2025-03-04 19:27:19.274 [0698.0b74]  I: ul::ProtectedHoster::needInstallDriver: The same version of ELAM is installed. Driver won't be updated: 1.0.47.24
2025-03-04 19:27:19.306 [0698.0b74]  I: ul::ProtectedHoster::updateHoster: basePath=C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1739541281 originalHosterPath=C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1739541281\fshoster64.exe pplHosterPath=C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1739541281\fsulprothoster.exe serviceName=fsulprothoster
2025-03-04 19:27:19.306 [0698.0b74]  I: ul::ProtectedHoster::updateHoster: hoster not exist C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1739541281\fsulprothoster.exe
2025-03-04 19:27:19.306 [0698.0b74]  I: ppl::IsProtected: fsulprothoster
2025-03-04 19:27:19.306 [0698.0b74]  I: ppl::IsProtected: Protection status: 3
2025-03-04 19:27:19.306 [0698.0b74]  I: ul::ProtectedHoster::removeHosterProtection: Service exists and service protected fsulprothoster
2025-03-04 19:27:19.306 [0698.0b74]  I: ul::ProtectedHoster::isPreNamespacingHosterCurrentlyInstalled: C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1738323940\fsulprothoster.exe: version 3.12.140.0; min non-ns version 1.52.0.0; isPreNs=0
2025-03-04 19:27:19.306 [0698.0b74]  I: ppl::IsProtected: fsulprothoster
2025-03-04 19:27:19.306 [0698.0b74]  I: ppl::IsProtected: Protection status: 3
2025-03-04 19:27:19.306 [0698.0b74]  I: ul::ProtectedHoster::removeHosterProtection: Unprotecting hoster with 2.0 API
2025-03-04 19:27:19.306 [0698.0b74]  I: ppl::PrepareForUpdate: fsulprothoster state is 4
2025-03-04 19:27:19.306 [0698.0b74]  I: ul::ProtectedHoster::removeHosterProtection: The hoster is not protected, we can update it
2025-03-04 19:27:19.306 [0698.0b74]  I: ul::ProtectedHoster::installProtectedService: Registering service fsulprothoster, path C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1739541281\fsulprothoster.exe, cmd --service --namespace ul_default --id 5
2025-03-04 19:27:19.306 [0698.0b74]  I: fs::ul::`anonymous-namespace'::dumpServiceState: Service fsulprothoster status
2025-03-04 19:27:19.306 [0698.0b74]  I: fs::ul::`anonymous-namespace'::dumpServiceState: state=4, win32code=0, exitCode=0, pid=5084, flags=0
2025-03-04 19:27:19.306 [0698.0b74]  I: fs::ul::`anonymous-namespace'::dumpServiceState: ServiceType: 16, StartType 2, path='"C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1738323940\fsulprothoster.exe" --service --namespace ul_default --id 5' start='LocalSystem' name='F-Secure Ultralight Protected Hoster'
2025-03-04 19:27:19.322 [0698.0b74]  I: fs::ul::UpdatedService::update: fsulprothoster service is updated
2025-03-04 19:27:19.322 [0698.0b74]  I: fs::ul::UpdatedService::configureAutoRestart: Made fsulprothoster auto restartable
2025-03-04 19:27:19.322 [0698.0b74]  I: fs::ul::UpdatedService::configureAutoRestart: Made fsulprothoster non restartable
2025-03-04 19:27:19.322 [0698.0b74]  I: fs::ul::UpdatedService::stop: fsulprothoster service is stopping
2025-03-04 19:27:19.449 [0698.0b74]  I: fs::ul::UpdatedService::stop: fsulprothoster service stopped
2025-03-04 19:27:19.449 [0698.0b74]  I: fs::ul::UpdatedService::configureAutoRestart: Made fsulprothoster auto restartable
2025-03-04 19:27:19.449 [0698.0b74]  I: ul::ProtectedHoster::configureHosterRegistry: set fork mode under SOFTWARE\F-Secure\NS\ul_default\CCF\Hoster as 1
2025-03-04 19:27:19.449 [0698.0b74]  I: ppl::EnableProtection: fsulprothoster
2025-03-04 19:27:19.465 [0698.0b74]  I: ul::ProtectedHoster::updateHoster: enabled protection 1
2025-03-04 19:27:19.465 [0698.0b74]  I: ul::ProtectedHoster::registerPPLPlugin: Updating PPL hoster plugin: C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1739541281\wsc_plugin64.dll
2025-03-04 19:27:19.465 [0698.0b74]  I: ul::ProtectedHoster::registerPPLPlugin: Updating PPL hoster plugin: C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1739541281\fsetw_plugin64.dll
2025-03-04 19:27:19.484 [0698.0b74]  I: ul::ProtectedHoster::enableWSC: restored wsc.register 1
2025-03-04 19:27:19.484 [0698.0b74]  I: MainLogic::InstallUltralightHoster: register fsulhoster path C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1739541281\fshoster64.exe, cmd --notify-preshutdown --service --namespace ul_default
2025-03-04 19:27:19.484 [0698.0b74]  I: fs::ul::`anonymous-namespace'::dumpServiceState: Service fsulhoster status
2025-03-04 19:27:19.484 [0698.0b74]  I: fs::ul::`anonymous-namespace'::dumpServiceState: state=4, win32code=0, exitCode=0, pid=5004, flags=0
2025-03-04 19:27:19.484 [0698.0b74]  I: fs::ul::`anonymous-namespace'::dumpServiceState: ServiceType: 16, StartType 2, path='"C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1738323940\fshoster64.exe" --notify-preshutdown --service --namespace ul_default' start='LocalSystem' name='F-Secure Ultralight Hoster'
2025-03-04 19:27:19.496 [0698.0b74]  I: fs::ul::UpdatedService::update: fsulhoster service is updated
2025-03-04 19:27:19.497 [0698.0b74]  I: fs::ul::UpdatedService::configureAutoRestart: Made fsulhoster auto restartable
2025-03-04 19:27:19.501 [0698.0b74]  I: MainLogic::InstallNetworkHoster: register network fsulhoster path C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1739541281\fshoster64.exe, cmd --service --namespace ul_default --id 2
2025-03-04 19:27:19.501 [0698.0b74]  I: fs::ul::`anonymous-namespace'::dumpServiceState: Service fsulnethoster status
2025-03-04 19:27:19.501 [0698.0b74]  I: fs::ul::`anonymous-namespace'::dumpServiceState: state=4, win32code=0, exitCode=0, pid=5016, flags=0
2025-03-04 19:27:19.502 [0698.0b74]  I: fs::ul::`anonymous-namespace'::dumpServiceState: ServiceType: 16, StartType 2, path='"C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1738323940\fshoster64.exe" --service --namespace ul_default --id 2' start='NT AUTHORITY\NetworkService' name='F-Secure Ultralight Network Hoster'
2025-03-04 19:27:19.510 [0698.0b74]  I: fs::ul::UpdatedService::update: fsulnethoster service is updated
2025-03-04 19:27:19.511 [0698.0b74]  I: fs::ul::UpdatedService::configureAutoRestart: Made fsulnethoster auto restartable
2025-03-04 19:27:19.607 [0698.0b74]  I: PrintCatalogInfo: Catalog info: wszCatalogFile=C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\fsulgk.cat
2025-03-04 19:27:19.607 [0698.0b74]  I: fs::ul::`anonymous-namespace'::dumpServiceState: Service F-Secure Gatekeeper status
2025-03-04 19:27:19.607 [0698.0b74]  I: fs::ul::`anonymous-namespace'::dumpServiceState: state=4, win32code=0, exitCode=0, pid=0, flags=0
2025-03-04 19:27:19.607 [0698.0b74]  I: fs::ul::`anonymous-namespace'::dumpServiceState: ServiceType: 1, StartType 3, path='\??\C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1738323940\fsulgk.sys' start='' name='F-Secure Gatekeeper'
2025-03-04 19:27:19.611 [0698.0b74]  I: fs::ul::UpdatedService::update: F-Secure Gatekeeper service is updated
2025-03-04 19:27:19.623 [0698.0b74]  I: fs::ul::UpdatedService::stop: Service fsulprothoster has been already stopped
2025-03-04 19:27:19.623 [0698.0b74]  I: fs::ul::UpdatedService::stop: fsulprothoster service stopped
2025-03-04 19:27:19.623 [0698.0b74]  I: fs::ul::UpdatedService::configureAutoRestart: Made fsulhoster non restartable
2025-03-04 19:27:19.626 [0698.0b74]  I: fs::ul::UpdatedService::stop: fsulhoster service is stopping
2025-03-04 19:27:20.069 [0698.0b74]  I: fs::ul::UpdatedService::stop: fsulhoster service stopped
2025-03-04 19:27:20.069 [0698.0b74]  I: fs::ul::UpdatedService::configureAutoRestart: Made fsulhoster auto restartable
2025-03-04 19:27:20.069 [0698.0b74]  I: fs::ul::UpdatedService::configureAutoRestart: Made fsulnethoster non restartable
2025-03-04 19:27:20.069 [0698.0b74]  I: fs::ul::UpdatedService::stop: fsulnethoster service is stopping
2025-03-04 19:27:20.292 [0698.0b74]  I: fs::ul::UpdatedService::stop: fsulnethoster service stopped
2025-03-04 19:27:20.292 [0698.0b74]  I: fs::ul::UpdatedService::configureAutoRestart: Made fsulnethoster auto restartable
2025-03-04 19:27:20.372 [0698.0b74]  I: fs::ul::UpdatedService::stop: F-Secure Gatekeeper service is stopping
2025-03-04 19:27:20.372 [0698.0b74]  I: fs::ul::UpdatedService::stop: Service F-Secure Gatekeeper has been already stopped
2025-03-04 19:27:20.372 [0698.0b74]  I: fs::ul::UpdatedService::stop: F-Secure Gatekeeper service stopped
2025-03-04 19:27:20.372 [0698.0b74]  I: MainLogic::StopServices: All F-Secure Ultralight services are stopped in 1 sec
2025-03-04 19:27:20.372 [0698.0b74]  I: ul::UninstallService::exist: Service does not exist: F-Secure UL HIPS
2025-03-04 19:27:20.372 [0698.0b74]  I: MainLogic::UninstallDeepGuardDriver: No hips driver found
2025-03-04 19:27:20.372 [0698.0b74]  I: MainLogic::LogPreviousProductVersion: Previous product version: 2.1.19954
2025-03-04 19:27:20.372 [0698.0b74]  I: ul::EventsManifest::InstallEventsManifest: ulcoreDir=C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1739541281 resourceDllFile=spapi64.dll, first time 0
2025-03-04 19:27:20.372 [0698.0b74]  I: ul::EventsManifest::IsSharedManifestInstalled: Shared manifest is already installed for ul_default
2025-03-04 19:27:20.372 [0698.0b74]  I: ul::EventsManifest::IsSharedManifestInstalledForNamespace: Found ul_default in ul_default as 1
2025-03-04 19:27:20.372 [0698.0b74]  I: ul::EventsManifest::InstallEventsManifest: Shared manifest is already installed
2025-03-04 19:27:20.372 [0698.0b74]  I: MainLogic::UpdateEventsManifest: Installed with 1
2025-03-04 19:27:20.372 [0698.0b74]  I: MainLogic::SetGatekeeperDriverSettings: set LOGI for GK \??\C:\ProgramData\F-Secure\Log\FSAV\drivers\gklogi.log
2025-03-04 19:27:20.372 [0698.0b74]  I: MainLogic::RegisterInstallationDirectory: Added DAAS2 InstallationDirectory record
2025-03-04 19:27:20.372 [0698.0b74]  I: MainLogic::RegisterDelayLoading: Register delay loading NS global=default, ul=ul_default
2025-03-04 19:27:20.372 [0698.0b74]  I: MainLogic::RegisterDelayLoading: Registered delay loading settings.
2025-03-04 19:27:20.372 [0698.0b74]  I: MainLogic::GetInstallationRootDirectory: Installation root directory: "C:\Program Files (x86)\F-Secure\TOTAL\Ultralight"
2025-03-04 19:27:20.372 [0698.0b74]  I: MainLogic::UnregisterHotfixPlugin: Hotfix plugin unregistration
2025-03-04 19:27:20.372 [0698.0b74]  I: fs::fixQuarantineFolderIfNeeded: Nothing to fix in quarantine folder 'C:\ProgramData\F-Secure\Quarantine'
2025-03-04 19:27:20.372 [0698.0b74]  I: MainLogic::CreateQuarantineFolder: Created quarantine folder.
2025-03-04 19:27:20.372 [0698.0b74]  I: MainLogic::CreateUsersLogFolder: Created logfile folder.
2025-03-04 19:27:20.372 [0698.0b74]  I: MainLogic::CreateUsersLogFolder: Attributes set for user logfile folder.
2025-03-04 19:27:20.372 [0698.0b74]  I: MainLogic::SetRunWhitelistFlag: Setting RunWhitelistingTask, as 1 because first time is 0
2025-03-04 19:27:20.372 [0698.0b74]  I: MainLogic::CreateActivityMonitorDataFolder: Will enable data backup to activity monitor data folder C:\ProgramData\F-Secure\AmData
2025-03-04 19:27:20.372 [0698.0b74]  I: MainLogic::CreateActivityMonitorDataFolder: set activity monitor data folder GK \??\C:\ProgramData\F-Secure\AmData\
2025-03-04 19:27:20.388 [0698.0b74]  I: MainLogic::SetActivityoggerSettings: Configured acvitity session for beta or production, session time=600000 ms, session throttling=60 sec
2025-03-04 19:27:20.388 [0698.0b74]  I: MainLogic::SetScanHiddenObjectsSettings: Configured scan of hidden object for beta/prod, scan_hidden.mode is 1 (TelemetryOnly)
2025-03-04 19:27:20.388 [0698.0b74]  I: MainLogic::EnableSha256Settings: Enable sha256
2025-03-04 19:27:20.388 [0698.0b74]  I: MainLogic::EnableSha256Settings: Enabled hips.sha2_support
2025-03-04 19:27:20.388 [0698.0b74]  I: MainLogic::EnableSha256Settings: sha1 is already migrated as HashPolicyFlags value 4
2025-03-04 19:27:20.388 [0698.0b74]  I: MainLogic::SetDeepGuardSettings: Protected paths will be enabled
2025-03-04 19:27:20.388 [0698.0b74]  I: MainLogic::FixBrokenBSStats: Infection counter was checked previously
2025-03-04 19:27:20.388 [0698.0b74]  I: MainLogic::RegisterInstallationDirectory: Added Anti-Virus InstallationDirectory record
2025-03-04 19:27:20.388 [0698.0b74]  I: MainLogic::RegisterInstallationDirectory: Added HIPS InstallationDirectory record
2025-03-04 19:27:20.388 [0698.0b74]  I: fs::forceCapricornMode: Capricorn mode set
2025-03-04 19:27:20.388 [0698.0b74]  I: MainLogic::RegisterAmsi: Set as enabled amsi.en and nif2.fot.en
2025-03-04 19:27:20.388 [0698.0b74]  I: MainLogic::RegisterAmsi: Registration of AMSI 32bit module
2025-03-04 19:27:20.496 [0698.0b74]  I: MainLogic::RegisterAmsi: Registration of AMSI module: 0
2025-03-04 19:27:20.496 [0698.0b74]  I: MainLogic::RegisterAmsi: Registration of AMSI 64bit module
2025-03-04 19:27:20.521 [0698.0b74]  I: MainLogic::RegisterAmsi: Registration of AMSI module: 0
2025-03-04 19:27:20.521 [0698.0b74]  I: fs::details::hasAquariusSubscription: Aquarius subscription found
2025-03-04 19:27:20.521 [0698.0b74]  I: GenericApi<class SpApi>::GenericApi: API library is loaded. Initializing the API...
2025-03-04 19:27:20.521 [0698.0b74]  I: SpApi::connect: SPAPI cannot connect to GKH (80000000).
2025-03-04 19:27:20.521 [0698.0b74]  I: GenericApi<class SpApi>::GenericApi: API is initialized successfully.
2025-03-04 19:27:20.531 [0698.0b74]  I: SpApi::updateChannelSubscriptionImpl: Update result: 0
2025-03-04 19:27:20.547 [0698.0b74]  I: fs::ul::UpdatedService::start: fsulnethoster service is starting
2025-03-04 19:27:20.674 [0698.0b74]  I: fs::ul::UpdatedService::start: Service fsulnethoster started
2025-03-04 19:27:20.690 [0698.0b74]  I: fs::ul::UpdatedService::start: fsulhoster service is starting
2025-03-04 19:27:20.801 [0698.0b74]  I: fs::ul::UpdatedService::start: Service fsulhoster started
2025-03-04 19:27:20.833 [0698.0b74]  I: fs::ul::UpdatedService::start: fsulprothoster service is starting
2025-03-04 19:27:20.944 [0698.0b74]  I: fs::ul::UpdatedService::start: Service fsulprothoster started
2025-03-04 19:27:20.945 [0698.0b74]  I: powerinfo::GetTimeSinceLastWakeMs: system never slept
2025-03-04 19:27:20.945 [0698.0b74]  I: MainLogic::SaveInstallUpstreamStatus: reboot=0, duration=16 wake=0 ms, since last wake=0 sec, uptime=151 sec
2025-03-04 19:27:20.945 [0698.0b74]  I: MainLogic::execute: DONE.
2025-03-04 19:27:20.945 [0698.0b74]  I: InstallerMain: Main logic returned: 0
2025-03-04 19:27:20.945 [0698.0b74]  I: ul::markActiveVersion: Deactivating update 1733233387, current old status=previous new status=inactive
2025-03-04 19:27:20.945 [0698.0b74]  I: ul::markActiveVersion: Deactivating update 1738323940, current old status=active new status=previous
2025-03-04 19:27:20.945 [0698.0b74]  I: ul::markActiveVersion: Activating update 1739541281
2025-03-04 19:27:20.947 [0698.0b74]  I: flushRegistryKeyByName: Registry SOFTWARE (256) is flushed successfully
2025-03-04 19:27:20.953 [0698.0b74]  I: flushRegistryKeyByName: Registry SYSTEM (256) is flushed successfully
2025-03-04 19:27:20.954 [0698.0b74]  I: flushRegistryKeyByName: Registry SOFTWARE (512) is flushed successfully
2025-03-04 19:27:20.954 [0698.0b74]  I: InstallerMain: Returning: 0
2025-03-04 19:27:20.954 [0698.0b74]  I: ***  LOGGING ENDED  ***
