[12/26/12 19:46:31][PID:3088] --------------------------------------------------
[12/26/12 19:46:31][PID:3088]   GetFileVersionInfoSize(C:\Program Files\Common Files\Symantec Shared\SEVINST64x86.EXE) start
[12/26/12 19:46:31][PID:3088]   GetFileVersionInfoSize(C:\Program Files\Common Files\Symantec Shared\SEVINST64x86.EXE) end
[12/26/12 19:46:31][PID:3088] Installed:12.9.0.22  This: 12.9.0.22
[12/26/12 19:46:31][PID:3088] Installed Version (if any) is not newer.
[12/26/12 19:46:31][PID:3088] Acquiring Global\Symevent_running mutex...
[12/26/12 19:46:31][PID:3088]   Successfully acquired mutex.
[12/26/12 19:46:31][PID:3088]   GetFileVersionInfoSize(C:\Program Files\Common Files\Symantec Shared\SEVINST64x86.EXE) start
[12/26/12 19:46:31][PID:3088]   GetFileVersionInfoSize(C:\Program Files\Common Files\Symantec Shared\SEVINST64x86.EXE) end
[12/26/12 19:46:31][PID:3088] Installed:12.9.0.22  This: 12.9.0.22
[12/26/12 19:46:31][PID:3088]   Installed version isn't newer after waiting on the mutex.
[12/26/12 19:46:31][PID:3088] Symevent Installer (c)1998-2010 Symantec Corporation
[12/26/12 19:46:31][PID:3088] 64-bit Installer
[12/26/12 19:46:31][PID:3088] Launched from: C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\bin64\Sevntx64.exe
[12/26/12 19:46:31][PID:3088] Compiled Version 12.9.0.22
[12/26/12 19:46:31][PID:3088] Logging Events Beginning 12/26/2012 at 19:46
[12/26/12 19:46:31][PID:3088] Operating System Detected -> Windows 7
[12/26/12 19:46:31][PID:3088]   Additional Info: dwOSVersionInfoSize is 0x00000114
[12/26/12 19:46:31][PID:3088]   Additional Info: dwMajorVersion      is 0x00000006
[12/26/12 19:46:31][PID:3088]   Additional Info: dwMinorVersion      is 0x00000001
[12/26/12 19:46:31][PID:3088]   Additional Info: dwBuildNumber       is 0x00001DB1
[12/26/12 19:46:31][PID:3088]   Additional Info: dwPlatformId        is 0x00000002
[12/26/12 19:46:31][PID:3088]   Additional Info: szCSDVersion        is Service Pack 1
[12/26/12 19:46:31][PID:3088] ----------------------------------------------------
[12/26/12 19:46:31][PID:3088] CommandLine=/Q /NoRegLU /NOSPMANIFEST SAVCE
[12/26/12 19:46:31][PID:3088] Symantec dir found using ProgramFilesDir: C:\Program Files
[12/26/12 19:46:31][PID:3088] Common Files dir location found using CommonFilesDir: C:\Program Files\Common Files
[12/26/12 19:46:31][PID:3088]   Checking for existing SymEvent...
[12/26/12 19:46:31][PID:3088]   Found: C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
[12/26/12 19:46:31][PID:3088]   SymEvent was found on the system.
[12/26/12 19:46:31][PID:3088]   GetFileVersionInfoSize(C:\Windows\system32\Drivers\SYMEVENT64x86.SYS) start
[12/26/12 19:46:31][PID:3088]   GetFileVersionInfoSize(C:\Windows\system32\Drivers\SYMEVENT64x86.SYS) end
[12/26/12 19:46:31][PID:3088]   GetFileVersionInfoSize(C:\Program Files\Symantec\TEMP.^^^\SYMEVENT64x86.SYS) start
[12/26/12 19:46:31][PID:3088]   GetFileVersionInfoSize(C:\Program Files\Symantec\TEMP.^^^\SYMEVENT64x86.SYS) end
[12/26/12 19:46:31][PID:3088]   GetFileVersionInfoSize(C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\bin64\Sevntx64.exe) start
[12/26/12 19:46:31][PID:3088]   GetFileVersionInfoSize(C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\bin64\Sevntx64.exe) end
[12/26/12 19:46:31][PID:3088]   GetFileVersionInfoSize(C:\Program Files\Common Files\Symantec Shared\SEVINST64x86.EXE) start
[12/26/12 19:46:31][PID:3088]   GetFileVersionInfoSize(C:\Program Files\Common Files\Symantec Shared\SEVINST64x86.EXE) end
[12/26/12 19:46:31][PID:3088] BEGIN - WM_CREATE
[12/26/12 19:46:31][PID:3088]   GetUsageCounts found an existing usage count of: 1
[12/26/12 19:46:31][PID:3088]   GetFileVersionInfoSize(C:\Program Files\Common Files\Symantec Shared\SEVINST64x86.EXE) start
[12/26/12 19:46:31][PID:3088]   GetFileVersionInfoSize(C:\Program Files\Common Files\Symantec Shared\SEVINST64x86.EXE) end
[12/26/12 19:46:31][PID:3088] END - WM_CREATE
[12/26/12 19:46:31][PID:3088] BEGIN - IDM_CHECKUSAGEUPDATE
[12/26/12 19:46:31][PID:3088]   Installing with known AppID / Product ID already registered with Sevinst.  Not Updating Refcounts.
[12/26/12 19:46:31][PID:3088] END - IDM_CHECKUSAGECOUNTUPDATE
[12/26/12 19:46:31][PID:3088] BEGIN - IDM_PREPARECOPY
[12/26/12 19:46:31][PID:3088] END - IDM_PREPARECOPY
[12/26/12 19:46:31][PID:3088] BEGIN - IDM_STARTCOPY
[12/26/12 19:46:31][PID:3088] END - IDM_STARTCOPY
[12/26/12 19:46:31][PID:3088] BEGIN - IDM_COPYFILE
[12/26/12 19:46:31][PID:3088]   Copying file C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\bin64\Sevntx64.exe
[12/26/12 19:46:31][PID:3088]   File installed successfully: C:\Program Files\Common Files\Symantec Shared\SEVINST64x86.EXE
[12/26/12 19:46:31][PID:3088] Inside UnMarkFilesForDeletion()
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\Windows\system32\spool\PRTPROCS\x64\1_hpcpp6bu.DLL
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Data\Install\closeui.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\Setup.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.dat
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\VPRemoteExecutionStatus.xml
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Data\Install\closeui.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\Setup.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.dat
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Data\Install\closeui.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\Setup.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.dat
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Data\Install\closeui.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\Setup.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.dat
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Data\Install\closeui.exe
[12/26/12 19:46:31][PID:3088]   None of our files are marked for deletion.  Not modifying the PendingFileRenameOperations registry value.
[12/26/12 19:46:31][PID:3088] END - IDM_COPYFILE
[12/26/12 19:46:31][PID:3088] BEGIN - IDM_COPYFILE
[12/26/12 19:46:31][PID:3088]   Copying file C:\Program Files\Symantec\TEMP.^^^\SYMEVENT64x86.SYS
[12/26/12 19:46:31][PID:3088]   File installed successfully: C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
[12/26/12 19:46:31][PID:3088] Inside UnMarkFilesForDeletion()
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\Windows\system32\spool\PRTPROCS\x64\1_hpcpp6bu.DLL
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Data\Install\closeui.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\Setup.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.dat
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\VPRemoteExecutionStatus.xml
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Data\Install\closeui.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\Setup.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.dat
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Data\Install\closeui.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\Setup.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.dat
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Data\Install\closeui.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\Setup.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.dat
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Data\Install\closeui.exe
[12/26/12 19:46:31][PID:3088]   None of our files are marked for deletion.  Not modifying the PendingFileRenameOperations registry value.
[12/26/12 19:46:31][PID:3088] END - IDM_COPYFILE
[12/26/12 19:46:31][PID:3088] BEGIN - IDM_COPYFILE
[12/26/12 19:46:31][PID:3088]   Copying file C:\Program Files\Symantec\TEMP.^^^\SYMEVENT64x86.INF
[12/26/12 19:46:31][PID:3088]   File installed successfully: C:\Windows\system32\Drivers\SYMEVENT64x86.INF
[12/26/12 19:46:31][PID:3088] Inside UnMarkFilesForDeletion()
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\Windows\system32\spool\PRTPROCS\x64\1_hpcpp6bu.DLL
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Data\Install\closeui.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\Setup.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.dat
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\VPRemoteExecutionStatus.xml
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Data\Install\closeui.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\Setup.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.dat
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Data\Install\closeui.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\Setup.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.dat
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Data\Install\closeui.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\Setup.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.dat
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Data\Install\closeui.exe
[12/26/12 19:46:31][PID:3088]   None of our files are marked for deletion.  Not modifying the PendingFileRenameOperations registry value.
[12/26/12 19:46:31][PID:3088] END - IDM_COPYFILE
[12/26/12 19:46:31][PID:3088] BEGIN - IDM_COPYFILE
[12/26/12 19:46:31][PID:3088]   Copying file C:\Program Files\Symantec\TEMP.^^^\SYMEVENT64x86.CAT
[12/26/12 19:46:31][PID:3088]   File installed successfully: C:\Windows\system32\Drivers\SYMEVENT64x86.CAT
[12/26/12 19:46:31][PID:3088] Inside UnMarkFilesForDeletion()
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\Windows\system32\spool\PRTPROCS\x64\1_hpcpp6bu.DLL
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Data\Install\closeui.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\Setup.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.dat
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\VPRemoteExecutionStatus.xml
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Data\Install\closeui.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\Setup.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.dat
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Data\Install\closeui.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\Setup.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.dat
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Data\Install\closeui.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\Setup.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.dat
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst\vpremote.exe
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\TEMP\Clt-Inst
[12/26/12 19:46:31][PID:3088]   File marked for deletion: \??\C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Data\Install\closeui.exe
[12/26/12 19:46:31][PID:3088]   None of our files are marked for deletion.  Not modifying the PendingFileRenameOperations registry value.
[12/26/12 19:46:31][PID:3088] END - IDM_COPYFILE
[12/26/12 19:46:31][PID:3088] BEGIN - IDM_COPYFILE
[12/26/12 19:46:31][PID:3088] END - IDM_COPYFILE
[12/26/12 19:46:31][PID:3088] BEGIN - IDM_UPDATEUSAGE
[12/26/12 19:46:31][PID:3088]   Old RefCount: System32\Drivers\SYMEVENT64x86.SYS: 1
[12/26/12 19:46:31][PID:3088]   New RefCount: System32\Drivers\SYMEVENT64x86.SYS: 1
[12/26/12 19:46:31][PID:3088]   Symevent Service Exists
[12/26/12 19:46:31][PID:3088]     ConfigureService, opening SCM
[12/26/12 19:46:31][PID:3088]     ConfigureService, opening service
[12/26/12 19:46:31][PID:3088]     ConfigureService, configuring service
[12/26/12 19:46:32][PID:3088]     ConfigureService, closing service
[12/26/12 19:46:32][PID:3088]     ConfigureService, closing SCM
[12/26/12 19:46:32][PID:3088]   ConfigureService returned 0x00000000
[12/26/12 19:46:32][PID:3088] Constructed uninstall string: "C:\Program Files\Common Files\Symantec Shared\SEVINST64x86.EXE" /U /Q
[12/26/12 19:46:32][PID:3088] Constructed reg key string: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Sevinst
[12/26/12 19:46:32][PID:3088] AddUninstallKey: Current reg value "C:\Program Files\Common Files\Symantec Shared\SEVINST64x86.EXE" /U /Q
[12/26/12 19:46:32][PID:3088] AddUninstallKey: Reg value already present
[12/26/12 19:46:32][PID:3088] END - IDM_UPDATEUSAGE
[12/26/12 19:46:32][PID:3088] BEGIN - IDM_LUREGISTER
[12/26/12 19:46:32][PID:3088]   /NoRegLU switch used.  Not registering with LiveUpdate.
[12/26/12 19:46:32][PID:3088] END - IDM_LUREGISTER
[12/26/12 19:46:32][PID:3088] BEGIN - IDM_ALLDONE
[12/26/12 19:46:32][PID:3088] END - IDM_ALLDONE
[12/26/12 19:46:32][PID:3088]   Deleting C:\Program Files\Symantec\TEMP.^^^\SYMEVENT64x86.SYS...Deleted.
[12/26/12 19:46:32][PID:3088]   Deleting C:\Program Files\Symantec\TEMP.^^^\SYMEVENT64x86.INF...Deleted.
[12/26/12 19:46:32][PID:3088]   Deleting C:\Program Files\Symantec\TEMP.^^^\SYMEVENT64x86.CAT...Deleted.
[12/26/12 19:46:32][PID:3088] Returning: 0 - Success, no reboot required.