[03/26/14 14:39:15][PID:3092] --------------------------------------------------
[03/26/14 14:39:15][PID:3092] Installed Version (if any) is not newer.
[03/26/14 14:39:15][PID:3092] Acquiring Global\Symevent_running mutex...
[03/26/14 14:39:15][PID:3092]   Successfully acquired mutex.
[03/26/14 14:39:15][PID:3092]   Installed version isn't newer after waiting on the mutex.
[03/26/14 14:39:15][PID:3092] Symevent Installer (c)1998-2013 Symantec Corporation
[03/26/14 14:39:15][PID:3092] Launched from: C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\bin\Sevinst.exe
[03/26/14 14:39:15][PID:3092] Compiled Version 12.9.5.3
[03/26/14 14:39:15][PID:3092] Logging Events Beginning 03/26/2014 at 14:39
[03/26/14 14:39:15][PID:3092] Operating System Detected -> Windows XP
[03/26/14 14:39:15][PID:3092]   Additional Info: dwOSVersionInfoSize is 0x00000114
[03/26/14 14:39:15][PID:3092]   Additional Info: dwMajorVersion      is 0x00000005
[03/26/14 14:39:15][PID:3092]   Additional Info: dwMinorVersion      is 0x00000001
[03/26/14 14:39:15][PID:3092]   Additional Info: dwBuildNumber       is 0x00000A28
[03/26/14 14:39:15][PID:3092]   Additional Info: dwPlatformId        is 0x00000002
[03/26/14 14:39:15][PID:3092]   Additional Info: szCSDVersion        is Service Pack 3
[03/26/14 14:39:15][PID:3092] ----------------------------------------------------
[03/26/14 14:39:15][PID:3092] CommandLine=/Q /NoRegLU /NoVDD /HRESULT /NOSPMANIFEST SAVCE
[03/26/14 14:39:15][PID:3092] Symantec dir found using ProgramFilesDir: C:\Program Files
[03/26/14 14:39:15][PID:3092] Using temp path: C:\WINDOWS\TEMP\TEMP.^^^
[03/26/14 14:39:15][PID:3092] Common Files dir location found using CommonFilesDir: C:\Program Files\Common Files
[03/26/14 14:39:15][PID:3092] Symantec CommonFilesDir created using C:\Program Files\Common Files\Symantec Shared
[03/26/14 14:39:15][PID:3092]   Checking for existing SymEvent...
[03/26/14 14:39:15][PID:3092]   SymEvent wasn't found on the system.
[03/26/14 14:39:15][PID:3092]   GetFileVersionInfoSize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\bin\Sevinst.exe) start
[03/26/14 14:39:15][PID:3092]   GetFileVersionInfoSize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\bin\Sevinst.exe) end
[03/26/14 14:39:15][PID:3092] BEGIN - WM_CREATE
[03/26/14 14:39:15][PID:3092] FS8IB: Entering...
[03/26/14 14:39:15][PID:3092] FS8IB_GSDFL: Symantec dir not found using SharedUsage key. Done.
[03/26/14 14:39:15][PID:3092] FS8IB: Done w/o fix.
[03/26/14 14:39:15][PID:3092]   GetUsageCounts found an existing usage count of: 0
[03/26/14 14:39:15][PID:3092] END - WM_CREATE
[03/26/14 14:39:15][PID:3092] BEGIN - IDM_CREATESYMDIR
[03/26/14 14:39:15][PID:3092] END - IDM_CREATESYMDIR
[03/26/14 14:39:15][PID:3092] BEGIN - IDM_CHECKUSAGEUPDATE
[03/26/14 14:39:15][PID:3092] In RemoveVxDOnNT
[03/26/14 14:39:15][PID:3092] Leaving RemoveVxDOnNT
[03/26/14 14:39:15][PID:3092]   Installing with unknown AppID and not yet registered with Sevinst.  Updating RefCounts.
[03/26/14 14:39:15][PID:3092] END - IDM_CHECKUSAGECOUNTUPDATE
[03/26/14 14:39:15][PID:3092] BEGIN - IDM_PREPARECOPY
[03/26/14 14:39:15][PID:3092] END - IDM_PREPARECOPY
[03/26/14 14:39:15][PID:3092] BEGIN - IDM_STARTCOPY
[03/26/14 14:39:15][PID:3092] END - IDM_STARTCOPY
[03/26/14 14:39:15][PID:3092] BEGIN - IDM_COPYFILE
[03/26/14 14:39:15][PID:3092]   Copying file C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\bin\Sevinst.exe
[03/26/14 14:39:15][PID:3092]   File installed successfully: C:\Program Files\Common Files\Symantec Shared\SEVINST.EXE
[03/26/14 14:39:15][PID:3092] Inside UnMarkFilesForDeletion()
[03/26/14 14:39:15][PID:3092]   No files are marked for deletion, nothing to unmark.
[03/26/14 14:39:15][PID:3092] END - IDM_COPYFILE
[03/26/14 14:39:15][PID:3092] BEGIN - IDM_COPYFILE
[03/26/14 14:39:15][PID:3092]   Copying file C:\WINDOWS\TEMP\TEMP.^^^\SYMEVENT.SYS
[03/26/14 14:39:15][PID:3092]   File installed successfully: C:\WINDOWS\system32\Drivers\SYMEVENT.SYS
[03/26/14 14:39:15][PID:3092] Inside UnMarkFilesForDeletion()
[03/26/14 14:39:15][PID:3092]   No files are marked for deletion, nothing to unmark.
[03/26/14 14:39:15][PID:3092] END - IDM_COPYFILE
[03/26/14 14:39:15][PID:3092] BEGIN - IDM_COPYFILE
[03/26/14 14:39:15][PID:3092]   Copying file C:\WINDOWS\TEMP\TEMP.^^^\SYMEVENT.SYS
[03/26/14 14:39:15][PID:3092]   File installed successfully: C:\Program Files\Symantec\SYMEVENT.SYS
[03/26/14 14:39:15][PID:3092] Inside UnMarkFilesForDeletion()
[03/26/14 14:39:15][PID:3092]   No files are marked for deletion, nothing to unmark.
[03/26/14 14:39:15][PID:3092] END - IDM_COPYFILE
[03/26/14 14:39:15][PID:3092] BEGIN - IDM_COPYFILE
[03/26/14 14:39:15][PID:3092]   Copying file C:\WINDOWS\TEMP\TEMP.^^^\SYMEVENT.INF
[03/26/14 14:39:15][PID:3092]   File installed successfully: C:\WINDOWS\system32\Drivers\SYMEVENT.INF
[03/26/14 14:39:15][PID:3092] Inside UnMarkFilesForDeletion()
[03/26/14 14:39:15][PID:3092]   No files are marked for deletion, nothing to unmark.
[03/26/14 14:39:15][PID:3092] END - IDM_COPYFILE
[03/26/14 14:39:15][PID:3092] BEGIN - IDM_COPYFILE
[03/26/14 14:39:15][PID:3092]   Copying file C:\WINDOWS\TEMP\TEMP.^^^\SYMEVENT.INF
[03/26/14 14:39:15][PID:3092]   File installed successfully: C:\Program Files\Symantec\SYMEVENT.INF
[03/26/14 14:39:15][PID:3092] Inside UnMarkFilesForDeletion()
[03/26/14 14:39:15][PID:3092]   No files are marked for deletion, nothing to unmark.
[03/26/14 14:39:15][PID:3092] END - IDM_COPYFILE
[03/26/14 14:39:15][PID:3092] BEGIN - IDM_COPYFILE
[03/26/14 14:39:15][PID:3092]   Copying file C:\WINDOWS\TEMP\TEMP.^^^\SYMEVENT.CAT
[03/26/14 14:39:15][PID:3092]   File installed successfully: C:\WINDOWS\system32\Drivers\SYMEVENT.CAT
[03/26/14 14:39:15][PID:3092] Inside UnMarkFilesForDeletion()
[03/26/14 14:39:15][PID:3092]   No files are marked for deletion, nothing to unmark.
[03/26/14 14:39:15][PID:3092] END - IDM_COPYFILE
[03/26/14 14:39:15][PID:3092] BEGIN - IDM_COPYFILE
[03/26/14 14:39:15][PID:3092]   Copying file C:\WINDOWS\TEMP\TEMP.^^^\SYMEVENT.CAT
[03/26/14 14:39:15][PID:3092]   File installed successfully: C:\Program Files\Symantec\SYMEVENT.CAT
[03/26/14 14:39:15][PID:3092] Inside UnMarkFilesForDeletion()
[03/26/14 14:39:15][PID:3092]   No files are marked for deletion, nothing to unmark.
[03/26/14 14:39:15][PID:3092] END - IDM_COPYFILE
[03/26/14 14:39:15][PID:3092] BEGIN - IDM_COPYFILE
[03/26/14 14:39:15][PID:3092] END - IDM_COPYFILE
[03/26/14 14:39:15][PID:3092] BEGIN - IDM_UPDATEUSAGE
[03/26/14 14:39:15][PID:3092]   Symantec\S32EVNT1.DLL refcount is zero. Not incrementing.
[03/26/14 14:39:15][PID:3092]   Old RefCount: System32\S32EVNT1.DLL: 0
[03/26/14 14:39:15][PID:3092]   New RefCount: System32\S32EVNT1.DLL: 1
[03/26/14 14:39:15][PID:3092]   Old RefCount: System32\Drivers\SYMEVENT.SYS: 0
[03/26/14 14:39:15][PID:3092]   New RefCount: System32\Drivers\SYMEVENT.SYS: 1
[03/26/14 14:39:15][PID:3092]   Old RefCount: Symantec\SYMEVENT.SYS: 0
[03/26/14 14:39:15][PID:3092]   New RefCount: Symantec\SYMEVENT.SYS: 1
[03/26/14 14:39:15][PID:3092]   Symevent Service Does Not Exist
[03/26/14 14:39:15][PID:3092]     InstallService, opening SCM
[03/26/14 14:39:15][PID:3092]     InstallService, creating service
[03/26/14 14:39:15][PID:3092]     InstallService, closing service
[03/26/14 14:39:15][PID:3092]     InstallService, closing SCM
[03/26/14 14:39:15][PID:3092]   InstallService returned 00000000
[03/26/14 14:39:15][PID:3092] BEGIN - AddRemoveVDDEntry( C:\WINDOWS\system32\SYMEVENT.SYS, 0 )
[03/26/14 14:39:15][PID:3092] AddRemoveVDDEntry - NoVDD is set - bailing out.
[03/26/14 14:39:15][PID:3092] Constructed uninstall string: "C:\Program Files\Common Files\Symantec Shared\SEVINST.EXE" /U /Q
[03/26/14 14:39:15][PID:3092] Constructed reg key string: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Sevinst
[03/26/14 14:39:15][PID:3092] AddUninstallKey: Reg value written
[03/26/14 14:39:15][PID:3092] END - IDM_UPDATEUSAGE
[03/26/14 14:39:15][PID:3092] BEGIN - IDM_LUREGISTER
[03/26/14 14:39:15][PID:3092]   /NoRegLU switch used.  Not registering with LiveUpdate.
[03/26/14 14:39:15][PID:3092] END - IDM_LUREGISTER
[03/26/14 14:39:15][PID:3092] BEGIN - IDM_ALLDONE
[03/26/14 14:39:15][PID:3092] END - IDM_ALLDONE
[03/26/14 14:39:15][PID:3092]   Deleting C:\WINDOWS\TEMP\TEMP.^^^\SYMEVENT.SYS...Deleted.
[03/26/14 14:39:15][PID:3092]   Deleting C:\WINDOWS\TEMP\TEMP.^^^\SYMEVENT.INF...Deleted.
[03/26/14 14:39:15][PID:3092]   Deleting C:\WINDOWS\TEMP\TEMP.^^^\SYMEVENT.CAT...Deleted.
[03/26/14 14:39:15][PID:3092] Returning: 0 - Success, no reboot required.
[03/26/14 14:39:35][PID:3308] --------------------------------------------------
[03/26/14 14:39:35][PID:3308]   GetFileVersionInfoSize(C:\Program Files\Common Files\Symantec Shared\SEVINST.EXE) start
[03/26/14 14:39:35][PID:3308]   GetFileVersionInfoSize(C:\Program Files\Common Files\Symantec Shared\SEVINST.EXE) end
[03/26/14 14:39:35][PID:3308] Installed:12.9.5.3  This: 12.9.5.3
[03/26/14 14:39:35][PID:3308] Installed Version (if any) is not newer.
[03/26/14 14:39:35][PID:3308] Acquiring Global\Symevent_running mutex...
[03/26/14 14:39:35][PID:3308]   Successfully acquired mutex.
[03/26/14 14:39:35][PID:3308]   GetFileVersionInfoSize(C:\Program Files\Common Files\Symantec Shared\SEVINST.EXE) start
[03/26/14 14:39:35][PID:3308]   GetFileVersionInfoSize(C:\Program Files\Common Files\Symantec Shared\SEVINST.EXE) end
[03/26/14 14:39:35][PID:3308] Installed:12.9.5.3  This: 12.9.5.3
[03/26/14 14:39:35][PID:3308]   Installed version isn't newer after waiting on the mutex.
[03/26/14 14:39:35][PID:3308] Symevent Installer (c)1998-2013 Symantec Corporation
[03/26/14 14:39:35][PID:3308] Launched from: C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\bin\Sevinst.exe
[03/26/14 14:39:35][PID:3308] Compiled Version 12.9.5.3
[03/26/14 14:39:35][PID:3308] Logging Events Beginning 03/26/2014 at 14:39
[03/26/14 14:39:35][PID:3308] Operating System Detected -> Windows XP
[03/26/14 14:39:35][PID:3308]   Additional Info: dwOSVersionInfoSize is 0x00000114
[03/26/14 14:39:35][PID:3308]   Additional Info: dwMajorVersion      is 0x00000005
[03/26/14 14:39:35][PID:3308]   Additional Info: dwMinorVersion      is 0x00000001
[03/26/14 14:39:35][PID:3308]   Additional Info: dwBuildNumber       is 0x00000A28
[03/26/14 14:39:35][PID:3308]   Additional Info: dwPlatformId        is 0x00000002
[03/26/14 14:39:35][PID:3308]   Additional Info: szCSDVersion        is Service Pack 3
[03/26/14 14:39:35][PID:3308] ----------------------------------------------------
[03/26/14 14:39:35][PID:3308] CommandLine=/Q /U /NOREGAPPID /NoRegLU /NoVDD /HRESULT /DelOnReboot SAVCE
[03/26/14 14:39:35][PID:3308] Symantec dir found using ProgramFilesDir: C:\Program Files
[03/26/14 14:39:35][PID:3308] Using temp path: C:\WINDOWS\TEMP\TEMP.^^^
[03/26/14 14:39:35][PID:3308] Common Files dir location found using CommonFilesDir: C:\Program Files\Common Files
[03/26/14 14:39:35][PID:3308] BEGIN - WM_CREATE
[03/26/14 14:39:35][PID:3308] FS8IB: Entering...
[03/26/14 14:39:35][PID:3308] FS8IB_GSDFL: Symantec dir not found using SharedUsage key. Done.
[03/26/14 14:39:35][PID:3308] FS8IB: Done w/o fix.
[03/26/14 14:39:35][PID:3308] END - WM_CREATE
[03/26/14 14:39:35][PID:3308] BEGIN - IDM_CHECKUSAGEUPDATE
[03/26/14 14:39:35][PID:3308]   Uninstalling with known AppID (or /NOREGAPPID).  Updating Refcounts.
[03/26/14 14:39:35][PID:3308] END - IDM_CHECKUSAGECOUNTUPDATE
[03/26/14 14:39:35][PID:3308] BEGIN - IDM_UNINSTALL_UI
[03/26/14 14:39:35][PID:3308] END - IDM_UNINSTALL_UI
[03/26/14 14:39:35][PID:3308] BEGIN - IDM_UNINSTALL
[03/26/14 14:39:35][PID:3308]   RefCount C:\WINDOWS\system32\Drivers\SYMEVENT.SYS reached 0.
[03/26/14 14:39:35][PID:3308]   Deleting C:\WINDOWS\system32\Drivers\SYMEVENT.SYS...Deleted.
[03/26/14 14:39:35][PID:3308]   RefCount C:\Program Files\Symantec\SYMEVENT.SYS reached 0.
[03/26/14 14:39:35][PID:3308]   Deleting C:\Program Files\Symantec\SYMEVENT.SYS...Deleted.
[03/26/14 14:39:35][PID:3308]   RefCount C:\WINDOWS\system32\S32EVNT1.DLL reached 0.
[03/26/14 14:39:35][PID:3308]   RemoveService returned: 0x00000000
[03/26/14 14:39:35][PID:3308]   Removed SymProtect Manifests.
[03/26/14 14:39:35][PID:3308]   Deleting C:\Program Files\Symantec\SYMEVENT.INF...Deleted.
[03/26/14 14:39:35][PID:3308]   Deleting C:\Program Files\Symantec\SYMEVENT.CAT...Deleted.
[03/26/14 14:39:35][PID:3308]   Deleting C:\WINDOWS\system32\Drivers\SYMEVENT.INF...Deleted.
[03/26/14 14:39:35][PID:3308]   Deleting C:\WINDOWS\system32\Drivers\SYMEVENT.CAT...Deleted.
[03/26/14 14:39:35][PID:3308]   Removed CAT and INF files
[03/26/14 14:39:35][PID:3308]   /NoRegLU switch used.  Not unregistering from LiveUpdate.
[03/26/14 14:39:35][PID:3308] BEGIN - AddRemoveVDDEntry( C:\PROGRA~1\Symantec\S32EVNT1.DLL, 1 )
[03/26/14 14:39:35][PID:3308] AddRemoveVDDEntry - NoVDD is set - bailing out.
[03/26/14 14:39:35][PID:3308]   Successfully deleted SymEvent regkey and subkeys using standard methods.
[03/26/14 14:39:35][PID:3308]   Setting Sevinst delete to TRUE
[03/26/14 14:39:35][PID:3308]   Sevinst attributes okay.  Attempting to delete the copy in the Symantec Shared folder.
[03/26/14 14:39:35][PID:3308]   Deleting C:\Program Files\Common Files\Symantec Shared\SEVINST.EXE...Deleted.
[03/26/14 14:39:35][PID:3308] RemoveUninstallKey: Constructed reg key string: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Sevinst
[03/26/14 14:39:35][PID:3308] Sevinst Shared Usage value delete returned 0
[03/26/14 14:39:35][PID:3308] END - IDM_UNINSTALL
[03/26/14 14:39:35][PID:3308] BEGIN - IDM_ALLDONE
[03/26/14 14:39:35][PID:3308] END - IDM_ALLDONE
[03/26/14 14:39:35][PID:3308] Cannot delete Symantec directory (145).
[03/26/14 14:39:35][PID:3308] Returning: 0 - Success, no reboot required.