2013/12/04 13:07:51.903 [1744:3804] SMCGui - 3752: end session wParam = 1, lParam = 0 2013/12/04 13:08:04.243 [1744:1776] Service : Start Stopping Service 2013/12/04 13:08:04.243 [1744:1776] Waiting for the service to stop 2013/12/04 13:08:04.243 [1744:1800] Service is shutting down 2013/12/04 13:08:04.243 [1744:1800] SmcService: Stopped the thread which trims the working set 2013/12/04 13:08:04.243 [1744:1800] CProfileMgrManPlugin::ReceiveMessage: enter 2013/12/04 13:08:04.243 [1744:1800] ProfileMgrMan: ReceiveMessage with msg id 458754 2013/12/04 13:08:04.243 [1744:1800] CProfileMgrManPlugin::ReceiveMessage: exit 2013/12/04 13:08:04.243 [1744:1800] AVMan: Entering ReceiveMessage with msg id 458754 2013/12/04 13:08:04.243 [1744:1800] AVMan: Disabled event forwarding. 2013/12/04 13:08:04.243 [1744:1800] AVMan: Leaving ReceiveMessage 2013/12/04 13:08:04.243 [1744:1800] LUMan: Entering ReceiveMessage with id 0x70002 2013/12/04 13:08:04.243 [1744:1800] LUMan: SMC notified LuMan that it is stopping 2013/12/04 13:08:04.243 [1744:1800] AtpiMan: Entering ReceiveMessage with msg id 458754 2013/12/04 13:08:04.243 [1744:1800] AtpiMan: Leaving ReceiveMessage 2013/12/04 13:08:04.243 [1744:1800] BashMan: Entering ReceiveMessage with msg id 458754 2013/12/04 13:08:04.243 [1744:1800] BashMan: Leaving ReceiveMessage 2013/12/04 13:08:04.243 [1744:1800] CidsMan: Entering ReceiveMessage with msg id 458754 2013/12/04 13:08:04.243 [1744:1800] CidsMan: Leaving ReceiveMessage 2013/12/04 13:08:04.243 [1744:1800] RebootMgrMan: Entering ReceiveMessage with msg id 458754 2013/12/04 13:08:04.243 [1744:1800] RebootMgrMan: Leaving ReceiveMessage 2013/12/04 13:08:04.243 [1744:1800] RepMgtMan: Entering ReceiveMessage with msg id 458754 2013/12/04 13:08:04.243 [1744:1800] RepMgtMan: Leaving ReceiveMessage 2013/12/04 13:08:04.243 [1744:1800] SubmissionsMan: Entering ReceiveMessage with msg id 458754 2013/12/04 13:08:04.243 [1744:1800] SubmissionsMan: Leaving ReceiveMessage 2013/12/04 13:08:04.835 [1744:1800] Saving SMC State 2013/12/04 13:08:04.835 [1744:1800] chmod on file C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Data\State\SerState.dat to read/write. 2013/12/04 13:08:04.835 [1744:2172] Ending Auto location ThreadID = 2172 2013/12/04 13:08:04.835 [1744:1800] Destructor called! 2013/12/04 13:08:04.835 [1744:1800] Stop begin.----> 2013/12/04 13:08:04.835 [1744:1800] <-----Already stoppped.Stop End. 2013/12/04 13:08:04.835 [1744:1800] Stopping SyLink... 2013/12/04 13:08:04.835 [1744:1800] Deleting SyLink... 2013/12/04 13:08:05.350 [1744:1800] Lock held for 515ms 2013/12/04 13:08:05.350 [1744:1800] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\NacManager.plg) 2013/12/04 13:08:05.350 [1744:1800] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\NacManager.plg) done 2013/12/04 13:08:05.350 [1744:1800] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\SubmissionsMan.plg) 2013/12/04 13:08:05.350 [1744:1800] SubmissionsMan: Entering Terminate 2013/12/04 13:08:05.506 [1744:1800] CSmcPluginBase::Terminate() 2013/12/04 13:08:05.506 [1744:1800] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\SubmissionsMan.plg) done 2013/12/04 13:08:05.506 [1744:1800] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\RepMgtMan.plg) 2013/12/04 13:08:05.506 [1744:1800] RepMgtMan: Entering Terminate 2013/12/04 13:08:05.569 [1744:1800] RepMgtMan: Leaving Terminate 2013/12/04 13:08:05.569 [1744:1800] CSmcPluginBase::Terminate() 2013/12/04 13:08:05.569 [1744:1800] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\RepMgtMan.plg) done 2013/12/04 13:08:05.569 [1744:1800] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\RebootMgrMan.plg) 2013/12/04 13:08:05.569 [1744:1800] RebootMgrMan: Entering Terminate 2013/12/04 13:08:05.569 [1744:1800] CSmcPluginBase::Terminate() 2013/12/04 13:08:05.569 [1744:1800] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\RebootMgrMan.plg) done 2013/12/04 13:08:05.569 [1744:1800] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\CIDSMan.plg) 2013/12/04 13:08:05.569 [1744:1800] CSmcPluginBase::Terminate() 2013/12/04 13:08:05.569 [1744:1800] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\CIDSMan.plg) done 2013/12/04 13:08:05.569 [1744:1800] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\BashMan.plg) 2013/12/04 13:08:05.569 [1744:1800] BashMan: Entering Terminate 2013/12/04 13:08:05.569 [1744:1800] CSmcPluginBase::Terminate() 2013/12/04 13:08:05.569 [1744:1800] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\BashMan.plg) done 2013/12/04 13:08:05.569 [1744:1800] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\AtpiMan.plg) 2013/12/04 13:08:05.569 [1744:1800] AtpiMan: Entering Terminate 2013/12/04 13:08:05.569 [1744:1800] CSmcPluginBase::Terminate() 2013/12/04 13:08:05.569 [1744:1800] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\AtpiMan.plg) done 2013/12/04 13:08:05.569 [1744:1800] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\DevMan.plg) 2013/12/04 13:08:05.569 [1744:1800] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\DevMan.plg) done 2013/12/04 13:08:05.569 [1744:1800] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\SfMan.plg) 2013/12/04 13:08:05.896 [1744:1800] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\SfMan.plg) done 2013/12/04 13:08:05.896 [1744:1800] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\LUMan.plg) 2013/12/04 13:08:05.896 [1744:1800] LUMan: Entering Terminate 2013/12/04 13:08:05.896 [1744:1800] LUMan: Waiting for registry monitor thread 1948 to complete... 2013/12/04 13:08:05.896 [1744:1800] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\LUMan.plg) done 2013/12/04 13:08:05.896 [1744:1800] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\GUProxy.plg) 2013/12/04 13:08:05.896 [1744:1800] GUProxy: Terminate called. 2013/12/04 13:08:05.896 [1744:1800] GUProxy: Terminate 2013/12/04 13:08:05.896 [1744:1800] GUProxy - StopGupPolicyThread() HTHREAD=0,Event=0 2013/12/04 13:08:05.896 [1744:1800] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\GUProxy.plg) done 2013/12/04 13:08:05.896 [1744:1800] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\AVMan.plg) 2013/12/04 13:08:05.896 [1744:1800] AVMan: Entering Terminate 2013/12/04 13:08:05.896 [1744:1936] AVMan: log forwarding shutting down 2013/12/04 13:08:05.896 [1744:1800] AVMan: in AvPluginImplDeinit 2013/12/04 13:08:05.896 [1744:1800] AVMan: in AvPluginImplDeinit 2013/12/04 13:08:05.896 [1744:1800] AVMan: Leaving Terminate 2013/12/04 13:08:05.896 [1744:1800] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\AVMan.plg) done 2013/12/04 13:08:05.896 [1744:1800] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\ProfileMgrMan.plg) 2013/12/04 13:08:05.896 [1744:1800] CProfileMgrManPlugin::Terminate: enter 2013/12/04 13:08:05.896 [1744:1800] CSmcPluginBase::Terminate() 2013/12/04 13:08:05.896 [1744:1800] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\ProfileMgrMan.plg) done 2013/12/04 13:08:05.896 [1744:1800] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\LocalRep.plg) 2013/12/04 13:08:05.896 [1744:1800] CSmcPluginBase::Terminate() 2013/12/04 13:08:05.896 [1744:1800] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\LocalRep.plg) done 2013/12/04 13:08:05.896 [1744:1800] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\CommonMan.plg) 2013/12/04 13:08:05.896 [1744:1800] CSmcPluginBase::Terminate() 2013/12/04 13:08:05.896 [1744:1800] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\CommonMan.plg) done 2013/12/04 13:08:05.896 [1744:1800] Stop TridentEngine... 644393 2013/12/04 13:08:05.896 [1744:1800] TridentEngine Stopped. 2013/12/04 13:08:05.896 [1744:1800] stop trident engine... successful 2013/12/04 13:08:05.896 [1744:1800] delete trident engine... 2013/12/04 13:08:06.099 [1744:1800] TSE stopped. 2013/12/04 13:08:06.099 [1744:1800] delete SMC State... 2013/12/04 13:08:06.099 [1744:1800] chmod on file C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Data\State\SerState.dat to read/write. 2013/12/04 13:08:06.099 [1744:1800] delete netport... 2013/12/04 13:08:06.099 [1744:1800] Disable damper... 2013/12/04 13:08:06.099 [1744:1800] Acknowledge exit trigger 2013/12/04 13:08:06.099 [1744:1776] Symantec Endpoint Protection is stopped 2013/12/04 13:08:06.536 [1744:1748] System configuration has been saved. 2013/12/05 16:20:14.824 [1912:1916] Enterprise version, Build 2015!!! 2013/12/05 16:20:14.839 [1912:1956] SetUserProfileDir: User Profile Location: C:\Windows\system32\config\systemprofile 2013/12/05 16:20:15.011 [1912:1956] Created the message map 2013/12/05 16:20:15.011 [1912:1956] Created the message map view 2013/12/05 16:20:15.339 [1912:1956] Service ThreadID 7659C400 2013/12/05 16:20:15.370 [1912:1956] smcProfile mode0 2013/12/05 16:20:15.385 [1912:1956] Loading C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Data\Config\Cltdef.dat 2013/12/05 16:20:15.432 [1912:1956] Loading C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Data\Config\Serdef.dat 2013/12/05 16:20:15.744 [1912:1956] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\CommonMan.plg) 2013/12/05 16:20:15.744 [1912:1956] CSmcPluginBase::Initialize() called. 2013/12/05 16:20:15.744 [1912:1956] CSmcPluginBase::Initialize() succeeded 2013/12/05 16:20:15.744 [1912:1956] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\CommonMan.plg) returned 1 2013/12/05 16:20:15.744 [1912:1956] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\LocalRep.plg) 2013/12/05 16:20:15.744 [1912:1956] CSmcPluginBase::Initialize() called. 2013/12/05 16:20:15.744 [1912:1956] CSmcPluginBase::Initialize() succeeded 2013/12/05 16:20:15.744 [1912:1956] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\LocalRep.plg) returned 1 2013/12/05 16:20:15.744 [1912:1956] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\ProfileMgrMan.plg) 2013/12/05 16:20:15.744 [1912:1956] CSmcPluginBase::Initialize() called. 2013/12/05 16:20:15.744 [1912:1956] CSmcPluginBase::Initialize() succeeded 2013/12/05 16:20:15.775 [1912:1956] CProfileMgrManPlugin::Initialize: exit 2013/12/05 16:20:15.775 [1912:1956] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\ProfileMgrMan.plg) returned 1 2013/12/05 16:20:15.775 [1912:1956] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\AVMan.plg) 2013/12/05 16:20:15.775 [1912:1956] AVMan: Init called. 2013/12/05 16:20:15.775 [1912:1956] AVMan: Entering Initialize 2013/12/05 16:20:15.869 [1912:1956] AVMan: Disabled event forwarding. 2013/12/05 16:20:15.869 [1912:1956] AVMan: About to start LogForwarding. 2013/12/05 16:20:15.869 [1912:1956] AVMan: in StartEventForwarderImplExShared 2013/12/05 16:20:15.869 [1912:1956] AVMan: Leaving Initialize 1 2013/12/05 16:20:15.869 [1912:1956] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\AVMan.plg) returned 1 2013/12/05 16:20:15.869 [1912:1956] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\GUProxy.plg) 2013/12/05 16:20:15.885 [1912:1956] GUProxy - StartGupPolicyThread() dwAliveTimes was turn off 2013/12/05 16:20:15.885 [1912:1956] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\GUProxy.plg) returned 1 2013/12/05 16:20:15.885 [1912:1956] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\LUMan.plg) 2013/12/05 16:20:15.885 [1912:1956] LUMan: Init called. 2013/12/05 16:20:15.885 [1912:1956] LUMan: Entering Initialize 2013/12/05 16:20:15.900 [1912:1956] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\LUMan.plg) returned 1 2013/12/05 16:20:15.900 [1912:1956] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\SfMan.plg) 2013/12/05 16:20:15.900 [1912:1956] SfMan: Initializing. 2013/12/05 16:20:16.009 [1912:264] AVMan: aggregation interval: 300 2013/12/05 16:20:16.009 [1912:264] AVMan: initial log forwarding 2013/12/05 16:20:16.509 [1912:1956] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\SfMan.plg) returned 1 2013/12/05 16:20:16.509 [1912:1956] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\DevMan.plg) 2013/12/05 16:20:16.524 [1912:1956] DevMan: Initializing. 2013/12/05 16:20:16.524 [1912:1956] DevMan: Now the SEP doesn't run in Safe mode with network. 2013/12/05 16:20:16.711 [1912:1956] DevMan: Start creating ThreadEngine 2013/12/05 16:20:16.727 [1912:1956] DevMan: ThreadEngine is created! 2013/12/05 16:20:16.821 [1912:1956] DevMan: ========== Device Manage Received the New Rule. ========== 2013/12/05 16:20:16.821 [1912:1956] DevMan: ========== Device Manage Is Plugged In. ========== 2013/12/05 16:20:16.821 [1912:1956] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\DevMan.plg) returned 1 2013/12/05 16:20:16.821 [1912:1956] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\AtpiMan.plg) 2013/12/05 16:20:16.836 [1912:1956] CSmcPluginBase::Initialize() called. 2013/12/05 16:20:16.836 [1912:1956] CSmcPluginBase::Initialize() succeeded 2013/12/05 16:20:16.836 [1912:1956] AtpiMan: Leaving Initialize 1 2013/12/05 16:20:16.836 [1912:1956] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\AtpiMan.plg) returned 1 2013/12/05 16:20:16.836 [1912:1956] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\BashMan.plg) 2013/12/05 16:20:16.836 [1912:1956] CSmcPluginBase::Initialize() called. 2013/12/05 16:20:16.836 [1912:1956] CSmcPluginBase::Initialize() succeeded 2013/12/05 16:20:16.852 [1912:1956] BashMan: Leaving Initialize 1 2013/12/05 16:20:16.852 [1912:1956] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\BashMan.plg) returned 1 2013/12/05 16:20:16.852 [1912:1956] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\CIDSMan.plg) 2013/12/05 16:20:16.852 [1912:1956] CSmcPluginBase::Initialize() called. 2013/12/05 16:20:16.852 [1912:1956] CSmcPluginBase::Initialize() succeeded 2013/12/05 16:20:16.852 [1912:1956] CidsMan: Leaving Initialize succeeded 2013/12/05 16:20:16.852 [1912:1956] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\CIDSMan.plg) returned 1 2013/12/05 16:20:16.852 [1912:1956] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\RebootMgrMan.plg) 2013/12/05 16:20:16.852 [1912:1956] CSmcPluginBase::Initialize() called. 2013/12/05 16:20:16.852 [1912:1956] CSmcPluginBase::Initialize() succeeded 2013/12/05 16:20:16.930 [1912:1956] RebootMgrMan: Leaving Initialize 1 2013/12/05 16:20:16.930 [1912:1956] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\RebootMgrMan.plg) returned 1 2013/12/05 16:20:16.930 [1912:1956] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\RepMgtMan.plg) 2013/12/05 16:20:16.930 [1912:1956] CSmcPluginBase::Initialize() called. 2013/12/05 16:20:16.930 [1912:1956] CSmcPluginBase::Initialize() succeeded 2013/12/05 16:20:16.945 [1912:1956] RepMgtMan: Leaving Initialize 1 2013/12/05 16:20:16.945 [1912:1956] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\RepMgtMan.plg) returned 1 2013/12/05 16:20:16.945 [1912:1956] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\SubmissionsMan.plg) 2013/12/05 16:20:16.945 [1912:1956] CSmcPluginBase::Initialize() called. 2013/12/05 16:20:16.945 [1912:1956] CSmcPluginBase::Initialize() succeeded 2013/12/05 16:20:16.961 [1912:1956] SubmissionsMan: Leaving Initialize 1 2013/12/05 16:20:16.961 [1912:1956] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\SubmissionsMan.plg) returned 1 2013/12/05 16:20:16.961 [1912:1956] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\NacManager.plg) 2013/12/05 16:20:16.961 [1912:1956] Init called. 2013/12/05 16:20:16.961 [1912:1956] Nac init 2013/12/05 16:20:16.961 [1912:1956] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\NacManager.plg) returned 1 2013/12/05 16:20:16.961 [1912:1956] Loaded language string from the registry: English 2013/12/05 16:20:16.961 [1912:1956] current package language type: English 2013/12/05 16:20:16.961 [1912:1956] Client package checksum db3b0ad81cbc871946bc18d36887768e is imported from 'C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Data\Cached Installs\SetAid.ini' 2013/12/05 16:20:16.961 [1912:1956] firewall feature status:1 2013/12/05 16:20:16.977 [1912:1956] Changing control mode 0 2013/12/05 16:20:16.977 [1912:1956] Init TPM device... 2013/12/05 16:20:17.148 [1912:1956] Creating SyLink... 2013/12/05 16:20:17.226 [1912:1956] CProfileMgrManPlugin::ReceiveMessage: enter 2013/12/05 16:20:17.226 [1912:1956] ProfileMgrMan: ReceiveMessage with msg id 262148 2013/12/05 16:20:17.226 [1912:1956] CProfileMgrManPlugin::ReceiveMessage: exit 2013/12/05 16:20:17.226 [1912:1956] AVMan: Entering ReceiveMessage with msg id 262148 2013/12/05 16:20:17.226 [1912:1956] AVMan: Leaving ReceiveMessage 2013/12/05 16:20:17.226 [1912:1956] LUMan: Entering ReceiveMessage with id 0x40004 2013/12/05 16:20:17.226 [1912:1956] AtpiMan: Entering ReceiveMessage with msg id 262148 2013/12/05 16:20:17.226 [1912:1956] AtpiMan: Leaving ReceiveMessage 2013/12/05 16:20:17.226 [1912:1956] BashMan: Entering ReceiveMessage with msg id 262148 2013/12/05 16:20:17.226 [1912:1956] BashMan: Leaving ReceiveMessage 2013/12/05 16:20:17.226 [1912:1956] CidsMan: Entering ReceiveMessage with msg id 262148 2013/12/05 16:20:17.226 [1912:1956] CidsMan: Leaving ReceiveMessage 2013/12/05 16:20:17.226 [1912:1956] RebootMgrMan: Entering ReceiveMessage with msg id 262148 2013/12/05 16:20:17.226 [1912:1956] RebootMgrMan: Leaving ReceiveMessage 2013/12/05 16:20:17.226 [1912:1956] RepMgtMan: Entering ReceiveMessage with msg id 262148 2013/12/05 16:20:17.226 [1912:1956] RepMgtMan: Leaving ReceiveMessage 2013/12/05 16:20:17.226 [1912:1956] SubmissionsMan: Entering ReceiveMessage with msg id 262148 2013/12/05 16:20:17.226 [1912:1956] SubmissionsMan: Leaving ReceiveMessage 2013/12/05 16:20:17.242 [1912:1956] Lock held for 94ms 2013/12/05 16:20:17.242 [1912:1956] Sylink is created 2013/12/05 16:20:17.242 [1912:1956] InitACS , HI result passed to Location sensor is 4 2013/12/05 16:20:17.257 [1912:1956] AutoLocationRunningEvent existed. 2013/12/05 16:20:17.257 [1912:1956] AutoLocationFrequencyUpdateEvent existed. 2013/12/05 16:20:17.257 [1912:1956] hAutoLocationSwitchEvent existed. 2013/12/05 16:20:17.257 [1912:1956] initial HI checking delay is :60000 2013/12/05 16:20:17.257 [1912:1956] HI: Script reader set default path to 2013/12/05 16:20:17.273 [1912:1956] HI: GetNewDefsNotifyFile C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Data\Definitions\HIDefs\newdefs-trigger\trigger.dat 2013/12/05 16:20:17.273 [1912:1956] HI: DefUtils is initialized. 2013/12/05 16:20:17.273 [1912:1956] HI: Initialize HI Content flag file change event successfully. 2013/12/05 16:20:17.273 [1912:1956] HI: HI Engine current grace period status 0 2013/12/05 16:20:17.273 [1912:1956] HI: ResetHIResult set HI result to HI_CHECK_DISBALED since HI is disabled. 2013/12/05 16:20:17.273 [1912:1956] HI: Use new HI config under current location, reset to default. HI Trigger Type: 1, HI Timer 120 2013/12/05 16:20:17.273 [1912:1956] HI: init set HI result to HI_CHECK_DISBALED since HI is disabled. 2013/12/05 16:20:17.273 [1912:1956] HI: set HI result to HI_CHECK_DISBALED. 2013/12/05 16:20:17.273 [1912:1956] HI: Init HI Engine done. 2013/12/05 16:20:17.273 [1912:1956] StartEngine: reason=Initialize. 2013/12/05 16:20:17.289 [1912:2028] LUMan: Entering ReceiveMessage with id 0x6860006 2013/12/05 16:20:17.289 [1912:2028] LUMan: Entering PolicyUpdateCallback 2013/12/05 16:20:17.289 [1912:2028] LuMan: LueTim is not ready, will retry later. 2013/12/05 16:20:17.289 [1912:2028] Smc: LicenseNotificationFunction() - has notified LuMan that our license has been updated 2013/12/05 16:20:17.413 [1912:1956] TeeferOpen Mem=768 NIC={C0752C5B-7D8F-417D-B27D-478997F68D64}...2013/12/05 16:20:17.429 [1912:1956] Success 2013/12/05 16:20:17.429 [1912:1956] TSE is located at: C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\ 2013/12/05 16:20:17.429 [1912:1956] TSE extended debugging is turned off. Flag = 0 2013/12/05 16:20:17.429 [1912:1956] D2D connection optimization mode is open by default 2013/12/05 16:20:17.476 [1912:1008] Auto location ThreadID = 1008 2013/12/05 16:20:25.931 [1912:1956] TSE Smart Gateway is turned on 2013/12/05 16:20:25.931 [1912:1956] TSE started. 2013/12/05 16:20:25.993 [1912:1956] StartTridentEngine : Apply new config into profile in location Default. 2013/12/05 16:20:25.993 [1912:1956] CGuiControl:Snac is enabled? 0 2013/12/05 16:20:25.993 [1912:1956] strLocation after switch to appointedDefault 2013/12/05 16:20:25.993 [1912:1956] The best location need to be switch is: Default 2013/12/05 16:20:25.993 [1912:1956] SetCurLocationID=Default 2013/12/05 16:20:27.007 [1912:1956] CProfileMgrManPlugin::notificationOfNewConfig: enter 2013/12/05 16:20:27.007 [1912:1956] CProfileMgrManPlugin::processNewProfile: enter 2013/12/05 16:20:27.023 [1912:1956] Applied profile successfully 2013/12/05 16:20:27.023 [1912:1956] CProfileMgrManPlugin::processNewProfile: exit 2013/12/05 16:20:27.023 [1912:1956] CProfileMgrManPlugin::notificationOfNewConfig: exit 2013/12/05 16:20:27.023 [1912:892] TridentLicense is missing in the current location 2013/12/05 16:20:27.023 [1912:892] The current location is client control(poweruser) mode, will look up the server profile to check SNAC license 2013/12/05 16:20:27.023 [1912:892] SNAC is NOT licensed 2013/12/05 16:20:27.023 [1912:892] NAP is not enabled. GetNAPEnforcerEnabled failed! 2013/12/05 16:20:27.023 [1912:892] AltCommMethodWithEnforcer is not enabled. GetDHCPGWEnforcerUseAltCommWithEnforcerEnabled failed! 2013/12/05 16:20:27.023 [1912:892] is 2013/12/05 16:20:27.023 [1912:892] pPeer2Peer is NULL in GetP2PProfileChangeMsgData. Set all P2P parameters to 0. 2013/12/05 16:20:27.023 [1912:892] runtime->fConnected is FALSE. Skip to write P2P_PROFILE_CHANGE_MSG into pipe. 2013/12/05 16:20:27.023 [1912:1956] NotifyNewProfileApplied: calling plugin for new policy 2013/12/05 16:20:27.023 [1912:1956] CProfileMgrManPlugin::notificationOfConfigApplied: enter 2013/12/05 16:20:27.023 [1912:1956] CProfileMgrManPlugin::notificationOfConfigApplied: exit 2013/12/05 16:20:27.023 [1912:1956] AVMan: Entering PolicyUpdateCallback 2013/12/05 16:20:27.054 [1912:1956] AVMan: policy retrieved 2013/12/05 16:20:27.054 [1912:1956] AVMan: in ParsePolicyXmlImpl 2013/12/05 16:20:27.054 [1912:1956] AVMan: in ParsePolicyXmlViaTempFile 2013/12/05 16:20:27.054 [1912:1956] AVMan: in ParsePolicyXmlToFile 2013/12/05 16:20:27.054 [1912:1956] AVMan: Leaving PolicyUpdateCallback 2013/12/05 16:20:27.054 [1912:1956] GUProxy: PolicyUpdateCallback called 2013/12/05 16:20:27.070 [1912:1956] GetAttributeValue: element path is invalid 2013/12/05 16:20:27.070 [1912:1956] GUProxy - UseMasterClient [0] 2013/12/05 16:20:27.070 [1912:1956] GUProxy - Is this computer a GUP Server? [0] 2013/12/05 16:20:27.070 [1912:1956] LUMan: Entering PolicyUpdateCallback 2013/12/05 16:20:27.070 [1912:1956] LuMan: LueTim is not ready, will retry later. 2013/12/05 16:20:27.070 [1912:1956] NotifyNewProfileApplied: calling plugin for new policy done. 2013/12/05 16:20:27.085 [1912:1956] HI: Use new HI config under current location, reset to default. HI Trigger Type: 1, HI Timer 120 2013/12/05 16:20:27.070 [1912:1956] CWindowsFirewallManager::GetInstance()->UseNewConfig(); 2013/12/05 16:20:27.070 [1912:1956] New location is Default 2013/12/05 16:20:27.070 [1912:1956] Third party is Disabled 2013/12/05 16:20:27.070 [1912:1956] SPC Content Source is Enabled 2013/12/05 16:20:27.070 [1912:1988] CProfileMgrManPlugin::Enable: enter 2013/12/05 16:20:27.070 [1912:1988] enable=true 2013/12/05 16:20:27.070 [1912:1988] CProfileMgrManPlugin::Enable: exit 2013/12/05 16:20:27.070 [1912:1988] AVMan: Entering Enable -- enable=true 2013/12/05 16:20:27.070 [1912:1988] AVMan: Entering ExportUseNewConfig 2013/12/05 16:20:27.070 [1912:1988] AVMan: Entering UseNewConfig() 2013/12/05 16:20:27.070 [1912:1988] AVMan: Leaving UseNewConfig() 2013/12/05 16:20:27.070 [1912:1988] AVMan: Leaving ExportUseNewConfig 2013/12/05 16:20:27.070 [1912:1988] AVMan: Disabled event forwarding. 2013/12/05 16:20:27.070 [1912:1988] GUProxy: Enable called. 2013/12/05 16:20:27.070 [1912:1988] GUProxy: Enable 2013/12/05 16:20:27.070 [1912:1988] AtpiMan: Entering Enable -- enable=true 2013/12/05 16:20:27.070 [1912:1988] BashMan: Entering Enable -- enable=true 2013/12/05 16:20:27.070 [1912:1988] CidsMan: Entering Enable -- enable=true 2013/12/05 16:20:27.070 [1912:1988] RebootMgrMan: Entering Enable -- enable=true 2013/12/05 16:20:27.070 [1912:1988] RepMgtMan: Entering Enable -- enable=true 2013/12/05 16:20:27.070 [1912:1988] SubmissionsMan: Entering Enable -- enable=true 2013/12/05 16:20:27.085 [1912:1988] DevMan: ========== Device Manage Received the New Rule. ========== 2013/12/05 16:20:27.085 [1912:1956] changing heartbeat for location Default 2013/12/05 16:20:27.085 [1912:1956] changed heartbeat status to 1 2013/12/05 16:20:27.101 [1912:1956] Start TridentEngine...145517 2013/12/05 16:20:27.101 [1912:1008] Auto location: Trident Started = 1 2013/12/05 16:20:27.101 [1912:1008] Ready to do Autolocation. First Time =1 2013/12/05 16:20:27.101 [1912:1008] Snac HiTest:0, 0 2013/12/05 16:20:27.101 [1912:1008] First Time AutoLocation. Must notify GUI 2013/12/05 16:20:27.101 [1912:1008] Location changed in Autolocation: Notify GUI and apply new config into profile in location Default. 2013/12/05 16:20:27.101 [1912:1008] Sending Location Change to GUI 2013/12/05 16:20:27.101 [1912:1008] Silent mode has been disabled. 2013/12/05 16:20:27.101 [1912:1008] CGuiControl::ChangeLocation Location:Default 2013/12/05 16:20:27.117 [1912:892] pipe listening 997 2013/12/05 16:20:27.117 [1912:1956] AutoLocationRunningEvent existed. 2013/12/05 16:20:27.117 [1912:1956] AutoLocationFrequencyUpdateEvent existed. 2013/12/05 16:20:27.117 [1912:1956] hAutoLocationSwitchEvent existed. 2013/12/05 16:20:27.117 [1912:1988] HI: Use new HI config under current location, reset to default. HI Trigger Type: 1, HI Timer 120 2013/12/05 16:20:27.117 [1912:1988] changing heartbeat for location Default 2013/12/05 16:20:27.117 [1912:1988] changed heartbeat status to 1 2013/12/05 16:20:27.117 [1912:2068] ***SMC*** Enable flag = 0 2013/12/05 16:20:27.117 [1912:2076] ***SMC*** Enable flag = 0 2013/12/05 16:20:27.148 [1912:1956] CWscFwHandler: update status time out-2147483638 2013/12/05 16:20:27.148 [1912:1988] CGuiControl::SynchronousUseNewConfig Location:Default 2013/12/05 16:20:27.475 [1912:1956] User: of domain: logs off 2013/12/05 16:20:27.475 [1912:1956] Import Config File !! 2013/12/05 16:20:27.460 [1912:1956] GetUserAndDomain in smc: Trying to get the User/Domain 2013/12/05 16:20:27.475 [1912:1956] Start SyLink... 2013/12/05 16:20:27.522 [1912:1956] Succeed to set the managed status to SylinkStats 2013/12/05 16:20:27.522 [1912:1956] Unknown server in sylink.xml, try previous config sylinkEx.bak 2013/12/05 16:20:27.522 [1912:1956] Lock held for 46ms 2013/12/05 16:20:27.522 [1912:1956] start sylink failed: ERROR_SERVER_UNKNOWN 2013/12/05 16:20:27.538 [1912:1956] Calling Command Processor again. 2013/12/05 16:20:27.538 [1912:1988] Lock acquire took 62ms 2013/12/05 16:20:27.538 [1912:1008] Lock acquire took 47ms 2013/12/05 16:20:27.694 [1912:1956] QuerySysPlantStatus: Entering 2013/12/05 16:20:27.694 [1912:1988] CGuiControl:Snac is enabled? 0 2013/12/05 16:20:27.694 [1912:1988] SNAC is NOT licensed, changing the SNAC service's startup type 2013/12/05 16:20:27.709 [1912:1956] QuerySysPlantStatus: SysPlant startType is START in registry 2013/12/05 16:20:27.709 [1912:1956] QuerySysPlantStatus: SysPlant driver is running 2013/12/05 16:20:27.709 [1912:1956] QuerySysPlantStatus: Exiting 2013/12/05 16:20:27.709 [1912:1956] using server-configured log file size of 524288 2013/12/05 16:20:27.709 [1912:1956] set log file size to 524288 2013/12/05 16:20:27.709 [1912:1956] starting 2013/12/05 16:20:27.709 [1912:1956] completed. Array enties: 0 2013/12/05 16:20:27.709 [1912:1956] creating tech extension CommonMan 2013/12/05 16:20:27.709 [1912:1956] using server-configured log file size of 524288 2013/12/05 16:20:27.709 [1912:1956] set log file size to 524288 2013/12/05 16:20:27.709 [1912:1956] starting 2013/12/05 16:20:27.709 [1912:1956] completed. Array enties: 0 2013/12/05 16:20:27.709 [1912:1956] creating tech extension LocalRep 2013/12/05 16:20:27.709 [1912:1956] using server-configured log file size of 524288 2013/12/05 16:20:27.709 [1912:1956] set log file size to 524288 2013/12/05 16:20:27.709 [1912:1956] starting 2013/12/05 16:20:27.709 [1912:1956] completed. Array enties: 0 2013/12/05 16:20:27.709 [1912:1956] creating tech extension AVMan 2013/12/05 16:20:27.709 [1912:1956] using server-configured log file size of 524288 2013/12/05 16:20:27.709 [1912:1956] set log file size to 524288 2013/12/05 16:20:27.709 [1912:1956] starting 2013/12/05 16:20:27.709 [1912:1956] completed. Array enties: 0 2013/12/05 16:20:27.709 [1912:1956] creating tech extension GUP 2013/12/05 16:20:27.709 [1912:1956] using server-configured log file size of 524288 2013/12/05 16:20:27.709 [1912:1956] set log file size to 524288 2013/12/05 16:20:27.709 [1912:1956] starting 2013/12/05 16:20:27.709 [1912:1956] completed. Array enties: 0 2013/12/05 16:20:27.709 [1912:1956] creating tech extension LUMan 2013/12/05 16:20:27.709 [1912:1956] using server-configured log file size of 524288 2013/12/05 16:20:27.709 [1912:1956] set log file size to 524288 2013/12/05 16:20:27.709 [1912:1956] starting 2013/12/05 16:20:27.709 [1912:1956] completed. Array enties: 0 2013/12/05 16:20:27.709 [1912:1956] creating tech extension SfMan 2013/12/05 16:20:27.709 [1912:1956] using server-configured log file size of 524288 2013/12/05 16:20:27.709 [1912:1956] set log file size to 524288 2013/12/05 16:20:27.709 [1912:1956] starting 2013/12/05 16:20:27.709 [1912:1956] completed. Array enties: 0 2013/12/05 16:20:27.709 [1912:1956] creating tech extension DevMan 2013/12/05 16:20:27.709 [1912:1956] using server-configured log file size of 524288 2013/12/05 16:20:27.709 [1912:1956] set log file size to 524288 2013/12/05 16:20:27.709 [1912:1956] starting 2013/12/05 16:20:27.709 [1912:1956] completed. Array enties: 0 2013/12/05 16:20:27.709 [1912:1956] creating tech extension AtpiMan 2013/12/05 16:20:27.709 [1912:1956] using server-configured log file size of 524288 2013/12/05 16:20:27.709 [1912:1956] set log file size to 524288 2013/12/05 16:20:27.709 [1912:1956] starting 2013/12/05 16:20:27.709 [1912:1956] completed. Array enties: 0 2013/12/05 16:20:27.709 [1912:1956] creating tech extension BashMan 2013/12/05 16:20:27.709 [1912:1956] using server-configured log file size of 524288 2013/12/05 16:20:27.709 [1912:1956] set log file size to 524288 2013/12/05 16:20:27.709 [1912:1956] starting 2013/12/05 16:20:27.709 [1912:1956] completed. Array enties: 0 2013/12/05 16:20:27.709 [1912:1956] creating tech extension CidsMan 2013/12/05 16:20:27.709 [1912:1956] using server-configured log file size of 524288 2013/12/05 16:20:27.709 [1912:1956] set log file size to 524288 2013/12/05 16:20:27.709 [1912:1956] starting 2013/12/05 16:20:27.709 [1912:1956] completed. Array enties: 0 2013/12/05 16:20:27.709 [1912:1956] creating tech extension RebootMgrMan 2013/12/05 16:20:27.709 [1912:1956] using server-configured log file size of 524288 2013/12/05 16:20:27.709 [1912:1956] set log file size to 524288 2013/12/05 16:20:27.709 [1912:1956] starting 2013/12/05 16:20:27.709 [1912:1956] completed. Array enties: 0 2013/12/05 16:20:27.709 [1912:1956] creating tech extension RepMgtMan 2013/12/05 16:20:27.709 [1912:1956] using server-configured log file size of 524288 2013/12/05 16:20:27.709 [1912:1956] set log file size to 524288 2013/12/05 16:20:27.709 [1912:1956] starting 2013/12/05 16:20:27.709 [1912:1956] completed. Array enties: 0 2013/12/05 16:20:27.709 [1912:1956] creating tech extension SubmissionsMan 2013/12/05 16:20:27.709 [1912:1956] using server-configured log file size of 524288 2013/12/05 16:20:27.709 [1912:1956] set log file size to 524288 2013/12/05 16:20:27.709 [1912:1956] starting 2013/12/05 16:20:27.709 [1912:1956] completed. Array enties: 0 2013/12/05 16:20:27.709 [1912:1956] creating tech extension NacMan 2013/12/05 16:20:27.709 [1912:1956] Windows Version info: Operating System: Windows 7 (6.1.7601 Service Pack 1) 2013/12/05 16:20:27.709 [1912:1956] Network info: No.0 "Local Area Connection" 00-0c-29-b9-a7-63 "Intel(R) PRO/1000 MT Network Connection" 10.2.2.223 2013/12/05 16:20:27.725 [1912:1956] Application List: 0) AAI Information Assurance Updates 1) Microsoft .NET Framework 4 Client Profile 2) Microsoft .NET Framework 4 Extended 3) Microsoft .NET Framework 4 Extended 4) Security Update for Microsoft .NET Framework 4 Extended (KB2487367) 5) Security Update for Microsoft .NET Framework 4 Extended (KB2656351) 6) Security Update for Microsoft .NET Framework 4 Extended (KB2736428) 7) Security Update for Microsoft .NET Framework 4 Extended (KB2742595) 8) EMET 4.0 9) Microsoft .NET Framework 4 Client Profile 10) Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121) 11) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351) 12) Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449) 13) Security Update for Microsoft .NET Framework 4 Client Profile (KB2736428) 14) Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019) 15) Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595) 16) Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642) 17) Security Update for Microsoft .NET Framework 4 Client Profile (KB2804576) 18) Security Update for Microsoft .NET Framework 4 Client Profile (KB2835393) 19) Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628v2) 20) McAfee Agent 21) Microsoft Baseline Security Analyzer 2.1 22) Symantec Endpoint Protection 2013/12/05 16:20:27.725 [1912:1956] Network Connection Properties: 2013/12/05 16:20:27.725 [1912:1956] initial service success 2013/12/05 16:20:27.772 [1912:1008] Snac HiTest:0, 0 2013/12/05 16:20:27.787 [1912:1956] CProfileMgrManPlugin::ReceiveMessage: enter 2013/12/05 16:20:27.787 [1912:1956] ProfileMgrMan: ReceiveMessage with msg id 458753 2013/12/05 16:20:27.787 [1912:1956] CProfileMgrManPlugin::ReceiveMessage: exit 2013/12/05 16:20:27.787 [1912:1956] AVMan: Entering ReceiveMessage with msg id 458753 2013/12/05 16:20:27.787 [1912:1956] AVMan: Disabled event forwarding. 2013/12/05 16:20:27.787 [1912:1956] AVMan: Leaving ReceiveMessage 2013/12/05 16:20:27.787 [1912:1956] LUMan: Entering ReceiveMessage with id 0x70001 2013/12/05 16:20:27.787 [1912:1956] AtpiMan: Entering ReceiveMessage with msg id 458753 2013/12/05 16:20:27.787 [1912:1956] AtpiMan: Leaving ReceiveMessage 2013/12/05 16:20:27.787 [1912:1956] BashMan: Entering ReceiveMessage with msg id 458753 2013/12/05 16:20:27.787 [1912:1956] BashMan: Leaving ReceiveMessage 2013/12/05 16:20:27.787 [1912:1956] CidsMan: Entering ReceiveMessage with msg id 458753 2013/12/05 16:20:27.787 [1912:1956] CidsMan: Leaving ReceiveMessage 2013/12/05 16:20:27.787 [1912:1956] RebootMgrMan: Entering ReceiveMessage with msg id 458753 2013/12/05 16:20:27.787 [1912:1956] RebootMgrMan: Leaving ReceiveMessage 2013/12/05 16:20:27.787 [1912:1956] RepMgtMan: Entering ReceiveMessage with msg id 458753 2013/12/05 16:20:27.787 [1912:1956] RepMgtMan: Leaving ReceiveMessage 2013/12/05 16:20:27.787 [1912:1956] SubmissionsMan: Entering ReceiveMessage with msg id 458753 2013/12/05 16:20:27.787 [1912:1956] SubmissionsMan: Leaving ReceiveMessage 2013/12/05 16:20:27.787 [1912:1956] : Failed to open ccSettings key UserInformation. (Probably because it doesn't exist) Error: 2147483904 2013/12/05 16:20:27.803 [1912:2120] CWscFwHandler: update status time out-2147483638 2013/12/05 16:20:28.723 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:20:29.753 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:20:30.580 [1912:2160] ***SMC*** Enable flag = 0 2013/12/05 16:20:31.609 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:20:32.639 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:20:33.669 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:20:34.698 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:20:34.698 [1912:1988] m_nAttackCount = 39 2013/12/05 16:20:34.698 [1912:1988] Error: Failed to send balloon notification packet through the ccIPC channel 2013/12/05 16:20:35.728 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:20:36.773 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:20:37.834 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:20:39.066 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:20:40.143 [1912:2464] GetUserAndDomain in smc: Trying to get the User/Domain 2013/12/05 16:20:40.158 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:20:40.158 [1912:1988] m_nAttackCount = 39 2013/12/05 16:20:40.314 [1912:2464] User: of domain: logs off 2013/12/05 16:20:40.907 [1912:2520] LUMan: Entering PolicyUpdateCallback 2013/12/05 16:20:40.907 [1912:2520] LUMan: Entering SendConfig 2013/12/05 16:20:41.188 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:20:41.921 [1912:1956] Starting SMC GUI 2013/12/05 16:20:41.921 [1912:1956] GetUserAndDomain in smc: Trying to get the User/Domain 2013/12/05 16:20:41.921 [1912:1956] User: of domain: logs off 2013/12/05 16:20:41.921 [1912:1956] Enterprise version, Build 2015!!! 2013/12/05 16:20:41.921 [1912:1956] user_id = / 2013/12/05 16:20:42.046 [1912:2520] LUMan: Entering RegisterCallbacks 2013/12/05 16:20:42.046 [1912:2520] Registred moniker {535CB6A4-441F-4e8a-A897-804CD859100E} removed callback function 2013/12/05 16:20:42.046 [1912:2520] LUMan: RegisterCallbacks() - NULLed internal content channel callbacks for {535CB6A4-441F-4e8a-A897-804CD859100E} 2013/12/05 16:20:42.046 [1912:2520] Registred moniker {55DE35DC-862A-44c9-8A2B-3EF451665D0A} removed callback function 2013/12/05 16:20:42.046 [1912:2520] LUMan: RegisterCallbacks() - NULLed internal content channel callbacks for {55DE35DC-862A-44c9-8A2B-3EF451665D0A} 2013/12/05 16:20:42.046 [1912:2520] Registred moniker {EDBD3BD0-8395-4d4d-BAC9-19DD32EF4758} removed callback function 2013/12/05 16:20:42.046 [1912:2520] LUMan: RegisterCallbacks() - NULLed internal content channel callbacks for {EDBD3BD0-8395-4d4d-BAC9-19DD32EF4758} 2013/12/05 16:20:42.046 [1912:2520] Registred moniker {B6DC6C8F-46FA-40c7-A806-B669BE1D2D19} removed callback function 2013/12/05 16:20:42.046 [1912:2520] LUMan: RegisterCallbacks() - NULLed internal content channel callbacks for {B6DC6C8F-46FA-40c7-A806-B669BE1D2D19} 2013/12/05 16:20:42.046 [1912:2520] Registred moniker {810D5A61-809F-49c2-BD75-177F0647D2BA} removed callback function 2013/12/05 16:20:42.046 [1912:2520] LUMan: RegisterCallbacks() - NULLed internal content channel callbacks for {810D5A61-809F-49c2-BD75-177F0647D2BA} 2013/12/05 16:20:42.046 [1912:2520] Registred moniker {263395A0-D3D8-4be4-80B5-202C94EF4AA0} removed callback function 2013/12/05 16:20:42.046 [1912:2520] LUMan: RegisterCallbacks() - NULLed internal content channel callbacks for {263395A0-D3D8-4be4-80B5-202C94EF4AA0} 2013/12/05 16:20:42.046 [1912:2520] Registred moniker {D6AEBC07-D833-485f-9723-6C908D37F806} removed callback function 2013/12/05 16:20:42.046 [1912:2520] LUMan: RegisterCallbacks() - NULLed internal content channel callbacks for {D6AEBC07-D833-485f-9723-6C908D37F806} 2013/12/05 16:20:42.046 [1912:2520] Registred moniker {E8827B4A-4F58-4dea-8C93-07B32A63D1C5} removed callback function 2013/12/05 16:20:42.046 [1912:2520] LUMan: RegisterCallbacks() - NULLed internal content channel callbacks for {E8827B4A-4F58-4dea-8C93-07B32A63D1C5} 2013/12/05 16:20:42.046 [1912:2520] Registred moniker {50B092DE-40D5-4724-971B-D3D90E9EE987} removed callback function 2013/12/05 16:20:42.046 [1912:2520] LUMan: RegisterCallbacks() - NULLed internal content channel callbacks for {50B092DE-40D5-4724-971B-D3D90E9EE987} 2013/12/05 16:20:42.217 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:20:44.058 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:20:45.088 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:20:46.117 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:20:47.147 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:20:48.114 [1912:1956] GetUserAndDomain in smc: Trying to get the User/Domain 2013/12/05 16:20:48.114 [1912:1956] user_id = / 2013/12/05 16:20:48.114 [1912:1956] User: of domain: logs off 2013/12/05 16:20:48.177 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:20:49.206 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:20:50.236 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:20:51.265 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:20:52.435 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:20:53.465 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:20:54.838 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:20:56.023 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:20:57.147 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:20:58.285 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:20:59.237 [1912:1956] GetUserAndDomain in smc: Trying to get the User/Domain 2013/12/05 16:20:59.565 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:20:59.830 [1912:1956] user_id = ETPC1/aai_admin 2013/12/05 16:21:00.391 [1912:1956] +++++++++++++++win2000 hostName=etpc1,DomainName= 2013/12/05 16:21:00.391 [1912:1956] Instruction Address: GetDomainName=6FC88F2F 2013/12/05 16:21:00.391 [1912:1956] Computer Network Identity (Domain/Host)=WORKGROUP/etpc1 2013/12/05 16:21:00.407 [1912:1956] Lock held for 577ms 2013/12/05 16:21:00.407 [1912:1956] Set the userid in Sylink,domain name: ETPC1 User Name: aai_admin 2013/12/05 16:21:00.750 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:01.842 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:02.934 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:04.198 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:05.227 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:06.413 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:07.443 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:08.488 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:09.517 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:10.547 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:11.577 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:12.637 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:13.667 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:14.697 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:15.726 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:16.771 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:17.801 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:18.831 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:19.860 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:20.890 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:22.138 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:23.167 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:24.259 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:25.289 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:26.319 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:27.348 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:27.535 [1912:880] RepMgtMan: OnTimInitializationComplete called. 2013/12/05 16:21:28.440 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:29.485 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:30.671 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:31.701 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:32.730 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:33.760 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:34.789 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:35.819 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:36.849 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:37.878 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:38.908 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:39.937 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:40.967 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:41.997 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:43.026 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:44.056 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:45.195 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:46.224 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:47.254 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:48.283 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:49.313 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:50.343 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:51.372 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:52.402 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:53.432 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:54.461 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:55.491 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:56.520 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:57.550 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:58.595 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:21:59.625 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:22:00.654 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:22:01.684 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:22:02.714 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:22:03.743 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:22:04.773 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:22:05.802 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:22:06.832 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:22:07.862 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:22:08.891 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:22:09.921 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:22:10.966 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:22:11.996 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:22:13.025 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:22:14.055 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:22:15.084 [1912:1988] CWscFwHandler: update status time out-2147483638 2013/12/05 16:24:11.289 [1912:2604] SMCGui - 2468: Creating garbage collection Instance 2013/12/05 16:24:11.336 [1912:2604] Snac HiTest:0, 0 2013/12/05 16:24:11.336 [1912:1956] Starting SMC GUI 2013/12/05 16:24:11.336 [1912:1956] GetUserAndDomain in smc: Trying to get the User/Domain 2013/12/05 16:24:11.351 [1912:1956] Enterprise version, Build 2015!!! 2013/12/05 16:24:11.351 [1912:1956] user_id = ETPC1/aai_admin 2013/12/05 16:24:11.367 [1912:2604] SMCGui - 2468: CSmcDlg::Profile() - ImportFromDm() returned... 2013/12/05 16:24:11.367 [1912:2604] SMCGui - 2468: CSmcDlg::UpdateProfileInfoN/A: 2013/12/05 16:24:12.022 [1912:2604] Saving SMC State 2013/12/05 16:24:12.022 [1912:2604] chmod on file C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Data\State\SerState.dat to read/write. 2013/12/05 16:24:52.567 [1912:1956] Lock held for 6568ms 2013/12/05 16:24:52.582 [1912:1008] Lock acquire took 6365ms 2013/12/05 16:24:52.598 [1912:1988] Lock acquire took 296ms 2013/12/05 16:26:05.622 [1912:2076] ***SMC*** Enable flag = 0 2013/12/05 16:28:25.554 [1928:2016] Enterprise version, Build 2015!!! 2013/12/05 16:28:25.601 [1912:1956] LogonUserImpersonator: on C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\Smc.exe , 2013/12/05 16:28:25.601 [1912:1956] LogonUserImpersonator:Cannot open process 0, err = 87 2013/12/05 16:28:25.601 [1912:1956] LogonUserImpersonator:Cannot open process 4, err = 5 2013/12/05 16:28:25.601 [1912:1956] LogonUserImpersonator:ImpersonateThisProcess on 000004C4 2013/12/05 16:28:25.897 [1912:1956] Advanced Rule: Apply new config into profile in location Default. 2013/12/05 16:28:25.913 [1912:1956] strLocation before switch Default 2013/12/05 16:28:25.913 [1912:1956] strLocation after switch Default 2013/12/05 16:28:25.913 [1912:1956] The best location need to be switch is: Default 2013/12/05 16:28:26.006 [1912:1956] chmod on file C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Data\Config\Cltdef.dat to read/write. 2013/12/05 16:28:26.240 [1912:1956] SetCurLocationID=Default 2013/12/05 16:28:26.240 [1912:1956] chmod on file C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Data\Config\Default.dat to read/write. 2013/12/05 16:28:26.490 [1912:1956] CProfileMgrManPlugin::notificationOfNewConfig: enter 2013/12/05 16:28:26.490 [1912:1956] CProfileMgrManPlugin::processNewProfile: enter 2013/12/05 16:28:26.505 [1912:1956] Applied profile successfully 2013/12/05 16:28:26.505 [1912:1956] CProfileMgrManPlugin::processNewProfile: exit 2013/12/05 16:28:26.505 [1912:1956] CProfileMgrManPlugin::notificationOfNewConfig: exit 2013/12/05 16:28:26.505 [1912:892] TridentLicense is missing in the current location 2013/12/05 16:28:26.505 [1912:892] The current location is client control(poweruser) mode, will look up the server profile to check SNAC license 2013/12/05 16:28:26.505 [1912:892] SNAC is NOT licensed 2013/12/05 16:28:26.505 [1912:892] NAP is not enabled. GetNAPEnforcerEnabled failed! 2013/12/05 16:28:26.505 [1912:892] AltCommMethodWithEnforcer is not enabled. GetDHCPGWEnforcerUseAltCommWithEnforcerEnabled failed! 2013/12/05 16:28:26.505 [1912:892] is 2013/12/05 16:28:26.505 [1912:892] pPeer2Peer is NULL in GetP2PProfileChangeMsgData. Set all P2P parameters to 0. 2013/12/05 16:28:26.505 [1912:892] runtime->fConnected is FALSE. Skip to write P2P_PROFILE_CHANGE_MSG into pipe. 2013/12/05 16:28:26.505 [1912:1956] NotifyNewProfileApplied: calling plugin for new policy 2013/12/05 16:28:26.505 [1912:1956] CProfileMgrManPlugin::notificationOfConfigApplied: enter 2013/12/05 16:28:26.505 [1912:1956] CProfileMgrManPlugin::notificationOfConfigApplied: exit 2013/12/05 16:28:26.505 [1912:1956] AVMan: Entering PolicyUpdateCallback 2013/12/05 16:28:26.521 [1912:1956] AVMan: policy retrieved 2013/12/05 16:28:26.521 [1912:1956] AVMan: in ParsePolicyXmlImpl 2013/12/05 16:28:26.521 [1912:1956] AVMan: in ParsePolicyXmlViaTempFile 2013/12/05 16:28:26.521 [1912:1956] AVMan: in ParsePolicyXmlToFile 2013/12/05 16:28:26.552 [1912:1956] AVMan: Leaving PolicyUpdateCallback 2013/12/05 16:28:26.552 [1912:1956] GUProxy: PolicyUpdateCallback called 2013/12/05 16:28:26.599 [1912:1956] GetAttributeValue: element path is invalid 2013/12/05 16:28:26.599 [1912:1956] GUProxy - UseMasterClient [0] 2013/12/05 16:28:26.599 [1912:1956] GUProxy - Is this computer a GUP Server? [0] 2013/12/05 16:28:26.599 [1912:1956] LUMan: Entering PolicyUpdateCallback 2013/12/05 16:28:26.615 [1912:1956] LUMan: Entering SendConfig 2013/12/05 16:28:28.377 [1912:1956] LUMan: Entering RegisterCallbacks 2013/12/05 16:28:28.377 [1912:1956] Registred NULL callback moniker {535CB6A4-441F-4e8a-A897-804CD859100E} 2013/12/05 16:28:28.377 [1912:1956] LUMan: RegisterCallbacks() - NULLed internal content channel callbacks for {535CB6A4-441F-4e8a-A897-804CD859100E} 2013/12/05 16:28:28.377 [1912:1956] Registred NULL callback moniker {55DE35DC-862A-44c9-8A2B-3EF451665D0A} 2013/12/05 16:28:28.377 [1912:1956] LUMan: RegisterCallbacks() - NULLed internal content channel callbacks for {55DE35DC-862A-44c9-8A2B-3EF451665D0A} 2013/12/05 16:28:28.377 [1912:1956] Registred NULL callback moniker {EDBD3BD0-8395-4d4d-BAC9-19DD32EF4758} 2013/12/05 16:28:28.377 [1912:1956] LUMan: RegisterCallbacks() - NULLed internal content channel callbacks for {EDBD3BD0-8395-4d4d-BAC9-19DD32EF4758} 2013/12/05 16:28:28.377 [1912:1956] Registred NULL callback moniker {B6DC6C8F-46FA-40c7-A806-B669BE1D2D19} 2013/12/05 16:28:28.377 [1912:1956] LUMan: RegisterCallbacks() - NULLed internal content channel callbacks for {B6DC6C8F-46FA-40c7-A806-B669BE1D2D19} 2013/12/05 16:28:28.377 [1912:1956] Registred NULL callback moniker {810D5A61-809F-49c2-BD75-177F0647D2BA} 2013/12/05 16:28:28.377 [1912:1956] LUMan: RegisterCallbacks() - NULLed internal content channel callbacks for {810D5A61-809F-49c2-BD75-177F0647D2BA} 2013/12/05 16:28:28.377 [1912:1956] Registred NULL callback moniker {263395A0-D3D8-4be4-80B5-202C94EF4AA0} 2013/12/05 16:28:28.377 [1912:1956] LUMan: RegisterCallbacks() - NULLed internal content channel callbacks for {263395A0-D3D8-4be4-80B5-202C94EF4AA0} 2013/12/05 16:28:28.377 [1912:1956] Registred NULL callback moniker {D6AEBC07-D833-485f-9723-6C908D37F806} 2013/12/05 16:28:28.377 [1912:1956] LUMan: RegisterCallbacks() - NULLed internal content channel callbacks for {D6AEBC07-D833-485f-9723-6C908D37F806} 2013/12/05 16:28:28.377 [1912:1956] Registred NULL callback moniker {E8827B4A-4F58-4dea-8C93-07B32A63D1C5} 2013/12/05 16:28:28.377 [1912:1956] LUMan: RegisterCallbacks() - NULLed internal content channel callbacks for {E8827B4A-4F58-4dea-8C93-07B32A63D1C5} 2013/12/05 16:28:28.377 [1912:1956] Registred NULL callback moniker {50B092DE-40D5-4724-971B-D3D90E9EE987} 2013/12/05 16:28:28.377 [1912:1956] LUMan: RegisterCallbacks() - NULLed internal content channel callbacks for {50B092DE-40D5-4724-971B-D3D90E9EE987} 2013/12/05 16:28:28.377 [1912:1956] NotifyNewProfileApplied: calling plugin for new policy done. 2013/12/05 16:28:28.377 [1912:1956] CWindowsFirewallManager::GetInstance()->UseNewConfig(); 2013/12/05 16:28:28.377 [1912:1956] New location is Default 2013/12/05 16:28:28.377 [1912:1956] Third party is Disabled 2013/12/05 16:28:28.377 [1912:1956] SPC Content Source is Enabled 2013/12/05 16:28:28.393 [1928:2016] Command line has been handled 2013/12/05 16:28:28.455 [1912:3112] ***SMC*** Enable flag = 0 2013/12/05 16:28:32.262 [3236:804] Enterprise version, Build 2015!!! 2013/12/05 16:28:32.262 [3236:804] Command line has been handled