2024-10-04 14:22:13.866 [45e0.20c4]  I: MainLogic::StopServices: All F-Secure Ultralight services are stopped in 0 sec
2024-10-04 14:22:13.866 [45e0.20c4]  I: ul::UninstallService::exist: Service does not exist: F-Secure UL HIPS
2024-10-04 14:22:13.866 [45e0.20c4]  I: MainLogic::UninstallDeepGuardDriver: No hips driver found
2024-10-04 14:22:13.866 [45e0.20c4]  I: MainLogic::LogPreviousProductVersion: Previous product version: 2.1.19209
2024-10-04 14:22:13.866 [45e0.20c4]  I: ul::EventsManifest::InstallEventsManifest: ulcoreDir=C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1726727565 resourceDllFile=spapi64.dll, first time 0
2024-10-04 14:22:13.872 [45e0.20c4]  I: ul::EventsManifest::IsSharedManifestInstalled: Shared manifest is already installed for ul_default
2024-10-04 14:22:13.872 [45e0.20c4]  I: ul::EventsManifest::IsSharedManifestInstalledForNamespace: Found ul_default in ul_default as 1
2024-10-04 14:22:13.872 [45e0.20c4]  I: ul::EventsManifest::InstallEventsManifest: Shared manifest is already installed
2024-10-04 14:22:13.872 [45e0.20c4]  I: MainLogic::UpdateEventsManifest: Installed with 1
2024-10-04 14:22:13.872 [45e0.20c4]  I: MainLogic::SetGatekeeperDriverSettings: set LOGI for GK \??\C:\ProgramData\F-Secure\Log\FSAV\drivers\gklogi.log
2024-10-04 14:22:13.872 [45e0.20c4]  I: MainLogic::RegisterInstallationDirectory: Added DAAS2 InstallationDirectory record
2024-10-04 14:22:13.872 [45e0.20c4]  I: MainLogic::RegisterDelayLoading: Register delay loading NS global=default, ul=ul_default
2024-10-04 14:22:13.872 [45e0.20c4]  I: MainLogic::RegisterDelayLoading: Registered delay loading settings.
2024-10-04 14:22:13.872 [45e0.20c4]  I: MainLogic::GetInstallationRootDirectory: Installation root directory: "C:\Program Files (x86)\F-Secure\TOTAL\Ultralight"
2024-10-04 14:22:13.872 [45e0.20c4]  I: MainLogic::UnregisterHotfixPlugin: Hotfix plugin unregistration
2024-10-04 14:22:13.877 [45e0.20c4]  I: fs::fixQuarantineFolderIfNeeded: Nothing to fix in quarantine folder 'C:\ProgramData\F-Secure\Quarantine'
2024-10-04 14:22:13.877 [45e0.20c4]  I: MainLogic::CreateQuarantineFolder: Created quarantine folder.
2024-10-04 14:22:13.877 [45e0.20c4]  I: MainLogic::CreateUsersLogFolder: Created logfile folder.
2024-10-04 14:22:13.877 [45e0.20c4]  I: MainLogic::CreateUsersLogFolder: Attributes set for user logfile folder.
2024-10-04 14:22:13.877 [45e0.20c4]  I: MainLogic::SetRunWhitelistFlag: Setting RunWhitelistingTask, as 1 because first time is 0
2024-10-04 14:22:13.877 [45e0.20c4]  I: MainLogic::CreateActivityMonitorDataFolder: Will enable data backup to activity monitor data folder C:\ProgramData\F-Secure\AmData
2024-10-04 14:22:13.879 [45e0.20c4]  I: MainLogic::CreateActivityMonitorDataFolder: set activity monitor data folder GK \??\C:\ProgramData\F-Secure\AmData\
2024-10-04 14:22:13.879 [45e0.20c4]  I: MainLogic::SetActivityoggerSettings: Configured acvitity session for beta or production, session time=600000 ms, session throttling=60 sec
2024-10-04 14:22:13.879 [45e0.20c4]  I: MainLogic::SetScanHiddenObjectsSettings: Configured scan of hidden object for beta/prod, scan_hidden.mode is 1 (TelemetryOnly)
2024-10-04 14:22:13.879 [45e0.20c4]  I: MainLogic::EnableSha256Settings: Enable sha256
2024-10-04 14:22:13.879 [45e0.20c4]  I: MainLogic::EnableSha256Settings: Enabled hips.sha2_support
2024-10-04 14:22:13.879 [45e0.20c4]  I: MainLogic::EnableSha256Settings: sha1 is already migrated as HashPolicyFlags value 4
2024-10-04 14:22:13.879 [45e0.20c4]  I: MainLogic::SetDeepGuardSettings: Protected paths will be enabled
2024-10-04 14:22:13.879 [45e0.20c4]  I: MainLogic::FixBrokenBSStats: Infection counter was checked previously
2024-10-04 14:22:13.879 [45e0.20c4]  I: MainLogic::RegisterInstallationDirectory: Added Anti-Virus InstallationDirectory record
2024-10-04 14:22:13.879 [45e0.20c4]  I: MainLogic::RegisterInstallationDirectory: Added HIPS InstallationDirectory record
2024-10-04 14:22:13.879 [45e0.20c4]  I: fs::forceCapricornMode: Capricorn mode set
2024-10-04 14:22:13.879 [45e0.20c4]  I: MainLogic::RegisterAmsi: Set as enabled amsi.en and nif2.fot.en
2024-10-04 14:22:13.879 [45e0.20c4]  I: MainLogic::RegisterAmsi: Registration of AMSI 32bit module
2024-10-04 14:22:13.926 [45e0.20c4]  I: MainLogic::RegisterAmsi: Registration of AMSI module: 0
2024-10-04 14:22:13.926 [45e0.20c4]  I: MainLogic::RegisterAmsi: Registration of AMSI 64bit module
2024-10-04 14:22:13.951 [45e0.20c4]  I: MainLogic::RegisterAmsi: Registration of AMSI module: 0
2024-10-04 14:22:13.952 [45e0.20c4]  I: fs::details::hasAquariusSubscription: Aquarius subscription found
2024-10-04 14:22:13.952 [45e0.20c4]  I: GenericApi<class SpApi>::GenericApi: API library is loaded. Initializing the API...
2024-10-04 14:22:13.958 [45e0.20c4]  I: SpApi::connect: SPAPI cannot connect to GKH (80000000).
2024-10-04 14:22:13.958 [45e0.20c4]  I: GenericApi<class SpApi>::GenericApi: API is initialized successfully.
2024-10-04 14:22:13.958 [45e0.20c4]  I: SpApi::updateChannelSubscriptionImpl: Update result: 0
2024-10-04 14:22:13.963 [45e0.20c4]  I: fs::ul::UpdatedService::start: fsulnethoster service is starting
2024-10-04 14:22:14.083 [45e0.20c4]  I: fs::ul::UpdatedService::start: Service fsulnethoster started
2024-10-04 14:22:14.085 [45e0.20c4]  I: fs::ul::UpdatedService::start: fsulhoster service is starting
2024-10-04 14:22:14.208 [45e0.20c4]  I: fs::ul::UpdatedService::start: Service fsulhoster started
2024-10-04 14:22:14.224 [45e0.20c4]  I: fs::ul::UpdatedService::start: fsulprothoster service is starting
2024-10-04 14:22:14.334 [45e0.20c4]  I: fs::ul::UpdatedService::start: Service fsulprothoster started
2024-10-04 14:22:14.334 [45e0.20c4]  I: MainLogic::SaveInstallUpstreamStatus: reboot=0, duration=5 wake=2601868 ms, since last wake=2601 sec, uptime=434940 sec
2024-10-04 14:22:14.334 [45e0.20c4]  I: MainLogic::execute: DONE.
2024-10-04 14:22:14.334 [45e0.20c4]  I: InstallerMain: Main logic returned: 0
2024-10-04 14:22:14.334 [45e0.20c4]  I: ul::markActiveVersion: Deactivating update 1722236884, current old status=previous new status=inactive
2024-10-04 14:22:14.334 [45e0.20c4]  I: ul::markActiveVersion: Deactivating update 1724782727, current old status=active new status=previous
2024-10-04 14:22:14.334 [45e0.20c4]  I: ul::markActiveVersion: Activating update 1726727565
2024-10-04 14:22:14.334 [45e0.20c4]  I: flushRegistryKeyByName: Registry SOFTWARE (256) is flushed successfully
2024-10-04 14:22:14.334 [45e0.20c4]  I: flushRegistryKeyByName: Registry SYSTEM (256) is flushed successfully
2024-10-04 14:22:14.334 [45e0.20c4]  I: flushRegistryKeyByName: Registry SOFTWARE (512) is flushed successfully
2024-10-04 14:22:14.334 [45e0.20c4]  I: InstallerMain: Returning: 0
2024-10-04 14:22:14.334 [45e0.20c4]  I: ***  LOGGING ENDED  ***

2024-12-16 11:52:34.352 [1924.35a0]  I: ***  LOGGING STARTED  *** (UTC+1:00, session: 0x0)
2024-12-16 11:52:34.352 [1924.35a0]  I: InstallerMain: Version: 02.08.43.00 ()
2024-12-16 11:52:34.352 [1924.35a0]  I: CrashHandler::RegisterCrashHooks: Hooking crash
2024-12-16 11:52:34.352 [1924.35a0]  I: CrashHandler::RegisterCrashHooks: Dump path: 'C:\ProgramData\F-Secure\CrashDumps\install-ulcore-win64.dmp'
2024-12-16 11:52:34.352 [1924.35a0]  I: InstallerMain: ULU registry root: SOFTWARE\F-Secure\Ultralight, module=ulcore, title=Ultralight Core (64-bit) 2024-12-03_01, version=1733233387
2024-12-16 11:52:34.352 [1924.35a0]  I: InstallerMain: Installing ulcore, version 1733233387. title: Ultralight Core (64-bit) 2024-12-03_01
2024-12-16 11:52:34.352 [1924.35a0]  I: InstallerMain: Executing main logic...
2024-12-16 11:52:34.352 [1924.35a0]  I: MainLogic::Initialize: Current path: C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1733233387
2024-12-16 11:52:34.378 [1924.35a0]  I: MainLogic::Initialize: Version: 2.1 build 19772
2024-12-16 11:52:34.378 [1924.35a0]  I: MainLogic::Initialize: release stage: 3
2024-12-16 11:52:34.378 [1924.35a0]  I: MainLogic::CheckFirstTimeInstallation: First time install 0
2024-12-16 11:52:34.378 [1924.35a0]  I: MainLogic::Initialize: Will install Gatekeeper Driver: true
2024-12-16 11:52:34.378 [1924.35a0]  I: MainLogic::Initialize: Will install DeepGuard: true
2024-12-16 11:52:34.378 [1924.35a0]  I: MainLogic::EnableDriverUpdateOverRebootIfConfigured: Set update drivers with reboot as 0
2024-12-16 11:52:34.379 [1924.35a0]  I: MainLogic::SetUpdateStartedTime: spapi loaded: 1, now is 1734346354
2024-12-16 11:52:34.383 [1924.35a0]  I: MainLogic::InstallProtectedHoster: Will install protected hoster: true
2024-12-16 11:52:34.383 [1924.35a0]  I: MainLogic::InstallProtectedHoster: PPL flags: 1 1
2024-12-16 11:52:34.389 [1924.35a0]  I: ul::ProtectedHoster::cleanDuplicatedWSCRegistrationsViaWMI: F-Secure  path=C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1726727565\fsulprothoster.exe relpath=AntiVirusProduct.instanceGuid="{DA5F8466-F00B-8E6B-6CB8-5AE55C9EBDCD}" time=Sat, 14 Dec 2024 17:07:08 GMT status=266240l
2024-12-16 11:52:34.389 [1924.35a0]  I: ul::ProtectedHoster::cleanDuplicatedWSCRegistrationsViaWMI: Will remove WSC registration: AntiVirusProduct.instanceGuid="{DA5F8466-F00B-8E6B-6CB8-5AE55C9EBDCD}"
2024-12-16 11:52:34.389 [1924.35a0]  I: ul::ProtectedHoster::cleanDuplicatedWSCRegistrationsViaWMI: Windows Defender  path=%ProgramFiles%\Windows Defender\MsMpeng.exe relpath=AntiVirusProduct.instanceGuid="{D68DDC3A-831F-4fae-9E44-DA132C1ACF46}" time=Wed, 27 Nov 2024 14:19:59 GMT status=393472l
2024-12-16 11:52:34.400 [1924.35a0]  I: ul::ProtectedHoster::isWindowsSecurityCenterRunning: WindowsSecurityCenter service exists 'wscsvc' and has state 4
2024-12-16 11:52:34.400 [1924.35a0]  I: ul::ProtectedHoster::isWindowsSecurityCenterRunning: WindowsSecurityCenter service 'wscsvc' is running
2024-12-16 11:52:34.403 [1924.35a0]  I: GenericApi<class HosterApi>::GenericApi: API library is loaded. Initializing the API...
2024-12-16 11:52:34.403 [1924.35a0]  I: GenericApi<class HosterApi>::GenericApi: API is initialized successfully.
2024-12-16 11:52:34.403 [1924.35a0]  I: ul::ProtectedHoster::isWSCPluginRunning: WSCPlugin state is 4, is running 1
2024-12-16 11:52:34.403 [1924.35a0]  I: ul::ProtectedHoster::unregisterWSCProvider: Going to unregister WSC provider. Current version 3.12.122.0, new 3.12.139.0
2024-12-16 11:52:34.403 [1924.35a0]  I: ul::ProtectedHoster::isWSCPluginRunning: WSCPlugin state is 4, is running 1
2024-12-16 11:52:34.416 [1924.35a0] .W: ul::ProtectedHoster::waitUnregistrationDone::<lambda>: provider wsc.anti_virus.name is still registered, attempt 0, value F-Secure
2024-12-16 11:52:34.418 [1924.35a0] .W: ul::ProtectedHoster::waitUnregistrationDone::<lambda>: provider wsc.anti_spyware.name is still registered, attempt 0, value F-Secure
2024-12-16 11:52:35.427 [1924.35a0]  I: ul::ProtectedHoster::setWSCUnregistrationUpstreamStatus: Set WSC unreg status as 1
2024-12-16 11:52:35.430 [1924.35a0]  I: ul::ProtectedHoster::needInstallDriver: The same version of ELAM is installed. Driver won't be updated: 1.0.47.24
2024-12-16 11:52:35.430 [1924.35a0]  I: ul::ProtectedHoster::updateHoster: basePath=C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1733233387 originalHosterPath=C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1733233387\fshoster64.exe pplHosterPath=C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1733233387\fsulprothoster.exe serviceName=fsulprothoster
2024-12-16 11:52:35.430 [1924.35a0]  I: ul::ProtectedHoster::updateHoster: hoster not exist C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1733233387\fsulprothoster.exe
2024-12-16 11:52:35.430 [1924.35a0]  I: ppl::IsProtected: fsulprothoster
2024-12-16 11:52:35.430 [1924.35a0]  I: ppl::IsProtected: Protection status: 3
2024-12-16 11:52:35.430 [1924.35a0]  I: ul::ProtectedHoster::removeHosterProtection: Service exists and service protected fsulprothoster
2024-12-16 11:52:35.430 [1924.35a0]  I: ul::ProtectedHoster::isPreNamespacingHosterCurrentlyInstalled: C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1726727565\fsulprothoster.exe: version 3.12.122.0; min non-ns version 1.52.0.0; isPreNs=0
2024-12-16 11:52:35.430 [1924.35a0]  I: ppl::IsProtected: fsulprothoster
2024-12-16 11:52:35.430 [1924.35a0]  I: ppl::IsProtected: Protection status: 3
2024-12-16 11:52:35.430 [1924.35a0]  I: ul::ProtectedHoster::removeHosterProtection: Unprotecting hoster with 2.0 API
2024-12-16 11:52:35.430 [1924.35a0]  I: ppl::PrepareForUpdate: fsulprothoster state is 4
2024-12-16 11:52:35.430 [1924.35a0]  I: ul::ProtectedHoster::removeHosterProtection: The hoster is not protected, we can update it
2024-12-16 11:52:35.430 [1924.35a0]  I: ul::ProtectedHoster::installProtectedService: Registering service fsulprothoster, path C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1733233387\fsulprothoster.exe, cmd --service --namespace ul_default --id 5
2024-12-16 11:52:35.430 [1924.35a0]  I: fs::ul::`anonymous-namespace'::dumpServiceState: Service fsulprothoster status
2024-12-16 11:52:35.430 [1924.35a0]  I: fs::ul::`anonymous-namespace'::dumpServiceState: state=4, win32code=0, exitCode=0, pid=5048, flags=0
2024-12-16 11:52:35.430 [1924.35a0]  I: fs::ul::`anonymous-namespace'::dumpServiceState: ServiceType: 16, StartType 2, path='"C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1726727565\fsulprothoster.exe" --service --namespace ul_default --id 5' start='LocalSystem' name='F-Secure Ultralight Protected Hoster'
2024-12-16 11:52:35.447 [1924.35a0]  I: fs::ul::UpdatedService::update: fsulprothoster service is updated
2024-12-16 11:52:35.449 [1924.35a0]  I: fs::ul::UpdatedService::configureAutoRestart: Made fsulprothoster auto restartable
2024-12-16 11:52:35.449 [1924.35a0]  I: fs::ul::UpdatedService::configureAutoRestart: Made fsulprothoster non restartable
2024-12-16 11:52:35.451 [1924.35a0]  I: fs::ul::UpdatedService::stop: fsulprothoster service is stopping
2024-12-16 11:52:35.553 [1924.35a0]  I: fs::ul::UpdatedService::stop: fsulprothoster service stopped
2024-12-16 11:52:35.553 [1924.35a0]  I: fs::ul::UpdatedService::configureAutoRestart: Made fsulprothoster auto restartable
2024-12-16 11:52:35.555 [1924.35a0]  I: ul::ProtectedHoster::configureHosterRegistry: set fork mode under SOFTWARE\F-Secure\NS\ul_default\CCF\Hoster as 1
2024-12-16 11:52:35.555 [1924.35a0]  I: ppl::EnableProtection: fsulprothoster
2024-12-16 11:52:35.557 [1924.35a0]  I: ul::ProtectedHoster::updateHoster: enabled protection 1
2024-12-16 11:52:35.557 [1924.35a0]  I: ul::ProtectedHoster::registerPPLPlugin: Updating PPL hoster plugin: C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1733233387\wsc_plugin64.dll
2024-12-16 11:52:35.557 [1924.35a0]  I: ul::ProtectedHoster::registerPPLPlugin: Updating PPL hoster plugin: C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1733233387\fsetw_plugin64.dll
2024-12-16 11:52:35.569 [1924.35a0]  I: ul::ProtectedHoster::enableWSC: restored wsc.register 1
2024-12-16 11:52:35.569 [1924.35a0]  I: MainLogic::InstallUltralightHoster: register fsulhoster path C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1733233387\fshoster64.exe, cmd --notify-preshutdown --service --namespace ul_default
2024-12-16 11:52:35.569 [1924.35a0]  I: fs::ul::`anonymous-namespace'::dumpServiceState: Service fsulhoster status
2024-12-16 11:52:35.569 [1924.35a0]  I: fs::ul::`anonymous-namespace'::dumpServiceState: state=4, win32code=0, exitCode=0, pid=5064, flags=0
2024-12-16 11:52:35.570 [1924.35a0]  I: fs::ul::`anonymous-namespace'::dumpServiceState: ServiceType: 16, StartType 2, path='"C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1726727565\fshoster64.exe" --notify-preshutdown --service --namespace ul_default' start='LocalSystem' name='F-Secure Ultralight Hoster'
2024-12-16 11:52:35.578 [1924.35a0]  I: fs::ul::UpdatedService::update: fsulhoster service is updated
2024-12-16 11:52:35.578 [1924.35a0]  I: fs::ul::UpdatedService::configureAutoRestart: Made fsulhoster auto restartable
2024-12-16 11:52:35.578 [1924.35a0]  I: MainLogic::InstallNetworkHoster: register network fsulhoster path C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1733233387\fshoster64.exe, cmd --service --namespace ul_default --id 2
2024-12-16 11:52:35.578 [1924.35a0]  I: fs::ul::`anonymous-namespace'::dumpServiceState: Service fsulnethoster status
2024-12-16 11:52:35.578 [1924.35a0]  I: fs::ul::`anonymous-namespace'::dumpServiceState: state=4, win32code=0, exitCode=0, pid=5072, flags=0
2024-12-16 11:52:35.578 [1924.35a0]  I: fs::ul::`anonymous-namespace'::dumpServiceState: ServiceType: 16, StartType 2, path='"C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1726727565\fshoster64.exe" --service --namespace ul_default --id 2' start='NT AUTHORITY\NetworkService' name='F-Secure Ultralight Network Hoster'
2024-12-16 11:52:35.592 [1924.35a0]  I: fs::ul::UpdatedService::update: fsulnethoster service is updated
2024-12-16 11:52:35.594 [1924.35a0]  I: fs::ul::UpdatedService::configureAutoRestart: Made fsulnethoster auto restartable
2024-12-16 11:52:35.602 [1924.35a0]  I: PrintCatalogInfo: Catalog info: wszCatalogFile=C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\fsulgk.cat
2024-12-16 11:52:35.602 [1924.35a0]  I: fs::ul::`anonymous-namespace'::dumpServiceState: Service F-Secure Gatekeeper status
2024-12-16 11:52:35.602 [1924.35a0]  I: fs::ul::`anonymous-namespace'::dumpServiceState: state=4, win32code=0, exitCode=0, pid=0, flags=0
2024-12-16 11:52:35.602 [1924.35a0]  I: fs::ul::`anonymous-namespace'::dumpServiceState: ServiceType: 1, StartType 3, path='\??\C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1726727565\fsulgk.sys' start='' name='F-Secure Gatekeeper'
2024-12-16 11:52:35.613 [1924.35a0]  I: fs::ul::UpdatedService::update: F-Secure Gatekeeper service is updated
2024-12-16 11:52:35.615 [1924.35a0]  I: fs::ul::UpdatedService::stop: Service fsulprothoster has been already stopped
2024-12-16 11:52:35.615 [1924.35a0]  I: fs::ul::UpdatedService::stop: fsulprothoster service stopped
2024-12-16 11:52:35.616 [1924.35a0]  I: fs::ul::UpdatedService::configureAutoRestart: Made fsulhoster non restartable
2024-12-16 11:52:35.616 [1924.35a0]  I: fs::ul::UpdatedService::stop: fsulhoster service is stopping
2024-12-16 11:52:36.279 [1924.35a0]  I: fs::ul::UpdatedService::stop: fsulhoster service stopped
2024-12-16 11:52:36.279 [1924.35a0]  I: fs::ul::UpdatedService::configureAutoRestart: Made fsulhoster auto restartable
2024-12-16 11:52:36.279 [1924.35a0]  I: fs::ul::UpdatedService::configureAutoRestart: Made fsulnethoster non restartable
2024-12-16 11:52:36.279 [1924.35a0]  I: fs::ul::UpdatedService::stop: fsulnethoster service is stopping
2024-12-16 11:52:36.500 [1924.35a0]  I: fs::ul::UpdatedService::stop: fsulnethoster service stopped
2024-12-16 11:52:36.500 [1924.35a0]  I: fs::ul::UpdatedService::configureAutoRestart: Made fsulnethoster auto restartable
2024-12-16 11:52:36.694 [1924.35a0]  I: fs::ul::UpdatedService::stop: F-Secure Gatekeeper service is stopping
2024-12-16 11:52:36.694 [1924.35a0]  I: fs::ul::UpdatedService::stop: Service F-Secure Gatekeeper has been already stopped
2024-12-16 11:52:36.694 [1924.35a0]  I: fs::ul::UpdatedService::stop: F-Secure Gatekeeper service stopped
2024-12-16 11:52:36.694 [1924.35a0]  I: MainLogic::StopServices: All F-Secure Ultralight services are stopped in 1 sec
2024-12-16 11:52:36.694 [1924.35a0]  I: ul::UninstallService::exist: Service does not exist: F-Secure UL HIPS
2024-12-16 11:52:36.694 [1924.35a0]  I: MainLogic::UninstallDeepGuardDriver: No hips driver found
2024-12-16 11:52:36.694 [1924.35a0]  I: MainLogic::LogPreviousProductVersion: Previous product version: 2.1.19323
2024-12-16 11:52:36.694 [1924.35a0]  I: ul::EventsManifest::InstallEventsManifest: ulcoreDir=C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1733233387 resourceDllFile=spapi64.dll, first time 0
2024-12-16 11:52:36.694 [1924.35a0]  I: ul::EventsManifest::IsSharedManifestInstalled: Shared manifest is already installed for ul_default
2024-12-16 11:52:36.694 [1924.35a0]  I: ul::EventsManifest::IsSharedManifestInstalledForNamespace: Found ul_default in ul_default as 1
2024-12-16 11:52:36.694 [1924.35a0]  I: ul::EventsManifest::InstallEventsManifest: Shared manifest is already installed
2024-12-16 11:52:36.694 [1924.35a0]  I: MainLogic::UpdateEventsManifest: Installed with 1
2024-12-16 11:52:36.700 [1924.35a0]  I: MainLogic::SetGatekeeperDriverSettings: set LOGI for GK \??\C:\ProgramData\F-Secure\Log\FSAV\drivers\gklogi.log
2024-12-16 11:52:36.700 [1924.35a0]  I: MainLogic::RegisterInstallationDirectory: Added DAAS2 InstallationDirectory record
2024-12-16 11:52:36.700 [1924.35a0]  I: MainLogic::RegisterDelayLoading: Register delay loading NS global=default, ul=ul_default
2024-12-16 11:52:36.703 [1924.35a0]  I: MainLogic::RegisterDelayLoading: Registered delay loading settings.
2024-12-16 11:52:36.705 [1924.35a0]  I: MainLogic::GetInstallationRootDirectory: Installation root directory: "C:\Program Files (x86)\F-Secure\TOTAL\Ultralight"
2024-12-16 11:52:36.705 [1924.35a0]  I: MainLogic::UnregisterHotfixPlugin: Hotfix plugin unregistration
2024-12-16 11:52:36.707 [1924.35a0]  I: fs::fixQuarantineFolderIfNeeded: Nothing to fix in quarantine folder 'C:\ProgramData\F-Secure\Quarantine'
2024-12-16 11:52:36.707 [1924.35a0]  I: MainLogic::CreateQuarantineFolder: Created quarantine folder.
2024-12-16 11:52:36.707 [1924.35a0]  I: MainLogic::CreateUsersLogFolder: Created logfile folder.
2024-12-16 11:52:36.707 [1924.35a0]  I: MainLogic::CreateUsersLogFolder: Attributes set for user logfile folder.
2024-12-16 11:52:36.709 [1924.35a0]  I: MainLogic::SetRunWhitelistFlag: Setting RunWhitelistingTask, as 1 because first time is 0
2024-12-16 11:52:36.709 [1924.35a0]  I: MainLogic::CreateActivityMonitorDataFolder: Will enable data backup to activity monitor data folder C:\ProgramData\F-Secure\AmData
2024-12-16 11:52:36.709 [1924.35a0]  I: MainLogic::CreateActivityMonitorDataFolder: set activity monitor data folder GK \??\C:\ProgramData\F-Secure\AmData\
2024-12-16 11:52:36.709 [1924.35a0]  I: MainLogic::SetActivityoggerSettings: Configured acvitity session for beta or production, session time=600000 ms, session throttling=60 sec
2024-12-16 11:52:36.709 [1924.35a0]  I: MainLogic::SetScanHiddenObjectsSettings: Configured scan of hidden object for beta/prod, scan_hidden.mode is 1 (TelemetryOnly)
2024-12-16 11:52:36.709 [1924.35a0]  I: MainLogic::EnableSha256Settings: Enable sha256
2024-12-16 11:52:36.709 [1924.35a0]  I: MainLogic::EnableSha256Settings: Enabled hips.sha2_support
2024-12-16 11:52:36.709 [1924.35a0]  I: MainLogic::EnableSha256Settings: sha1 is already migrated as HashPolicyFlags value 4
2024-12-16 11:52:36.709 [1924.35a0]  I: MainLogic::SetDeepGuardSettings: Protected paths will be enabled
2024-12-16 11:52:36.709 [1924.35a0]  I: MainLogic::FixBrokenBSStats: Infection counter was checked previously
2024-12-16 11:52:36.709 [1924.35a0]  I: MainLogic::RegisterInstallationDirectory: Added Anti-Virus InstallationDirectory record
2024-12-16 11:52:36.709 [1924.35a0]  I: MainLogic::RegisterInstallationDirectory: Added HIPS InstallationDirectory record
2024-12-16 11:52:36.709 [1924.35a0]  I: fs::forceCapricornMode: Capricorn mode set
2024-12-16 11:52:36.709 [1924.35a0]  I: MainLogic::RegisterAmsi: Set as enabled amsi.en and nif2.fot.en
2024-12-16 11:52:36.709 [1924.35a0]  I: MainLogic::RegisterAmsi: Registration of AMSI 32bit module
2024-12-16 11:52:36.785 [1924.35a0]  I: MainLogic::RegisterAmsi: Registration of AMSI module: 0
2024-12-16 11:52:36.785 [1924.35a0]  I: MainLogic::RegisterAmsi: Registration of AMSI 64bit module
2024-12-16 11:52:36.814 [1924.35a0]  I: MainLogic::RegisterAmsi: Registration of AMSI module: 0
2024-12-16 11:52:36.814 [1924.35a0]  I: fs::details::hasAquariusSubscription: Aquarius subscription found
2024-12-16 11:52:36.814 [1924.35a0]  I: GenericApi<class SpApi>::GenericApi: API library is loaded. Initializing the API...
2024-12-16 11:52:36.818 [1924.35a0]  I: SpApi::connect: SPAPI cannot connect to GKH (80000000).
2024-12-16 11:52:36.818 [1924.35a0]  I: GenericApi<class SpApi>::GenericApi: API is initialized successfully.
2024-12-16 11:52:36.818 [1924.35a0]  I: SpApi::updateChannelSubscriptionImpl: Update result: 0
2024-12-16 11:52:36.832 [1924.35a0]  I: fs::ul::UpdatedService::start: fsulnethoster service is starting
2024-12-16 11:52:36.943 [1924.35a0]  I: fs::ul::UpdatedService::start: Service fsulnethoster started
2024-12-16 11:52:36.947 [1924.35a0]  I: fs::ul::UpdatedService::start: fsulhoster service is starting
2024-12-16 11:52:37.054 [1924.35a0]  I: fs::ul::UpdatedService::start: Service fsulhoster started
2024-12-16 11:52:37.070 [1924.35a0]  I: fs::ul::UpdatedService::start: fsulprothoster service is starting
2024-12-16 11:52:37.181 [1924.35a0]  I: fs::ul::UpdatedService::start: Service fsulprothoster started
2024-12-16 11:52:37.182 [1924.35a0]  I: MainLogic::SaveInstallUpstreamStatus: reboot=0, duration=3 wake=23667 ms, since last wake=23 sec, uptime=150468 sec
2024-12-16 11:52:37.182 [1924.35a0]  I: MainLogic::execute: DONE.
2024-12-16 11:52:37.182 [1924.35a0]  I: InstallerMain: Main logic returned: 0
2024-12-16 11:52:37.182 [1924.35a0]  I: ul::markActiveVersion: Deactivating update 1724782727, current old status=previous new status=inactive
2024-12-16 11:52:37.182 [1924.35a0]  I: ul::markActiveVersion: Deactivating update 1726727565, current old status=active new status=previous
2024-12-16 11:52:37.182 [1924.35a0]  I: ul::markActiveVersion: Activating update 1733233387
2024-12-16 11:52:37.186 [1924.35a0]  I: flushRegistryKeyByName: Registry SOFTWARE (256) is flushed successfully
2024-12-16 11:52:37.190 [1924.35a0]  I: flushRegistryKeyByName: Registry SYSTEM (256) is flushed successfully
2024-12-16 11:52:37.190 [1924.35a0]  I: flushRegistryKeyByName: Registry SOFTWARE (512) is flushed successfully
2024-12-16 11:52:37.190 [1924.35a0]  I: InstallerMain: Returning: 0
2024-12-16 11:52:37.190 [1924.35a0]  I: ***  LOGGING ENDED  ***

2025-02-11 20:13:51.442 [3acc.3bdc]  I: ***  LOGGING STARTED  *** (UTC+1:00, session: 0x0)
2025-02-11 20:13:51.442 [3acc.3bdc]  I: InstallerMain: Version: 02.08.47.00 ()
2025-02-11 20:13:51.442 [3acc.3bdc]  I: CrashHandler::RegisterCrashHooks: Hooking crash
2025-02-11 20:13:51.442 [3acc.3bdc]  I: CrashHandler::RegisterCrashHooks: Dump path: 'C:\ProgramData\F-Secure\CrashDumps\install-ulcore-win64.dmp'
2025-02-11 20:13:51.443 [3acc.3bdc]  I: InstallerMain: ULU registry root: SOFTWARE\F-Secure\Ultralight, module=ulcore, title=Ultralight Core (64-bit) 2025-01-31_01, version=1738323940
2025-02-11 20:13:51.443 [3acc.3bdc]  I: InstallerMain: Installing ulcore, version 1738323940. title: Ultralight Core (64-bit) 2025-01-31_01
2025-02-11 20:13:51.443 [3acc.3bdc]  I: InstallerMain: Executing main logic...
2025-02-11 20:13:51.443 [3acc.3bdc]  I: MainLogic::Initialize: Current path: C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1738323940
2025-02-11 20:13:51.464 [3acc.3bdc]  I: MainLogic::Initialize: Version: 2.1 build 19954
2025-02-11 20:13:51.464 [3acc.3bdc]  I: MainLogic::Initialize: release stage: 3
2025-02-11 20:13:51.464 [3acc.3bdc]  I: MainLogic::CheckFirstTimeInstallation: First time install 0
2025-02-11 20:13:51.464 [3acc.3bdc]  I: MainLogic::Initialize: Will install Gatekeeper Driver: true
2025-02-11 20:13:51.464 [3acc.3bdc]  I: MainLogic::Initialize: Will install DeepGuard: true
2025-02-11 20:13:51.464 [3acc.3bdc]  I: MainLogic::EnableDriverUpdateOverRebootIfConfigured: Set update drivers with reboot as 0
2025-02-11 20:13:51.465 [3acc.3bdc]  I: MainLogic::SetUpdateStartedTime: spapi loaded: 1, now is 1739301231
2025-02-11 20:13:51.470 [3acc.3bdc]  I: MainLogic::InstallProtectedHoster: Will install protected hoster: true
2025-02-11 20:13:51.470 [3acc.3bdc]  I: MainLogic::InstallProtectedHoster: PPL flags: 1 1
2025-02-11 20:13:51.481 [3acc.3bdc]  I: ul::ProtectedHoster::cleanDuplicatedWSCRegistrationsViaWMI: F-Secure  path=C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1733233387\fsulprothoster.exe relpath=AntiVirusProduct.instanceGuid="{DA5F8466-F00B-8E6B-6CB8-5AE55C9EBDCD}" time=Tue, 11 Feb 2025 19:13:51 GMT status=266240l
2025-02-11 20:13:51.481 [3acc.3bdc]  I: ul::ProtectedHoster::cleanDuplicatedWSCRegistrationsViaWMI: Will remove WSC registration: AntiVirusProduct.instanceGuid="{DA5F8466-F00B-8E6B-6CB8-5AE55C9EBDCD}"
2025-02-11 20:13:51.482 [3acc.3bdc]  I: ul::ProtectedHoster::cleanDuplicatedWSCRegistrationsViaWMI: Windows Defender  path=%ProgramFiles%\Windows Defender\MsMpeng.exe relpath=AntiVirusProduct.instanceGuid="{D68DDC3A-831F-4fae-9E44-DA132C1ACF46}" time=Sun, 02 Feb 2025 13:29:23 GMT status=393472l
2025-02-11 20:13:51.485 [3acc.3bdc]  I: ul::ProtectedHoster::isWindowsSecurityCenterRunning: WindowsSecurityCenter service exists 'wscsvc' and has state 4
2025-02-11 20:13:51.485 [3acc.3bdc]  I: ul::ProtectedHoster::isWindowsSecurityCenterRunning: WindowsSecurityCenter service 'wscsvc' is running
2025-02-11 20:13:51.486 [3acc.3bdc]  I: GenericApi<class HosterApi>::GenericApi: API library is loaded. Initializing the API...
2025-02-11 20:13:51.486 [3acc.3bdc]  I: GenericApi<class HosterApi>::GenericApi: API is initialized successfully.
2025-02-11 20:13:51.487 [3acc.3bdc]  I: ul::ProtectedHoster::isWSCPluginRunning: WSCPlugin state is 4, is running 1
2025-02-11 20:13:51.488 [3acc.3bdc]  I: ul::ProtectedHoster::unregisterWSCProvider: Going to unregister WSC provider. Current version 3.12.139.0, new 3.12.140.0
2025-02-11 20:13:51.489 [3acc.3bdc]  I: ul::ProtectedHoster::isWSCPluginRunning: WSCPlugin state is 4, is running 1
2025-02-11 20:13:51.491 [3acc.3bdc] .W: ul::ProtectedHoster::waitUnregistrationDone::<lambda>: provider wsc.anti_virus.name is still registered, attempt 0, value F-Secure
2025-02-11 20:13:51.492 [3acc.3bdc] .W: ul::ProtectedHoster::waitUnregistrationDone::<lambda>: provider wsc.anti_spyware.name is still registered, attempt 0, value F-Secure
2025-02-11 20:13:52.496 [3acc.3bdc] .W: ul::ProtectedHoster::waitUnregistrationDone::<lambda>: provider wsc.anti_virus.name is still registered, attempt 1, value F-Secure
2025-02-11 20:13:54.503 [3acc.3bdc] .W: ul::ProtectedHoster::waitUnregistrationDone::<lambda>: provider wsc.anti_virus.name is still registered, attempt 2, value F-Secure
2025-02-11 20:13:58.515 [3acc.3bdc]  I: ul::ProtectedHoster::setWSCUnregistrationUpstreamStatus: Set WSC unreg status as 1
2025-02-11 20:13:58.519 [3acc.3bdc]  I: ul::ProtectedHoster::needInstallDriver: The same version of ELAM is installed. Driver won't be updated: 1.0.47.24
2025-02-11 20:13:58.520 [3acc.3bdc]  I: ul::ProtectedHoster::updateHoster: basePath=C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1738323940 originalHosterPath=C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1738323940\fshoster64.exe pplHosterPath=C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1738323940\fsulprothoster.exe serviceName=fsulprothoster
2025-02-11 20:13:58.520 [3acc.3bdc]  I: ul::ProtectedHoster::updateHoster: hoster not exist C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1738323940\fsulprothoster.exe
2025-02-11 20:13:58.525 [3acc.3bdc]  I: ppl::IsProtected: fsulprothoster
2025-02-11 20:13:58.525 [3acc.3bdc]  I: ppl::IsProtected: Protection status: 3
2025-02-11 20:13:58.525 [3acc.3bdc]  I: ul::ProtectedHoster::removeHosterProtection: Service exists and service protected fsulprothoster
2025-02-11 20:13:58.526 [3acc.3bdc]  I: ul::ProtectedHoster::isPreNamespacingHosterCurrentlyInstalled: C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1733233387\fsulprothoster.exe: version 3.12.139.0; min non-ns version 1.52.0.0; isPreNs=0
2025-02-11 20:13:58.526 [3acc.3bdc]  I: ppl::IsProtected: fsulprothoster
2025-02-11 20:13:58.527 [3acc.3bdc]  I: ppl::IsProtected: Protection status: 3
2025-02-11 20:13:58.527 [3acc.3bdc]  I: ul::ProtectedHoster::removeHosterProtection: Unprotecting hoster with 2.0 API
2025-02-11 20:13:58.527 [3acc.3bdc]  I: ppl::PrepareForUpdate: fsulprothoster state is 4
2025-02-11 20:13:58.530 [3acc.3bdc]  I: ul::ProtectedHoster::removeHosterProtection: The hoster is not protected, we can update it
2025-02-11 20:13:58.530 [3acc.3bdc]  I: ul::ProtectedHoster::installProtectedService: Registering service fsulprothoster, path C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1738323940\fsulprothoster.exe, cmd --service --namespace ul_default --id 5
2025-02-11 20:13:58.530 [3acc.3bdc]  I: fs::ul::`anonymous-namespace'::dumpServiceState: Service fsulprothoster status
2025-02-11 20:13:58.530 [3acc.3bdc]  I: fs::ul::`anonymous-namespace'::dumpServiceState: state=4, win32code=0, exitCode=0, pid=5028, flags=0
2025-02-11 20:13:58.530 [3acc.3bdc]  I: fs::ul::`anonymous-namespace'::dumpServiceState: ServiceType: 16, StartType 2, path='"C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1733233387\fsulprothoster.exe" --service --namespace ul_default --id 5' start='LocalSystem' name='F-Secure Ultralight Protected Hoster'
2025-02-11 20:13:58.538 [3acc.3bdc]  I: fs::ul::UpdatedService::update: fsulprothoster service is updated
2025-02-11 20:13:58.539 [3acc.3bdc]  I: fs::ul::UpdatedService::configureAutoRestart: Made fsulprothoster auto restartable
2025-02-11 20:13:58.541 [3acc.3bdc]  I: fs::ul::UpdatedService::configureAutoRestart: Made fsulprothoster non restartable
2025-02-11 20:13:58.541 [3acc.3bdc]  I: fs::ul::UpdatedService::stop: fsulprothoster service is stopping
2025-02-11 20:13:58.650 [3acc.3bdc]  I: fs::ul::UpdatedService::stop: fsulprothoster service stopped
2025-02-11 20:13:58.652 [3acc.3bdc]  I: fs::ul::UpdatedService::configureAutoRestart: Made fsulprothoster auto restartable
2025-02-11 20:13:58.654 [3acc.3bdc]  I: ul::ProtectedHoster::configureHosterRegistry: set fork mode under SOFTWARE\F-Secure\NS\ul_default\CCF\Hoster as 1
2025-02-11 20:13:58.654 [3acc.3bdc]  I: ppl::EnableProtection: fsulprothoster
2025-02-11 20:13:58.658 [3acc.3bdc]  I: ul::ProtectedHoster::updateHoster: enabled protection 1
2025-02-11 20:13:58.658 [3acc.3bdc]  I: ul::ProtectedHoster::registerPPLPlugin: Updating PPL hoster plugin: C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1738323940\wsc_plugin64.dll
2025-02-11 20:13:58.664 [3acc.3bdc]  I: ul::ProtectedHoster::registerPPLPlugin: Updating PPL hoster plugin: C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1738323940\fsetw_plugin64.dll
2025-02-11 20:13:58.670 [3acc.3bdc]  I: ul::ProtectedHoster::enableWSC: restored wsc.register 1
2025-02-11 20:13:58.670 [3acc.3bdc]  I: MainLogic::InstallUltralightHoster: register fsulhoster path C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1738323940\fshoster64.exe, cmd --notify-preshutdown --service --namespace ul_default
2025-02-11 20:13:58.670 [3acc.3bdc]  I: fs::ul::`anonymous-namespace'::dumpServiceState: Service fsulhoster status
2025-02-11 20:13:58.670 [3acc.3bdc]  I: fs::ul::`anonymous-namespace'::dumpServiceState: state=4, win32code=0, exitCode=0, pid=5036, flags=0
2025-02-11 20:13:58.671 [3acc.3bdc]  I: fs::ul::`anonymous-namespace'::dumpServiceState: ServiceType: 16, StartType 2, path='"C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1733233387\fshoster64.exe" --notify-preshutdown --service --namespace ul_default' start='LocalSystem' name='F-Secure Ultralight Hoster'
2025-02-11 20:13:58.679 [3acc.3bdc]  I: fs::ul::UpdatedService::update: fsulhoster service is updated
2025-02-11 20:13:58.680 [3acc.3bdc]  I: fs::ul::UpdatedService::configureAutoRestart: Made fsulhoster auto restartable
2025-02-11 20:13:58.682 [3acc.3bdc]  I: MainLogic::InstallNetworkHoster: register network fsulhoster path C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1738323940\fshoster64.exe, cmd --service --namespace ul_default --id 2
2025-02-11 20:13:58.682 [3acc.3bdc]  I: fs::ul::`anonymous-namespace'::dumpServiceState: Service fsulnethoster status
2025-02-11 20:13:58.682 [3acc.3bdc]  I: fs::ul::`anonymous-namespace'::dumpServiceState: state=4, win32code=0, exitCode=0, pid=5048, flags=0
2025-02-11 20:13:58.682 [3acc.3bdc]  I: fs::ul::`anonymous-namespace'::dumpServiceState: ServiceType: 16, StartType 2, path='"C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1733233387\fshoster64.exe" --service --namespace ul_default --id 2' start='NT AUTHORITY\NetworkService' name='F-Secure Ultralight Network Hoster'
2025-02-11 20:13:58.690 [3acc.3bdc]  I: fs::ul::UpdatedService::update: fsulnethoster service is updated
2025-02-11 20:13:58.691 [3acc.3bdc]  I: fs::ul::UpdatedService::configureAutoRestart: Made fsulnethoster auto restartable
2025-02-11 20:13:58.752 [3acc.3bdc]  I: PrintCatalogInfo: Catalog info: wszCatalogFile=C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\fsulgk.cat
2025-02-11 20:13:58.752 [3acc.3bdc]  I: fs::ul::`anonymous-namespace'::dumpServiceState: Service F-Secure Gatekeeper status
2025-02-11 20:13:58.752 [3acc.3bdc]  I: fs::ul::`anonymous-namespace'::dumpServiceState: state=4, win32code=0, exitCode=0, pid=0, flags=0
2025-02-11 20:13:58.754 [3acc.3bdc]  I: fs::ul::`anonymous-namespace'::dumpServiceState: ServiceType: 1, StartType 3, path='\??\C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1733233387\fsulgk.sys' start='' name='F-Secure Gatekeeper'
2025-02-11 20:13:58.763 [3acc.3bdc]  I: fs::ul::UpdatedService::update: F-Secure Gatekeeper service is updated
2025-02-11 20:13:58.764 [3acc.3bdc]  I: fs::ul::UpdatedService::stop: Service fsulprothoster has been already stopped
2025-02-11 20:13:58.764 [3acc.3bdc]  I: fs::ul::UpdatedService::stop: fsulprothoster service stopped
2025-02-11 20:13:58.766 [3acc.3bdc]  I: fs::ul::UpdatedService::configureAutoRestart: Made fsulhoster non restartable
2025-02-11 20:13:58.766 [3acc.3bdc]  I: fs::ul::UpdatedService::stop: fsulhoster service is stopping
2025-02-11 20:13:59.198 [3acc.3bdc]  I: fs::ul::UpdatedService::stop: fsulhoster service stopped
2025-02-11 20:13:59.199 [3acc.3bdc]  I: fs::ul::UpdatedService::configureAutoRestart: Made fsulhoster auto restartable
2025-02-11 20:13:59.199 [3acc.3bdc]  I: fs::ul::UpdatedService::configureAutoRestart: Made fsulnethoster non restartable
2025-02-11 20:13:59.200 [3acc.3bdc]  I: fs::ul::UpdatedService::stop: fsulnethoster service is stopping
2025-02-11 20:13:59.308 [3acc.3bdc]  I: fs::ul::UpdatedService::stop: fsulnethoster service stopped
2025-02-11 20:13:59.309 [3acc.3bdc]  I: fs::ul::UpdatedService::configureAutoRestart: Made fsulnethoster auto restartable
2025-02-11 20:13:59.360 [3acc.3bdc]  I: fs::ul::UpdatedService::stop: F-Secure Gatekeeper service is stopping
2025-02-11 20:13:59.360 [3acc.3bdc]  I: fs::ul::UpdatedService::stop: Service F-Secure Gatekeeper has been already stopped
2025-02-11 20:13:59.360 [3acc.3bdc]  I: fs::ul::UpdatedService::stop: F-Secure Gatekeeper service stopped
2025-02-11 20:13:59.360 [3acc.3bdc]  I: MainLogic::StopServices: All F-Secure Ultralight services are stopped in 1 sec
2025-02-11 20:13:59.360 [3acc.3bdc]  I: ul::UninstallService::exist: Service does not exist: F-Secure UL HIPS
2025-02-11 20:13:59.360 [3acc.3bdc]  I: MainLogic::UninstallDeepGuardDriver: No hips driver found
2025-02-11 20:13:59.360 [3acc.3bdc]  I: MainLogic::LogPreviousProductVersion: Previous product version: 2.1.19772
2025-02-11 20:13:59.360 [3acc.3bdc]  I: ul::EventsManifest::InstallEventsManifest: ulcoreDir=C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1738323940 resourceDllFile=spapi64.dll, first time 0
2025-02-11 20:13:59.360 [3acc.3bdc]  I: ul::EventsManifest::IsSharedManifestInstalled: Shared manifest is already installed for ul_default
2025-02-11 20:13:59.360 [3acc.3bdc]  I: ul::EventsManifest::IsSharedManifestInstalledForNamespace: Found ul_default in ul_default as 1
2025-02-11 20:13:59.360 [3acc.3bdc]  I: ul::EventsManifest::InstallEventsManifest: Shared manifest is already installed
2025-02-11 20:13:59.360 [3acc.3bdc]  I: MainLogic::UpdateEventsManifest: Installed with 1
2025-02-11 20:13:59.361 [3acc.3bdc]  I: MainLogic::SetGatekeeperDriverSettings: set LOGI for GK \??\C:\ProgramData\F-Secure\Log\FSAV\drivers\gklogi.log
2025-02-11 20:13:59.361 [3acc.3bdc]  I: MainLogic::RegisterInstallationDirectory: Added DAAS2 InstallationDirectory record
2025-02-11 20:13:59.361 [3acc.3bdc]  I: MainLogic::RegisterDelayLoading: Register delay loading NS global=default, ul=ul_default
2025-02-11 20:13:59.362 [3acc.3bdc]  I: MainLogic::RegisterDelayLoading: Registered delay loading settings.
2025-02-11 20:13:59.363 [3acc.3bdc]  I: MainLogic::GetInstallationRootDirectory: Installation root directory: "C:\Program Files (x86)\F-Secure\TOTAL\Ultralight"
2025-02-11 20:13:59.363 [3acc.3bdc]  I: MainLogic::UnregisterHotfixPlugin: Hotfix plugin unregistration
2025-02-11 20:13:59.367 [3acc.3bdc]  I: fs::fixQuarantineFolderIfNeeded: Nothing to fix in quarantine folder 'C:\ProgramData\F-Secure\Quarantine'
2025-02-11 20:13:59.367 [3acc.3bdc]  I: MainLogic::CreateQuarantineFolder: Created quarantine folder.
2025-02-11 20:13:59.367 [3acc.3bdc]  I: MainLogic::CreateUsersLogFolder: Created logfile folder.
2025-02-11 20:13:59.368 [3acc.3bdc]  I: MainLogic::CreateUsersLogFolder: Attributes set for user logfile folder.
2025-02-11 20:13:59.368 [3acc.3bdc]  I: MainLogic::SetRunWhitelistFlag: Setting RunWhitelistingTask, as 1 because first time is 0
2025-02-11 20:13:59.368 [3acc.3bdc]  I: MainLogic::CreateActivityMonitorDataFolder: Will enable data backup to activity monitor data folder C:\ProgramData\F-Secure\AmData
2025-02-11 20:13:59.368 [3acc.3bdc]  I: MainLogic::CreateActivityMonitorDataFolder: set activity monitor data folder GK \??\C:\ProgramData\F-Secure\AmData\
2025-02-11 20:13:59.368 [3acc.3bdc]  I: MainLogic::SetActivityoggerSettings: Configured acvitity session for beta or production, session time=600000 ms, session throttling=60 sec
2025-02-11 20:13:59.368 [3acc.3bdc]  I: MainLogic::SetScanHiddenObjectsSettings: Configured scan of hidden object for beta/prod, scan_hidden.mode is 1 (TelemetryOnly)
2025-02-11 20:13:59.368 [3acc.3bdc]  I: MainLogic::EnableSha256Settings: Enable sha256
2025-02-11 20:13:59.368 [3acc.3bdc]  I: MainLogic::EnableSha256Settings: Enabled hips.sha2_support
2025-02-11 20:13:59.368 [3acc.3bdc]  I: MainLogic::EnableSha256Settings: sha1 is already migrated as HashPolicyFlags value 4
2025-02-11 20:13:59.369 [3acc.3bdc]  I: MainLogic::SetDeepGuardSettings: Protected paths will be enabled
2025-02-11 20:13:59.369 [3acc.3bdc]  I: MainLogic::FixBrokenBSStats: Infection counter was checked previously
2025-02-11 20:13:59.369 [3acc.3bdc]  I: MainLogic::RegisterInstallationDirectory: Added Anti-Virus InstallationDirectory record
2025-02-11 20:13:59.369 [3acc.3bdc]  I: MainLogic::RegisterInstallationDirectory: Added HIPS InstallationDirectory record
2025-02-11 20:13:59.369 [3acc.3bdc]  I: fs::forceCapricornMode: Capricorn mode set
2025-02-11 20:13:59.369 [3acc.3bdc]  I: MainLogic::RegisterAmsi: Set as enabled amsi.en and nif2.fot.en
2025-02-11 20:13:59.369 [3acc.3bdc]  I: MainLogic::RegisterAmsi: Registration of AMSI 32bit module
2025-02-11 20:13:59.420 [3acc.3bdc]  I: MainLogic::RegisterAmsi: Registration of AMSI module: 0
2025-02-11 20:13:59.420 [3acc.3bdc]  I: MainLogic::RegisterAmsi: Registration of AMSI 64bit module
2025-02-11 20:13:59.441 [3acc.3bdc]  I: MainLogic::RegisterAmsi: Registration of AMSI module: 0
2025-02-11 20:13:59.441 [3acc.3bdc]  I: fs::details::hasAquariusSubscription: Aquarius subscription found
2025-02-11 20:13:59.441 [3acc.3bdc]  I: GenericApi<class SpApi>::GenericApi: API library is loaded. Initializing the API...
2025-02-11 20:13:59.447 [3acc.3bdc]  I: SpApi::connect: SPAPI cannot connect to GKH (80000000).
2025-02-11 20:13:59.447 [3acc.3bdc]  I: GenericApi<class SpApi>::GenericApi: API is initialized successfully.
2025-02-11 20:13:59.447 [3acc.3bdc]  I: SpApi::updateChannelSubscriptionImpl: Update result: 0
2025-02-11 20:13:59.480 [3acc.3bdc]  I: fs::ul::UpdatedService::start: fsulnethoster service is starting
2025-02-11 20:13:59.590 [3acc.3bdc]  I: fs::ul::UpdatedService::start: Service fsulnethoster started
2025-02-11 20:13:59.599 [3acc.3bdc]  I: fs::ul::UpdatedService::start: fsulhoster service is starting
2025-02-11 20:13:59.714 [3acc.3bdc]  I: fs::ul::UpdatedService::start: Service fsulhoster started
2025-02-11 20:13:59.735 [3acc.3bdc]  I: fs::ul::UpdatedService::start: fsulprothoster service is starting
2025-02-11 20:13:59.838 [3acc.3bdc]  I: fs::ul::UpdatedService::start: Service fsulprothoster started
2025-02-11 20:13:59.839 [3acc.3bdc]  I: powerinfo::GetTimeSinceLastWakeMs: system never slept
2025-02-11 20:13:59.840 [3acc.3bdc]  I: MainLogic::SaveInstallUpstreamStatus: reboot=0, duration=8 wake=0 ms, since last wake=0 sec, uptime=145 sec
2025-02-11 20:13:59.840 [3acc.3bdc]  I: MainLogic::execute: DONE.
2025-02-11 20:13:59.840 [3acc.3bdc]  I: InstallerMain: Main logic returned: 0
2025-02-11 20:13:59.840 [3acc.3bdc]  I: ul::markActiveVersion: Deactivating update 1726727565, current old status=previous new status=inactive
2025-02-11 20:13:59.840 [3acc.3bdc]  I: ul::markActiveVersion: Deactivating update 1733233387, current old status=active new status=previous
2025-02-11 20:13:59.840 [3acc.3bdc]  I: ul::markActiveVersion: Activating update 1738323940
2025-02-11 20:13:59.843 [3acc.3bdc]  I: flushRegistryKeyByName: Registry SOFTWARE (256) is flushed successfully
2025-02-11 20:13:59.845 [3acc.3bdc]  I: flushRegistryKeyByName: Registry SYSTEM (256) is flushed successfully
2025-02-11 20:13:59.845 [3acc.3bdc]  I: flushRegistryKeyByName: Registry SOFTWARE (512) is flushed successfully
2025-02-11 20:13:59.845 [3acc.3bdc]  I: InstallerMain: Returning: 0
2025-02-11 20:13:59.845 [3acc.3bdc]  I: ***  LOGGING ENDED  ***

2025-03-04 19:27:04.148 [0698.0b74]  I: ***  LOGGING STARTED  *** (UTC+1:00, session: 0x0)
2025-03-04 19:27:04.148 [0698.0b74]  I: InstallerMain: Version: 02.08.50.00 ()
2025-03-04 19:27:04.148 [0698.0b74]  I: CrashHandler::RegisterCrashHooks: Hooking crash
2025-03-04 19:27:04.148 [0698.0b74]  I: CrashHandler::RegisterCrashHooks: Dump path: 'C:\ProgramData\F-Secure\CrashDumps\install-ulcore-win64.dmp'
2025-03-04 19:27:04.148 [0698.0b74]  I: InstallerMain: ULU registry root: SOFTWARE\F-Secure\Ultralight, module=ulcore, title=Ultralight Core (64-bit) 2025-02-14_01, version=1739541281
2025-03-04 19:27:04.148 [0698.0b74]  I: InstallerMain: Installing ulcore, version 1739541281. title: Ultralight Core (64-bit) 2025-02-14_01
2025-03-04 19:27:04.148 [0698.0b74]  I: InstallerMain: Executing main logic...
2025-03-04 19:27:04.148 [0698.0b74]  I: MainLogic::Initialize: Current path: C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1739541281
2025-03-04 19:27:04.164 [0698.0b74]  I: MainLogic::Initialize: Version: 2.1 build 20051
2025-03-04 19:27:04.164 [0698.0b74]  I: MainLogic::Initialize: release stage: 3
2025-03-04 19:27:04.164 [0698.0b74]  I: MainLogic::CheckFirstTimeInstallation: First time install 0
2025-03-04 19:27:04.164 [0698.0b74]  I: MainLogic::Initialize: Will install Gatekeeper Driver: true
2025-03-04 19:27:04.164 [0698.0b74]  I: MainLogic::Initialize: Will install DeepGuard: true
2025-03-04 19:27:04.164 [0698.0b74]  I: MainLogic::EnableDriverUpdateOverRebootIfConfigured: Set update drivers with reboot as 0
2025-03-04 19:27:04.164 [0698.0b74]  I: MainLogic::SetUpdateStartedTime: spapi loaded: 1, now is 1741112824
2025-03-04 19:27:04.180 [0698.0b74]  I: MainLogic::InstallProtectedHoster: Will install protected hoster: true
2025-03-04 19:27:04.180 [0698.0b74]  I: MainLogic::InstallProtectedHoster: PPL flags: 1 1
2025-03-04 19:27:04.183 [0698.0b74]  I: ul::ProtectedHoster::cleanDuplicatedWSCRegistrationsViaWMI: F-Secure  path=C:\Program Files (x86)\F-Secure\TOTAL\Ultralight\ulcore\1738323940\fsulprothoster.exe relpath=AntiVirusProduct.instanceGuid="{DA5F8466-F00B-8E6B-6CB8-5AE55C9EBDCD}" time=Tue, 04 Mar 2025 18:27:03 GMT status=266240l
2025-03-04 19:27:04.183 [0698.0b74]  I: ul::ProtectedHoster::cleanDuplicatedWSCRegistrationsViaWMI: Will remove WSC registration: AntiVirusProduct.instanceGuid="{DA5F8466-F00B-8E6B-6CB8-5AE55C9EBDCD}"
2025-03-04 19:27:04.195 [0698.0b74]  I: ul::ProtectedHoster::cleanDuplicatedWSCRegistrationsViaWMI: Windows Defender  path=%ProgramFiles%\Windows Defender\MsMpeng.exe relpath=AntiVirusProduct.instanceGuid="{D68DDC3A-831F-4fae-9E44-DA132C1ACF46}" time=Sun, 02 Feb 2025 13:29:23 GMT status=393472l
2025-03-04 19:27:04.195 [0698.0b74]  I: ul::ProtectedHoster::isWindowsSecurityCenterRunning: WindowsSecurityCenter service exists 'wscsvc' and has state 4
2025-03-04 19:27:04.195 [0698.0b74]  I: ul::ProtectedHoster::isWindowsSecurityCenterRunning: WindowsSecurityCenter service 'wscsvc' is running
2025-03-04 19:27:04.195 [0698.0b74]  I: GenericApi<class HosterApi>::GenericApi: API library is loaded. Initializing the API...
2025-03-04 19:27:04.195 [0698.0b74]  I: GenericApi<class HosterApi>::GenericApi: API is initialized successfully.
2025-03-04 19:27:04.195 [0698.0b74]  I: ul::ProtectedHoster::isWSCPluginRunning: WSCPlugin state is 4, is running 1
2025-03-04 19:27:04.195 [0698.0b74]  I: ul::ProtectedHoster::unregisterWSCProvider: Going to unregister WSC provider. Current version 3.12.140.0, new 3.12.144.0
2025-03-04 19:27:04.195 [0698.0b74]  I: ul::ProtectedHoster::isWSCPluginRunning: WSCPlugin state is 4, is running 1
2025-03-04 19:27:04.195 [0698.0b74] .W: ul::ProtectedHoster::waitUnregistrationDone::<lambda>: provider wsc.anti_virus.name is still registered, attempt 0, value F-Secure
2025-03-04 19:27:04.205 [0698.0b74] .W: ul::ProtectedHoster::waitUnregistrationDone::<lambda>: provider wsc.anti_spyware.name is still registered, attempt 0, value F-Secure
2025-03-04 19:27:05.210 [0698.0b74] .W: ul::ProtectedHoster::waitUnregistrationDone::<lambda>: provider wsc.anti_virus.name is still registered, attempt 1, value F-Secure
2025-03-04 19:27:05.212 [0698.0b74] .W: ul::ProtectedHoster::waitUnregistrationDone::<lambda>: provider wsc.anti_spyware.name is still registered, attempt 1, value F-Secure
2025-03-04 19:27:07.222 [0698.0b74] .W: ul::ProtectedHoster::waitUnregistrationDone::<lambda>: provider wsc.anti_virus.name is still registered, attempt 2, value F-Secure
2025-03-04 19:27:07.222 [0698.0b74] .W: ul::ProtectedHoster::waitUnregistrationDone::<lambda>: provider wsc.anti_spyware.name is still registered, attempt 2, value F-Secure
2025-03-04 19:27:11.230 [0698.0b74] .W: ul::ProtectedHoster::waitUnregistrationDone::<lambda>: provider wsc.anti_virus.name is still registered, attempt 3, value F-Secure
2025-03-04 19:27:11.230 [0698.0b74] .W: ul::ProtectedHoster::waitUnregistrationDone::<lambda>: provider wsc.anti_spyware.name is still registered, attempt 3, value F-Secure
2025-03-04 19:27:19.252 [0698.0b74]  I: ul::ProtectedHoster::setWSCUnregistrationUpstreamStatus: Set WSC unreg status as 1
