2013/06/04 12:58:58.799 [3048:3972] SMCGui - 5836: SmcGui:: ExitIntance : Stopped the thread which trims the working set 2013/06/04 12:59:56.311 [3048:3216] Service : Start Stopping Service 2013/06/04 12:59:56.311 [3048:3216] Waiting for the service to stop 2013/06/04 12:59:56.311 [3048:3240] Service is shutting down 2013/06/04 12:59:56.311 [3048:3240] SmcService: Stopped the thread which trims the working set 2013/06/04 12:59:56.311 [3048:3240] CProfileMgrManPlugin::ReceiveMessage: enter 2013/06/04 12:59:56.311 [3048:3240] ProfileMgrMan: ReceiveMessage with msg id 458754 2013/06/04 12:59:56.311 [3048:3240] CProfileMgrManPlugin::ReceiveMessage: exit 2013/06/04 12:59:56.311 [3048:3240] AVMan: Entering ReceiveMessage with msg id 458754 2013/06/04 12:59:56.311 [3048:3240] AVMan: Disabled event forwarding. 2013/06/04 12:59:56.311 [3048:3240] AVMan: Leaving ReceiveMessage 2013/06/04 12:59:56.311 [3048:3240] LUMan: Entering ReceiveMessage with id 0x70002 2013/06/04 12:59:56.311 [3048:3240] LUMan: SMC notified LuMan that it is stopping 2013/06/04 12:59:56.311 [3048:3240] AtpiMan: Entering ReceiveMessage with msg id 458754 2013/06/04 12:59:56.311 [3048:3240] AtpiMan: Leaving ReceiveMessage 2013/06/04 12:59:56.311 [3048:3240] BashMan: Entering ReceiveMessage with msg id 458754 2013/06/04 12:59:56.311 [3048:3240] BashMan: Leaving ReceiveMessage 2013/06/04 12:59:56.311 [3048:3240] CidsMan: Entering ReceiveMessage with msg id 458754 2013/06/04 12:59:56.311 [3048:3240] CidsMan: Leaving ReceiveMessage 2013/06/04 12:59:56.311 [3048:3240] RebootMgrMan: Entering ReceiveMessage with msg id 458754 2013/06/04 12:59:56.311 [3048:3240] RebootMgrMan: Leaving ReceiveMessage 2013/06/04 12:59:56.311 [3048:3240] RepMgtMan: Entering ReceiveMessage with msg id 458754 2013/06/04 12:59:56.311 [3048:3240] RepMgtMan: Leaving ReceiveMessage 2013/06/04 12:59:56.311 [3048:3240] SubmissionsMan: Entering ReceiveMessage with msg id 458754 2013/06/04 12:59:56.311 [3048:3240] SubmissionsMan: Leaving ReceiveMessage 2013/06/04 12:59:56.357 [3048:3240] Saving SMC State 2013/06/04 12:59:56.373 [3048:3240] chmod on file C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Data\State\SerState.dat to read/write. 2013/06/04 12:59:56.373 [3048:4568] Ending Auto location ThreadID = 4568 2013/06/04 12:59:56.373 [3048:3240] Destructor called! 2013/06/04 12:59:56.373 [3048:3240] Stop begin.----> 2013/06/04 12:59:56.373 [3048:3240] <-----Already stoppped.Stop End. 2013/06/04 12:59:56.373 [3048:3240] Stopping SyLink... 2013/06/04 12:59:56.373 [3048:3240] Deleting SyLink... 2013/06/04 12:59:56.373 [3048:3240] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\NacManager.plg) 2013/06/04 12:59:56.373 [3048:3240] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\NacManager.plg) done 2013/06/04 12:59:56.373 [3048:3240] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\SubmissionsMan.plg) 2013/06/04 12:59:56.373 [3048:3240] SubmissionsMan: Entering Terminate 2013/06/04 12:59:56.373 [3048:3240] CSmcPluginBase::Terminate() 2013/06/04 12:59:56.373 [3048:3240] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\SubmissionsMan.plg) done 2013/06/04 12:59:56.373 [3048:3240] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\RepMgtMan.plg) 2013/06/04 12:59:56.373 [3048:3240] RepMgtMan: Entering Terminate 2013/06/04 12:59:56.373 [3048:3240] RepMgtMan: Leaving Terminate 2013/06/04 12:59:56.373 [3048:3240] CSmcPluginBase::Terminate() 2013/06/04 12:59:56.373 [3048:3240] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\RepMgtMan.plg) done 2013/06/04 12:59:56.373 [3048:3240] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\RebootMgrMan.plg) 2013/06/04 12:59:56.373 [3048:3240] RebootMgrMan: Entering Terminate 2013/06/04 12:59:56.373 [3048:3240] CSmcPluginBase::Terminate() 2013/06/04 12:59:56.373 [3048:3240] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\RebootMgrMan.plg) done 2013/06/04 12:59:56.373 [3048:3240] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\CIDSMan.plg) 2013/06/04 12:59:56.373 [3048:3240] CSmcPluginBase::Terminate() 2013/06/04 12:59:56.373 [3048:3240] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\CIDSMan.plg) done 2013/06/04 12:59:56.373 [3048:3240] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\BashMan.plg) 2013/06/04 12:59:56.373 [3048:3240] BashMan: Entering Terminate 2013/06/04 12:59:56.373 [3048:3240] CSmcPluginBase::Terminate() 2013/06/04 12:59:56.373 [3048:3240] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\BashMan.plg) done 2013/06/04 12:59:56.373 [3048:3240] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\AtpiMan.plg) 2013/06/04 12:59:56.373 [3048:3240] AtpiMan: Entering Terminate 2013/06/04 12:59:56.373 [3048:3240] CSmcPluginBase::Terminate() 2013/06/04 12:59:56.373 [3048:3240] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\AtpiMan.plg) done 2013/06/04 12:59:56.373 [3048:3240] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\DevMan.plg) 2013/06/04 12:59:56.373 [3048:3240] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\DevMan.plg) done 2013/06/04 12:59:56.373 [3048:3240] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\SfMan.plg) 2013/06/04 12:59:56.389 [3048:3240] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\SfMan.plg) done 2013/06/04 12:59:56.389 [3048:3240] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\LUMan.plg) 2013/06/04 12:59:56.389 [3048:3240] LUMan: Entering Terminate 2013/06/04 12:59:56.389 [3048:3240] LUMan: Waiting for command thread 868 to complete... 2013/06/04 12:59:56.389 [3048:3240] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\LUMan.plg) done 2013/06/04 12:59:56.389 [3048:3240] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\GUProxy.plg) 2013/06/04 12:59:56.389 [3048:3240] GUProxy: Terminate called. 2013/06/04 12:59:56.389 [3048:3240] GUProxy: Terminate 2013/06/04 12:59:56.389 [3048:3240] GUProxy - StopGupPolicyThread() HTHREAD=0,Event=0 2013/06/04 12:59:56.389 [3048:3240] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\GUProxy.plg) done 2013/06/04 12:59:56.389 [3048:3240] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\AVMan.plg) 2013/06/04 12:59:56.389 [3048:3240] AVMan: Entering Terminate 2013/06/04 12:59:56.389 [3048:944] AVMan: log forwarding shutting down 2013/06/04 12:59:56.389 [3048:3240] AVMan: in AvPluginImplDeinit 2013/06/04 12:59:56.389 [3048:3240] AVMan: in AvPluginImplDeinit 2013/06/04 12:59:56.389 [3048:3240] AVMan: Leaving Terminate 2013/06/04 12:59:56.389 [3048:3240] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\AVMan.plg) done 2013/06/04 12:59:56.389 [3048:3240] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\ProfileMgrMan.plg) 2013/06/04 12:59:56.389 [3048:3240] CProfileMgrManPlugin::Terminate: enter 2013/06/04 12:59:56.404 [3048:3240] CSmcPluginBase::Terminate() 2013/06/04 12:59:56.404 [3048:3240] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\ProfileMgrMan.plg) done 2013/06/04 12:59:56.404 [3048:3240] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\LocalRep.plg) 2013/06/04 12:59:56.404 [3048:3240] CSmcPluginBase::Terminate() 2013/06/04 12:59:56.404 [3048:3240] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\LocalRep.plg) done 2013/06/04 12:59:56.404 [3048:3240] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\CommonMan.plg) 2013/06/04 12:59:56.404 [3048:3240] CSmcPluginBase::Terminate() 2013/06/04 12:59:56.404 [3048:3240] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\CommonMan.plg) done 2013/06/04 12:59:56.404 [3048:3240] Stop TridentEngine... 540340 2013/06/04 12:59:56.404 [3048:3240] TridentEngine Stopped. 2013/06/04 12:59:56.404 [3048:3240] stop trident engine... successful 2013/06/04 12:59:56.404 [3048:3240] delete trident engine... 2013/06/04 12:59:56.467 [3048:3240] TSE stopped. 2013/06/04 12:59:56.467 [3048:3240] delete SMC State... 2013/06/04 12:59:56.467 [3048:3240] chmod on file C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Data\State\SerState.dat to read/write. 2013/06/04 12:59:56.467 [3048:3240] delete netport... 2013/06/04 12:59:56.467 [3048:3240] Disable damper... 2013/06/04 12:59:56.467 [3048:3240] Acknowledge exit trigger 2013/06/04 12:59:56.467 [3048:3216] Symantec Endpoint Protection is stopped 2013/06/04 12:59:56.623 [3048:3052] System configuration has been saved. 2013/06/04 13:00:50.475 [3124:3128] Enterprise version, Build 2015!!! 2013/06/04 13:00:50.475 [3124:3400] SetUserProfileDir: User Profile Location: C:\Windows\system32\config\systemprofile 2013/06/04 13:00:50.740 [3124:3400] Created the message map 2013/06/04 13:00:50.740 [3124:3400] Created the message map view 2013/06/04 13:00:50.881 [3124:3400] Service ThreadID 77A8C410 2013/06/04 13:00:50.990 [3124:3400] smcProfile mode0 2013/06/04 13:00:51.021 [3124:3400] Loading C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Data\Config\Cltdef.dat 2013/06/04 13:00:51.068 [3124:3400] Loading C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Data\Config\Serdef.dat 2013/06/04 13:00:51.692 [3124:3400] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\CommonMan.plg) 2013/06/04 13:00:51.692 [3124:3400] CSmcPluginBase::Initialize() called. 2013/06/04 13:00:51.692 [3124:3400] CSmcPluginBase::Initialize() succeeded 2013/06/04 13:00:51.692 [3124:3400] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\CommonMan.plg) returned 1 2013/06/04 13:00:51.692 [3124:3400] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\LocalRep.plg) 2013/06/04 13:00:51.692 [3124:3400] CSmcPluginBase::Initialize() called. 2013/06/04 13:00:51.692 [3124:3400] CSmcPluginBase::Initialize() succeeded 2013/06/04 13:00:51.692 [3124:3400] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\LocalRep.plg) returned 1 2013/06/04 13:00:51.692 [3124:3400] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\ProfileMgrMan.plg) 2013/06/04 13:00:51.692 [3124:3400] CSmcPluginBase::Initialize() called. 2013/06/04 13:00:51.692 [3124:3400] CSmcPluginBase::Initialize() succeeded 2013/06/04 13:00:51.754 [3124:3400] CProfileMgrManPlugin::Initialize: exit 2013/06/04 13:00:51.754 [3124:3400] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\ProfileMgrMan.plg) returned 1 2013/06/04 13:00:51.754 [3124:3400] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\AVMan.plg) 2013/06/04 13:00:51.754 [3124:3400] AVMan: Init called. 2013/06/04 13:00:51.754 [3124:3400] AVMan: Entering Initialize 2013/06/04 13:00:51.832 [3124:3400] AVMan: Disabled event forwarding. 2013/06/04 13:00:51.832 [3124:3400] AVMan: About to start LogForwarding. 2013/06/04 13:00:51.832 [3124:3400] AVMan: in StartEventForwarderImplExShared 2013/06/04 13:00:51.832 [3124:3400] AVMan: Leaving Initialize 1 2013/06/04 13:00:51.832 [3124:3400] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\AVMan.plg) returned 1 2013/06/04 13:00:51.832 [3124:3400] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\GUProxy.plg) 2013/06/04 13:00:51.863 [3124:3400] GUProxy - StartGupPolicyThread() dwAliveTimes was turn off 2013/06/04 13:00:51.863 [3124:3400] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\GUProxy.plg) returned 1 2013/06/04 13:00:51.863 [3124:3400] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\LUMan.plg) 2013/06/04 13:00:51.863 [3124:3400] LUMan: Init called. 2013/06/04 13:00:51.863 [3124:3400] LUMan: Entering Initialize 2013/06/04 13:00:51.879 [3124:4092] AVMan: aggregation interval: 300 2013/06/04 13:00:51.895 [3124:4092] AVMan: initial log forwarding 2013/06/04 13:00:52.004 [3124:3400] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\LUMan.plg) returned 1 2013/06/04 13:00:52.004 [3124:3400] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\SfMan.plg) 2013/06/04 13:00:52.004 [3124:3400] SfMan: Initializing. 2013/06/04 13:00:52.238 [3124:3192] No network table now. 2013/06/04 13:00:52.955 [3124:3728] Update network information as the registry change. 2013/06/04 13:00:53.969 [3124:3400] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\SfMan.plg) returned 1 2013/06/04 13:00:53.969 [3124:3400] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\DevMan.plg) 2013/06/04 13:00:53.985 [3124:3400] DevMan: Initializing. 2013/06/04 13:00:53.985 [3124:3400] DevMan: Now the SEP doesn't run in Safe mode with network. 2013/06/04 13:00:54.515 [3124:4408] GetUserAndDomain in smc: Trying to get the User/Domain 2013/06/04 13:00:54.656 [3124:3400] DevMan: Start creating ThreadEngine 2013/06/04 13:00:54.671 [3124:3400] DevMan: ThreadEngine is created! 2013/06/04 13:00:54.687 [3124:3400] DevMan: ========== Device Manage Received the New Rule. ========== 2013/06/04 13:00:54.687 [3124:3400] DevMan: ========== Device Manage Is Plugged In. ========== 2013/06/04 13:00:54.687 [3124:3400] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\DevMan.plg) returned 1 2013/06/04 13:00:54.687 [3124:3400] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\AtpiMan.plg) 2013/06/04 13:00:54.687 [3124:3400] CSmcPluginBase::Initialize() called. 2013/06/04 13:00:54.687 [3124:3400] CSmcPluginBase::Initialize() succeeded 2013/06/04 13:00:54.703 [3124:3400] AtpiMan: Leaving Initialize 1 2013/06/04 13:00:54.703 [3124:3400] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\AtpiMan.plg) returned 1 2013/06/04 13:00:54.703 [3124:3400] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\BashMan.plg) 2013/06/04 13:00:54.703 [3124:3400] CSmcPluginBase::Initialize() called. 2013/06/04 13:00:54.703 [3124:3400] CSmcPluginBase::Initialize() succeeded 2013/06/04 13:00:54.703 [3124:3400] BashMan: Leaving Initialize 1 2013/06/04 13:00:54.703 [3124:3400] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\BashMan.plg) returned 1 2013/06/04 13:00:54.703 [3124:3400] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\CIDSMan.plg) 2013/06/04 13:00:54.718 [3124:3400] CSmcPluginBase::Initialize() called. 2013/06/04 13:00:54.718 [3124:3400] CSmcPluginBase::Initialize() succeeded 2013/06/04 13:00:54.734 [3124:3400] CidsMan: Leaving Initialize succeeded 2013/06/04 13:00:54.734 [3124:3400] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\CIDSMan.plg) returned 1 2013/06/04 13:00:54.734 [3124:3400] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\RebootMgrMan.plg) 2013/06/04 13:00:54.734 [3124:3400] CSmcPluginBase::Initialize() called. 2013/06/04 13:00:54.734 [3124:3400] CSmcPluginBase::Initialize() succeeded 2013/06/04 13:00:54.827 [3124:3400] RebootMgrMan: Leaving Initialize 1 2013/06/04 13:00:54.827 [3124:3400] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\RebootMgrMan.plg) returned 1 2013/06/04 13:00:54.827 [3124:3400] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\RepMgtMan.plg) 2013/06/04 13:00:54.827 [3124:3400] CSmcPluginBase::Initialize() called. 2013/06/04 13:00:54.827 [3124:3400] CSmcPluginBase::Initialize() succeeded 2013/06/04 13:00:54.827 [3124:3400] RepMgtMan: Leaving Initialize 1 2013/06/04 13:00:54.827 [3124:3400] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\RepMgtMan.plg) returned 1 2013/06/04 13:00:54.827 [3124:3400] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\SubmissionsMan.plg) 2013/06/04 13:00:54.827 [3124:3400] CSmcPluginBase::Initialize() called. 2013/06/04 13:00:54.827 [3124:3400] CSmcPluginBase::Initialize() succeeded 2013/06/04 13:00:54.905 [3124:3400] SubmissionsMan: Leaving Initialize 1 2013/06/04 13:00:54.905 [3124:3400] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\SubmissionsMan.plg) returned 1 2013/06/04 13:00:54.905 [3124:3400] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\NacManager.plg) 2013/06/04 13:00:54.905 [3124:3400] Init called. 2013/06/04 13:00:54.937 [3124:3400] Nac init 2013/06/04 13:00:54.937 [3124:3400] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\NacManager.plg) returned 1 2013/06/04 13:00:54.952 [3124:3400] Loaded language string from the registry: English 2013/06/04 13:00:54.952 [3124:3400] current package language type: English 2013/06/04 13:00:54.968 [3124:3400] Client package checksum db3b0ad81cbc871946bc18d36887768e is imported from 'C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Data\Cached Installs\SetAid.ini' 2013/06/04 13:00:54.968 [3124:3400] firewall feature status:1 2013/06/04 13:00:54.983 [3124:3400] Changing control mode 0 2013/06/04 13:00:54.983 [3124:3400] Init TPM device... 2013/06/04 13:00:55.670 [3124:3728] Update network information as the registry change. 2013/06/04 13:00:55.732 [3124:3400] Creating SyLink... 2013/06/04 13:00:55.935 [3124:3400] CProfileMgrManPlugin::ReceiveMessage: enter 2013/06/04 13:00:55.935 [3124:3400] ProfileMgrMan: ReceiveMessage with msg id 262148 2013/06/04 13:00:55.935 [3124:3400] CProfileMgrManPlugin::ReceiveMessage: exit 2013/06/04 13:00:55.935 [3124:3400] AVMan: Entering ReceiveMessage with msg id 262148 2013/06/04 13:00:55.935 [3124:3400] AVMan: Leaving ReceiveMessage 2013/06/04 13:00:55.935 [3124:3400] LUMan: Entering ReceiveMessage with id 0x40004 2013/06/04 13:00:55.935 [3124:3400] AtpiMan: Entering ReceiveMessage with msg id 262148 2013/06/04 13:00:55.935 [3124:3400] AtpiMan: Leaving ReceiveMessage 2013/06/04 13:00:55.935 [3124:3400] BashMan: Entering ReceiveMessage with msg id 262148 2013/06/04 13:00:55.935 [3124:3400] BashMan: Leaving ReceiveMessage 2013/06/04 13:00:55.935 [3124:3400] CidsMan: Entering ReceiveMessage with msg id 262148 2013/06/04 13:00:55.935 [3124:3400] CidsMan: Leaving ReceiveMessage 2013/06/04 13:00:55.935 [3124:3400] RebootMgrMan: Entering ReceiveMessage with msg id 262148 2013/06/04 13:00:55.935 [3124:3400] RebootMgrMan: Leaving ReceiveMessage 2013/06/04 13:00:55.935 [3124:3400] RepMgtMan: Entering ReceiveMessage with msg id 262148 2013/06/04 13:00:55.935 [3124:3400] RepMgtMan: Leaving ReceiveMessage 2013/06/04 13:00:55.935 [3124:3400] SubmissionsMan: Entering ReceiveMessage with msg id 262148 2013/06/04 13:00:55.935 [3124:3400] SubmissionsMan: Leaving ReceiveMessage 2013/06/04 13:00:55.935 [3124:3400] Lock held for 203ms 2013/06/04 13:00:55.982 [3124:3400] Sylink is created 2013/06/04 13:00:55.982 [3124:3400] InitACS , HI result passed to Location sensor is 4 2013/06/04 13:00:56.013 [3124:3400] AutoLocationRunningEvent existed. 2013/06/04 13:00:56.013 [3124:3400] AutoLocationFrequencyUpdateEvent existed. 2013/06/04 13:00:56.013 [3124:3400] hAutoLocationSwitchEvent existed. 2013/06/04 13:00:56.013 [3124:4636] Auto location ThreadID = 4636 2013/06/04 13:00:56.013 [3124:3400] initial HI checking delay is :60000 2013/06/04 13:00:56.013 [3124:3400] HI: Script reader set default path to 2013/06/04 13:00:56.029 [3124:3400] HI: GetNewDefsNotifyFile C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Data\Definitions\HIDefs\newdefs-trigger\trigger.dat 2013/06/04 13:00:56.029 [3124:3400] HI: DefUtils is initialized. 2013/06/04 13:00:56.029 [3124:3400] HI: Initialize HI Content flag file change event successfully. 2013/06/04 13:00:56.029 [3124:3400] HI: HI Engine current grace period status 0 2013/06/04 13:00:56.029 [3124:3400] HI: ResetHIResult set HI result to HI_CHECK_DISBALED since HI is disabled. 2013/06/04 13:00:56.029 [3124:3400] HI: Use new HI config under current location, reset to default. HI Trigger Type: 1, HI Timer 120 2013/06/04 13:00:56.029 [3124:3400] HI: init set HI result to HI_CHECK_DISBALED since HI is disabled. 2013/06/04 13:00:56.029 [3124:3400] HI: set HI result to HI_CHECK_DISBALED. 2013/06/04 13:00:56.029 [3124:3400] HI: Init HI Engine done. 2013/06/04 13:00:56.029 [3124:3724] LUMan: Entering ReceiveMessage with id 0x6860006 2013/06/04 13:00:56.029 [3124:3724] LUMan: Entering PolicyUpdateCallback 2013/06/04 13:00:56.029 [3124:3724] LuMan: LueTim is not ready, will retry later. 2013/06/04 13:00:56.029 [3124:3724] Smc: LicenseNotificationFunction() - has notified LuMan that our license has been updated 2013/06/04 13:00:56.044 [3124:3400] StartEngine: reason=Initialize. 2013/06/04 13:00:56.200 [3124:3400] TeeferOpen Mem=768 NIC={7F77BC86-E010-4C29-A8FA-6547A5727BE5}...2013/06/04 13:00:56.200 [3124:3400] Success 2013/06/04 13:00:56.200 [3124:3400] TSE is located at: C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\ 2013/06/04 13:00:56.200 [3124:3400] TSE extended debugging is turned on. Flag = 1 2013/06/04 13:00:56.200 [3124:3400] D2D connection optimization mode is open by default 2013/06/04 13:00:56.356 [3124:3400] TSE Smart Gateway is turned on 2013/06/04 13:00:56.356 [3124:3400] TSE started. 2013/06/04 13:00:56.356 [3124:3400] StartTridentEngine : Apply new config into profile in location Default. 2013/06/04 13:00:56.356 [3124:3400] CGuiControl:Snac is enabled? 0 2013/06/04 13:00:56.356 [3124:3400] strLocation after switch to appointedDefault 2013/06/04 13:00:56.356 [3124:3400] The best location need to be switch is: Default 2013/06/04 13:00:56.372 [3124:3400] SetCurLocationID=Default 2013/06/04 13:00:56.387 [3124:3400] CProfileMgrManPlugin::notificationOfNewConfig: enter 2013/06/04 13:00:56.387 [3124:3400] CProfileMgrManPlugin::processNewProfile: enter 2013/06/04 13:00:56.403 [3124:3400] Applied profile successfully 2013/06/04 13:00:56.403 [3124:3400] CProfileMgrManPlugin::processNewProfile: exit 2013/06/04 13:00:56.403 [3124:3400] CProfileMgrManPlugin::notificationOfNewConfig: exit 2013/06/04 13:00:56.403 [3124:3400] NotifyNewProfileApplied: calling plugin for new policy 2013/06/04 13:00:56.403 [3124:3400] CProfileMgrManPlugin::notificationOfConfigApplied: enter 2013/06/04 13:00:56.403 [3124:3400] CProfileMgrManPlugin::notificationOfConfigApplied: exit 2013/06/04 13:00:56.403 [3124:3400] AVMan: Entering PolicyUpdateCallback 2013/06/04 13:00:56.403 [3124:4544] TridentLicense is missing in the current location 2013/06/04 13:00:56.403 [3124:4544] The current location is client control(poweruser) mode, will look up the server profile to check SNAC license 2013/06/04 13:00:56.403 [3124:4544] SNAC is NOT licensed 2013/06/04 13:00:56.403 [3124:4544] NAP is not enabled. GetNAPEnforcerEnabled failed! 2013/06/04 13:00:56.403 [3124:4544] AltCommMethodWithEnforcer is not enabled. GetDHCPGWEnforcerUseAltCommWithEnforcerEnabled failed! 2013/06/04 13:00:56.403 [3124:4544] is 2013/06/04 13:00:56.403 [3124:4544] pPeer2Peer is NULL in GetP2PProfileChangeMsgData. Set all P2P parameters to 0. 2013/06/04 13:00:56.403 [3124:4544] runtime->fConnected is FALSE. Skip to write P2P_PROFILE_CHANGE_MSG into pipe. 2013/06/04 13:00:56.419 [3124:3400] AVMan: policy retrieved 2013/06/04 13:00:56.419 [3124:3400] AVMan: in ParsePolicyXmlImpl 2013/06/04 13:00:56.419 [3124:3400] AVMan: in ParsePolicyXmlViaTempFile 2013/06/04 13:00:56.419 [3124:3400] AVMan: in ParsePolicyXmlToFile 2013/06/04 13:00:56.419 [3124:3400] AVMan: Leaving PolicyUpdateCallback 2013/06/04 13:00:56.419 [3124:3400] GUProxy: PolicyUpdateCallback called 2013/06/04 13:00:56.465 [3124:3400] GetAttributeValue: element path is invalid 2013/06/04 13:00:56.465 [3124:3400] GUProxy - UseMasterClient [0] 2013/06/04 13:00:56.465 [3124:3400] GUProxy - Is this computer a GUP Server? [0] 2013/06/04 13:00:56.465 [3124:3400] LUMan: Entering PolicyUpdateCallback 2013/06/04 13:00:56.465 [3124:3400] LuMan: LueTim is not ready, will retry later. 2013/06/04 13:00:56.465 [3124:3400] NotifyNewProfileApplied: calling plugin for new policy done. 2013/06/04 13:00:56.465 [3124:3400] CWindowsFirewallManager::GetInstance()->UseNewConfig(); 2013/06/04 13:00:56.465 [3124:3400] New location is Default 2013/06/04 13:00:56.465 [3124:3400] Third party is Disabled 2013/06/04 13:00:56.465 [3124:3400] SPC Content Source is Enabled 2013/06/04 13:00:56.465 [3124:3712] CProfileMgrManPlugin::Enable: enter 2013/06/04 13:00:56.465 [3124:3712] enable=true 2013/06/04 13:00:56.465 [3124:3712] CProfileMgrManPlugin::Enable: exit 2013/06/04 13:00:56.465 [3124:3712] AVMan: Entering Enable -- enable=true 2013/06/04 13:00:56.465 [3124:3712] AVMan: Entering ExportUseNewConfig 2013/06/04 13:00:56.465 [3124:3712] AVMan: Entering UseNewConfig() 2013/06/04 13:00:56.465 [3124:3712] AVMan: Leaving UseNewConfig() 2013/06/04 13:00:56.465 [3124:3712] AVMan: Leaving ExportUseNewConfig 2013/06/04 13:00:56.465 [3124:3712] AVMan: Disabled event forwarding. 2013/06/04 13:00:56.465 [3124:3712] GUProxy: Enable called. 2013/06/04 13:00:56.465 [3124:3712] GUProxy: Enable 2013/06/04 13:00:56.465 [3124:3712] AtpiMan: Entering Enable -- enable=true 2013/06/04 13:00:56.465 [3124:3712] BashMan: Entering Enable -- enable=true 2013/06/04 13:00:56.465 [3124:3712] CidsMan: Entering Enable -- enable=true 2013/06/04 13:00:56.465 [3124:3712] RebootMgrMan: Entering Enable -- enable=true 2013/06/04 13:00:56.465 [3124:3712] RepMgtMan: Entering Enable -- enable=true 2013/06/04 13:00:56.465 [3124:3712] SubmissionsMan: Entering Enable -- enable=true 2013/06/04 13:00:56.465 [3124:3400] changing heartbeat for location Default 2013/06/04 13:00:56.465 [3124:3400] changed heartbeat status to 1 2013/06/04 13:00:56.465 [3124:3400] HI: Use new HI config under current location, reset to default. HI Trigger Type: 1, HI Timer 120 2013/06/04 13:00:56.465 [3124:4544] pipe listening 997 2013/06/04 13:00:56.481 [3124:4688] ***SMC*** Enable flag = 0 2013/06/04 13:00:56.497 [3124:3712] DevMan: ========== Device Manage Received the New Rule. ========== 2013/06/04 13:00:56.497 [3124:3400] Start TridentEngine...43446 2013/06/04 13:00:56.512 [3124:3712] HI: Use new HI config under current location, reset to default. HI Trigger Type: 1, HI Timer 120 2013/06/04 13:00:56.497 [3124:3400] AutoLocationRunningEvent existed. 2013/06/04 13:00:56.497 [3124:3400] AutoLocationFrequencyUpdateEvent existed. 2013/06/04 13:00:56.497 [3124:3400] hAutoLocationSwitchEvent existed. 2013/06/04 13:00:56.512 [3124:3712] changing heartbeat for location Default 2013/06/04 13:00:56.512 [3124:3712] changed heartbeat status to 1 2013/06/04 13:00:56.528 [3124:4696] ***SMC*** Enable flag = 0 2013/06/04 13:00:56.559 [3124:3712] Silent mode has been disabled. 2013/06/04 13:00:56.590 [3124:3400] CWscFwHandler: update status time out-2147483638 2013/06/04 13:00:56.590 [3124:4636] Auto location: Trident Started = 1 2013/06/04 13:00:56.590 [3124:4636] Ready to do Autolocation. First Time =1 2013/06/04 13:00:56.590 [3124:4636] Snac HiTest:0, 0 2013/06/04 13:00:56.590 [3124:3712] CGuiControl::SynchronousUseNewConfig Location:Default 2013/06/04 13:00:56.668 [3124:4636] First Time AutoLocation. Must notify GUI 2013/06/04 13:00:56.668 [3124:4636] Location changed in Autolocation: Notify GUI and apply new config into profile in location Default. 2013/06/04 13:00:56.668 [3124:4636] Sending Location Change to GUI 2013/06/04 13:00:56.684 [3124:4636] CGuiControl::ChangeLocation Location:Default 2013/06/04 13:00:56.699 [3124:3400] GetUserAndDomain in smc: Trying to get the User/Domain 2013/06/04 13:00:56.762 [3124:3400] +++++++++++++++win2000 hostName=Sheriff_4D9Q82S,DomainName= 2013/06/04 13:00:56.777 [3124:3400] Computer Network Identity (Domain/Host)=SHERIFF_4D9Q82S/Sheriff_4D9Q82S 2013/06/04 13:00:56.793 [3124:3400] Lock held for 93ms 2013/06/04 13:00:56.793 [3124:3400] Start SyLink... 2013/06/04 13:00:56.793 [3124:3400] Import Config File !! 2013/06/04 13:00:56.809 [3124:3400] Succeed to set the managed status to SylinkStats 2013/06/04 13:00:56.809 [3124:3400] Unknown server in sylink.xml, try previous config sylinkEx.bak 2013/06/04 13:00:56.809 [3124:3400] Lock held for 16ms 2013/06/04 13:00:56.809 [3124:3400] start sylink failed: ERROR_SERVER_UNKNOWN 2013/06/04 13:00:56.824 [3124:3400] Calling Command Processor again. 2013/06/04 13:00:56.855 [3124:3400] QuerySysPlantStatus: Entering 2013/06/04 13:00:56.871 [3124:3400] QuerySysPlantStatus: SysPlant startType is START in registry 2013/06/04 13:00:56.871 [3124:3400] QuerySysPlantStatus: SysPlant driver is running 2013/06/04 13:00:56.871 [3124:3400] QuerySysPlantStatus: Exiting 2013/06/04 13:00:56.933 [3124:3400] using server-configured log file size of 524288 2013/06/04 13:00:56.933 [3124:3400] set log file size to 524288 2013/06/04 13:00:56.933 [3124:3400] starting 2013/06/04 13:00:56.933 [3124:3400] completed. Array enties: 0 2013/06/04 13:00:56.933 [3124:3400] creating tech extension CommonMan 2013/06/04 13:00:56.933 [3124:3400] using server-configured log file size of 524288 2013/06/04 13:00:56.933 [3124:3400] set log file size to 524288 2013/06/04 13:00:56.933 [3124:3400] starting 2013/06/04 13:00:56.933 [3124:3400] completed. Array enties: 0 2013/06/04 13:00:56.933 [3124:3400] creating tech extension LocalRep 2013/06/04 13:00:56.933 [3124:3400] using server-configured log file size of 524288 2013/06/04 13:00:56.933 [3124:3400] set log file size to 524288 2013/06/04 13:00:56.933 [3124:3400] starting 2013/06/04 13:00:56.933 [3124:3400] completed. Array enties: 0 2013/06/04 13:00:56.933 [3124:3400] creating tech extension AVMan 2013/06/04 13:00:56.949 [3124:3400] using server-configured log file size of 524288 2013/06/04 13:00:56.949 [3124:3400] set log file size to 524288 2013/06/04 13:00:56.949 [3124:3400] starting 2013/06/04 13:00:56.949 [3124:3400] completed. Array enties: 0 2013/06/04 13:00:56.949 [3124:3400] creating tech extension GUP 2013/06/04 13:00:56.949 [3124:3400] using server-configured log file size of 524288 2013/06/04 13:00:56.949 [3124:3400] set log file size to 524288 2013/06/04 13:00:56.949 [3124:3400] starting 2013/06/04 13:00:56.949 [3124:3400] completed. Array enties: 0 2013/06/04 13:00:56.949 [3124:3400] creating tech extension LUMan 2013/06/04 13:00:56.949 [3124:3400] using server-configured log file size of 524288 2013/06/04 13:00:56.949 [3124:3400] set log file size to 524288 2013/06/04 13:00:56.949 [3124:3400] starting 2013/06/04 13:00:56.949 [3124:3400] completed. Array enties: 0 2013/06/04 13:00:56.949 [3124:3712] CGuiControl:Snac is enabled? 0 2013/06/04 13:00:56.949 [3124:3712] SNAC is NOT licensed, changing the SNAC service's startup type 2013/06/04 13:00:56.949 [3124:3400] creating tech extension SfMan 2013/06/04 13:00:56.949 [3124:3400] using server-configured log file size of 524288 2013/06/04 13:00:56.949 [3124:3400] set log file size to 524288 2013/06/04 13:00:56.949 [3124:3400] starting 2013/06/04 13:00:56.949 [3124:3400] completed. Array enties: 0 2013/06/04 13:00:56.949 [3124:3400] creating tech extension DevMan 2013/06/04 13:00:56.949 [3124:3400] using server-configured log file size of 524288 2013/06/04 13:00:56.949 [3124:3400] set log file size to 524288 2013/06/04 13:00:56.949 [3124:3400] starting 2013/06/04 13:00:56.949 [3124:3400] completed. Array enties: 0 2013/06/04 13:00:56.949 [3124:3400] creating tech extension AtpiMan 2013/06/04 13:00:56.949 [3124:4636] Snac HiTest:0, 0 2013/06/04 13:00:56.949 [3124:3400] using server-configured log file size of 524288 2013/06/04 13:00:56.949 [3124:3400] set log file size to 524288 2013/06/04 13:00:56.949 [3124:3400] starting 2013/06/04 13:00:56.949 [3124:3400] completed. Array enties: 0 2013/06/04 13:00:56.949 [3124:3400] creating tech extension BashMan 2013/06/04 13:00:56.965 [3124:3400] using server-configured log file size of 524288 2013/06/04 13:00:56.965 [3124:3400] set log file size to 524288 2013/06/04 13:00:56.965 [3124:3400] starting 2013/06/04 13:00:56.965 [3124:3400] completed. Array enties: 0 2013/06/04 13:00:56.965 [3124:3400] creating tech extension CidsMan 2013/06/04 13:00:56.965 [3124:3400] using server-configured log file size of 524288 2013/06/04 13:00:56.965 [3124:3400] set log file size to 524288 2013/06/04 13:00:56.965 [3124:3400] starting 2013/06/04 13:00:56.965 [3124:3400] completed. Array enties: 0 2013/06/04 13:00:56.965 [3124:3400] creating tech extension RebootMgrMan 2013/06/04 13:00:56.965 [3124:3400] using server-configured log file size of 524288 2013/06/04 13:00:56.965 [3124:3400] set log file size to 524288 2013/06/04 13:00:56.965 [3124:3400] starting 2013/06/04 13:00:56.965 [3124:3400] completed. Array enties: 0 2013/06/04 13:00:56.965 [3124:3400] creating tech extension RepMgtMan 2013/06/04 13:00:56.965 [3124:3400] using server-configured log file size of 524288 2013/06/04 13:00:56.965 [3124:3400] set log file size to 524288 2013/06/04 13:00:56.965 [3124:3400] starting 2013/06/04 13:00:56.965 [3124:3400] completed. Array enties: 0 2013/06/04 13:00:56.965 [3124:3400] creating tech extension SubmissionsMan 2013/06/04 13:00:56.965 [3124:3400] using server-configured log file size of 524288 2013/06/04 13:00:56.965 [3124:3400] set log file size to 524288 2013/06/04 13:00:56.965 [3124:3400] starting 2013/06/04 13:00:56.965 [3124:3400] completed. Array enties: 0 2013/06/04 13:00:56.965 [3124:3400] creating tech extension NacMan 2013/06/04 13:00:56.965 [3124:3400] Windows Version info: Operating System: Windows 7 (6.1.7601 Service Pack 1) 2013/06/04 13:00:56.965 [3124:3400] Network info: 2013/06/04 13:00:56.980 [3124:3400] Application List: 0) Windows Driver Package - Dell Inc. PBADRV System (09/11/2009 1.0.1.6) 1) Windows Driver Package - Broadcom Bluetooth (07/30/2009 6.2.0.9405) 2) WebEx 3) Adobe AIR 4) Adobe Flash Player 11 ActiveX 5) Adobe Shockwave Player 11.5 6) Windows Driver Package - Broadcom Bluetooth (06/15/2009 6.2.0.9000) 7) Citrix Receiver 8) Microsoft .NET Framework 4 Client Profile 9) Microsoft Office Standard 2010 10) UPEK TouchChip Fingerprint Reader 11) Canon iP100 series Printer Driver 12) Citrix Receiver(Aero) 13) Java(TM) 6 Update 30 14) Java 7 Update 21 15) Dell 5530 Wireless Broadband Package 16) Citrix Authentication Manager 17) Microsoft .NET Framework 4 Client Profile 18) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) 19) Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) 20) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) 21) Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636) 22) Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078) 23) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) 24) Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121) 25) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351) 26) Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449) 27) Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019) 28) Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595) 29) Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642) 30) Security Update for Microsoft .NET Framework 4 Client Profile (KB2804576) 31) Java Auto Updater 32) Aventail Webifiers 33) QuickTime 34) Dell ControlVault Host Components Installer 35) Citrix Receiver(DV) 36) Microsoft Visual C++ 2005 Redistributable 37) Aventail Access Manager 38) Online Plug-in 39) Symantec Smart Connect 40) Dell Wireless HSPA Mini-Card Drivers 41) Microsoft Silverlight 42) Microsoft Office Standard 2010 43) Microsoft Office 2010 Service Pack 1 (SP1) 44) Security Update for Microsoft Office 2010 (KB2553091) 45) Security Update for Microsoft Office 2010 (KB2553096) 46) Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition 47) Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition 48) Security Update for Microsoft OneNote 2010 (KB2760600) 32-Bit Edition 49) Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition 50) Update for Microsoft Office 2010 (KB2494150) 51) Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition 52) Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition 53) Security Update for Microsoft Excel 2010 (KB2597126) 32-Bit Edition 54) Security Update for Microsoft Publisher 2010 (KB2553147) 32-Bit Edition 55) Security Update for Microsoft InfoPath 2010 (KB2760406) 32-Bit Edition 56) Security Update for Microsoft Office 2010 (KB2687501) 32-Bit Edition 57) Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition 58) Security Update for Microsoft Office 2010 (KB2687510) 32-Bit Edition 59) Update for Microsoft Office 2010 (KB2553065) 60) Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition 61) Security Update for Microsoft Office 2010 (KB2598243) 32-Bit Edition 62) Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition 63) Security Update for Microsoft Office 2010 (KB2553447) 32-Bit Edition 64) Security Update for Microsoft Office 2010 (KB2553371) 32-Bit Edition 65) Security Update for Microsoft Office 2010 (KB2589320) 32-Bit Edition 66) Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition 67) Update for Microsoft Office 2010 (KB2566458) 68) Security Update for Microsoft Filter Pack 2.0 (KB2553501) 32-Bit Edition 69) Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition 70) Security Update for Microsoft Word 2010 (KB2760410) 32-Bit Edition 71) Microsoft Office Excel MUI (English) 2010 72) Microsoft Office 2010 Service Pack 1 (SP1) 73) Microsoft Office PowerPoint MUI (English) 2010 74) Microsoft Office 2010 Service Pack 1 (SP1) 75) Microsoft Office Publisher MUI (English) 2010 76) Microsoft Office 2010 Service Pack 1 (SP1) 77) Microsoft Office Outlook MUI (English) 2010 78) Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition 79) Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition 80) Microsoft Office 2010 Service Pack 1 (SP1) 81) Microsoft Office Word MUI (English) 2010 82) Microsoft Office 2010 Service Pack 1 (SP1) 83) Microsoft Office Proof (English) 2010 84) Microsoft Office 2010 Service Pack 1 (SP1) 85) Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition 86) Microsoft Office Proof (French) 2010 87) Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition 88) Microsoft Office 2010 Service Pack 1 (SP1) 89) Microsoft Office Proof (Spanish) 2010 90) Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition 91) Microsoft Office 2010 Service Pack 1 (SP1) 92) Microsoft Office Proofing (English) 2010 93) Microsoft Office 2010 Service Pack 1 (SP1) 94) Microsoft Office Shared MUI (English) 2010 95) Microsoft Office 2010 Service Pack 1 (SP1) 96) Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition 97) Microsoft Office OneNote MUI (English) 2010 98) Microsoft Office 2010 Service Pack 1 (SP1) 99) Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition 100) Microsoft Office Shared Setup Metadata MUI (English) 2010 101) Microsoft Office 2010 Service Pack 1 (SP1) 102) 32 Bit HP CIO Components Installer 103) Citrix Receiver Inside 104) Aventail Web Proxy Agent 105) WIDCOMM Bluetooth Software 106) Citrix Receiver(USB) 107) Adobe Reader XI (11.0.03) 108) BioAPI Framework 109) Citrix Receiver (HDX Flash Redirection) 110) Symantec Endpoint Protection 111) Dell System Manager 112) Apple Application Support 113) Self-service Plug-in 114) Adobe AIR 115) Dell Security Device Driver Pack 2013/06/04 13:00:56.980 [3124:3400] Network Connection Properties: 2013/06/04 13:00:56.980 [3124:3400] initial service success 2013/06/04 13:00:56.996 [3124:3400] CProfileMgrManPlugin::ReceiveMessage: enter 2013/06/04 13:00:56.996 [3124:3400] ProfileMgrMan: ReceiveMessage with msg id 458753 2013/06/04 13:00:56.996 [3124:3400] CProfileMgrManPlugin::ReceiveMessage: exit 2013/06/04 13:00:56.996 [3124:3400] AVMan: Entering ReceiveMessage with msg id 458753 2013/06/04 13:00:56.996 [3124:3400] AVMan: Disabled event forwarding. 2013/06/04 13:00:56.996 [3124:3400] AVMan: Leaving ReceiveMessage 2013/06/04 13:00:56.996 [3124:3400] LUMan: Entering ReceiveMessage with id 0x70001 2013/06/04 13:00:56.996 [3124:3400] AtpiMan: Entering ReceiveMessage with msg id 458753 2013/06/04 13:00:56.996 [3124:3400] AtpiMan: Leaving ReceiveMessage 2013/06/04 13:00:56.996 [3124:3400] BashMan: Entering ReceiveMessage with msg id 458753 2013/06/04 13:00:56.996 [3124:3400] BashMan: Leaving ReceiveMessage 2013/06/04 13:00:56.996 [3124:3400] CidsMan: Entering ReceiveMessage with msg id 458753 2013/06/04 13:00:56.996 [3124:3400] CidsMan: Leaving ReceiveMessage 2013/06/04 13:00:56.996 [3124:3400] RebootMgrMan: Entering ReceiveMessage with msg id 458753 2013/06/04 13:00:56.996 [3124:3400] RebootMgrMan: Leaving ReceiveMessage 2013/06/04 13:00:56.996 [3124:3400] RepMgtMan: Entering ReceiveMessage with msg id 458753 2013/06/04 13:00:56.996 [3124:3400] RepMgtMan: Leaving ReceiveMessage 2013/06/04 13:00:56.996 [3124:3400] SubmissionsMan: Entering ReceiveMessage with msg id 458753 2013/06/04 13:00:56.996 [3124:3400] SubmissionsMan: Leaving ReceiveMessage 2013/06/04 13:00:57.011 [3124:3400] : Failed to open ccSettings key UserInformation. (Probably because it doesn't exist) Error: 2147483904 2013/06/04 13:00:57.011 [3124:3400] Starting SMC GUI 2013/06/04 13:00:57.011 [3124:3400] GetUserAndDomain in smc: Trying to get the User/Domain 2013/06/04 13:00:57.011 [3124:3400] Enterprise version, Build 2015!!! 2013/06/04 13:00:57.027 [3124:3400] user_id = SHERIFF_4D9Q82S/admin 2013/06/04 13:00:57.058 [3124:4736] CWscFwHandler: update status time out-2147483638 2013/06/04 13:00:57.339 [3124:3728] Update network information as the registry change. 2013/06/04 13:00:57.994 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:00:59.039 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:00:59.273 [3124:4940] ***SMC*** Enable flag = 0 2013/06/04 13:01:00.303 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:00.443 [3124:3728] Update network information as the registry change. 2013/06/04 13:01:00.537 [3124:4648] TSE3080: *********DROP PACKET********** 2013/06/04 13:01:00.537 [3124:4648] TSE: SecurityRule = Block_all 2013/06/04 13:01:00.537 [3124:4648] TSE3082: *** DROP PACKET *** 2013/06/04 13:01:00.537 [3124:4648] ======== TsPacket ====== BA: 0 == protocol: 2 === === EtherII Packet=== len:143==== nic:0===== 11-01-fe-80-00-00 ---> 60-00-00-00-00-67 , protocol = 0x0 2013/06/04 13:01:00.724 [3124:4648] TSE3080: *********DROP PACKET********** 2013/06/04 13:01:00.724 [3124:4648] TSE: SecurityRule = Block_all 2013/06/04 13:01:00.724 [3124:4648] TSE3082: *** DROP PACKET *** 2013/06/04 13:01:00.724 [3124:4648] ======== TsPacket ====== BA: 0 == protocol: 2 === === EtherII Packet=== len:64==== nic:0===== 3a-ff-fe-80-00-00 ---> 60-00-00-00-00-18 , protocol = 0x0 2013/06/04 13:01:00.724 [3124:4648] TSE3080: *********DROP PACKET********** 2013/06/04 13:01:00.724 [3124:4648] TSE: SecurityRule = Block_all 2013/06/04 13:01:00.724 [3124:4648] TSE3082: *** DROP PACKET *** 2013/06/04 13:01:00.724 [3124:4648] ======== TsPacket ====== BA: 0 == protocol: 2 === === EtherII Packet=== len:96==== nic:0===== 00-01-fe-80-00-00 ---> 60-00-00-00-00-38 , protocol = 0x0 2013/06/04 13:01:01.223 [3124:4648] TSE3080: *********DROP PACKET********** 2013/06/04 13:01:01.223 [3124:4648] TSE: SecurityRule = Block_all 2013/06/04 13:01:01.223 [3124:4648] TSE3082: *** DROP PACKET *** 2013/06/04 13:01:01.223 [3124:4648] ======== TsPacket ====== BA: 0 == protocol: 2 === === EtherII Packet=== len:76==== nic:0===== 00-01-fe-80-00-00 ---> 60-00-00-00-00-24 , protocol = 0x0 2013/06/04 13:01:01.333 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:01.551 [3124:4648] TSE3080: *********DROP PACKET********** 2013/06/04 13:01:01.551 [3124:4648] TSE: SecurityRule = Block_all 2013/06/04 13:01:01.551 [3124:4648] TSE3082: *** DROP PACKET *** 2013/06/04 13:01:01.551 [3124:4648] ======== TsPacket ====== BA: 0 == protocol: 2 === === EtherII Packet=== len:143==== nic:0===== 11-01-fe-80-00-00 ---> 60-00-00-00-00-67 , protocol = 0x0 2013/06/04 13:01:02.362 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:03.392 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:03.563 [3124:4648] TSE3080: *********DROP PACKET********** 2013/06/04 13:01:03.563 [3124:4648] TSE: SecurityRule = Block_all 2013/06/04 13:01:03.563 [3124:4648] TSE3082: *** DROP PACKET *** 2013/06/04 13:01:03.563 [3124:4648] ======== TsPacket ====== BA: 0 == protocol: 2 === === EtherII Packet=== len:143==== nic:0===== 11-01-fe-80-00-00 ---> 60-00-00-00-00-67 , protocol = 0x0 2013/06/04 13:01:04.312 [3124:5012] LUMan: Entering PolicyUpdateCallback 2013/06/04 13:01:04.328 [3124:5012] LUMan: Entering SendConfig 2013/06/04 13:01:04.421 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:04.453 [3124:5012] LUMan: Entering RegisterCallbacks 2013/06/04 13:01:04.453 [3124:5012] Registred moniker {535CB6A4-441F-4e8a-A897-804CD859100E} removed callback function 2013/06/04 13:01:04.453 [3124:5012] LUMan: RegisterCallbacks() - NULLed internal content channel callbacks for {535CB6A4-441F-4e8a-A897-804CD859100E} 2013/06/04 13:01:04.453 [3124:5012] Registred moniker {55DE35DC-862A-44c9-8A2B-3EF451665D0A} removed callback function 2013/06/04 13:01:04.453 [3124:5012] LUMan: RegisterCallbacks() - NULLed internal content channel callbacks for {55DE35DC-862A-44c9-8A2B-3EF451665D0A} 2013/06/04 13:01:04.453 [3124:5012] Registred moniker {EDBD3BD0-8395-4d4d-BAC9-19DD32EF4758} removed callback function 2013/06/04 13:01:04.453 [3124:5012] LUMan: RegisterCallbacks() - NULLed internal content channel callbacks for {EDBD3BD0-8395-4d4d-BAC9-19DD32EF4758} 2013/06/04 13:01:04.453 [3124:5012] Registred moniker {B6DC6C8F-46FA-40c7-A806-B669BE1D2D19} removed callback function 2013/06/04 13:01:04.453 [3124:5012] LUMan: RegisterCallbacks() - NULLed internal content channel callbacks for {B6DC6C8F-46FA-40c7-A806-B669BE1D2D19} 2013/06/04 13:01:04.453 [3124:5012] Registred moniker {810D5A61-809F-49c2-BD75-177F0647D2BA} removed callback function 2013/06/04 13:01:04.453 [3124:5012] LUMan: RegisterCallbacks() - NULLed internal content channel callbacks for {810D5A61-809F-49c2-BD75-177F0647D2BA} 2013/06/04 13:01:04.453 [3124:5012] Registred moniker {263395A0-D3D8-4be4-80B5-202C94EF4AA0} removed callback function 2013/06/04 13:01:04.453 [3124:5012] LUMan: RegisterCallbacks() - NULLed internal content channel callbacks for {263395A0-D3D8-4be4-80B5-202C94EF4AA0} 2013/06/04 13:01:04.453 [3124:5012] Registred moniker {D6AEBC07-D833-485f-9723-6C908D37F806} removed callback function 2013/06/04 13:01:04.453 [3124:5012] LUMan: RegisterCallbacks() - NULLed internal content channel callbacks for {D6AEBC07-D833-485f-9723-6C908D37F806} 2013/06/04 13:01:04.453 [3124:5012] Registred moniker {E8827B4A-4F58-4dea-8C93-07B32A63D1C5} removed callback function 2013/06/04 13:01:04.453 [3124:5012] LUMan: RegisterCallbacks() - NULLed internal content channel callbacks for {E8827B4A-4F58-4dea-8C93-07B32A63D1C5} 2013/06/04 13:01:04.453 [3124:5012] Registred moniker {50B092DE-40D5-4724-971B-D3D90E9EE987} removed callback function 2013/06/04 13:01:04.453 [3124:5012] LUMan: RegisterCallbacks() - NULLed internal content channel callbacks for {50B092DE-40D5-4724-971B-D3D90E9EE987} 2013/06/04 13:01:04.718 [3124:4648] TSE3080: *********DROP PACKET********** 2013/06/04 13:01:04.718 [3124:4648] TSE: SecurityRule = Block_all 2013/06/04 13:01:04.718 [3124:4648] TSE3082: *** DROP PACKET *** 2013/06/04 13:01:04.718 [3124:4648] ======== TsPacket ====== BA: 0 == protocol: 2 === === EtherII Packet=== len:64==== nic:0===== 3a-ff-fe-80-00-00 ---> 60-00-00-00-00-18 , protocol = 0x0 2013/06/04 13:01:05.451 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:06.481 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:07.510 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:07.573 [3124:4648] TSE3080: *********DROP PACKET********** 2013/06/04 13:01:07.573 [3124:4648] TSE: SecurityRule = Block_all 2013/06/04 13:01:07.573 [3124:4648] TSE3082: *** DROP PACKET *** 2013/06/04 13:01:07.573 [3124:4648] ======== TsPacket ====== BA: 0 == protocol: 2 === === EtherII Packet=== len:143==== nic:0===== 11-01-fe-80-00-00 ---> 60-00-00-00-00-67 , protocol = 0x0 2013/06/04 13:01:08.540 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:08.711 [3124:4648] TSE3080: *********DROP PACKET********** 2013/06/04 13:01:08.711 [3124:4648] TSE: SecurityRule = Block_all 2013/06/04 13:01:08.711 [3124:4648] TSE3082: *** DROP PACKET *** 2013/06/04 13:01:08.711 [3124:4648] ======== TsPacket ====== BA: 0 == protocol: 2 === === EtherII Packet=== len:64==== nic:0===== 3a-ff-fe-80-00-00 ---> 60-00-00-00-00-18 , protocol = 0x0 2013/06/04 13:01:09.569 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:10.599 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:11.629 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:12.658 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:13.678 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:14.695 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:15.714 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:16.743 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:17.773 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:19.380 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:20.425 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:21.454 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:22.484 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:23.514 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:24.530 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:25.548 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:26.567 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:27.589 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:28.618 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:29.648 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:30.678 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:31.835 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:33.005 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:34.050 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:35.080 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:36.110 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:37.139 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:38.169 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:39.198 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:40.222 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:41.242 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:42.273 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:43.280 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:44.297 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:45.316 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:46.333 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:47.361 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:48.385 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:49.415 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:50.436 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:51.455 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:52.476 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:53.496 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:54.532 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:54.756 [3124:4532] RepMgtMan: OnTimInitializationComplete called. 2013/06/04 13:01:55.681 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:56.742 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:57.772 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:58.801 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:01:59.831 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:00.860 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:01.890 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:02.920 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:03.949 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:04.979 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:06.008 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:07.038 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:08.068 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:09.097 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:10.127 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:11.156 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:12.186 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:13.216 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:14.245 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:15.275 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:16.304 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:17.334 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:18.364 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:19.424 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:20.454 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:21.484 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:22.513 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:23.543 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:24.572 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:25.602 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:26.632 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:27.661 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:28.691 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:29.720 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:30.750 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:31.780 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:32.809 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:33.839 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:34.868 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:35.898 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:36.928 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:37.957 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:38.987 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:40.016 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:41.046 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:42.076 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:43.105 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:44.135 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:45.164 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:46.194 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:47.224 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:48.253 [3124:3712] CWscFwHandler: update status time out-2147483638 2013/06/04 13:02:55.750 [3124:3340] SMCGui - 4024: Creating garbage collection Instance 2013/06/04 13:02:55.812 [3124:3340] Snac HiTest:0, 0 2013/06/04 13:02:55.812 [3124:3400] Starting SMC GUI 2013/06/04 13:02:55.812 [3124:3400] GetUserAndDomain in smc: Trying to get the User/Domain 2013/06/04 13:02:55.812 [3124:3400] Enterprise version, Build 2015!!! 2013/06/04 13:02:55.812 [3124:3400] user_id = SHERIFF_4D9Q82S/admin 2013/06/04 13:02:55.828 [3124:3400] Lock held for 16ms 2013/06/04 13:02:55.828 [3124:3340] SMCGui - 4024: CSmcDlg::Profile() - ImportFromDm() returned... 2013/06/04 13:02:55.843 [3124:3340] SMCGui - 4024: CSmcDlg::UpdateProfileInfoN/A: 2013/06/04 13:02:56.358 [3124:3340] Saving SMC State 2013/06/04 13:02:56.358 [3124:3340] chmod on file C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Data\State\SerState.dat to read/write. 2013/06/04 13:04:27.135 [3124:3340] SMCGui - 4024: end session wParam = 1, lParam = 0 2013/06/04 13:04:30.873 [3124:3364] Service : Start Stopping Service 2013/06/04 13:04:30.873 [3124:3364] Waiting for the service to stop 2013/06/04 13:04:30.873 [3124:3400] Service is shutting down 2013/06/04 13:04:30.873 [3124:3400] SmcService: Stopped the thread which trims the working set 2013/06/04 13:04:30.873 [3124:3400] CProfileMgrManPlugin::ReceiveMessage: enter 2013/06/04 13:04:30.873 [3124:3400] ProfileMgrMan: ReceiveMessage with msg id 458754 2013/06/04 13:04:30.873 [3124:3400] CProfileMgrManPlugin::ReceiveMessage: exit 2013/06/04 13:04:30.873 [3124:3400] AVMan: Entering ReceiveMessage with msg id 458754 2013/06/04 13:04:30.873 [3124:3400] AVMan: Disabled event forwarding. 2013/06/04 13:04:30.873 [3124:3400] AVMan: Leaving ReceiveMessage 2013/06/04 13:04:30.873 [3124:3400] LUMan: Entering ReceiveMessage with id 0x70002 2013/06/04 13:04:30.873 [3124:3400] LUMan: SMC notified LuMan that it is stopping 2013/06/04 13:04:30.873 [3124:3400] AtpiMan: Entering ReceiveMessage with msg id 458754 2013/06/04 13:04:30.873 [3124:3400] AtpiMan: Leaving ReceiveMessage 2013/06/04 13:04:30.873 [3124:3400] BashMan: Entering ReceiveMessage with msg id 458754 2013/06/04 13:04:30.873 [3124:3400] BashMan: Leaving ReceiveMessage 2013/06/04 13:04:30.873 [3124:3400] CidsMan: Entering ReceiveMessage with msg id 458754 2013/06/04 13:04:30.873 [3124:3400] CidsMan: Leaving ReceiveMessage 2013/06/04 13:04:30.873 [3124:3400] RebootMgrMan: Entering ReceiveMessage with msg id 458754 2013/06/04 13:04:30.873 [3124:3400] RebootMgrMan: Leaving ReceiveMessage 2013/06/04 13:04:30.873 [3124:3400] RepMgtMan: Entering ReceiveMessage with msg id 458754 2013/06/04 13:04:30.873 [3124:3400] RepMgtMan: Leaving ReceiveMessage 2013/06/04 13:04:30.873 [3124:3400] SubmissionsMan: Entering ReceiveMessage with msg id 458754 2013/06/04 13:04:30.873 [3124:3400] SubmissionsMan: Leaving ReceiveMessage 2013/06/04 13:04:30.905 [3124:3400] Saving SMC State 2013/06/04 13:04:30.920 [3124:3400] chmod on file C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Data\State\SerState.dat to read/write. 2013/06/04 13:04:30.920 [3124:4636] Ending Auto location ThreadID = 4636 2013/06/04 13:04:30.920 [3124:3400] Destructor called! 2013/06/04 13:04:30.920 [3124:3400] Stop begin.----> 2013/06/04 13:04:30.920 [3124:3400] <-----Already stoppped.Stop End. 2013/06/04 13:04:30.920 [3124:3400] Stopping SyLink... 2013/06/04 13:04:30.920 [3124:3400] Deleting SyLink... 2013/06/04 13:04:30.920 [3124:3400] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\NacManager.plg) 2013/06/04 13:04:30.920 [3124:3400] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\NacManager.plg) done 2013/06/04 13:04:30.920 [3124:3400] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\SubmissionsMan.plg) 2013/06/04 13:04:30.920 [3124:3400] SubmissionsMan: Entering Terminate 2013/06/04 13:04:30.920 [3124:3400] CSmcPluginBase::Terminate() 2013/06/04 13:04:30.920 [3124:3400] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\SubmissionsMan.plg) done 2013/06/04 13:04:30.920 [3124:3400] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\RepMgtMan.plg) 2013/06/04 13:04:30.920 [3124:3400] RepMgtMan: Entering Terminate 2013/06/04 13:04:30.920 [3124:3400] RepMgtMan: Leaving Terminate 2013/06/04 13:04:30.920 [3124:3400] CSmcPluginBase::Terminate() 2013/06/04 13:04:30.920 [3124:3400] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\RepMgtMan.plg) done 2013/06/04 13:04:30.920 [3124:3400] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\RebootMgrMan.plg) 2013/06/04 13:04:30.920 [3124:3400] RebootMgrMan: Entering Terminate 2013/06/04 13:04:30.920 [3124:3400] CSmcPluginBase::Terminate() 2013/06/04 13:04:30.920 [3124:3400] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\RebootMgrMan.plg) done 2013/06/04 13:04:30.920 [3124:3400] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\CIDSMan.plg) 2013/06/04 13:04:30.920 [3124:3400] CSmcPluginBase::Terminate() 2013/06/04 13:04:30.920 [3124:3400] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\CIDSMan.plg) done 2013/06/04 13:04:30.920 [3124:3400] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\BashMan.plg) 2013/06/04 13:04:30.920 [3124:3400] BashMan: Entering Terminate 2013/06/04 13:04:30.936 [3124:3400] CSmcPluginBase::Terminate() 2013/06/04 13:04:30.936 [3124:3400] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\BashMan.plg) done 2013/06/04 13:04:30.936 [3124:3400] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\AtpiMan.plg) 2013/06/04 13:04:30.936 [3124:3400] AtpiMan: Entering Terminate 2013/06/04 13:04:30.936 [3124:3400] CSmcPluginBase::Terminate() 2013/06/04 13:04:30.936 [3124:3400] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\AtpiMan.plg) done 2013/06/04 13:04:30.936 [3124:3400] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\DevMan.plg) 2013/06/04 13:04:30.936 [3124:3400] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\DevMan.plg) done 2013/06/04 13:04:30.936 [3124:3400] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\SfMan.plg) 2013/06/04 13:04:30.936 [3124:3400] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\SfMan.plg) done 2013/06/04 13:04:30.936 [3124:3400] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\LUMan.plg) 2013/06/04 13:04:30.936 [3124:3400] LUMan: Entering Terminate 2013/06/04 13:04:30.936 [3124:3400] LUMan: Waiting for command thread 2380 to complete... 2013/06/04 13:04:30.936 [3124:3400] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\LUMan.plg) done 2013/06/04 13:04:30.936 [3124:3400] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\GUProxy.plg) 2013/06/04 13:04:30.936 [3124:3400] GUProxy: Terminate called. 2013/06/04 13:04:30.936 [3124:3400] GUProxy: Terminate 2013/06/04 13:04:30.936 [3124:3400] GUProxy - StopGupPolicyThread() HTHREAD=0,Event=0 2013/06/04 13:04:30.936 [3124:3400] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\GUProxy.plg) done 2013/06/04 13:04:30.936 [3124:3400] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\AVMan.plg) 2013/06/04 13:04:30.936 [3124:3400] AVMan: Entering Terminate 2013/06/04 13:04:30.936 [3124:4092] AVMan: log forwarding shutting down 2013/06/04 13:04:30.936 [3124:3400] AVMan: in AvPluginImplDeinit 2013/06/04 13:04:30.936 [3124:3400] AVMan: in AvPluginImplDeinit 2013/06/04 13:04:30.936 [3124:3400] AVMan: Leaving Terminate 2013/06/04 13:04:30.936 [3124:3400] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\AVMan.plg) done 2013/06/04 13:04:30.936 [3124:3400] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\ProfileMgrMan.plg) 2013/06/04 13:04:30.936 [3124:3400] CProfileMgrManPlugin::Terminate: enter 2013/06/04 13:04:30.936 [3124:3400] CSmcPluginBase::Terminate() 2013/06/04 13:04:30.936 [3124:3400] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\ProfileMgrMan.plg) done 2013/06/04 13:04:30.936 [3124:3400] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\LocalRep.plg) 2013/06/04 13:04:30.936 [3124:3400] CSmcPluginBase::Terminate() 2013/06/04 13:04:30.936 [3124:3400] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\LocalRep.plg) done 2013/06/04 13:04:30.936 [3124:3400] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\CommonMan.plg) 2013/06/04 13:04:30.936 [3124:3400] CSmcPluginBase::Terminate() 2013/06/04 13:04:30.936 [3124:3400] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\CommonMan.plg) done 2013/06/04 13:04:30.936 [3124:3400] Stop TridentEngine... 257885 2013/06/04 13:04:30.936 [3124:3400] TridentEngine Stopped. 2013/06/04 13:04:30.936 [3124:3400] stop trident engine... successful 2013/06/04 13:04:30.936 [3124:3400] delete trident engine... 2013/06/04 13:04:30.983 [3124:3400] TSE stopped. 2013/06/04 13:04:30.983 [3124:3400] delete SMC State... 2013/06/04 13:04:30.983 [3124:3400] chmod on file C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Data\State\SerState.dat to read/write. 2013/06/04 13:04:30.983 [3124:3400] delete netport... 2013/06/04 13:04:30.983 [3124:3400] Disable damper... 2013/06/04 13:04:30.983 [3124:3400] Acknowledge exit trigger 2013/06/04 13:04:30.983 [3124:3364] Symantec Endpoint Protection is stopped 2013/06/04 13:04:31.139 [3124:3128] System configuration has been saved. 2013/06/04 13:05:27.984 [2944:2948] Enterprise version, Build 2015!!! 2013/06/04 13:05:27.984 [2944:3208] SetUserProfileDir: User Profile Location: C:\Windows\system32\config\systemprofile 2013/06/04 13:05:28.701 [2944:3208] Created the message map 2013/06/04 13:05:28.701 [2944:3208] Created the message map view 2013/06/04 13:05:28.857 [2944:3208] Service ThreadID 770BC410 2013/06/04 13:05:28.920 [2944:3208] smcProfile mode0 2013/06/04 13:05:29.013 [2944:3208] Loading C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Data\Config\Cltdef.dat 2013/06/04 13:05:29.138 [2944:3208] Loading C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Data\Config\Serdef.dat 2013/06/04 13:05:29.918 [2944:3208] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\CommonMan.plg) 2013/06/04 13:05:29.918 [2944:3208] CSmcPluginBase::Initialize() called. 2013/06/04 13:05:29.918 [2944:3208] CSmcPluginBase::Initialize() succeeded 2013/06/04 13:05:29.918 [2944:3208] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\CommonMan.plg) returned 1 2013/06/04 13:05:29.918 [2944:3208] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\LocalRep.plg) 2013/06/04 13:05:29.918 [2944:3208] CSmcPluginBase::Initialize() called. 2013/06/04 13:05:29.918 [2944:3208] CSmcPluginBase::Initialize() succeeded 2013/06/04 13:05:29.918 [2944:3208] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\LocalRep.plg) returned 1 2013/06/04 13:05:29.918 [2944:3208] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\ProfileMgrMan.plg) 2013/06/04 13:05:29.918 [2944:3208] CSmcPluginBase::Initialize() called. 2013/06/04 13:05:29.918 [2944:3208] CSmcPluginBase::Initialize() succeeded 2013/06/04 13:05:29.949 [2944:3208] CProfileMgrManPlugin::Initialize: exit 2013/06/04 13:05:29.949 [2944:3208] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\ProfileMgrMan.plg) returned 1 2013/06/04 13:05:29.949 [2944:3208] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\AVMan.plg) 2013/06/04 13:05:29.949 [2944:3208] AVMan: Init called. 2013/06/04 13:05:29.949 [2944:3208] AVMan: Entering Initialize 2013/06/04 13:05:30.043 [2944:3208] AVMan: Disabled event forwarding. 2013/06/04 13:05:30.043 [2944:3208] AVMan: About to start LogForwarding. 2013/06/04 13:05:30.043 [2944:3208] AVMan: in StartEventForwarderImplExShared 2013/06/04 13:05:30.043 [2944:3208] AVMan: Leaving Initialize 1 2013/06/04 13:05:30.043 [2944:3208] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\AVMan.plg) returned 1 2013/06/04 13:05:30.043 [2944:3208] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\GUProxy.plg) 2013/06/04 13:05:30.059 [2944:3208] GUProxy - StartGupPolicyThread() dwAliveTimes was turn off 2013/06/04 13:05:30.059 [2944:3208] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\GUProxy.plg) returned 1 2013/06/04 13:05:30.059 [2944:3208] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\LUMan.plg) 2013/06/04 13:05:30.059 [2944:3208] LUMan: Init called. 2013/06/04 13:05:30.059 [2944:3208] LUMan: Entering Initialize 2013/06/04 13:05:30.074 [2944:1360] AVMan: aggregation interval: 300 2013/06/04 13:05:30.074 [2944:1360] AVMan: initial log forwarding 2013/06/04 13:05:30.090 [2944:3208] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\LUMan.plg) returned 1 2013/06/04 13:05:30.090 [2944:3208] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\SfMan.plg) 2013/06/04 13:05:30.090 [2944:3208] SfMan: Initializing. 2013/06/04 13:05:30.261 [2944:2900] No network table now. 2013/06/04 13:05:30.433 [2944:2824] GetUserAndDomain in smc: Trying to get the User/Domain 2013/06/04 13:05:31.182 [2944:3832] Update network information as the registry change. 2013/06/04 13:05:31.868 [2944:3208] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\SfMan.plg) returned 1 2013/06/04 13:05:31.868 [2944:3208] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\DevMan.plg) 2013/06/04 13:05:31.884 [2944:3208] DevMan: Initializing. 2013/06/04 13:05:31.884 [2944:3208] DevMan: Now the SEP doesn't run in Safe mode with network. 2013/06/04 13:05:32.664 [2944:3208] DevMan: Start creating ThreadEngine 2013/06/04 13:05:32.695 [2944:3208] DevMan: ThreadEngine is created! 2013/06/04 13:05:32.726 [2944:3208] DevMan: ========== Device Manage Received the New Rule. ========== 2013/06/04 13:05:32.726 [2944:3208] DevMan: ========== Device Manage Is Plugged In. ========== 2013/06/04 13:05:32.726 [2944:3208] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\DevMan.plg) returned 1 2013/06/04 13:05:32.726 [2944:3208] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\AtpiMan.plg) 2013/06/04 13:05:32.726 [2944:3208] CSmcPluginBase::Initialize() called. 2013/06/04 13:05:32.726 [2944:3208] CSmcPluginBase::Initialize() succeeded 2013/06/04 13:05:32.726 [2944:3208] AtpiMan: Leaving Initialize 1 2013/06/04 13:05:32.726 [2944:3208] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\AtpiMan.plg) returned 1 2013/06/04 13:05:32.726 [2944:3208] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\BashMan.plg) 2013/06/04 13:05:32.726 [2944:3208] CSmcPluginBase::Initialize() called. 2013/06/04 13:05:32.726 [2944:3208] CSmcPluginBase::Initialize() succeeded 2013/06/04 13:05:32.726 [2944:3208] BashMan: Leaving Initialize 1 2013/06/04 13:05:32.726 [2944:3208] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\BashMan.plg) returned 1 2013/06/04 13:05:32.726 [2944:3208] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\CIDSMan.plg) 2013/06/04 13:05:32.742 [2944:3208] CSmcPluginBase::Initialize() called. 2013/06/04 13:05:32.742 [2944:3208] CSmcPluginBase::Initialize() succeeded 2013/06/04 13:05:32.742 [2944:3208] CidsMan: Leaving Initialize succeeded 2013/06/04 13:05:32.742 [2944:3208] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\CIDSMan.plg) returned 1 2013/06/04 13:05:32.742 [2944:3208] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\RebootMgrMan.plg) 2013/06/04 13:05:32.742 [2944:3208] CSmcPluginBase::Initialize() called. 2013/06/04 13:05:32.742 [2944:3208] CSmcPluginBase::Initialize() succeeded 2013/06/04 13:05:32.789 [2944:3208] RebootMgrMan: Leaving Initialize 1 2013/06/04 13:05:32.789 [2944:3208] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\RebootMgrMan.plg) returned 1 2013/06/04 13:05:32.789 [2944:3208] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\RepMgtMan.plg) 2013/06/04 13:05:32.789 [2944:3208] CSmcPluginBase::Initialize() called. 2013/06/04 13:05:32.789 [2944:3208] CSmcPluginBase::Initialize() succeeded 2013/06/04 13:05:32.789 [2944:3208] RepMgtMan: Leaving Initialize 1 2013/06/04 13:05:32.789 [2944:3208] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\RepMgtMan.plg) returned 1 2013/06/04 13:05:32.789 [2944:3208] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\SubmissionsMan.plg) 2013/06/04 13:05:32.789 [2944:3208] CSmcPluginBase::Initialize() called. 2013/06/04 13:05:32.789 [2944:3208] CSmcPluginBase::Initialize() succeeded 2013/06/04 13:05:32.820 [2944:3208] SubmissionsMan: Leaving Initialize 1 2013/06/04 13:05:32.820 [2944:3208] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\SubmissionsMan.plg) returned 1 2013/06/04 13:05:32.820 [2944:3208] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\NacManager.plg) 2013/06/04 13:05:32.820 [2944:3208] Init called. 2013/06/04 13:05:32.820 [2944:3208] Nac init 2013/06/04 13:05:32.820 [2944:3208] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\NacManager.plg) returned 1 2013/06/04 13:05:32.820 [2944:3208] Loaded language string from the registry: English 2013/06/04 13:05:32.820 [2944:3208] current package language type: English 2013/06/04 13:05:32.820 [2944:3208] Client package checksum db3b0ad81cbc871946bc18d36887768e is imported from 'C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Data\Cached Installs\SetAid.ini' 2013/06/04 13:05:32.820 [2944:3208] firewall feature status:1 2013/06/04 13:05:32.851 [2944:3208] Changing control mode 0 2013/06/04 13:05:32.851 [2944:3208] Init TPM device... 2013/06/04 13:05:33.163 [2944:3208] Creating SyLink... 2013/06/04 13:05:33.241 [2944:3208] CProfileMgrManPlugin::ReceiveMessage: enter 2013/06/04 13:05:33.241 [2944:3208] ProfileMgrMan: ReceiveMessage with msg id 262148 2013/06/04 13:05:33.241 [2944:3208] CProfileMgrManPlugin::ReceiveMessage: exit 2013/06/04 13:05:33.241 [2944:3208] AVMan: Entering ReceiveMessage with msg id 262148 2013/06/04 13:05:33.241 [2944:3208] AVMan: Leaving ReceiveMessage 2013/06/04 13:05:33.241 [2944:3208] LUMan: Entering ReceiveMessage with id 0x40004 2013/06/04 13:05:33.241 [2944:3208] AtpiMan: Entering ReceiveMessage with msg id 262148 2013/06/04 13:05:33.241 [2944:3208] AtpiMan: Leaving ReceiveMessage 2013/06/04 13:05:33.241 [2944:3208] BashMan: Entering ReceiveMessage with msg id 262148 2013/06/04 13:05:33.241 [2944:3208] BashMan: Leaving ReceiveMessage 2013/06/04 13:05:33.241 [2944:3208] CidsMan: Entering ReceiveMessage with msg id 262148 2013/06/04 13:05:33.241 [2944:3208] CidsMan: Leaving ReceiveMessage 2013/06/04 13:05:33.241 [2944:3208] RebootMgrMan: Entering ReceiveMessage with msg id 262148 2013/06/04 13:05:33.241 [2944:3208] RebootMgrMan: Leaving ReceiveMessage 2013/06/04 13:05:33.241 [2944:3208] RepMgtMan: Entering ReceiveMessage with msg id 262148 2013/06/04 13:05:33.241 [2944:3208] RepMgtMan: Leaving ReceiveMessage 2013/06/04 13:05:33.241 [2944:3208] SubmissionsMan: Entering ReceiveMessage with msg id 262148 2013/06/04 13:05:33.241 [2944:3208] SubmissionsMan: Leaving ReceiveMessage 2013/06/04 13:05:33.241 [2944:3208] Lock held for 78ms 2013/06/04 13:05:33.272 [2944:3208] Sylink is created 2013/06/04 13:05:33.272 [2944:3208] InitACS , HI result passed to Location sensor is 4 2013/06/04 13:05:33.319 [2944:3208] AutoLocationRunningEvent existed. 2013/06/04 13:05:33.319 [2944:3208] AutoLocationFrequencyUpdateEvent existed. 2013/06/04 13:05:33.319 [2944:3208] hAutoLocationSwitchEvent existed. 2013/06/04 13:05:33.319 [2944:4196] Auto location ThreadID = 4196 2013/06/04 13:05:33.319 [2944:3208] initial HI checking delay is :60000 2013/06/04 13:05:33.319 [2944:3208] HI: Script reader set default path to 2013/06/04 13:05:33.319 [2944:3208] HI: GetNewDefsNotifyFile C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Data\Definitions\HIDefs\newdefs-trigger\trigger.dat 2013/06/04 13:05:33.319 [2944:3208] HI: DefUtils is initialized. 2013/06/04 13:05:33.319 [2944:3208] HI: Initialize HI Content flag file change event successfully. 2013/06/04 13:05:33.319 [2944:3208] HI: HI Engine current grace period status 0 2013/06/04 13:05:33.319 [2944:3208] HI: ResetHIResult set HI result to HI_CHECK_DISBALED since HI is disabled. 2013/06/04 13:05:33.335 [2944:3208] HI: Use new HI config under current location, reset to default. HI Trigger Type: 1, HI Timer 120 2013/06/04 13:05:33.335 [2944:3208] HI: init set HI result to HI_CHECK_DISBALED since HI is disabled. 2013/06/04 13:05:33.335 [2944:3208] HI: set HI result to HI_CHECK_DISBALED. 2013/06/04 13:05:33.335 [2944:3208] HI: Init HI Engine done. 2013/06/04 13:05:33.335 [2944:3828] LUMan: Entering ReceiveMessage with id 0x6860006 2013/06/04 13:05:33.335 [2944:3828] LUMan: Entering PolicyUpdateCallback 2013/06/04 13:05:33.335 [2944:3828] LuMan: LueTim is not ready, will retry later. 2013/06/04 13:05:33.335 [2944:3828] Smc: LicenseNotificationFunction() - has notified LuMan that our license has been updated 2013/06/04 13:05:33.350 [2944:3208] StartEngine: reason=Initialize. 2013/06/04 13:05:33.444 [2944:3208] TeeferOpen Mem=768 NIC={7F77BC86-E010-4C29-A8FA-6547A5727BE5}...2013/06/04 13:05:33.444 [2944:3208] Success 2013/06/04 13:05:33.444 [2944:3208] TSE is located at: C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\ 2013/06/04 13:05:33.444 [2944:3208] TSE extended debugging is turned on. Flag = 1 2013/06/04 13:05:33.444 [2944:3208] D2D connection optimization mode is open by default 2013/06/04 13:05:33.553 [2944:3208] TSE Smart Gateway is turned on 2013/06/04 13:05:33.553 [2944:3208] TSE started. 2013/06/04 13:05:33.553 [2944:3208] StartTridentEngine : Apply new config into profile in location Default. 2013/06/04 13:05:33.553 [2944:3208] CGuiControl:Snac is enabled? 0 2013/06/04 13:05:33.553 [2944:3208] strLocation after switch to appointedDefault 2013/06/04 13:05:33.553 [2944:3208] The best location need to be switch is: Default 2013/06/04 13:05:33.553 [2944:3208] SetCurLocationID=Default 2013/06/04 13:05:33.569 [2944:3208] Lock held for 15ms 2013/06/04 13:05:33.569 [2944:3208] CProfileMgrManPlugin::notificationOfNewConfig: enter 2013/06/04 13:05:33.569 [2944:3208] CProfileMgrManPlugin::processNewProfile: enter 2013/06/04 13:05:33.584 [2944:3208] Applied profile successfully 2013/06/04 13:05:33.584 [2944:3208] CProfileMgrManPlugin::processNewProfile: exit 2013/06/04 13:05:33.584 [2944:3208] CProfileMgrManPlugin::notificationOfNewConfig: exit 2013/06/04 13:05:33.584 [2944:3208] NotifyNewProfileApplied: calling plugin for new policy 2013/06/04 13:05:33.584 [2944:3208] CProfileMgrManPlugin::notificationOfConfigApplied: enter 2013/06/04 13:05:33.584 [2944:3208] CProfileMgrManPlugin::notificationOfConfigApplied: exit 2013/06/04 13:05:33.584 [2944:3208] AVMan: Entering PolicyUpdateCallback 2013/06/04 13:05:33.584 [2944:4188] TridentLicense is missing in the current location 2013/06/04 13:05:33.584 [2944:4188] The current location is client control(poweruser) mode, will look up the server profile to check SNAC license 2013/06/04 13:05:33.584 [2944:4188] SNAC is NOT licensed 2013/06/04 13:05:33.584 [2944:4188] NAP is not enabled. GetNAPEnforcerEnabled failed! 2013/06/04 13:05:33.584 [2944:4188] AltCommMethodWithEnforcer is not enabled. GetDHCPGWEnforcerUseAltCommWithEnforcerEnabled failed! 2013/06/04 13:05:33.584 [2944:4188] is 2013/06/04 13:05:33.584 [2944:4188] pPeer2Peer is NULL in GetP2PProfileChangeMsgData. Set all P2P parameters to 0. 2013/06/04 13:05:33.584 [2944:4188] runtime->fConnected is FALSE. Skip to write P2P_PROFILE_CHANGE_MSG into pipe. 2013/06/04 13:05:33.600 [2944:3208] AVMan: policy retrieved 2013/06/04 13:05:33.600 [2944:3208] AVMan: in ParsePolicyXmlImpl 2013/06/04 13:05:33.600 [2944:3208] AVMan: in ParsePolicyXmlViaTempFile 2013/06/04 13:05:33.600 [2944:3208] AVMan: in ParsePolicyXmlToFile 2013/06/04 13:05:33.600 [2944:3208] AVMan: Leaving PolicyUpdateCallback 2013/06/04 13:05:33.600 [2944:3208] GUProxy: PolicyUpdateCallback called 2013/06/04 13:05:33.615 [2944:3208] GetAttributeValue: element path is invalid 2013/06/04 13:05:33.615 [2944:3208] GUProxy - UseMasterClient [0] 2013/06/04 13:05:33.615 [2944:3208] GUProxy - Is this computer a GUP Server? [0] 2013/06/04 13:05:33.615 [2944:3208] LUMan: Entering PolicyUpdateCallback 2013/06/04 13:05:33.615 [2944:3208] LuMan: LueTim is not ready, will retry later. 2013/06/04 13:05:33.615 [2944:3208] NotifyNewProfileApplied: calling plugin for new policy done. 2013/06/04 13:05:33.631 [2944:3208] CWindowsFirewallManager::GetInstance()->UseNewConfig(); 2013/06/04 13:05:33.631 [2944:3208] New location is Default 2013/06/04 13:05:33.631 [2944:3208] Third party is Disabled 2013/06/04 13:05:33.631 [2944:3208] SPC Content Source is Enabled 2013/06/04 13:05:33.631 [2944:3208] changing heartbeat for location Default 2013/06/04 13:05:33.631 [2944:3772] CProfileMgrManPlugin::Enable: enter 2013/06/04 13:05:33.631 [2944:3772] enable=true 2013/06/04 13:05:33.631 [2944:3772] CProfileMgrManPlugin::Enable: exit 2013/06/04 13:05:33.631 [2944:3772] AVMan: Entering Enable -- enable=true 2013/06/04 13:05:33.631 [2944:3772] AVMan: Entering ExportUseNewConfig 2013/06/04 13:05:33.631 [2944:3772] AVMan: Entering UseNewConfig() 2013/06/04 13:05:33.631 [2944:3772] AVMan: Leaving UseNewConfig() 2013/06/04 13:05:33.631 [2944:3772] AVMan: Leaving ExportUseNewConfig 2013/06/04 13:05:33.631 [2944:3772] AVMan: Disabled event forwarding. 2013/06/04 13:05:33.631 [2944:3772] GUProxy: Enable called. 2013/06/04 13:05:33.631 [2944:3772] GUProxy: Enable 2013/06/04 13:05:33.631 [2944:3772] AtpiMan: Entering Enable -- enable=true 2013/06/04 13:05:33.631 [2944:3772] BashMan: Entering Enable -- enable=true 2013/06/04 13:05:33.631 [2944:3772] CidsMan: Entering Enable -- enable=true 2013/06/04 13:05:33.631 [2944:3772] RebootMgrMan: Entering Enable -- enable=true 2013/06/04 13:05:33.631 [2944:3772] RepMgtMan: Entering Enable -- enable=true 2013/06/04 13:05:33.631 [2944:3772] SubmissionsMan: Entering Enable -- enable=true 2013/06/04 13:05:33.631 [2944:3208] changed heartbeat status to 1 2013/06/04 13:05:33.631 [2944:3208] HI: Use new HI config under current location, reset to default. HI Trigger Type: 1, HI Timer 120 2013/06/04 13:05:33.631 [2944:4232] ***SMC*** Enable flag = 0 2013/06/04 13:05:33.631 [2944:4188] pipe listening 997 2013/06/04 13:05:33.631 [2944:3208] Start TridentEngine...42557 2013/06/04 13:05:33.631 [2944:3208] AutoLocationRunningEvent existed. 2013/06/04 13:05:33.631 [2944:3208] AutoLocationFrequencyUpdateEvent existed. 2013/06/04 13:05:33.631 [2944:3208] hAutoLocationSwitchEvent existed. 2013/06/04 13:05:33.647 [2944:3772] DevMan: ========== Device Manage Received the New Rule. ========== 2013/06/04 13:05:33.647 [2944:4244] ***SMC*** Enable flag = 0 2013/06/04 13:05:33.647 [2944:3772] HI: Use new HI config under current location, reset to default. HI Trigger Type: 1, HI Timer 120 2013/06/04 13:05:33.647 [2944:3772] changing heartbeat for location Default 2013/06/04 13:05:33.647 [2944:3772] changed heartbeat status to 1 2013/06/04 13:05:33.647 [2944:3772] Silent mode has been disabled. 2013/06/04 13:05:33.693 [2944:3208] CWscFwHandler: update status time out-2147483638 2013/06/04 13:05:33.693 [2944:3772] CGuiControl::SynchronousUseNewConfig Location:Default 2013/06/04 13:05:33.756 [2944:3208] GetUserAndDomain in smc: Trying to get the User/Domain 2013/06/04 13:05:33.787 [2944:3208] +++++++++++++++win2000 hostName=Sheriff_4D9Q82S,DomainName= 2013/06/04 13:05:33.787 [2944:3208] Computer Network Identity (Domain/Host)=SHERIFF_4D9Q82S/Sheriff_4D9Q82S 2013/06/04 13:05:33.803 [2944:3772] Lock acquire took 47ms 2013/06/04 13:05:33.803 [2944:3208] Lock held for 47ms 2013/06/04 13:05:33.803 [2944:3208] Start SyLink... 2013/06/04 13:05:33.818 [2944:3208] Import Config File !! 2013/06/04 13:05:33.818 [2944:3208] Succeed to set the managed status to SylinkStats 2013/06/04 13:05:33.818 [2944:3208] Unknown server in sylink.xml, try previous config sylinkEx.bak 2013/06/04 13:05:33.818 [2944:3208] Lock held for 16ms 2013/06/04 13:05:33.818 [2944:3208] start sylink failed: ERROR_SERVER_UNKNOWN 2013/06/04 13:05:33.834 [2944:3772] CGuiControl:Snac is enabled? 0 2013/06/04 13:05:33.834 [2944:3772] SNAC is NOT licensed, changing the SNAC service's startup type 2013/06/04 13:05:33.834 [2944:3208] Calling Command Processor again. 2013/06/04 13:05:33.834 [2944:4196] Auto location: Trident Started = 1 2013/06/04 13:05:33.834 [2944:4196] Ready to do Autolocation. First Time =1 2013/06/04 13:05:33.834 [2944:4196] Snac HiTest:0, 0 2013/06/04 13:05:33.849 [2944:3208] QuerySysPlantStatus: Entering 2013/06/04 13:05:33.849 [2944:3208] QuerySysPlantStatus: SysPlant startType is START in registry 2013/06/04 13:05:33.849 [2944:3208] QuerySysPlantStatus: SysPlant driver is running 2013/06/04 13:05:33.849 [2944:3208] QuerySysPlantStatus: Exiting 2013/06/04 13:05:33.865 [2944:3208] using server-configured log file size of 524288 2013/06/04 13:05:33.865 [2944:3208] set log file size to 524288 2013/06/04 13:05:33.865 [2944:3208] starting 2013/06/04 13:05:33.865 [2944:3208] completed. Array enties: 0 2013/06/04 13:05:33.865 [2944:3208] creating tech extension CommonMan 2013/06/04 13:05:33.865 [2944:3208] using server-configured log file size of 524288 2013/06/04 13:05:33.865 [2944:3208] set log file size to 524288 2013/06/04 13:05:33.865 [2944:3208] starting 2013/06/04 13:05:33.865 [2944:3208] completed. Array enties: 0 2013/06/04 13:05:33.865 [2944:3208] creating tech extension LocalRep 2013/06/04 13:05:33.865 [2944:3208] using server-configured log file size of 524288 2013/06/04 13:05:33.865 [2944:3208] set log file size to 524288 2013/06/04 13:05:33.865 [2944:3208] starting 2013/06/04 13:05:33.865 [2944:3208] completed. Array enties: 0 2013/06/04 13:05:33.865 [2944:3208] creating tech extension AVMan 2013/06/04 13:05:33.865 [2944:3208] using server-configured log file size of 524288 2013/06/04 13:05:33.865 [2944:3208] set log file size to 524288 2013/06/04 13:05:33.865 [2944:3208] starting 2013/06/04 13:05:33.865 [2944:3208] completed. Array enties: 0 2013/06/04 13:05:33.865 [2944:3208] creating tech extension GUP 2013/06/04 13:05:33.865 [2944:3208] using server-configured log file size of 524288 2013/06/04 13:05:33.865 [2944:3208] set log file size to 524288 2013/06/04 13:05:33.865 [2944:3208] starting 2013/06/04 13:05:33.865 [2944:3208] completed. Array enties: 0 2013/06/04 13:05:33.865 [2944:3208] creating tech extension LUMan 2013/06/04 13:05:33.865 [2944:3208] using server-configured log file size of 524288 2013/06/04 13:05:33.865 [2944:3208] set log file size to 524288 2013/06/04 13:05:33.865 [2944:3208] starting 2013/06/04 13:05:33.865 [2944:3208] completed. Array enties: 0 2013/06/04 13:05:33.865 [2944:3208] creating tech extension SfMan 2013/06/04 13:05:33.865 [2944:3208] using server-configured log file size of 524288 2013/06/04 13:05:33.865 [2944:3208] set log file size to 524288 2013/06/04 13:05:33.865 [2944:3208] starting 2013/06/04 13:05:33.865 [2944:3208] completed. Array enties: 0 2013/06/04 13:05:33.865 [2944:3208] creating tech extension DevMan 2013/06/04 13:05:33.865 [2944:3208] using server-configured log file size of 524288 2013/06/04 13:05:33.865 [2944:3208] set log file size to 524288 2013/06/04 13:05:33.865 [2944:3208] starting 2013/06/04 13:05:33.865 [2944:3208] completed. Array enties: 0 2013/06/04 13:05:33.865 [2944:3208] creating tech extension AtpiMan 2013/06/04 13:05:33.881 [2944:3208] using server-configured log file size of 524288 2013/06/04 13:05:33.881 [2944:3208] set log file size to 524288 2013/06/04 13:05:33.881 [2944:3208] starting 2013/06/04 13:05:33.881 [2944:3208] completed. Array enties: 0 2013/06/04 13:05:33.881 [2944:3208] creating tech extension BashMan 2013/06/04 13:05:33.881 [2944:3208] using server-configured log file size of 524288 2013/06/04 13:05:33.881 [2944:3208] set log file size to 524288 2013/06/04 13:05:33.881 [2944:3208] starting 2013/06/04 13:05:33.881 [2944:3208] completed. Array enties: 0 2013/06/04 13:05:33.881 [2944:3208] creating tech extension CidsMan 2013/06/04 13:05:33.881 [2944:3208] using server-configured log file size of 524288 2013/06/04 13:05:33.881 [2944:3208] set log file size to 524288 2013/06/04 13:05:33.881 [2944:3208] starting 2013/06/04 13:05:33.881 [2944:3208] completed. Array enties: 0 2013/06/04 13:05:33.881 [2944:3208] creating tech extension RebootMgrMan 2013/06/04 13:05:33.881 [2944:3208] using server-configured log file size of 524288 2013/06/04 13:05:33.881 [2944:3208] set log file size to 524288 2013/06/04 13:05:33.881 [2944:3208] starting 2013/06/04 13:05:33.881 [2944:3208] completed. Array enties: 0 2013/06/04 13:05:33.881 [2944:3208] creating tech extension RepMgtMan 2013/06/04 13:05:33.881 [2944:3208] using server-configured log file size of 524288 2013/06/04 13:05:33.881 [2944:3208] set log file size to 524288 2013/06/04 13:05:33.881 [2944:3208] starting 2013/06/04 13:05:33.881 [2944:3208] completed. Array enties: 0 2013/06/04 13:05:33.881 [2944:3208] creating tech extension SubmissionsMan 2013/06/04 13:05:33.881 [2944:3208] using server-configured log file size of 524288 2013/06/04 13:05:33.881 [2944:3208] set log file size to 524288 2013/06/04 13:05:33.881 [2944:3208] starting 2013/06/04 13:05:33.881 [2944:3208] completed. Array enties: 0 2013/06/04 13:05:33.881 [2944:3208] creating tech extension NacMan 2013/06/04 13:05:33.865 [2944:4196] First Time AutoLocation. Must notify GUI 2013/06/04 13:05:33.865 [2944:4196] Location changed in Autolocation: Notify GUI and apply new config into profile in location Default. 2013/06/04 13:05:33.865 [2944:4196] Sending Location Change to GUI 2013/06/04 13:05:33.881 [2944:4196] CGuiControl::ChangeLocation Location:Default 2013/06/04 13:05:33.881 [2944:3208] Windows Version info: Operating System: Windows 7 (6.1.7601 Service Pack 1) 2013/06/04 13:05:33.881 [2944:3208] Network info: 2013/06/04 13:05:33.896 [2944:3208] Application List: 0) Windows Driver Package - Dell Inc. PBADRV System (09/11/2009 1.0.1.6) 1) Windows Driver Package - Broadcom Bluetooth (07/30/2009 6.2.0.9405) 2) WebEx 3) Adobe AIR 4) Adobe Flash Player 11 ActiveX 5) Adobe Shockwave Player 11.5 6) Windows Driver Package - Broadcom Bluetooth (06/15/2009 6.2.0.9000) 7) Citrix Receiver 8) Microsoft .NET Framework 4 Client Profile 9) Microsoft Office Standard 2010 10) UPEK TouchChip Fingerprint Reader 11) Canon iP100 series Printer Driver 12) Citrix Receiver(Aero) 13) Java(TM) 6 Update 30 14) Java 7 Update 21 15) Dell 5530 Wireless Broadband Package 16) Citrix Authentication Manager 17) Microsoft .NET Framework 4 Client Profile 18) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) 19) Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) 20) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) 21) Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636) 22) Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078) 23) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) 24) Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121) 25) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351) 26) Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449) 27) Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019) 28) Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595) 29) Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642) 30) Security Update for Microsoft .NET Framework 4 Client Profile (KB2804576) 31) Java Auto Updater 32) Aventail Webifiers 33) QuickTime 34) Dell ControlVault Host Components Installer 35) Citrix Receiver(DV) 36) Microsoft Visual C++ 2005 Redistributable 37) Aventail Access Manager 38) Online Plug-in 39) Symantec Smart Connect 40) Dell Wireless HSPA Mini-Card Drivers 41) Microsoft Silverlight 42) Microsoft Office Standard 2010 43) Microsoft Office 2010 Service Pack 1 (SP1) 44) Security Update for Microsoft Office 2010 (KB2553091) 45) Security Update for Microsoft Office 2010 (KB2553096) 46) Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition 47) Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition 48) Security Update for Microsoft OneNote 2010 (KB2760600) 32-Bit Edition 49) Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition 50) Update for Microsoft Office 2010 (KB2494150) 51) Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition 52) Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition 53) Security Update for Microsoft Excel 2010 (KB2597126) 32-Bit Edition 54) Security Update for Microsoft Publisher 2010 (KB2553147) 32-Bit Edition 55) Security Update for Microsoft InfoPath 2010 (KB2760406) 32-Bit Edition 56) Security Update for Microsoft Office 2010 (KB2687501) 32-Bit Edition 57) Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition 58) Security Update for Microsoft Office 2010 (KB2687510) 32-Bit Edition 59) Update for Microsoft Office 2010 (KB2553065) 60) Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition 61) Security Update for Microsoft Office 2010 (KB2598243) 32-Bit Edition 62) Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition 63) Security Update for Microsoft Office 2010 (KB2553447) 32-Bit Edition 64) Security Update for Microsoft Office 2010 (KB2553371) 32-Bit Edition 65) Security Update for Microsoft Office 2010 (KB2589320) 32-Bit Edition 66) Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition 67) Update for Microsoft Office 2010 (KB2566458) 68) Security Update for Microsoft Filter Pack 2.0 (KB2553501) 32-Bit Edition 69) Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition 70) Security Update for Microsoft Word 2010 (KB2760410) 32-Bit Edition 71) Microsoft Office Excel MUI (English) 2010 72) Microsoft Office 2010 Service Pack 1 (SP1) 73) Microsoft Office PowerPoint MUI (English) 2010 74) Microsoft Office 2010 Service Pack 1 (SP1) 75) Microsoft Office Publisher MUI (English) 2010 76) Microsoft Office 2010 Service Pack 1 (SP1) 77) Microsoft Office Outlook MUI (English) 2010 78) Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition 79) Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition 80) Microsoft Office 2010 Service Pack 1 (SP1) 81) Microsoft Office Word MUI (English) 2010 82) Microsoft Office 2010 Service Pack 1 (SP1) 83) Microsoft Office Proof (English) 2010 84) Microsoft Office 2010 Service Pack 1 (SP1) 85) Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition 86) Microsoft Office Proof (French) 2010 87) Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition 88) Microsoft Office 2010 Service Pack 1 (SP1) 89) Microsoft Office Proof (Spanish) 2010 90) Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition 91) Microsoft Office 2010 Service Pack 1 (SP1) 92) Microsoft Office Proofing (English) 2010 93) Microsoft Office 2010 Service Pack 1 (SP1) 94) Microsoft Office Shared MUI (English) 2010 95) Microsoft Office 2010 Service Pack 1 (SP1) 96) Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition 97) Microsoft Office OneNote MUI (English) 2010 98) Microsoft Office 2010 Service Pack 1 (SP1) 99) Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition 100) Microsoft Office Shared Setup Metadata MUI (English) 2010 101) Microsoft Office 2010 Service Pack 1 (SP1) 102) 32 Bit HP CIO Components Installer 103) Citrix Receiver Inside 104) Aventail Web Proxy Agent 105) WIDCOMM Bluetooth Software 106) Citrix Receiver(USB) 107) Adobe Reader XI (11.0.03) 108) BioAPI Framework 109) Citrix Receiver (HDX Flash Redirection) 110) Symantec Endpoint Protection 111) Dell System Manager 112) Apple Application Support 113) Self-service Plug-in 114) Adobe AIR 115) Dell Security Device Driver Pack 2013/06/04 13:05:33.896 [2944:3208] Network Connection Properties: 2013/06/04 13:05:33.896 [2944:3208] initial service success 2013/06/04 13:05:33.912 [2944:3208] CProfileMgrManPlugin::ReceiveMessage: enter 2013/06/04 13:05:33.912 [2944:3208] ProfileMgrMan: ReceiveMessage with msg id 458753 2013/06/04 13:05:33.912 [2944:3208] CProfileMgrManPlugin::ReceiveMessage: exit 2013/06/04 13:05:33.912 [2944:3208] AVMan: Entering ReceiveMessage with msg id 458753 2013/06/04 13:05:33.912 [2944:3208] AVMan: Disabled event forwarding. 2013/06/04 13:05:33.912 [2944:3208] AVMan: Leaving ReceiveMessage 2013/06/04 13:05:33.912 [2944:3208] LUMan: Entering ReceiveMessage with id 0x70001 2013/06/04 13:05:33.912 [2944:3208] AtpiMan: Entering ReceiveMessage with msg id 458753 2013/06/04 13:05:33.912 [2944:3208] AtpiMan: Leaving ReceiveMessage 2013/06/04 13:05:33.912 [2944:3208] BashMan: Entering ReceiveMessage with msg id 458753 2013/06/04 13:05:33.912 [2944:3208] BashMan: Leaving ReceiveMessage 2013/06/04 13:05:33.912 [2944:3208] CidsMan: Entering ReceiveMessage with msg id 458753 2013/06/04 13:05:33.912 [2944:3208] CidsMan: Leaving ReceiveMessage 2013/06/04 13:05:33.912 [2944:3208] RebootMgrMan: Entering ReceiveMessage with msg id 458753 2013/06/04 13:05:33.912 [2944:3208] RebootMgrMan: Leaving ReceiveMessage 2013/06/04 13:05:33.912 [2944:3208] RepMgtMan: Entering ReceiveMessage with msg id 458753 2013/06/04 13:05:33.912 [2944:3208] RepMgtMan: Leaving ReceiveMessage 2013/06/04 13:05:33.912 [2944:3208] SubmissionsMan: Entering ReceiveMessage with msg id 458753 2013/06/04 13:05:33.912 [2944:3208] SubmissionsMan: Leaving ReceiveMessage 2013/06/04 13:05:33.912 [2944:3208] : Failed to open ccSettings key UserInformation. (Probably because it doesn't exist) Error: 2147483904 2013/06/04 13:05:33.943 [2944:4264] CWscFwHandler: update status time out-2147483638 2013/06/04 13:05:33.943 [2944:4196] Snac HiTest:0, 0 2013/06/04 13:05:34.083 [2944:3832] Update network information as the registry change. 2013/06/04 13:05:34.910 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:05:35.191 [2944:3832] Update network information as the registry change. 2013/06/04 13:05:35.940 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:05:36.065 [2944:4444] ***SMC*** Enable flag = 0 2013/06/04 13:05:37.094 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:05:37.188 [2944:3832] Update network information as the registry change. 2013/06/04 13:05:37.593 [2944:4204] TSE3080: *********DROP PACKET********** 2013/06/04 13:05:37.593 [2944:4204] TSE: SecurityRule = Block_all 2013/06/04 13:05:37.593 [2944:4204] TSE3082: *** DROP PACKET *** 2013/06/04 13:05:37.593 [2944:4204] ======== TsPacket ====== BA: 0 == protocol: 2 === === EtherII Packet=== len:143==== nic:0===== 11-01-fe-80-00-00 ---> 60-00-00-00-00-67 , protocol = 0x0 2013/06/04 13:05:37.593 [2944:4204] TSE3080: *********DROP PACKET********** 2013/06/04 13:05:37.593 [2944:4204] TSE: SecurityRule = Block_all 2013/06/04 13:05:37.593 [2944:4204] TSE3082: *** DROP PACKET *** 2013/06/04 13:05:37.593 [2944:4204] ======== TsPacket ====== BA: 0 == protocol: 2 === === EtherII Packet=== len:143==== nic:0===== 11-01-fe-80-00-00 ---> 60-00-00-00-00-67 , protocol = 0x0 2013/06/04 13:05:37.687 [2944:4204] TSE3080: *********DROP PACKET********** 2013/06/04 13:05:37.687 [2944:4204] TSE: SecurityRule = Block_all 2013/06/04 13:05:37.687 [2944:4204] TSE3082: *** DROP PACKET *** 2013/06/04 13:05:37.687 [2944:4204] ======== TsPacket ====== BA: 0 == protocol: 2 === === EtherII Packet=== len:64==== nic:0===== 3a-ff-fe-80-00-00 ---> 60-00-00-00-00-18 , protocol = 0x0 2013/06/04 13:05:37.687 [2944:4204] TSE3080: *********DROP PACKET********** 2013/06/04 13:05:37.687 [2944:4204] TSE: SecurityRule = Block_all 2013/06/04 13:05:37.687 [2944:4204] TSE3082: *** DROP PACKET *** 2013/06/04 13:05:37.687 [2944:4204] ======== TsPacket ====== BA: 0 == protocol: 2 === === EtherII Packet=== len:96==== nic:0===== 00-01-fe-80-00-00 ---> 60-00-00-00-00-38 , protocol = 0x0 2013/06/04 13:05:38.124 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:05:38.186 [2944:4204] TSE3080: *********DROP PACKET********** 2013/06/04 13:05:38.186 [2944:4204] TSE: SecurityRule = Block_all 2013/06/04 13:05:38.186 [2944:4204] TSE3082: *** DROP PACKET *** 2013/06/04 13:05:38.186 [2944:4204] ======== TsPacket ====== BA: 0 == protocol: 2 === === EtherII Packet=== len:76==== nic:0===== 00-01-fe-80-00-00 ---> 60-00-00-00-00-24 , protocol = 0x0 2013/06/04 13:05:39.153 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:05:40.183 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:05:41.213 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:05:41.681 [2944:4204] TSE3080: *********DROP PACKET********** 2013/06/04 13:05:41.681 [2944:4204] TSE: SecurityRule = Block_all 2013/06/04 13:05:41.681 [2944:4204] TSE3082: *** DROP PACKET *** 2013/06/04 13:05:41.681 [2944:4204] ======== TsPacket ====== BA: 0 == protocol: 2 === === EtherII Packet=== len:64==== nic:0===== 3a-ff-fe-80-00-00 ---> 60-00-00-00-00-18 , protocol = 0x0 2013/06/04 13:05:42.242 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:05:43.272 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:05:43.334 [2944:4616] LUMan: Entering PolicyUpdateCallback 2013/06/04 13:05:43.350 [2944:4616] LUMan: Entering SendConfig 2013/06/04 13:05:43.490 [2944:4616] LUMan: Entering RegisterCallbacks 2013/06/04 13:05:43.490 [2944:4616] Registred moniker {535CB6A4-441F-4e8a-A897-804CD859100E} removed callback function 2013/06/04 13:05:43.490 [2944:4616] LUMan: RegisterCallbacks() - NULLed internal content channel callbacks for {535CB6A4-441F-4e8a-A897-804CD859100E} 2013/06/04 13:05:43.490 [2944:4616] Registred moniker {55DE35DC-862A-44c9-8A2B-3EF451665D0A} removed callback function 2013/06/04 13:05:43.490 [2944:4616] LUMan: RegisterCallbacks() - NULLed internal content channel callbacks for {55DE35DC-862A-44c9-8A2B-3EF451665D0A} 2013/06/04 13:05:43.490 [2944:4616] Registred moniker {EDBD3BD0-8395-4d4d-BAC9-19DD32EF4758} removed callback function 2013/06/04 13:05:43.490 [2944:4616] LUMan: RegisterCallbacks() - NULLed internal content channel callbacks for {EDBD3BD0-8395-4d4d-BAC9-19DD32EF4758} 2013/06/04 13:05:43.490 [2944:4616] Registred moniker {B6DC6C8F-46FA-40c7-A806-B669BE1D2D19} removed callback function 2013/06/04 13:05:43.490 [2944:4616] LUMan: RegisterCallbacks() - NULLed internal content channel callbacks for {B6DC6C8F-46FA-40c7-A806-B669BE1D2D19} 2013/06/04 13:05:43.490 [2944:4616] Registred moniker {810D5A61-809F-49c2-BD75-177F0647D2BA} removed callback function 2013/06/04 13:05:43.490 [2944:4616] LUMan: RegisterCallbacks() - NULLed internal content channel callbacks for {810D5A61-809F-49c2-BD75-177F0647D2BA} 2013/06/04 13:05:43.490 [2944:4616] Registred moniker {263395A0-D3D8-4be4-80B5-202C94EF4AA0} removed callback function 2013/06/04 13:05:43.490 [2944:4616] LUMan: RegisterCallbacks() - NULLed internal content channel callbacks for {263395A0-D3D8-4be4-80B5-202C94EF4AA0} 2013/06/04 13:05:43.490 [2944:4616] Registred moniker {D6AEBC07-D833-485f-9723-6C908D37F806} removed callback function 2013/06/04 13:05:43.490 [2944:4616] LUMan: RegisterCallbacks() - NULLed internal content channel callbacks for {D6AEBC07-D833-485f-9723-6C908D37F806} 2013/06/04 13:05:43.490 [2944:4616] Registred moniker {E8827B4A-4F58-4dea-8C93-07B32A63D1C5} removed callback function 2013/06/04 13:05:43.490 [2944:4616] LUMan: RegisterCallbacks() - NULLed internal content channel callbacks for {E8827B4A-4F58-4dea-8C93-07B32A63D1C5} 2013/06/04 13:05:43.490 [2944:4616] Registred moniker {50B092DE-40D5-4724-971B-D3D90E9EE987} removed callback function 2013/06/04 13:05:43.490 [2944:4616] LUMan: RegisterCallbacks() - NULLed internal content channel callbacks for {50B092DE-40D5-4724-971B-D3D90E9EE987} 2013/06/04 13:05:44.301 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:05:45.331 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:05:45.674 [2944:4204] TSE3080: *********DROP PACKET********** 2013/06/04 13:05:45.674 [2944:4204] TSE: SecurityRule = Block_all 2013/06/04 13:05:45.674 [2944:4204] TSE3082: *** DROP PACKET *** 2013/06/04 13:05:45.674 [2944:4204] ======== TsPacket ====== BA: 0 == protocol: 2 === === EtherII Packet=== len:64==== nic:0===== 3a-ff-fe-80-00-00 ---> 60-00-00-00-00-18 , protocol = 0x0 2013/06/04 13:05:46.361 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:05:47.390 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:05:48.420 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:05:49.449 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:05:50.479 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:05:51.509 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:05:52.538 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:05:53.568 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:05:54.597 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:05:55.627 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:05:57.156 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:05:58.185 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:05:59.215 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:00.245 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:01.274 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:02.304 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:03.333 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:04.363 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:05.393 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:06.422 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:07.452 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:08.481 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:09.511 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:10.541 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:11.570 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:12.576 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:13.595 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:14.624 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:15.654 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:16.683 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:17.713 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:18.743 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:19.772 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:20.802 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:21.831 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:22.861 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:23.891 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:24.920 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:25.950 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:26.980 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:27.993 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:29.000 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:30.019 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:31.038 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:32.064 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:32.552 [2944:4180] RepMgtMan: OnTimInitializationComplete called. 2013/06/04 13:06:33.088 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:34.111 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:35.141 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:36.171 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:37.201 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:38.208 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:39.213 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:40.235 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:41.265 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:42.294 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:43.324 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:44.353 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:45.383 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:46.413 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:47.489 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:48.519 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:49.546 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:50.572 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:51.591 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:52.596 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:53.626 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:54.652 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:55.672 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:56.696 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:57.712 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:58.732 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:06:59.760 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:07:00.786 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:07:01.816 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:07:02.846 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:07:03.875 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:07:04.905 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:07:05.934 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:07:06.964 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:07:07.994 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:07:09.023 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:07:10.053 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:07:11.082 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:07:12.112 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:07:13.142 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:07:14.171 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:07:15.201 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:07:16.230 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:07:17.260 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:07:18.290 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:07:19.319 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:07:20.349 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:07:21.378 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:07:22.408 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:07:23.438 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:07:24.467 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:07:25.497 [2944:3772] CWscFwHandler: update status time out-2147483638 2013/06/04 13:08:35.992 [2944:1964] SMCGui - 5244: Creating garbage collection Instance 2013/06/04 13:08:36.070 [2944:1964] Snac HiTest:0, 0 2013/06/04 13:08:36.070 [2944:3208] Starting SMC GUI 2013/06/04 13:08:36.070 [2944:3208] GetUserAndDomain in smc: Trying to get the User/Domain 2013/06/04 13:08:36.085 [2944:3208] Enterprise version, Build 2015!!! 2013/06/04 13:08:36.085 [2944:3208] user_id = SHERIFF_4D9Q82S/admin 2013/06/04 13:08:36.085 [2944:1964] SMCGui - 5244: CSmcDlg::Profile() - ImportFromDm() returned... 2013/06/04 13:08:36.101 [2944:1964] SMCGui - 5244: CSmcDlg::UpdateProfileInfoN/A: 2013/06/04 13:08:36.616 [2944:1964] Saving SMC State 2013/06/04 13:08:36.616 [2944:1964] chmod on file C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Data\State\SerState.dat to read/write.