: Executing op: RegRemoveValue(,Value={2897EECE-8996-418B-A0D9-C638FBD221CE},) MSI (s) (C8:74) [13:48:34:050]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:050]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\CLSID\{DE64E08D-8F19-4D75-A277-855E9DE74AA5}\TypeLib 3: 2 MSI (s) (C8:74) [13:48:34:050]: Executing op: RegOpenKey(,Key=CLSID\{DE64E08D-8F19-4D75-A277-855E9DE74AA5},SecurityDescriptor=BinaryData,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:050]: Executing op: RegRemoveValue(,Value=cachecleaner Class,) MSI (s) (C8:74) [13:48:34:050]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:34:050]: Executing op: RegOpenKey(,Key=CLSID\{DE64E08D-8F19-4D75-A277-855E9DE74AA5}\InprocServer32,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:050]: Executing op: RegRemoveValue(Name=ThreadingModel,Value=Apartment,) MSI (s) (C8:74) [13:48:34:050]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:34:050]: Executing op: RegRemoveValue(,Value=C:\Program Files (x86)\Fortinet\FortiClient\forticachecleaner.dll,) MSI (s) (C8:74) [13:48:34:050]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:050]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\CLSID\{DE64E08D-8F19-4D75-A277-855E9DE74AA5}\InprocServer32 3: 2 MSI (s) (C8:74) [13:48:34:060]: Executing op: RegOpenKey(,Key=CLSID\{DE64E08D-8F19-4D75-A277-855E9DE74AA5}\ProgID,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:060]: Executing op: RegRemoveValue(,Value=Forticachecleaner.cachecleaner.1,) MSI (s) (C8:74) [13:48:34:060]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:060]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\CLSID\{DE64E08D-8F19-4D75-A277-855E9DE74AA5}\ProgID 3: 2 MSI (s) (C8:74) [13:48:34:060]: Executing op: RegOpenKey(,Key=Forticachecleaner.cachecleaner.1\CLSID,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:060]: Executing op: RegRemoveValue(,Value={DE64E08D-8F19-4D75-A277-855E9DE74AA5},) MSI (s) (C8:74) [13:48:34:060]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:060]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\Forticachecleaner.cachecleaner.1\CLSID 3: 2 MSI (s) (C8:74) [13:48:34:060]: Executing op: RegOpenKey(,Key=Forticachecleaner.cachecleaner.1,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:060]: Executing op: RegRemoveValue(,Value=cachecleaner Class,) MSI (s) (C8:74) [13:48:34:060]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:060]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\Forticachecleaner.cachecleaner.1 3: 2 MSI (s) (C8:74) [13:48:34:060]: Executing op: RegOpenKey(,Key=Forticachecleaner.cachecleaner\CurVer,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:060]: Executing op: RegRemoveValue(,Value=Forticachecleaner.cachecleaner.1,) MSI (s) (C8:74) [13:48:34:070]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:070]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\Forticachecleaner.cachecleaner\CurVer 3: 2 MSI (s) (C8:74) [13:48:34:070]: Executing op: RegOpenKey(,Key=CLSID\{DE64E08D-8F19-4D75-A277-855E9DE74AA5}\VersionIndependentProgID,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:070]: Executing op: RegRemoveValue(,Value=Forticachecleaner.cachecleaner,) MSI (s) (C8:74) [13:48:34:070]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:070]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\CLSID\{DE64E08D-8F19-4D75-A277-855E9DE74AA5}\VersionIndependentProgID 3: 2 MSI (s) (C8:74) [13:48:34:070]: Executing op: RegOpenKey(,Key=Forticachecleaner.cachecleaner\CLSID,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:070]: Executing op: RegRemoveValue(,Value={DE64E08D-8F19-4D75-A277-855E9DE74AA5},) MSI (s) (C8:74) [13:48:34:070]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:070]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\Forticachecleaner.cachecleaner\CLSID 3: 2 MSI (s) (C8:74) [13:48:34:070]: Executing op: RegOpenKey(,Key=Forticachecleaner.cachecleaner,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:070]: Executing op: RegRemoveValue(,Value=cachecleaner Class,) MSI (s) (C8:74) [13:48:34:070]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:070]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\Forticachecleaner.cachecleaner 3: 2 MSI (s) (C8:74) [13:48:34:070]: Executing op: RegOpenKey(,Key=CLSID\{91C045A0-A2A0-4FBC-9F04-01BD4E090301}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4},,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:070]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:080]: Executing op: RegOpenKey(,Key=CLSID\{91C045A0-A2A0-4FBC-9F04-01BD4E090301}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4},,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:080]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:080]: Executing op: RegOpenKey(,Key=CLSID\{91C045A0-A2A0-4FBC-9F04-01BD4E090301}\Control,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:080]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:080]: Executing op: RegOpenKey(,Key=CLSID\{91C045A0-A2A0-4FBC-9F04-01BD4E090301}\Version,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:080]: Executing op: RegRemoveValue(,Value=1.0,) MSI (s) (C8:74) [13:48:34:080]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:080]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\CLSID\{91C045A0-A2A0-4FBC-9F04-01BD4E090301}\Version 3: 2 MSI (s) (C8:74) [13:48:34:080]: Executing op: RegOpenKey(,Key=CLSID\{91C045A0-A2A0-4FBC-9F04-01BD4E090301}\TypeLib,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:080]: Executing op: RegRemoveValue(,Value={5F14603F-2FC5-47D5-BDE2-7693DC34E37A},) MSI (s) (C8:74) [13:48:34:080]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:080]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\CLSID\{91C045A0-A2A0-4FBC-9F04-01BD4E090301}\TypeLib 3: 2 MSI (s) (C8:74) [13:48:34:080]: Executing op: RegOpenKey(,Key=CLSID\{91C045A0-A2A0-4FBC-9F04-01BD4E090301},SecurityDescriptor=BinaryData,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:080]: Executing op: RegRemoveValue(,Value=FortiHostCheck Class,) MSI (s) (C8:74) [13:48:34:080]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:34:090]: Executing op: RegOpenKey(,Key=CLSID\{91C045A0-A2A0-4FBC-9F04-01BD4E090301}\InprocServer32,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:090]: Executing op: RegRemoveValue(Name=ThreadingModel,Value=Apartment,) MSI (s) (C8:74) [13:48:34:090]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:34:090]: Executing op: RegRemoveValue(,Value=C:\Program Files (x86)\Fortinet\FortiClient\SslvpnHostCheck.dll,) MSI (s) (C8:74) [13:48:34:090]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:090]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\CLSID\{91C045A0-A2A0-4FBC-9F04-01BD4E090301}\InprocServer32 3: 2 MSI (s) (C8:74) [13:48:34:090]: Executing op: RegOpenKey(,Key=CLSID\{91C045A0-A2A0-4FBC-9F04-01BD4E090301}\ProgID,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:090]: Executing op: RegRemoveValue(,Value=SslvpnHostCheck.FortiHostCheck.1,) MSI (s) (C8:74) [13:48:34:090]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:090]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\CLSID\{91C045A0-A2A0-4FBC-9F04-01BD4E090301}\ProgID 3: 2 MSI (s) (C8:74) [13:48:34:090]: Executing op: RegOpenKey(,Key=SslvpnHostCheck.FortiHostCheck.1\CLSID,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:090]: Executing op: RegRemoveValue(,Value={91C045A0-A2A0-4FBC-9F04-01BD4E090301},) MSI (s) (C8:74) [13:48:34:090]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:090]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\SslvpnHostCheck.FortiHostCheck.1\CLSID 3: 2 MSI (s) (C8:74) [13:48:34:090]: Executing op: RegOpenKey(,Key=SslvpnHostCheck.FortiHostCheck.1,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:100]: Executing op: RegRemoveValue(,Value=FortiHostCheck Class,) MSI (s) (C8:74) [13:48:34:100]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:100]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\SslvpnHostCheck.FortiHostCheck.1 3: 2 MSI (s) (C8:74) [13:48:34:100]: Executing op: RegOpenKey(,Key=SslvpnHostCheck.FortiHostCheck\CurVer,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:100]: Executing op: RegRemoveValue(,Value=SslvpnHostCheck.FortiHostCheck.1,) MSI (s) (C8:74) [13:48:34:100]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:100]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\SslvpnHostCheck.FortiHostCheck\CurVer 3: 2 MSI (s) (C8:74) [13:48:34:100]: Executing op: RegOpenKey(,Key=CLSID\{91C045A0-A2A0-4FBC-9F04-01BD4E090301}\VersionIndependentProgID,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:100]: Executing op: RegRemoveValue(,Value=SslvpnHostCheck.FortiHostCheck,) MSI (s) (C8:74) [13:48:34:100]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:100]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\CLSID\{91C045A0-A2A0-4FBC-9F04-01BD4E090301}\VersionIndependentProgID 3: 2 MSI (s) (C8:74) [13:48:34:100]: Executing op: RegOpenKey(,Key=SslvpnHostCheck.FortiHostCheck\CLSID,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:100]: Executing op: RegRemoveValue(,Value={91C045A0-A2A0-4FBC-9F04-01BD4E090301},) MSI (s) (C8:74) [13:48:34:100]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:100]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\SslvpnHostCheck.FortiHostCheck\CLSID 3: 2 MSI (s) (C8:74) [13:48:34:100]: Executing op: RegOpenKey(,Key=SslvpnHostCheck.FortiHostCheck,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:110]: Executing op: RegRemoveValue(,Value=FortiHostCheck Class,) MSI (s) (C8:74) [13:48:34:110]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:110]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\SslvpnHostCheck.FortiHostCheck 3: 2 MSI (s) (C8:74) [13:48:34:110]: Executing op: RegOpenKey(,Key=CLSID\{B0882EB7-81A5-4A11-8D45-71888F973933}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4},,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:110]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:110]: Executing op: RegOpenKey(,Key=CLSID\{B0882EB7-81A5-4A11-8D45-71888F973933}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4},,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:110]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:110]: Executing op: RegOpenKey(,Key=CLSID\{B0882EB7-81A5-4A11-8D45-71888F973933}\Control,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:110]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:110]: Executing op: RegOpenKey(,Key=CLSID\{B0882EB7-81A5-4A11-8D45-71888F973933}\Version,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:110]: Executing op: RegRemoveValue(,Value=1.0,) MSI (s) (C8:74) [13:48:34:110]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:110]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\CLSID\{B0882EB7-81A5-4A11-8D45-71888F973933}\Version 3: 2 MSI (s) (C8:74) [13:48:34:110]: Executing op: RegOpenKey(,Key=CLSID\{B0882EB7-81A5-4A11-8D45-71888F973933}\TypeLib,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:110]: Executing op: RegRemoveValue(,Value={2FC33C7C-ACAB-4733-8C02-CEE2FF8AFD32},) MSI (s) (C8:74) [13:48:34:110]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:120]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\CLSID\{B0882EB7-81A5-4A11-8D45-71888F973933}\TypeLib 3: 2 MSI (s) (C8:74) [13:48:34:120]: Executing op: RegOpenKey(,Key=CLSID\{B0882EB7-81A5-4A11-8D45-71888F973933},SecurityDescriptor=BinaryData,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:120]: Executing op: RegRemoveValue(,Value=fortisslvpn Class,) MSI (s) (C8:74) [13:48:34:120]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:34:120]: Executing op: RegOpenKey(,Key=CLSID\{B0882EB7-81A5-4A11-8D45-71888F973933}\InprocServer32,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:120]: Executing op: RegRemoveValue(Name=ThreadingModel,Value=Apartment,) MSI (s) (C8:74) [13:48:34:120]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:34:120]: Executing op: RegRemoveValue(,Value=C:\Program Files (x86)\Fortinet\FortiClient\forticontrol.dll,) MSI (s) (C8:74) [13:48:34:120]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:120]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\CLSID\{B0882EB7-81A5-4A11-8D45-71888F973933}\InprocServer32 3: 2 MSI (s) (C8:74) [13:48:34:120]: Executing op: RegOpenKey(,Key=CLSID\{B0882EB7-81A5-4A11-8D45-71888F973933}\ProgID,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:120]: Executing op: RegRemoveValue(,Value=Forticontrol.fortisslvpn.1,) MSI (s) (C8:74) [13:48:34:120]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:120]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\CLSID\{B0882EB7-81A5-4A11-8D45-71888F973933}\ProgID 3: 2 MSI (s) (C8:74) [13:48:34:120]: Executing op: RegOpenKey(,Key=Forticontrol.fortisslvpn.1\CLSID,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:130]: Executing op: RegRemoveValue(,Value={B0882EB7-81A5-4A11-8D45-71888F973933},) MSI (s) (C8:74) [13:48:34:130]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:130]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\Forticontrol.fortisslvpn.1\CLSID 3: 2 MSI (s) (C8:74) [13:48:34:130]: Executing op: RegOpenKey(,Key=Forticontrol.fortisslvpn.1,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:130]: Executing op: RegRemoveValue(,Value=fortisslvpn Class,) MSI (s) (C8:74) [13:48:34:130]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:130]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\Forticontrol.fortisslvpn.1 3: 2 MSI (s) (C8:74) [13:48:34:130]: Executing op: RegOpenKey(,Key=Forticontrol.fortisslvpn\CurVer,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:130]: Executing op: RegRemoveValue(,Value=Forticontrol.fortisslvpn.1,) MSI (s) (C8:74) [13:48:34:130]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:130]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\Forticontrol.fortisslvpn\CurVer 3: 2 MSI (s) (C8:74) [13:48:34:130]: Executing op: RegOpenKey(,Key=CLSID\{B0882EB7-81A5-4A11-8D45-71888F973933}\VersionIndependentProgID,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:130]: Executing op: RegRemoveValue(,Value=Forticontrol.fortisslvpn,) MSI (s) (C8:74) [13:48:34:130]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:130]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\CLSID\{B0882EB7-81A5-4A11-8D45-71888F973933}\VersionIndependentProgID 3: 2 MSI (s) (C8:74) [13:48:34:130]: Executing op: RegOpenKey(,Key=Forticontrol.fortisslvpn\CLSID,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:130]: Executing op: RegRemoveValue(,Value={B0882EB7-81A5-4A11-8D45-71888F973933},) MSI (s) (C8:74) [13:48:34:140]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:140]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\Forticontrol.fortisslvpn\CLSID 3: 2 MSI (s) (C8:74) [13:48:34:140]: Executing op: RegOpenKey(,Key=Forticontrol.fortisslvpn,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:140]: Executing op: RegRemoveValue(,Value=fortisslvpn Class,) MSI (s) (C8:74) [13:48:34:140]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:140]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\Forticontrol.fortisslvpn 3: 2 MSI (s) (C8:74) [13:48:34:140]: Executing op: RegOpenKey(,Key=TypeLib\{1363D583-F150-478E-B40F-C69E3DA8ACEB}\1.0\FLAGS,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:140]: Executing op: RegRemoveValue(,Value=0,) MSI (s) (C8:74) [13:48:34:140]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:140]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\TypeLib\{1363D583-F150-478E-B40F-C69E3DA8ACEB}\1.0\FLAGS 3: 2 MSI (s) (C8:74) [13:48:34:140]: Executing op: RegOpenKey(,Key=TypeLib\{1363D583-F150-478E-B40F-C69E3DA8ACEB}\1.0\0\win32,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:140]: Executing op: RegRemoveValue(,Value=C:\Program Files (x86)\Fortinet\FortiClient\FCCOMIntDLL.dll,) MSI (s) (C8:74) [13:48:34:140]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:140]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\TypeLib\{1363D583-F150-478E-B40F-C69E3DA8ACEB}\1.0\0\win32 3: 2 MSI (s) (C8:74) [13:48:34:140]: Executing op: RegOpenKey(,Key=TypeLib\{1363D583-F150-478E-B40F-C69E3DA8ACEB}\1.0,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:140]: Executing op: RegRemoveValue(,Value=FCCOMIntDLL 1.0 Type Library,) MSI (s) (C8:74) [13:48:34:150]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:150]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\TypeLib\{1363D583-F150-478E-B40F-C69E3DA8ACEB}\1.0 3: 2 MSI (s) (C8:74) [13:48:34:150]: Executing op: RegOpenKey(,Key=Interface\{F8A4D3F5-76E7-4B16-BD00-53925CE9B993}\ProxyStubClsid32,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:150]: Executing op: RegRemoveValue(,Value={00020424-0000-0000-C000-000000000046},) MSI (s) (C8:74) [13:48:34:150]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:150]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\Interface\{F8A4D3F5-76E7-4B16-BD00-53925CE9B993}\ProxyStubClsid32 3: 2 MSI (s) (C8:74) [13:48:34:150]: Executing op: RegOpenKey(,Key=Interface\{F8A4D3F5-76E7-4B16-BD00-53925CE9B993}\ProxyStubClsid,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:150]: Executing op: RegRemoveValue(,Value={00020424-0000-0000-C000-000000000046},) MSI (s) (C8:74) [13:48:34:150]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:150]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\Interface\{F8A4D3F5-76E7-4B16-BD00-53925CE9B993}\ProxyStubClsid 3: 2 MSI (s) (C8:74) [13:48:34:150]: Executing op: RegOpenKey(,Key=Interface\{F8A4D3F5-76E7-4B16-BD00-53925CE9B993}\TypeLib,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:150]: Executing op: RegRemoveValue(Name=Version,Value=1.0,) MSI (s) (C8:74) [13:48:34:150]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:34:150]: Executing op: RegRemoveValue(,Value={1363D583-F150-478E-B40F-C69E3DA8ACEB},) MSI (s) (C8:74) [13:48:34:150]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:160]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\Interface\{F8A4D3F5-76E7-4B16-BD00-53925CE9B993}\TypeLib 3: 2 MSI (s) (C8:74) [13:48:34:160]: Executing op: RegOpenKey(,Key=Interface\{F8A4D3F5-76E7-4B16-BD00-53925CE9B993},,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:160]: Executing op: RegRemoveValue(,Value=IVPN,) MSI (s) (C8:74) [13:48:34:160]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:160]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\Interface\{F8A4D3F5-76E7-4B16-BD00-53925CE9B993} 3: 2 MSI (s) (C8:74) [13:48:34:160]: Executing op: RegOpenKey(,Key=Interface\{AFE4D906-E9DA-4431-9000-F58CFD115F76}\ProxyStubClsid32,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:160]: Executing op: RegRemoveValue(,Value={00020420-0000-0000-C000-000000000046},) MSI (s) (C8:74) [13:48:34:160]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:160]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\Interface\{AFE4D906-E9DA-4431-9000-F58CFD115F76}\ProxyStubClsid32 3: 2 MSI (s) (C8:74) [13:48:34:160]: Executing op: RegOpenKey(,Key=Interface\{AFE4D906-E9DA-4431-9000-F58CFD115F76}\ProxyStubClsid,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:160]: Executing op: RegRemoveValue(,Value={00020420-0000-0000-C000-000000000046},) MSI (s) (C8:74) [13:48:34:160]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:160]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\Interface\{AFE4D906-E9DA-4431-9000-F58CFD115F76}\ProxyStubClsid 3: 2 MSI (s) (C8:74) [13:48:34:170]: Executing op: RegOpenKey(,Key=Interface\{AFE4D906-E9DA-4431-9000-F58CFD115F76}\TypeLib,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:170]: Executing op: RegRemoveValue(Name=Version,Value=1.0,) MSI (s) (C8:74) [13:48:34:170]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:34:170]: Executing op: RegRemoveValue(,Value={1363D583-F150-478E-B40F-C69E3DA8ACEB},) MSI (s) (C8:74) [13:48:34:170]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:170]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\Interface\{AFE4D906-E9DA-4431-9000-F58CFD115F76}\TypeLib 3: 2 MSI (s) (C8:74) [13:48:34:170]: Executing op: RegOpenKey(,Key=Interface\{AFE4D906-E9DA-4431-9000-F58CFD115F76},,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:170]: Executing op: RegRemoveValue(,Value=_IVPNEvents,) MSI (s) (C8:74) [13:48:34:170]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:170]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\Interface\{AFE4D906-E9DA-4431-9000-F58CFD115F76} 3: 2 MSI (s) (C8:74) [13:48:34:170]: Executing op: RegOpenKey(,Key=CLSID\{248DA346-4BA5-4997-A534-B469C50326DA}\Version,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:170]: Executing op: RegRemoveValue(,Value=1.0,) MSI (s) (C8:74) [13:48:34:170]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:170]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\CLSID\{248DA346-4BA5-4997-A534-B469C50326DA}\Version 3: 2 MSI (s) (C8:74) [13:48:34:170]: Executing op: RegOpenKey(,Key=CLSID\{248DA346-4BA5-4997-A534-B469C50326DA}\TypeLib,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:180]: Executing op: RegRemoveValue(,Value={1363D583-F150-478E-B40F-C69E3DA8ACEB},) MSI (s) (C8:74) [13:48:34:180]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:180]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\CLSID\{248DA346-4BA5-4997-A534-B469C50326DA}\TypeLib 3: 2 MSI (s) (C8:74) [13:48:34:180]: Executing op: RegOpenKey(,Key=CLSID\{248DA346-4BA5-4997-A534-B469C50326DA},SecurityDescriptor=BinaryData,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:180]: Executing op: RegRemoveValue(,Value=VPN Class,) MSI (s) (C8:74) [13:48:34:180]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:34:180]: Executing op: RegOpenKey(,Key=CLSID\{248DA346-4BA5-4997-A534-B469C50326DA}\InprocServer32,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:180]: Executing op: RegRemoveValue(Name=ThreadingModel,Value=Apartment,) MSI (s) (C8:74) [13:48:34:180]: Executing op: RegCreateKey() MSI (s) (C8:74) [13:48:34:180]: Executing op: RegRemoveValue(,Value=C:\Program Files (x86)\Fortinet\FortiClient\FCCOMIntDLL.dll,) MSI (s) (C8:74) [13:48:34:180]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:180]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\CLSID\{248DA346-4BA5-4997-A534-B469C50326DA}\InprocServer32 3: 2 MSI (s) (C8:74) [13:48:34:190]: Executing op: RegOpenKey(,Key=CLSID\{248DA346-4BA5-4997-A534-B469C50326DA}\ProgID,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:190]: Executing op: RegRemoveValue(,Value=FortiClient.VPN.1,) MSI (s) (C8:74) [13:48:34:190]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:190]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\CLSID\{248DA346-4BA5-4997-A534-B469C50326DA}\ProgID 3: 2 MSI (s) (C8:74) [13:48:34:190]: Executing op: RegOpenKey(,Key=FortiClient.VPN.1\CLSID,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:190]: Executing op: RegRemoveValue(,Value={248DA346-4BA5-4997-A534-B469C50326DA},) MSI (s) (C8:74) [13:48:34:190]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:190]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\FortiClient.VPN.1\CLSID 3: 2 MSI (s) (C8:74) [13:48:34:190]: Executing op: RegOpenKey(,Key=FortiClient.VPN.1,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:190]: Executing op: RegRemoveValue(,Value=VPN Class,) MSI (s) (C8:74) [13:48:34:190]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:190]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\FortiClient.VPN.1 3: 2 MSI (s) (C8:74) [13:48:34:190]: Executing op: RegOpenKey(,Key=FortiClient.VPN\CurVer,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:190]: Executing op: RegRemoveValue(,Value=FortiClient.VPN.1,) MSI (s) (C8:74) [13:48:34:190]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:190]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\FortiClient.VPN\CurVer 3: 2 MSI (s) (C8:74) [13:48:34:190]: Executing op: RegOpenKey(,Key=CLSID\{248DA346-4BA5-4997-A534-B469C50326DA}\VersionIndependentProgID,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:190]: Executing op: RegRemoveValue(,Value=FortiClient.VPN,) MSI (s) (C8:74) [13:48:34:190]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:190]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\CLSID\{248DA346-4BA5-4997-A534-B469C50326DA}\VersionIndependentProgID 3: 2 MSI (s) (C8:74) [13:48:34:200]: Executing op: RegOpenKey(,Key=FortiClient.VPN\CLSID,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:200]: Executing op: RegRemoveValue(,Value={248DA346-4BA5-4997-A534-B469C50326DA},) MSI (s) (C8:74) [13:48:34:200]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:200]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\FortiClient.VPN\CLSID 3: 2 MSI (s) (C8:74) [13:48:34:200]: Executing op: RegOpenKey(,Key=FortiClient.VPN,,BinaryType=0,,) MSI (s) (C8:74) [13:48:34:200]: Executing op: RegRemoveValue(,Value=VPN Class,) MSI (s) (C8:74) [13:48:34:200]: Executing op: RegRemoveKey() MSI (s) (C8:74) [13:48:34:200]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Classes\FortiClient.VPN 3: 2 Rollback: Creating shortcuts MSI (s) (C8:74) [13:48:34:200]: Executing op: ActionStart(Name=CreateShortcuts,Description=Creating shortcuts,Template=Shortcut: [1]) MSI (s) (C8:74) [13:48:34:200]: Executing op: SetTargetFolder(Folder=25) MSI (s) (C8:74) [13:48:34:200]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop MSI (s) (C8:74) [13:48:34:200]: Executing op: FileRemove(,FileName=FortiClient.lnk,,) MSI (s) (C8:74) [13:48:34:200]: Executing op: SetTargetFolder(Folder=23\FortiClient\) MSI (s) (C8:74) [13:48:34:210]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs MSI (s) (C8:74) [13:48:34:210]: Executing op: FileRemove(,FileName=FortiClient.lnk,,) MSI (s) (C8:74) [13:48:34:210]: Note: 1: 2318 2: MSI (s) (C8:74) [13:48:34:210]: Executing op: FileRemove(,FileName=C:\Windows\Installer\{863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C}\Icon_Help,Elevate=1,) MSI (s) (C8:74) [13:48:34:210]: Note: 1: 2318 2: MSI (s) (C8:74) [13:48:34:210]: Executing op: FileRemove(,FileName=C:\Windows\Installer\{863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C}\Icon_Adobe,Elevate=1,) MSI (s) (C8:74) [13:48:34:210]: Note: 1: 2318 2: MSI (s) (C8:74) [13:48:34:210]: Executing op: FileRemove(,FileName=C:\Windows\Installer\{863EB7F6-0FD9-4BA5-B95A-FC48218AEF5C}\Icon_FCTLogo,Elevate=1,) MSI (s) (C8:74) [13:48:34:210]: Note: 1: 2318 2: Rollback: CA_InstallDrivers