LiveUpdate Express issue

[Migration User]

 

I'm trying to manually run LiveUpdate and it's not working. It connects to liveupdate.symantecliveupdate.com, downloading catalog files and says product is up-to-date.

Finishes quickly by saying All of the Symantec products installed on your computer are currently up-to-date. Remember to check for new update frequently.

I noticed it only sees LiveUpdate, Symantec Security software and Symantec Security software Update components. It does not show Symantec Enpoint Protection client...

I uninstalled LiveUpdate, removed LiveUpdate folders, reinstalled LUsetup.exe 3.3, repaired SEP installation to re-register with Live Update.....nothing. Same issue.

Followed this link and other similar in vain

http://www.symantec.com/business/support/index?page=content&id=TECH56146

These clients are managed clients and this happens from the internal network (proxy allows access to liveupdate) and also from internet.

Anything wrong with these managed installs, maybe the packages or some LU policy?

Appreciate any help on this!!!

 

 

 

I

 

 

[Migration User]

Try this KB

LiveUpdate incorrectly displays "All Symantec products and components installed on your computer are currently up to date"

[Mithun Sanghavi]

Hello,

The Article you have Followed is for following Products.

 

• Backup Exec -> 12.0 -> 12.5
• Backup Exec -> 12.0
• Backup Exec -> 11d (11.0)
• Backup Exec -> 10.0 -> 10d (10.1) -> 10d (10.1) 5629 SP3
• Backup Exec -> 10.0 -> 10.0 5520 SP2
• Backup Exec -> 10.0 -> 10.0 5484 SP5

 

Try the Steps below:

 

How to Uninstall and Reinstall LiveUpdate When a Symantec Endpoint Protection Manager or Symantec Endpoint Protection Client is Installed

 

http://www.symantec.com/docs/TECH102609

 

NOTE: In these Article, 

 

 

1. Click Start > Settings > Control Panel.
2. Click Add or Remove Programs.
3. Click LiveUpdate.
4. Click Change/Remove.
5. Follow the on-screen instructions to uninstall LiveUpdate.
6. In Windows Explorer, delete the following folders if they are present: 
7. On Windows 2000, XP and 2003:
   C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate
   C:\Program Files\Symantec\LiveUpdate
    
   On Windows Vista, 7 and 2008:
    
    
   C:\ProgramData\Symantec\LiveUpdate\
    
   C:\Users\All Users\Application Data\Symantec\LiveUpdate
8. Install LiveUpdate using LUSETUP.EXE located in the SEP installation files, in one of the following folders:

...CD1\SEPM\ or ...CD1\SEP\

 

--Or-- 

Download the LUSETUP.EXE file from the following Symantec LiveUpdate Web Page. Be sure to download the version of LUSETUP.EXE that is appropriate for your version of Symantec Endpoint Protection.

 

To register SEPM with LiveUpdate (if SEPM installed on the same machine of SEP): 

1. Click Start, then Run.
2. Type cmd, then click OK. This will bring up a command prompt.
3. At the command prompt type cd and the path to lucatalog.exe. By default the command would be: 
   
   cd C:\Program Files\Symantec\Symantec Endpoint Protection Manager\bin
    
4. Type lucatalog.exe -update

Register the SEP Client with LiveUpdate:

1. Click Start > Settings > Control Panel.
2. Click Add or Remove Programs.
3. Click Symantec Endpoint Protection.
4. Click Change.
5. Click Next, select Repair, and click Next again.
6. Click Install.
7. Click Finish.

 

[Migration User]

There must be smth wrong with the catalog file as LU does not show Symantec Endpoint protection client component, AV signatures, IPS and the rest. I'm looking at same version RU6MP2 but installed standalone and all looks fine, LiveUpdate runs without a problem.

 

[Migration User]

Mithun, AravindKM, I think I have tried all above, except for Backup Exec, it's not related.

I have just done a test from the internal network, where I had a policy for clients to get content only from management server or GUP. As soon as I checked also the Use a LiveUpdate server and policy applied on test machine....it worked and showed correctly what kind of signatures needed, components etc. i did not know that I have to check the Use a LiveUpdate server for that to happen....

 

Not planning to use that from internal network, I was just surprised to see it wasn't working. I'm using location awareness for outside LU policy where this setting is enabled. I'll go check and see it's working or not....

[Migration User]

Try this

How to clear out corrupted definitions for a Symantec Protection Center and Symantec Endpoint Protection Client manually

[Migration User]

Correct, I don't recall which build that was changed in, but SEP clients that are not configured to get updates from the Symantec LiveUpdate server will not update any content if you try to manually run LUALL.exe.

The clients have a seperate settings.liveupdate and there are additional switches for running LiveUpdate that will include the necessary content for SEP clients. These switches are not applied if the SEP client is not configured to run LiveUpdate to a Symantec LiveUpdate or internal LiveUpdate server.

[Migration User]

Ok, but I changed manually to another client the reg values - use liveupdateserver - 1 - and seems that I'm not that lucky.

Cleared out definitions, reinstalled LU, repaired SEP ro re-register LU and so on. If I go to http://liveupdate.symantecliveupdate.com it takes me to Norton page, so I suppose it's not a connection issue.

Postin liveupdate log, maybe smth shows up:

 

////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
// Start LuComServer
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
5/20/2011, 19:49:49 GMT -> LuComServer version: 3.3.0.96
5/20/2011, 19:49:49 GMT -> LiveUpdate Language: English
5/20/2011, 19:49:49 GMT -> LuComServer Sequence Number: 20091211
5/20/2011, 19:49:49 GMT -> OS: Windows 2008R2 Standard Edition, Service Pack: 0, Major: 6, Minor: 1, Build: 7600 (64-bit)
5/20/2011, 19:49:49 GMT -> System Language:[0x0409], User Language:[0x0409]
5/20/2011, 19:49:49 GMT -> IE 7 Support
5/20/2011, 19:49:49 GMT -> ComCtl32 version: 6.16
5/20/2011, 19:49:49 GMT -> IP Addresses: fe80::8d27:8807:57a4:93f7%11, fe80::18e4:207c:3f57:1b9b%13, 192.168.228.100, 2001:0:4137:9e76:18e4:207c:3f57:1b9b
5/20/2011, 19:49:49 GMT -> Unable to find the property 'PREFERENCES\REQUIRED_FREE_DISK_SPACE' in settings file; using default: 10485760.
5/20/2011, 19:49:49 GMT -> Opened the product inventory at "C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
5/20/2011, 19:49:49 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
5/20/2011, 19:49:49 GMT -> LiveUpdate flag value for this run is 0
5/20/2011, 19:49:49 GMT -> Unable to find the property 'PREFERENCES\CACHE_LIMIT' in settings file; using default: 1615827660.
5/20/2011, 19:49:49 GMT -> Performing Daffy WelComeText Callback removal.
5/20/2011, 19:49:49 GMT -> Successfully added property PREFERENCES\DAFCALLBACK_REMOVAL to the settings file.
5/20/2011, 19:49:49 GMT -> LuComServer version: 3.3.0.96
5/20/2011, 19:49:49 GMT -> LiveUpdate Language: English
5/20/2011, 19:49:49 GMT -> LuComServer Sequence Number: 20091211
5/20/2011, 19:49:49 GMT -> OS: Windows 2008R2 Standard Edition, Service Pack: 0, Major: 6, Minor: 1, Build: 7600 (64-bit)
5/20/2011, 19:49:49 GMT -> System Language:[0x0409], User Language:[0x0409]
5/20/2011, 19:49:49 GMT -> IE 7 Support
5/20/2011, 19:49:49 GMT -> ComCtl32 version: 6.16
5/20/2011, 19:49:49 GMT -> IP Addresses: fe80::8d27:8807:57a4:93f7%11, fe80::18e4:207c:3f57:1b9b%13, 192.168.228.100, 2001:0:4137:9e76:18e4:207c:3f57:1b9b
5/20/2011, 19:49:49 GMT -> Loading C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
5/20/2011, 19:49:49 GMT -> Only the LiveUpdate command lines were registered in the Product.Inventory.LiveUpdate file.
5/20/2011, 19:49:49 GMT -> Failed to load C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate.
5/20/2011, 19:49:49 GMT -> Opened the product inventory at "C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
5/20/2011, 19:49:49 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
5/20/2011, 19:49:49 GMT -> LiveUpdate flag value for this run is 0
5/20/2011, 19:49:49 GMT -> LuComServer version: 3.3.0.96
5/20/2011, 19:49:49 GMT -> LiveUpdate Language: English
5/20/2011, 19:49:49 GMT -> LuComServer Sequence Number: 20091211
5/20/2011, 19:49:49 GMT -> OS: Windows 2008R2 Standard Edition, Service Pack: 0, Major: 6, Minor: 1, Build: 7600 (64-bit)
5/20/2011, 19:49:49 GMT -> System Language:[0x0409], User Language:[0x0409]
5/20/2011, 19:49:49 GMT -> IE 7 Support
5/20/2011, 19:49:49 GMT -> ComCtl32 version: 6.16
5/20/2011, 19:49:49 GMT -> IP Addresses: fe80::8d27:8807:57a4:93f7%11, fe80::18e4:207c:3f57:1b9b%13, 192.168.228.100, 2001:0:4137:9e76:18e4:207c:3f57:1b9b
5/20/2011, 19:49:49 GMT -> Loading C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
5/20/2011, 19:49:49 GMT -> Only the LiveUpdate command lines were registered in the Product.Inventory.LiveUpdate file.
5/20/2011, 19:49:49 GMT -> Failed to load C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate.
5/20/2011, 19:49:49 GMT -> Opened the product inventory at "C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
5/20/2011, 19:49:49 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
5/20/2011, 19:49:49 GMT -> LiveUpdate flag value for this run is 0
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
// End LuComServer
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////

////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
// Start LuComServer
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
5/20/2011, 19:50:12 GMT -> LuComServer version: 3.3.0.96
5/20/2011, 19:50:12 GMT -> LiveUpdate Language: English
5/20/2011, 19:50:12 GMT -> LuComServer Sequence Number: 20091211
5/20/2011, 19:50:12 GMT -> OS: Windows 2008R2 Standard Edition, Service Pack: 0, Major: 6, Minor: 1, Build: 7600 (64-bit)
5/20/2011, 19:50:12 GMT -> System Language:[0x0409], User Language:[0x0409]
5/20/2011, 19:50:12 GMT -> IE 7 Support
5/20/2011, 19:50:12 GMT -> ComCtl32 version: 6.16
5/20/2011, 19:50:12 GMT -> IP Addresses: fe80::8d27:8807:57a4:93f7%11, fe80::18e4:207c:3f57:1b9b%13, 192.168.228.100, 2001:0:4137:9e76:18e4:207c:3f57:1b9b
5/20/2011, 19:50:12 GMT -> Loading C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
5/20/2011, 19:50:12 GMT -> Only the LiveUpdate command lines were registered in the Product.Inventory.LiveUpdate file.
5/20/2011, 19:50:12 GMT -> Failed to load C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate.
5/20/2011, 19:50:12 GMT -> Opened the product inventory at "C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
5/20/2011, 19:50:12 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
5/20/2011, 19:50:12 GMT -> LiveUpdate flag value for this run is 0
5/20/2011, 19:50:12 GMT -> ProductRegCom/luGroup(PID=3636/TID=3328): Successfully created an instance of an luGroup object!
5/20/2011, 19:50:12 GMT -> ProductRegCom/luGroup(PID=3636/TID=3328): Path for calling process executable is C:\Program Files (x86)\Symantec\LiveUpdate\LUALL.EXE.
5/20/2011, 19:50:12 GMT -> ProductRegCom/luGroup(PID=3636/TID=3328): Destroyed luGroup object.
5/20/2011, 19:50:12 GMT -> Scanning the following file for potentially malicious host entries: C:\Windows\system32\Drivers\etc\hosts
5/20/2011, 19:50:12 GMT -> Scanning the following file for potentially malicious host entries: C:\Windows\system32\Drivers\etc\lmhosts.sam
5/20/2011, 19:50:12 GMT -> LiveUpdate did not find any malicious host entries in any hosts files.
5/20/2011, 19:50:12 GMT -> **** Starting an Express Mode LiveUpdate Session ****
5/20/2011, 19:50:12 GMT -> User Type: Administrator.
5/20/2011, 19:50:14 GMT -> ***********************        Start of New LU Session        ***********************
5/20/2011, 19:50:14 GMT -> EVENT - SESSION START EVENT - The LiveUpdate session is running in Express Mode.
5/20/2011, 19:50:14 GMT -> Check for updates to:  Product: LiveUpdate, Version: 3.3.0.96, Language: English.  Mini-TRI file name: liveupdate_3.3.0.96_english_livetri.zip
5/20/2011, 19:50:14 GMT -> Progress Update: TRYING_HOST: HostName: "liveupdate.symantecliveupdate.com" URL: "http://liveupdate.symantecliveupdate.com" HostNumber: 0
5/20/2011, 19:50:14 GMT -> Progress Update: TRIFILE_DOWNLOAD_START: Number of TRI files: 0 Downloading LiveUpdate catalog file
5/20/2011, 19:50:14 GMT -> LiveUpdate will download the first Mini-TRI file, liveupdate_3.3.0.96_english_livetri.zip
5/20/2011, 19:50:14 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
5/20/2011, 19:50:14 GMT -> Progress Update: PRE_CONNECT: Proxy: "(not-available)" Agent: "Symantec LiveUpdate" AccessType: 0x0      
5/20/2011, 19:50:15 GMT -> Progress Update: CONNECTED: Proxy: "(not-available)" Agent: "zPEl4hsSdis1B2NtCLv2ZrA6B809MXWTQAAAAA" AccessType: 0x0      
5/20/2011, 19:50:15 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantecliveupdate.com/liveupdate_3.3.0.96_english_livetri.zip", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
5/20/2011, 19:50:15 GMT -> Unable to find the property 'PREFERENCES\MAX_LIVETRI_SIZE' in settings file; using default: 1048576.
5/20/2011, 19:50:15 GMT -> HttpSendRequest (status 404): Request failed - File does not exist on the server.
5/20/2011, 19:50:15 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://liveupdate.symantecliveupdate.com/liveupdate_3.3.0.96_english_livetri.zip", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\liveupdate_3.3.0.96_english_livetri.zip" HR: 0x802A0026
5/20/2011, 19:50:15 GMT -> HR 0x802A0026 DECODE: E_HTTP_NOT_FOUND
5/20/2011, 19:50:15 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 0
5/20/2011, 19:50:15 GMT -> LiveUpdate will check for Mini-TRI file support on the server since the first Mini-TRI file was not available (liveupdate_3.3.0.96_english_livetri.zip).
5/20/2011, 19:50:15 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
5/20/2011, 19:50:15 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantecliveupdate.com/minitri.flg", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
5/20/2011, 19:50:15 GMT -> HttpSendRequest (status 200): Request succeeded
5/20/2011, 19:50:15 GMT -> Download complete: Original estimated file size: 1; Actual bytes downloaded: 1
5/20/2011, 19:50:15 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: URL: "http://liveupdate.symantecliveupdate.com/minitri.flg", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\minitri.flg" HR: 0x0      
5/20/2011, 19:50:15 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 1
5/20/2011, 19:50:15 GMT -> Progress Update: HOST_SELECTED: Host IP: "204.2.215.75" URL: "http://liveupdate.symantecliveupdate.com" HostNumber: 0
5/20/2011, 19:50:15 GMT -> Attempting to load SymCrypt...
5/20/2011, 19:50:15 GMT -> SymCrypt.dll does not exist.
5/20/2011, 19:50:15 GMT -> EVENT - SERVER SELECTION SUCCESSFUL EVENT - LiveUpdate connected to server liveupdate.symantecliveupdate.com at path  via a HTTP connection. The server connection connected with a return code of 200, Successfully download TRI file
5/20/2011, 19:50:15 GMT -> LiveUpdate is connected to a server with Mini-TRI file support.  LiveUpdate will download and process the remaining Mini-TRI files.
5/20/2011, 19:50:15 GMT -> Check for updates to:  Product: Automatic LiveUpdate, Version: 3.3.0.96, Language: English.  Mini-TRI file name: automatic$20liveupdate_3.3.0.96_english_livetri.zip
5/20/2011, 19:50:15 GMT -> Progress Update: TRIFILE_DOWNLOAD_END: Number of TRI files: "0"
5/20/2011, 19:50:15 GMT -> Progress Update: TRIFILE_DOWNLOAD_START: Number of TRI files: 1 Downloading Mini-TRI files
5/20/2011, 19:50:15 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
5/20/2011, 19:50:15 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantecliveupdate.com/automatic$20liveupdate_3.3.0.96_english_livetri.zip", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
5/20/2011, 19:50:15 GMT -> HttpSendRequest (status 404): Request failed - File does not exist on the server.
5/20/2011, 19:50:15 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://liveupdate.symantecliveupdate.com/automatic$20liveupdate_3.3.0.96_english_livetri.zip", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\automatic$20liveupdate_3.3.0.96_english_livetri.zip" HR: 0x802A0026
5/20/2011, 19:50:15 GMT -> HR 0x802A0026 DECODE: E_HTTP_NOT_FOUND
5/20/2011, 19:50:15 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 0
5/20/2011, 19:50:15 GMT -> Progress Update: TRIFILE_DOWNLOAD_END: Number of TRI files: "0"
5/20/2011, 19:50:15 GMT -> ********* Finished Finding Available Updates *********

5/20/2011, 19:50:15 GMT -> LiveUpdate did not find any new updates for the given products.
5/20/2011, 19:50:15 GMT -> EVENT - SESSION END SUCCESSFUL EVENT - The LiveUpdate session ran in Express Mode. LiveUpdate found 0 updates available, of which 0 were installed and 0 failed to install.  The LiveUpdate session exited with a return code of 100, LiveUpdate ran successfully.  There are no new updates to your products.
5/20/2011, 19:50:15 GMT -> Unable to find the property 'PREFERENCES\MAX_PACKAGE_SIZE' in settings file; using default: 734003200.
5/20/2011, 19:50:15 GMT -> ProductRegCom/luGroup(PID=3636/TID=3328): Successfully created an instance of an luGroup object!
5/20/2011, 19:50:15 GMT -> ProductRegCom/luGroup(PID=3636/TID=3328): Path for calling process executable is C:\Program Files (x86)\Symantec\LiveUpdate\LUALL.EXE.
5/20/2011, 19:50:15 GMT -> ProductRegCom/luGroup(PID=3636/TID=3328): Destroyed luGroup object.
5/20/2011, 19:50:19 GMT -> Only the LiveUpdate command lines were registered in the Product.Inventory.LiveUpdate file.
5/20/2011, 19:50:19 GMT -> Integrity check of the newly saved product inventory failed with error code=0x802A0044.
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
// End LuComServer
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////

////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
// Start LuComServer
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
5/20/2011, 19:50:39 GMT -> LuComServer version: 3.3.0.96
5/20/2011, 19:50:39 GMT -> LiveUpdate Language: English
5/20/2011, 19:50:39 GMT -> LuComServer Sequence Number: 20091211
5/20/2011, 19:50:39 GMT -> OS: Windows 2008R2 Standard Edition, Service Pack: 0, Major: 6, Minor: 1, Build: 7600 (64-bit)
5/20/2011, 19:50:39 GMT -> System Language:[0x0409], User Language:[0x0409]
5/20/2011, 19:50:39 GMT -> IE 7 Support
5/20/2011, 19:50:39 GMT -> ComCtl32 version: 6.16
5/20/2011, 19:50:39 GMT -> IP Addresses: fe80::8d27:8807:57a4:93f7%11, fe80::18e4:207c:3f57:1b9b%13, 192.168.228.100, 2001:0:4137:9e76:18e4:207c:3f57:1b9b
5/20/2011, 19:50:39 GMT -> Loading C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
5/20/2011, 19:50:39 GMT -> Only the LiveUpdate command lines were registered in the Product.Inventory.LiveUpdate file.
5/20/2011, 19:50:39 GMT -> Failed to load C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate.
5/20/2011, 19:50:39 GMT -> Opened the product inventory at "C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
5/20/2011, 19:50:39 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
5/20/2011, 19:50:39 GMT -> LiveUpdate flag value for this run is 0
5/20/2011, 19:50:39 GMT -> ProductRegCom/luGroup(PID=2376/TID=1856): Successfully created an instance of an luGroup object!
5/20/2011, 19:50:39 GMT -> ProductRegCom/luGroup(PID=2376/TID=1856): Path for calling process executable is C:\Program Files (x86)\Symantec\LiveUpdate\LUALL.EXE.
5/20/2011, 19:50:39 GMT -> ProductRegCom/luGroup(PID=2376/TID=1856): Destroyed luGroup object.
5/20/2011, 19:50:39 GMT -> Scanning the following file for potentially malicious host entries: C:\Windows\system32\Drivers\etc\hosts
5/20/2011, 19:50:39 GMT -> Scanning the following file for potentially malicious host entries: C:\Windows\system32\Drivers\etc\lmhosts.sam
5/20/2011, 19:50:39 GMT -> LiveUpdate did not find any malicious host entries in any hosts files.
5/20/2011, 19:50:39 GMT -> **** Starting an Express Mode LiveUpdate Session ****
5/20/2011, 19:50:39 GMT -> User Type: Administrator.
5/20/2011, 19:50:42 GMT -> Only the LiveUpdate command lines were registered in the Product.Inventory.LiveUpdate file.
5/20/2011, 19:50:42 GMT -> Integrity check of the newly saved product inventory failed with error code=0x802A0044.
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
// End LuComServer
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////

////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
// Start LuComServer
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
5/20/2011, 19:51:07 GMT -> LuComServer version: 3.3.0.96
5/20/2011, 19:51:07 GMT -> LiveUpdate Language: English
5/20/2011, 19:51:07 GMT -> LuComServer Sequence Number: 20091211
5/20/2011, 19:51:07 GMT -> OS: Windows 2008R2 Standard Edition, Service Pack: 0, Major: 6, Minor: 1, Build: 7600 (64-bit)
5/20/2011, 19:51:07 GMT -> System Language:[0x0409], User Language:[0x0409]
5/20/2011, 19:51:07 GMT -> IE 7 Support
5/20/2011, 19:51:07 GMT -> ComCtl32 version: 6.16
5/20/2011, 19:51:07 GMT -> IP Addresses: fe80::8d27:8807:57a4:93f7%11, fe80::18e4:207c:3f57:1b9b%13, 192.168.228.100, 2001:0:4137:9e76:18e4:207c:3f57:1b9b
5/20/2011, 19:51:07 GMT -> Loading C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
5/20/2011, 19:51:07 GMT -> Only the LiveUpdate command lines were registered in the Product.Inventory.LiveUpdate file.
5/20/2011, 19:51:07 GMT -> Failed to load C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate.
5/20/2011, 19:51:07 GMT -> Opened the product inventory at "C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
5/20/2011, 19:51:07 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
5/20/2011, 19:51:07 GMT -> LiveUpdate flag value for this run is 0
5/20/2011, 19:51:07 GMT -> ProductRegCom/luGroup(PID=3452/TID=1900): Successfully created an instance of an luGroup object!
5/20/2011, 19:51:07 GMT -> ProductRegCom/luGroup(PID=3452/TID=1900): Path for calling process executable is C:\Program Files (x86)\Symantec\LiveUpdate\LUALL.EXE.
5/20/2011, 19:51:07 GMT -> ProductRegCom/luGroup(PID=3452/TID=1900): Destroyed luGroup object.
5/20/2011, 19:51:07 GMT -> Scanning the following file for potentially malicious host entries: C:\Windows\system32\Drivers\etc\hosts
5/20/2011, 19:51:07 GMT -> Scanning the following file for potentially malicious host entries: C:\Windows\system32\Drivers\etc\lmhosts.sam
5/20/2011, 19:51:07 GMT -> LiveUpdate did not find any malicious host entries in any hosts files.
5/20/2011, 19:51:07 GMT -> **** Starting an Express Mode LiveUpdate Session ****
5/20/2011, 19:51:07 GMT -> User Type: Administrator.
5/20/2011, 19:51:09 GMT -> ***********************        Start of New LU Session        ***********************
5/20/2011, 19:51:09 GMT -> EVENT - SESSION START EVENT - The LiveUpdate session is running in Express Mode.
5/20/2011, 19:51:09 GMT -> Check for updates to:  Product: LiveUpdate, Version: 3.3.0.96, Language: English.  Mini-TRI file name: liveupdate_3.3.0.96_english_livetri.zip
5/20/2011, 19:51:09 GMT -> Progress Update: TRYING_HOST: HostName: "liveupdate.symantecliveupdate.com" URL: "http://liveupdate.symantecliveupdate.com" HostNumber: 0
5/20/2011, 19:51:09 GMT -> Progress Update: TRIFILE_DOWNLOAD_START: Number of TRI files: 0 Downloading LiveUpdate catalog file
5/20/2011, 19:51:09 GMT -> LiveUpdate will download the first Mini-TRI file, liveupdate_3.3.0.96_english_livetri.zip
5/20/2011, 19:51:09 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
5/20/2011, 19:51:09 GMT -> Progress Update: PRE_CONNECT: Proxy: "(not-available)" Agent: "Symantec LiveUpdate" AccessType: 0x0      
5/20/2011, 19:51:09 GMT -> Progress Update: CONNECTED: Proxy: "(not-available)" Agent: "zPEl4hsSdis1B2NtCLv2ZrA6B80K8bWTQAAAAA" AccessType: 0x0      
5/20/2011, 19:51:09 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantecliveupdate.com/liveupdate_3.3.0.96_english_livetri.zip", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
5/20/2011, 19:51:09 GMT -> HttpSendRequest (status 404): Request failed - File does not exist on the server.
5/20/2011, 19:51:09 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://liveupdate.symantecliveupdate.com/liveupdate_3.3.0.96_english_livetri.zip", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\liveupdate_3.3.0.96_english_livetri.zip" HR: 0x802A0026
5/20/2011, 19:51:09 GMT -> HR 0x802A0026 DECODE: E_HTTP_NOT_FOUND
5/20/2011, 19:51:09 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 0
5/20/2011, 19:51:09 GMT -> LiveUpdate will check for Mini-TRI file support on the server since the first Mini-TRI file was not available (liveupdate_3.3.0.96_english_livetri.zip).
5/20/2011, 19:51:09 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
5/20/2011, 19:51:09 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantecliveupdate.com/minitri.flg", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
5/20/2011, 19:51:09 GMT -> HttpSendRequest (status 304): Request succeeded - File up to date so download is not required
5/20/2011, 19:51:09 GMT -> Progress Update: DOWNLOAD_FILE_NOT_MODIFIED: URL: "http://liveupdate.symantecliveupdate.com/minitri.flg", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\minitri.flg"
5/20/2011, 19:51:09 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: URL: "http://liveupdate.symantecliveupdate.com/minitri.flg", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\minitri.flg" HR: 0x0      
5/20/2011, 19:51:09 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 1
5/20/2011, 19:51:09 GMT -> Progress Update: HOST_SELECTED: Host IP: "204.2.215.72" URL: "http://liveupdate.symantecliveupdate.com" HostNumber: 0
5/20/2011, 19:51:09 GMT -> Attempting to load SymCrypt...
5/20/2011, 19:51:09 GMT -> SymCrypt.dll does not exist.
5/20/2011, 19:51:09 GMT -> EVENT - SERVER SELECTION SUCCESSFUL EVENT - LiveUpdate connected to server liveupdate.symantecliveupdate.com at path  via a HTTP connection. The server connection connected with a return code of 200, Successfully download TRI file
5/20/2011, 19:51:09 GMT -> LiveUpdate is connected to a server with Mini-TRI file support.  LiveUpdate will download and process the remaining Mini-TRI files.
5/20/2011, 19:51:09 GMT -> Check for updates to:  Product: Automatic LiveUpdate, Version: 3.3.0.96, Language: English.  Mini-TRI file name: automatic$20liveupdate_3.3.0.96_english_livetri.zip
5/20/2011, 19:51:09 GMT -> Progress Update: TRIFILE_DOWNLOAD_END: Number of TRI files: "0"
5/20/2011, 19:51:09 GMT -> Progress Update: TRIFILE_DOWNLOAD_START: Number of TRI files: 1 Downloading Mini-TRI files
5/20/2011, 19:51:09 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
5/20/2011, 19:51:09 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantecliveupdate.com/automatic$20liveupdate_3.3.0.96_english_livetri.zip", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
5/20/2011, 19:51:09 GMT -> HttpSendRequest (status 404): Request failed - File does not exist on the server.
5/20/2011, 19:51:09 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://liveupdate.symantecliveupdate.com/automatic$20liveupdate_3.3.0.96_english_livetri.zip", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\automatic$20liveupdate_3.3.0.96_english_livetri.zip" HR: 0x802A0026
5/20/2011, 19:51:09 GMT -> HR 0x802A0026 DECODE: E_HTTP_NOT_FOUND
5/20/2011, 19:51:09 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 0
5/20/2011, 19:51:09 GMT -> Progress Update: TRIFILE_DOWNLOAD_END: Number of TRI files: "0"
5/20/2011, 19:51:09 GMT -> ********* Finished Finding Available Updates *********

5/20/2011, 19:51:09 GMT -> LiveUpdate did not find any new updates for the given products.
5/20/2011, 19:51:09 GMT -> EVENT - SESSION END SUCCESSFUL EVENT - The LiveUpdate session ran in Express Mode. LiveUpdate found 0 updates available, of which 0 were installed and 0 failed to install.  The LiveUpdate session exited with a return code of 100, LiveUpdate ran successfully.  There are no new updates to your products.
5/20/2011, 19:51:10 GMT -> ProductRegCom/luGroup(PID=3452/TID=1900): Successfully created an instance of an luGroup object!
5/20/2011, 19:51:10 GMT -> ProductRegCom/luGroup(PID=3452/TID=1900): Path for calling process executable is C:\Program Files (x86)\Symantec\LiveUpdate\LUALL.EXE.
5/20/2011, 19:51:10 GMT -> ProductRegCom/luGroup(PID=3452/TID=1900): Destroyed luGroup object.
5/20/2011, 19:51:18 GMT -> Only the LiveUpdate command lines were registered in the Product.Inventory.LiveUpdate file.
5/20/2011, 19:51:18 GMT -> Integrity check of the newly saved product inventory failed with error code=0x802A0044.
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
// End LuComServer
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////

////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
// Start LuComServer
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
5/20/2011, 19:51:27 GMT -> LuComServer version: 3.3.0.96
5/20/2011, 19:51:27 GMT -> LiveUpdate Language: English
5/20/2011, 19:51:27 GMT -> LuComServer Sequence Number: 20091211
5/20/2011, 19:51:27 GMT -> OS: Windows 2008R2 Standard Edition, Service Pack: 0, Major: 6, Minor: 1, Build: 7600 (64-bit)
5/20/2011, 19:51:27 GMT -> System Language:[0x0409], User Language:[0x0409]
5/20/2011, 19:51:27 GMT -> IE 7 Support
5/20/2011, 19:51:27 GMT -> ComCtl32 version: 6.16
5/20/2011, 19:51:27 GMT -> IP Addresses: fe80::8d27:8807:57a4:93f7%11, fe80::18e4:207c:3f57:1b9b%13, 192.168.228.100, 2001:0:4137:9e76:18e4:207c:3f57:1b9b
5/20/2011, 19:51:27 GMT -> Loading C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
5/20/2011, 19:51:27 GMT -> Only the LiveUpdate command lines were registered in the Product.Inventory.LiveUpdate file.
5/20/2011, 19:51:27 GMT -> Failed to load C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate.
5/20/2011, 19:51:27 GMT -> Opened the product inventory at "C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
5/20/2011, 19:51:27 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
5/20/2011, 19:51:27 GMT -> LiveUpdate flag value for this run is 0
5/20/2011, 19:51:27 GMT -> ProductRegCom/luGroup(PID=948/TID=3136): Successfully created an instance of an luGroup object!
5/20/2011, 19:51:27 GMT -> ProductRegCom/luGroup(PID=948/TID=3136): Path for calling process executable is C:\Program Files (x86)\Symantec\LiveUpdate\LUALL.EXE.
5/20/2011, 19:51:27 GMT -> ProductRegCom/luGroup(PID=948/TID=3136): Destroyed luGroup object.
5/20/2011, 19:51:27 GMT -> Scanning the following file for potentially malicious host entries: C:\Windows\system32\Drivers\etc\hosts
5/20/2011, 19:51:27 GMT -> Scanning the following file for potentially malicious host entries: C:\Windows\system32\Drivers\etc\lmhosts.sam
5/20/2011, 19:51:27 GMT -> LiveUpdate did not find any malicious host entries in any hosts files.
5/20/2011, 19:51:27 GMT -> **** Starting an Express Mode LiveUpdate Session ****
5/20/2011, 19:51:27 GMT -> User Type: Administrator.
5/20/2011, 19:51:29 GMT -> ***********************        Start of New LU Session        ***********************
5/20/2011, 19:51:29 GMT -> EVENT - SESSION START EVENT - The LiveUpdate session is running in Express Mode.
5/20/2011, 19:51:29 GMT -> Check for updates to:  Product: LiveUpdate, Version: 3.3.0.96, Language: English.  Mini-TRI file name: liveupdate_3.3.0.96_english_livetri.zip
5/20/2011, 19:51:29 GMT -> Progress Update: TRYING_HOST: HostName: "liveupdate.symantecliveupdate.com" URL: "http://liveupdate.symantecliveupdate.com" HostNumber: 0
5/20/2011, 19:51:29 GMT -> Progress Update: TRIFILE_DOWNLOAD_START: Number of TRI files: 0 Downloading LiveUpdate catalog file
5/20/2011, 19:51:29 GMT -> LiveUpdate will download the first Mini-TRI file, liveupdate_3.3.0.96_english_livetri.zip
5/20/2011, 19:51:29 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
5/20/2011, 19:51:29 GMT -> Progress Update: PRE_CONNECT: Proxy: "(not-available)" Agent: "Symantec LiveUpdate" AccessType: 0x0      
5/20/2011, 19:51:29 GMT -> Progress Update: CONNECTED: Proxy: "(not-available)" Agent: "zPEl4hsSdis1B2NtCLv2ZrA6B80P8bWTQAAAAA" AccessType: 0x0      
5/20/2011, 19:51:29 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantecliveupdate.com/liveupdate_3.3.0.96_english_livetri.zip", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
5/20/2011, 19:51:29 GMT -> HttpSendRequest (status 404): Request failed - File does not exist on the server.
5/20/2011, 19:51:29 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://liveupdate.symantecliveupdate.com/liveupdate_3.3.0.96_english_livetri.zip", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\liveupdate_3.3.0.96_english_livetri.zip" HR: 0x802A0026
5/20/2011, 19:51:29 GMT -> HR 0x802A0026 DECODE: E_HTTP_NOT_FOUND
5/20/2011, 19:51:29 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 0
5/20/2011, 19:51:29 GMT -> LiveUpdate will check for Mini-TRI file support on the server since the first Mini-TRI file was not available (liveupdate_3.3.0.96_english_livetri.zip).
5/20/2011, 19:51:29 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
5/20/2011, 19:51:29 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantecliveupdate.com/minitri.flg", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
5/20/2011, 19:51:29 GMT -> HttpSendRequest (status 304): Request succeeded - File up to date so download is not required
5/20/2011, 19:51:29 GMT -> Progress Update: DOWNLOAD_FILE_NOT_MODIFIED: URL: "http://liveupdate.symantecliveupdate.com/minitri.flg", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\minitri.flg"
5/20/2011, 19:51:29 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: URL: "http://liveupdate.symantecliveupdate.com/minitri.flg", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\minitri.flg" HR: 0x0      
5/20/2011, 19:51:29 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 1
5/20/2011, 19:51:29 GMT -> Progress Update: HOST_SELECTED: Host IP: "204.2.215.33" URL: "http://liveupdate.symantecliveupdate.com" HostNumber: 0
5/20/2011, 19:51:29 GMT -> Attempting to load SymCrypt...
5/20/2011, 19:51:29 GMT -> SymCrypt.dll does not exist.
5/20/2011, 19:51:29 GMT -> EVENT - SERVER SELECTION SUCCESSFUL EVENT - LiveUpdate connected to server liveupdate.symantecliveupdate.com at path  via a HTTP connection. The server connection connected with a return code of 200, Successfully download TRI file
5/20/2011, 19:51:29 GMT -> LiveUpdate is connected to a server with Mini-TRI file support.  LiveUpdate will download and process the remaining Mini-TRI files.
5/20/2011, 19:51:29 GMT -> Check for updates to:  Product: Automatic LiveUpdate, Version: 3.3.0.96, Language: English.  Mini-TRI file name: automatic$20liveupdate_3.3.0.96_english_livetri.zip
5/20/2011, 19:51:29 GMT -> Progress Update: TRIFILE_DOWNLOAD_END: Number of TRI files: "0"
5/20/2011, 19:51:29 GMT -> Progress Update: TRIFILE_DOWNLOAD_START: Number of TRI files: 1 Downloading Mini-TRI files
5/20/2011, 19:51:29 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
5/20/2011, 19:51:29 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantecliveupdate.com/automatic$20liveupdate_3.3.0.96_english_livetri.zip", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
5/20/2011, 19:51:29 GMT -> HttpSendRequest (status 404): Request failed - File does not exist on the server.
5/20/2011, 19:51:29 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://liveupdate.symantecliveupdate.com/automatic$20liveupdate_3.3.0.96_english_livetri.zip", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\automatic$20liveupdate_3.3.0.96_english_livetri.zip" HR: 0x802A0026
5/20/2011, 19:51:29 GMT -> HR 0x802A0026 DECODE: E_HTTP_NOT_FOUND
5/20/2011, 19:51:29 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 0
5/20/2011, 19:51:29 GMT -> Progress Update: TRIFILE_DOWNLOAD_END: Number of TRI files: "0"
5/20/2011, 19:51:29 GMT -> ********* Finished Finding Available Updates *********

5/20/2011, 19:51:29 GMT -> LiveUpdate did not find any new updates for the given products.
5/20/2011, 19:51:29 GMT -> EVENT - SESSION END SUCCESSFUL EVENT - The LiveUpdate session ran in Express Mode. LiveUpdate found 0 updates available, of which 0 were installed and 0 failed to install.  The LiveUpdate session exited with a return code of 100, LiveUpdate ran successfully.  There are no new updates to your products.
5/20/2011, 19:51:30 GMT -> ProductRegCom/luGroup(PID=948/TID=3136): Successfully created an instance of an luGroup object!
5/20/2011, 19:51:30 GMT -> ProductRegCom/luGroup(PID=948/TID=3136): Path for calling process executable is C:\Program Files (x86)\Symantec\LiveUpdate\LUALL.EXE.
5/20/2011, 19:51:30 GMT -> ProductRegCom/luGroup(PID=948/TID=3136): Destroyed luGroup object.
5/20/2011, 19:51:32 GMT -> Only the LiveUpdate command lines were registered in the Product.Inventory.LiveUpdate file.
5/20/2011, 19:51:32 GMT -> Integrity check of the newly saved product inventory failed with error code=0x802A0044.
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
// End LuComServer
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////

////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
// Start LuComServer
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
5/20/2011, 19:53:10 GMT -> LuComServer version: 3.3.0.96
5/20/2011, 19:53:10 GMT -> LiveUpdate Language: English
5/20/2011, 19:53:10 GMT -> LuComServer Sequence Number: 20091211
5/20/2011, 19:53:10 GMT -> OS: Windows 2008R2 Standard Edition, Service Pack: 0, Major: 6, Minor: 1, Build: 7600 (64-bit)
5/20/2011, 19:53:10 GMT -> System Language:[0x0409], User Language:[0x0409]
5/20/2011, 19:53:10 GMT -> IE 7 Support
5/20/2011, 19:53:10 GMT -> ComCtl32 version: 6.16
5/20/2011, 19:53:10 GMT -> IP Addresses: fe80::8d27:8807:57a4:93f7%11, fe80::18e4:207c:3f57:1b9b%13, 192.168.228.100, 2001:0:4137:9e76:18e4:207c:3f57:1b9b
5/20/2011, 19:53:10 GMT -> Loading C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
5/20/2011, 19:53:10 GMT -> Only the LiveUpdate command lines were registered in the Product.Inventory.LiveUpdate file.
5/20/2011, 19:53:10 GMT -> Failed to load C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate.
5/20/2011, 19:53:10 GMT -> Opened the product inventory at "C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
5/20/2011, 19:53:10 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
5/20/2011, 19:53:10 GMT -> LiveUpdate flag value for this run is 0
5/20/2011, 19:53:10 GMT -> ProductRegCom/luProductReg(PID=3368/TID=4036): Successfully created an instance of an luProductReg object!
5/20/2011, 19:53:10 GMT -> ProductRegCom/luProductReg(PID=3368/TID=4036): Path for calling process executable is C:\Program Files\Symantec\SELUREG32.EXE.
5/20/2011, 19:53:10 GMT -> ProductRegCom/luProductReg(PID=3368/TID=4036): Registering Product -- Symevent64x86 Installer - 12.8 - SymAllLanguages
5/20/2011, 19:53:10 GMT -> ProductRegCom/luProductReg(PID=3368/TID=4036): Setting property for Moniker = {6E34DCC1-B194-11d2-A11E-00409500AD7D}, PropertyName = DescriptiveName, Value = Symantec Security Software
5/20/2011, 19:53:10 GMT -> ProductRegCom/luProductReg(PID=3368/TID=4036): Setting property for Moniker = {6E34DCC1-B194-11d2-A11E-00409500AD7D}, PropertyName = AUTOLIVEUPDATE, Value = YES
5/20/2011, 19:53:10 GMT -> ProductRegCom/luProductReg(PID=3368/TID=4036): Setting property for Moniker = {6E34DCC1-B194-11d2-A11E-00409500AD7D}, PropertyName = AUTOLIVEUPDATETYPE, Value = SILENT
5/20/2011, 19:53:10 GMT -> ProductRegCom/luProductReg(PID=3368/TID=4036): Setting property for Moniker = {6E34DCC1-B194-11d2-A11E-00409500AD7D}, PropertyName = SEQ.UPDATE, Value = 20090625
5/20/2011, 19:53:10 GMT -> ProductRegCom/luProductReg(PID=3368/TID=4036): Destroyed luProductReg object.
5/20/2011, 19:53:11 GMT -> LuComServer version: 3.3.0.96
5/20/2011, 19:53:11 GMT -> LiveUpdate Language: English
5/20/2011, 19:53:11 GMT -> LuComServer Sequence Number: 20091211
5/20/2011, 19:53:11 GMT -> OS: Windows 2008R2 Standard Edition, Service Pack: 0, Major: 6, Minor: 1, Build: 7600 (64-bit)
5/20/2011, 19:53:11 GMT -> System Language:[0x0409], User Language:[0x0409]
5/20/2011, 19:53:11 GMT -> IE 7 Support
5/20/2011, 19:53:11 GMT -> ComCtl32 version: 6.16
5/20/2011, 19:53:11 GMT -> IP Addresses: fe80::8d27:8807:57a4:93f7%11, fe80::18e4:207c:3f57:1b9b%13, 192.168.228.100, 2001:0:4137:9e76:18e4:207c:3f57:1b9b
5/20/2011, 19:53:11 GMT -> Loading C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
5/20/2011, 19:53:11 GMT -> Opened the product inventory at "C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
5/20/2011, 19:53:11 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
5/20/2011, 19:53:11 GMT -> LiveUpdate flag value for this run is 0
5/20/2011, 19:53:11 GMT -> ProductRegCom/luProductReg(PID=3220/TID=3552): Successfully created an instance of an luProductReg object!
5/20/2011, 19:53:11 GMT -> ProductRegCom/luProductReg(PID=3220/TID=3552): Path for calling process executable is C:\Windows\syswow64\MsiExec.exe.
5/20/2011, 19:53:11 GMT -> ProductRegCom/luProductReg(PID=3220/TID=3552): Registering Product -- MS Light - 5.0 - SymAllLanguages
5/20/2011, 19:53:11 GMT -> ProductRegCom/luProductReg(PID=3220/TID=3552): Setting property for Moniker = {8E7A92D6-5461-45ed-94E7-B035A75B7C36}, PropertyName = DescriptiveName, Value = Symantec Security Software Update
5/20/2011, 19:53:11 GMT -> ProductRegCom/luProductReg(PID=3220/TID=3552): Setting property for Moniker = {8E7A92D6-5461-45ed-94E7-B035A75B7C36}, PropertyName = AUTOLIVEUPDATE, Value = YES
5/20/2011, 19:53:11 GMT -> ProductRegCom/luProductReg(PID=3220/TID=3552): Setting property for Moniker = {8E7A92D6-5461-45ed-94E7-B035A75B7C36}, PropertyName = AUTOLIVEUPDATETYPE, Value = NOISY
5/20/2011, 19:53:11 GMT -> ProductRegCom/luProductReg(PID=3220/TID=3552): Destroyed luProductReg object.
5/20/2011, 19:53:12 GMT -> LuComServer version: 3.3.0.96
5/20/2011, 19:53:12 GMT -> LiveUpdate Language: English
5/20/2011, 19:53:12 GMT -> LuComServer Sequence Number: 20091211
5/20/2011, 19:53:12 GMT -> OS: Windows 2008R2 Standard Edition, Service Pack: 0, Major: 6, Minor: 1, Build: 7600 (64-bit)
5/20/2011, 19:53:12 GMT -> System Language:[0x0409], User Language:[0x0409]
5/20/2011, 19:53:12 GMT -> IE 7 Support
5/20/2011, 19:53:12 GMT -> ComCtl32 version: 6.16
5/20/2011, 19:53:12 GMT -> IP Addresses: fe80::8d27:8807:57a4:93f7%11, fe80::18e4:207c:3f57:1b9b%13, 192.168.228.100, 2001:0:4137:9e76:18e4:207c:3f57:1b9b
5/20/2011, 19:53:12 GMT -> Loading C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
5/20/2011, 19:53:12 GMT -> Opened the product inventory at "C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
5/20/2011, 19:53:12 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
5/20/2011, 19:53:12 GMT -> LiveUpdate flag value for this run is 0
5/20/2011, 19:53:12 GMT -> ProductRegCom/luProductReg(PID=3936/TID=3776): Successfully created an instance of an luProductReg object!
5/20/2011, 19:53:12 GMT -> ProductRegCom/luProductReg(PID=3936/TID=3776): Path for calling process executable is C:\Windows\syswow64\MsiExec.exe.
5/20/2011, 19:53:12 GMT -> ProductRegCom/luProductReg(PID=3936/TID=3776): Registering Product -- SESC Virus Definitions Win64 (x64) v11 - MicroDefsB.CurDefs - SymAllLanguages
5/20/2011, 19:53:12 GMT -> ProductRegCom/luProductReg(PID=3936/TID=3776): Setting property for Moniker = {1CD85198-26C6-4bac-8C72-5D34B025DE35}, PropertyName = DescriptiveName, Value = Antivirus and antispyware definitions
5/20/2011, 19:53:12 GMT -> ProductRegCom/luProductReg(PID=3936/TID=3776): Product with moniker {1CD85198-26C6-4bac-8C72-5D34B025DE35} is attempting to register a callback of type unknown
5/20/2011, 19:53:12 GMT -> ProductRegCom/luProductReg(PID=3936/TID=3776): Setting property for Moniker = {1CD85198-26C6-4bac-8C72-5D34B025DE35}, PropertyName = Callback_PreSession, Value = {855BA5F4-6588-4F09-AE61-847E59D08CB0}
5/20/2011, 19:53:12 GMT -> ProductRegCom/luProductReg(PID=3936/TID=3776): Setting property for Moniker = {1CD85198-26C6-4bac-8C72-5D34B025DE35}, PropertyName = Callback_PostSession, Value = {855BA5F4-6588-4F09-AE61-847E59D08CB0}
5/20/2011, 19:53:12 GMT -> ProductRegCom/luProductReg(PID=3936/TID=3776): Bypassed verification for unknown callback with class ID: {855BA5F4-6588-4F09-AE61-847E59D08CB0}
5/20/2011, 19:53:12 GMT -> ProductRegCom/luProductReg(PID=3936/TID=3776): Setting property for Moniker = {1CD85198-26C6-4bac-8C72-5D34B025DE35}, PropertyName = UIPRIV, Value = 2
5/20/2011, 19:53:12 GMT -> ProductRegCom/luGroup(PID=3936/TID=3776): Successfully created an instance of an luGroup object!
5/20/2011, 19:53:12 GMT -> ProductRegCom/luGroup(PID=3936/TID=3776): Path for calling process executable is C:\Windows\syswow64\MsiExec.exe.
5/20/2011, 19:53:12 GMT -> ProductRegCom/luGroup(PID=3936/TID=3776): Registering new group with type Coupled.
5/20/2011, 19:53:12 GMT -> ProductRegCom/luGroup(PID=3936/TID=3776): Adding product to Group {EBFFA65F-36DD-4053-8F49-5ADBC646DF88} - Product = SESC Virus Definitions Win64 (x64) v11, Version = MicroDefsB.CurDefs, Language = SymAllLanguages, Type =
5/20/2011, 19:53:12 GMT -> ProductRegCom/luGroup(PID=3936/TID=3776): Destroyed luGroup object.
5/20/2011, 19:53:12 GMT -> ProductRegCom/luProductReg(PID=3936/TID=3776): Destroyed luProductReg object.
5/20/2011, 19:53:12 GMT -> LuComServer version: 3.3.0.96
5/20/2011, 19:53:12 GMT -> LiveUpdate Language: English
5/20/2011, 19:53:12 GMT -> LuComServer Sequence Number: 20091211
5/20/2011, 19:53:12 GMT -> OS: Windows 2008R2 Standard Edition, Service Pack: 0, Major: 6, Minor: 1, Build: 7600 (64-bit)
5/20/2011, 19:53:12 GMT -> System Language:[0x0409], User Language:[0x0409]
5/20/2011, 19:53:12 GMT -> IE 7 Support
5/20/2011, 19:53:12 GMT -> ComCtl32 version: 6.16
5/20/2011, 19:53:12 GMT -> IP Addresses: fe80::8d27:8807:57a4:93f7%11, fe80::18e4:207c:3f57:1b9b%13, 192.168.228.100, 2001:0:4137:9e76:18e4:207c:3f57:1b9b
5/20/2011, 19:53:12 GMT -> Loading C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
5/20/2011, 19:53:12 GMT -> Opened the product inventory at "C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
5/20/2011, 19:53:12 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
5/20/2011, 19:53:13 GMT -> LiveUpdate flag value for this run is 0
5/20/2011, 19:53:13 GMT -> ProductRegCom/luProductReg(PID=3936/TID=3776): Successfully created an instance of an luProductReg object!
5/20/2011, 19:53:13 GMT -> ProductRegCom/luProductReg(PID=3936/TID=3776): Path for calling process executable is C:\Windows\syswow64\MsiExec.exe.
5/20/2011, 19:53:13 GMT -> ProductRegCom/luProductReg(PID=3936/TID=3776): Registering Product -- SESC Virus Definitions Win64 (x64) v11 - Hub - SymAllLanguages
5/20/2011, 19:53:13 GMT -> ProductRegCom/luProductReg(PID=3936/TID=3776): Setting property for Moniker = {DFB8BBDD-52DE-427e-9EB3-FB7665893221}, PropertyName = DescriptiveName, Value = Antivirus and antispyware definitions
5/20/2011, 19:53:13 GMT -> ProductRegCom/luGroup(PID=3936/TID=3776): Successfully created an instance of an luGroup object!
5/20/2011, 19:53:13 GMT -> ProductRegCom/luGroup(PID=3936/TID=3776): Path for calling process executable is C:\Windows\syswow64\MsiExec.exe.
5/20/2011, 19:53:13 GMT -> ProductRegCom/luGroup(PID=3936/TID=3776): Adding product to Group {EBFFA65F-36DD-4053-8F49-5ADBC646DF88} - Product = SESC Virus Definitions Win64 (x64) v11, Version = Hub, Language = SymAllLanguages, Type =
5/20/2011, 19:53:13 GMT -> ProductRegCom/luGroup(PID=3936/TID=3776): Destroyed luGroup object.
5/20/2011, 19:53:13 GMT -> ProductRegCom/luProductReg(PID=3936/TID=3776): Destroyed luProductReg object.
5/20/2011, 19:53:13 GMT -> LuComServer version: 3.3.0.96
5/20/2011, 19:53:13 GMT -> LiveUpdate Language: English
5/20/2011, 19:53:13 GMT -> LuComServer Sequence Number: 20091211
5/20/2011, 19:53:13 GMT -> OS: Windows 2008R2 Standard Edition, Service Pack: 0, Major: 6, Minor: 1, Build: 7600 (64-bit)
5/20/2011, 19:53:13 GMT -> System Language:[0x0409], User Language:[0x0409]
5/20/2011, 19:53:13 GMT -> IE 7 Support
5/20/2011, 19:53:13 GMT -> ComCtl32 version: 6.16
5/20/2011, 19:53:13 GMT -> IP Addresses: fe80::8d27:8807:57a4:93f7%11, fe80::18e4:207c:3f57:1b9b%13, 192.168.228.100, 2001:0:4137:9e76:18e4:207c:3f57:1b9b
5/20/2011, 19:53:13 GMT -> Loading C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
5/20/2011, 19:53:13 GMT -> Opened the product inventory at "C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
5/20/2011, 19:53:13 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
5/20/2011, 19:53:13 GMT -> LiveUpdate flag value for this run is 0
5/20/2011, 19:53:13 GMT -> ProductRegCom/luProductReg(PID=3936/TID=3776): Successfully created an instance of an luProductReg object!
5/20/2011, 19:53:13 GMT -> ProductRegCom/luProductReg(PID=3936/TID=3776): Path for calling process executable is C:\Windows\syswow64\MsiExec.exe.
5/20/2011, 19:53:13 GMT -> ProductRegCom/luProductReg(PID=3936/TID=3776): Registering Product -- SESC Submission Control Data - 11.0 - SymAllLanguages
5/20/2011, 19:53:13 GMT -> ProductRegCom/luProductReg(PID=3936/TID=3776): Setting property for Moniker = {4F889C4A-784D-40de-8539-6A29BAA43139}, PropertyName = DescriptiveName, Value = Submission Control signatures
5/20/2011, 19:53:13 GMT -> ProductRegCom/luProductReg(PID=3936/TID=3776): Destroyed luProductReg object.
5/20/2011, 19:53:13 GMT -> LuComServer version: 3.3.0.96
5/20/2011, 19:53:13 GMT -> LiveUpdate Language: English
5/20/2011, 19:53:13 GMT -> LuComServer Sequence Number: 20091211
5/20/2011, 19:53:13 GMT -> OS: Windows 2008R2 Standard Edition, Service Pack: 0, Major: 6, Minor: 1, Build: 7600 (64-bit)
5/20/2011, 19:53:13 GMT -> System Language:[0x0409], User Language:[0x0409]
5/20/2011, 19:53:13 GMT -> IE 7 Support
5/20/2011, 19:53:13 GMT -> ComCtl32 version: 6.16
5/20/2011, 19:53:13 GMT -> IP Addresses: fe80::8d27:8807:57a4:93f7%11, fe80::18e4:207c:3f57:1b9b%13, 192.168.228.100, 2001:0:4137:9e76:18e4:207c:3f57:1b9b
5/20/2011, 19:53:13 GMT -> Loading C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
5/20/2011, 19:53:13 GMT -> Opened the product inventory at "C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
5/20/2011, 19:53:13 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
5/20/2011, 19:53:13 GMT -> LiveUpdate flag value for this run is 0
5/20/2011, 19:53:13 GMT -> ProductRegCom/luProductReg(PID=3936/TID=3776): Successfully created an instance of an luProductReg object!
5/20/2011, 19:53:13 GMT -> ProductRegCom/luProductReg(PID=3936/TID=3776): Path for calling process executable is C:\Windows\syswow64\MsiExec.exe.
5/20/2011, 19:53:13 GMT -> ProductRegCom/luProductReg(PID=3936/TID=3776): Registering Product -- SESC AntiVirus Client Win64 - 11.0 - English
5/20/2011, 19:53:13 GMT -> ProductRegCom/luProductReg(PID=3936/TID=3776): Setting property for Moniker = {158C024F-3D8B-4bb3-968D-CE5696089EC5}, PropertyName = DescriptiveName, Value = Symantec Endpoint Protection client
5/20/2011, 19:53:13 GMT -> ProductRegCom/luProductReg(PID=3936/TID=3776): Destroyed luProductReg object.
5/20/2011, 19:53:13 GMT -> LuComServer version: 3.3.0.96
5/20/2011, 19:53:13 GMT -> LiveUpdate Language: English
5/20/2011, 19:53:13 GMT -> LuComServer Sequence Number: 20091211
5/20/2011, 19:53:13 GMT -> OS: Windows 2008R2 Standard Edition, Service Pack: 0, Major: 6, Minor: 1, Build: 7600 (64-bit)
5/20/2011, 19:53:13 GMT -> System Language:[0x0409], User Language:[0x0409]
5/20/2011, 19:53:13 GMT -> IE 7 Support
5/20/2011, 19:53:13 GMT -> ComCtl32 version: 6.16
5/20/2011, 19:53:13 GMT -> IP Addresses: fe80::8d27:8807:57a4:93f7%11, fe80::18e4:207c:3f57:1b9b%13, 192.168.228.100, 2001:0:4137:9e76:18e4:207c:3f57:1b9b
5/20/2011, 19:53:13 GMT -> Loading C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
5/20/2011, 19:53:13 GMT -> Opened the product inventory at "C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
5/20/2011, 19:53:13 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
5/20/2011, 19:53:13 GMT -> LiveUpdate flag value for this run is 0
5/20/2011, 19:53:13 GMT -> ProductRegCom/luProductReg(PID=3936/TID=2372): Successfully created an instance of an luProductReg object!
5/20/2011, 19:53:13 GMT -> ProductRegCom/luProductReg(PID=3936/TID=2372): Path for calling process executable is C:\Windows\syswow64\MsiExec.exe.
5/20/2011, 19:53:13 GMT -> ProductRegCom/luProductReg(PID=3936/TID=2372): Setting property for Moniker = {1CD85198-26C6-4bac-8C72-5D34B025DE35}, PropertyName = SEQ.CURDEFS, Value = 0
5/20/2011, 19:53:13 GMT -> ProductRegCom/luProductReg(PID=3936/TID=2372): Setting property for Moniker = {DFB8BBDD-52DE-427e-9EB3-FB7665893221}, PropertyName = SEQ.CURDEFS, Value = 0
5/20/2011, 19:53:13 GMT -> ProductRegCom/luProductReg(PID=3936/TID=2372): Setting property for Moniker = {DFB8BBDD-52DE-427e-9EB3-FB7665893221}, PropertyName = SEQ.HUBDEFS, Value = 0
5/20/2011, 19:53:13 GMT -> ProductRegCom/luProductReg(PID=3936/TID=2372): Setting property for Moniker = {158C024F-3D8B-4bb3-968D-CE5696089EC5}, PropertyName = SEQ.PATCH, Value = 6005
5/20/2011, 19:53:13 GMT -> ProductRegCom/luProductReg(PID=3936/TID=2372): Destroyed luProductReg object.
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
// End LuComServer
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////

////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
// Start LuComServer
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
5/20/2011, 19:53:20 GMT -> LuComServer version: 3.3.0.96
5/20/2011, 19:53:20 GMT -> LiveUpdate Language: English
5/20/2011, 19:53:20 GMT -> LuComServer Sequence Number: 20091211
5/20/2011, 19:53:20 GMT -> OS: Windows 2008R2 Standard Edition, Service Pack: 0, Major: 6, Minor: 1, Build: 7600 (64-bit)
5/20/2011, 19:53:20 GMT -> System Language:[0x0409], User Language:[0x0409]
5/20/2011, 19:53:20 GMT -> IE 7 Support
5/20/2011, 19:53:20 GMT -> ComCtl32 version: 6.16
5/20/2011, 19:53:21 GMT -> IP Addresses: fe80::8d27:8807:57a4:93f7%11, fe80::18e4:207c:3f57:1b9b%13, 192.168.228.100, 2001:0:4137:9e76:18e4:207c:3f57:1b9b
5/20/2011, 19:53:21 GMT -> Loading C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
5/20/2011, 19:53:21 GMT -> Opened the product inventory at "C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
5/20/2011, 19:53:21 GMT -> Account launching LiveUpdate is not a logged in user's account
5/20/2011, 19:53:21 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
5/20/2011, 19:53:21 GMT -> LiveUpdate flag value for this run is 0
5/20/2011, 19:53:21 GMT -> ProductRegCom/luProductReg(PID=1188/TID=2488): Successfully created an instance of an luProductReg object!
5/20/2011, 19:53:21 GMT -> ProductRegCom/luProductReg(PID=1188/TID=2488): Path for calling process executable is C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\SescLU.exe.
5/20/2011, 19:53:21 GMT -> ProductRegCom/luProductReg(PID=1188/TID=2488): Setting property for Moniker = {1CD85198-26C6-4bac-8C72-5D34B025DE35}, PropertyName = LU_SESSION_OPTOUT, Value = YES
5/20/2011, 19:53:21 GMT -> ProductRegCom/luProductReg(PID=1188/TID=2488): Setting property for Moniker = {4F889C4A-784D-40de-8539-6A29BAA43139}, PropertyName = LU_SESSION_OPTOUT, Value = YES
5/20/2011, 19:53:21 GMT -> ProductRegCom/luProductReg(PID=1188/TID=2488): Setting property for Moniker = {DFB8BBDD-52DE-427e-9EB3-FB7665893221}, PropertyName = LU_SESSION_OPTOUT, Value = YES
5/20/2011, 19:53:21 GMT -> ProductRegCom/luProductReg(PID=1188/TID=2488): Setting property for Moniker = {ECCC5006-EF61-4c99-829A-417B6C6AD963}, PropertyName = LU_SESSION_OPTOUT, Value = YES
5/20/2011, 19:53:21 GMT -> ProductRegCom/luProductReg(PID=1188/TID=2488): Set property error -- Moniker {ECCC5006-EF61-4c99-829A-417B6C6AD963} is not found.
5/20/2011, 19:53:21 GMT -> ProductRegCom/luProductReg(PID=1188/TID=2488): Setting property for Moniker = {158C024F-3D8B-4bb3-968D-CE5696089EC5}, PropertyName = LU_SESSION_OPTOUT, Value = YES
5/20/2011, 19:53:21 GMT -> ProductRegCom/luProductReg(PID=1188/TID=2488): Destroyed luProductReg object.
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
// End LuComServer
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////

////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
// Start LuComServer
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
5/20/2011, 19:53:36 GMT -> LuComServer version: 3.3.0.96
5/20/2011, 19:53:36 GMT -> LiveUpdate Language: English
5/20/2011, 19:53:36 GMT -> LuComServer Sequence Number: 20091211
5/20/2011, 19:53:36 GMT -> OS: Windows 2008R2 Standard Edition, Service Pack: 0, Major: 6, Minor: 1, Build: 7600 (64-bit)
5/20/2011, 19:53:36 GMT -> System Language:[0x0409], User Language:[0x0409]
5/20/2011, 19:53:36 GMT -> IE 7 Support
5/20/2011, 19:53:36 GMT -> ComCtl32 version: 6.16
5/20/2011, 19:53:36 GMT -> IP Addresses: fe80::8d27:8807:57a4:93f7%11, fe80::18e4:207c:3f57:1b9b%13, 192.168.228.100, 2001:0:4137:9e76:18e4:207c:3f57:1b9b
5/20/2011, 19:53:36 GMT -> Loading C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
5/20/2011, 19:53:36 GMT -> Opened the product inventory at "C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
5/20/2011, 19:53:36 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
5/20/2011, 19:53:36 GMT -> LiveUpdate flag value for this run is 0
5/20/2011, 19:53:36 GMT -> ProductRegCom/luGroup(PID=3980/TID=2628): Successfully created an instance of an luGroup object!
5/20/2011, 19:53:36 GMT -> ProductRegCom/luGroup(PID=3980/TID=2628): Path for calling process executable is C:\Program Files (x86)\Symantec\LiveUpdate\LUALL.EXE.
5/20/2011, 19:53:36 GMT -> ProductRegCom/luGroup(PID=3980/TID=2628): Destroyed luGroup object.
5/20/2011, 19:53:36 GMT -> Scanning the following file for potentially malicious host entries: C:\Windows\system32\Drivers\etc\hosts
5/20/2011, 19:53:36 GMT -> Scanning the following file for potentially malicious host entries: C:\Windows\system32\Drivers\etc\lmhosts.sam
5/20/2011, 19:53:36 GMT -> LiveUpdate did not find any malicious host entries in any hosts files.
5/20/2011, 19:53:36 GMT -> **** Starting an Express Mode LiveUpdate Session ****
5/20/2011, 19:53:36 GMT -> User Type: Administrator.
5/20/2011, 19:53:39 GMT -> ***********************        Start of New LU Session        ***********************
5/20/2011, 19:53:39 GMT -> EVENT - SESSION START EVENT - The LiveUpdate session is running in Express Mode.
5/20/2011, 19:53:39 GMT -> Check for updates to:  Product: LiveUpdate, Version: 3.3.0.96, Language: English.  Mini-TRI file name: liveupdate_3.3.0.96_english_livetri.zip
5/20/2011, 19:53:39 GMT -> LiveUpdate is about to launch a new callback proxy process for product SESC Virus Definitions Win64 (x64) v11 with moniker {1CD85198-26C6-4bac-8C72-5D34B025DE35}.
5/20/2011, 19:53:39 GMT -> Starting Callback Proxy Worker thread.
5/20/2011, 19:53:39 GMT -> The callback proxy for moniker {1CD85198-26C6-4bac-8C72-5D34B025DE35} was successfully registered with LiveUpdate.
5/20/2011, 19:53:39 GMT -> LiveUpdate successfully launched a new callback proxy process for product SESC Virus Definitions Win64 (x64) v11.
5/20/2011, 19:53:39 GMT -> LiveUpdate is about to execute a PreSession callback for product SESC Virus Definitions Win64 (x64) v11.
5/20/2011, 19:53:39 GMT -> ProductRegCom/luProductReg(PID=3280/TID=1244): Successfully created an instance of an luProductReg object!
5/20/2011, 19:53:39 GMT -> ProductRegCom/luProductReg(PID=3280/TID=1244): Path for calling process executable is C:\Program Files (x86)\Symantec\LiveUpdate\LuCallbackProxy.exe.
5/20/2011, 19:53:39 GMT -> ProductRegCom/luProductReg(PID=3280/TID=1244): Setting property for Moniker = {DFB8BBDD-52DE-427e-9EB3-FB7665893221}, PropertyName = SEQ.HUBDEFS, Value = 0
5/20/2011, 19:53:39 GMT -> ProductRegCom/luProductReg(PID=3280/TID=1244): Setting property for Moniker = {DFB8BBDD-52DE-427e-9EB3-FB7665893221}, PropertyName = SEQ.CURDEFS, Value = 0
5/20/2011, 19:53:39 GMT -> ProductRegCom/luProductReg(PID=3280/TID=1244): Setting property for Moniker = {1CD85198-26C6-4bac-8C72-5D34B025DE35}, PropertyName = SEQ.CURDEFS, Value = 0
5/20/2011, 19:53:39 GMT -> ProductRegCom/luProductReg(PID=3280/TID=1244): Destroyed luProductReg object.
5/20/2011, 19:53:39 GMT -> ProductRegCom/luProductReg(PID=3280/TID=1244): Successfully created an instance of an luProductReg object!
5/20/2011, 19:53:39 GMT -> ProductRegCom/luProductReg(PID=3280/TID=1244): Path for calling process executable is C:\Program Files (x86)\Symantec\LiveUpdate\LuCallbackProxy.exe.
5/20/2011, 19:53:39 GMT -> ProductRegCom/luProductReg(PID=3280/TID=1244): Setting property for Moniker = {DFB8BBDD-52DE-427e-9EB3-FB7665893221}, PropertyName = VERSION, Value = MicroDefsB.Error
5/20/2011, 19:53:39 GMT -> ProductRegCom/luProductReg(PID=3280/TID=1244): Setting property for Moniker = {DFB8BBDD-52DE-427e-9EB3-FB7665893221}, PropertyName = SEQ.HUBDEFS, Value = 0
5/20/2011, 19:53:39 GMT -> ProductRegCom/luProductReg(PID=3280/TID=1244): Setting property for Moniker = {DFB8BBDD-52DE-427e-9EB3-FB7665893221}, PropertyName = SEQ.CURDEFS, Value = 0
5/20/2011, 19:53:39 GMT -> ProductRegCom/luProductReg(PID=3280/TID=1244): Destroyed luProductReg object.
5/20/2011, 19:53:40 GMT -> ProductRegCom/luProductReg(PID=3280/TID=1244): Successfully created an instance of an luProductReg object!
5/20/2011, 19:53:40 GMT -> ProductRegCom/luProductReg(PID=3280/TID=1244): Path for calling process executable is C:\Program Files (x86)\Symantec\LiveUpdate\LuCallbackProxy.exe.
5/20/2011, 19:53:40 GMT -> ProductRegCom/luProductReg(PID=3280/TID=1244): Setting property for Moniker = {1CD85198-26C6-4bac-8C72-5D34B025DE35}, PropertyName = SEQ.CURDEFS, Value = 0
5/20/2011, 19:53:40 GMT -> ProductRegCom/luProductReg(PID=3280/TID=1244): Destroyed luProductReg object.
5/20/2011, 19:53:40 GMT -> ProductRegCom/luProductReg(PID=3280/TID=1244): Successfully created an instance of an luProductReg object!
5/20/2011, 19:53:40 GMT -> ProductRegCom/luProductReg(PID=3280/TID=1244): Path for calling process executable is C:\Program Files (x86)\Symantec\LiveUpdate\LuCallbackProxy.exe.
5/20/2011, 19:53:40 GMT -> ProductRegCom/luProductReg(PID=3280/TID=1244): Setting property for Moniker = {DFB8BBDD-52DE-427e-9EB3-FB7665893221}, PropertyName = SEQ.CURDEFS, Value = 0
5/20/2011, 19:53:40 GMT -> ProductRegCom/luProductReg(PID=3280/TID=1244): Destroyed luProductReg object.
5/20/2011, 19:53:40 GMT -> ProductRegCom/luProductReg(PID=3280/TID=1244): Successfully created an instance of an luProductReg object!
5/20/2011, 19:53:40 GMT -> ProductRegCom/luProductReg(PID=3280/TID=1244): Path for calling process executable is C:\Program Files (x86)\Symantec\LiveUpdate\LuCallbackProxy.exe.
5/20/2011, 19:53:40 GMT -> ProductRegCom/luProductReg(PID=3280/TID=1244): Setting property for Moniker = {DFB8BBDD-52DE-427e-9EB3-FB7665893221}, PropertyName = SEQ.HUBDEFS, Value = 0
5/20/2011, 19:53:40 GMT -> ProductRegCom/luProductReg(PID=3280/TID=1244): Destroyed luProductReg object.
5/20/2011, 19:53:40 GMT -> The callback proxy finished executing the callback with a result code of 0x0
5/20/2011, 19:53:40 GMT -> The PreSession callback for product SESC Virus Definitions Win64 (x64) v11 completed with a result of 0x0      
5/20/2011, 19:53:40 GMT -> Progress Update: TRYING_HOST: HostName: "liveupdate.symantecliveupdate.com" URL: "http://liveupdate.symantecliveupdate.com" HostNumber: 0
5/20/2011, 19:53:40 GMT -> Progress Update: TRIFILE_DOWNLOAD_START: Number of TRI files: 0 Downloading LiveUpdate catalog file
5/20/2011, 19:53:40 GMT -> LiveUpdate will download the first Mini-TRI file, liveupdate_3.3.0.96_english_livetri.zip
5/20/2011, 19:53:40 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
5/20/2011, 19:53:40 GMT -> Progress Update: PRE_CONNECT: Proxy: "(not-available)" Agent: "Symantec LiveUpdate" AccessType: 0x0      
5/20/2011, 19:53:40 GMT -> Progress Update: CONNECTED: Proxy: "(not-available)" Agent: "zPEl4hsSdis1B2NtCLv2ZrA6B80wMbWTQAAAAA" AccessType: 0x0      
5/20/2011, 19:53:40 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantecliveupdate.com/liveupdate_3.3.0.96_english_livetri.zip", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
5/20/2011, 19:53:40 GMT -> HttpSendRequest (status 404): Request failed - File does not exist on the server.
5/20/2011, 19:53:40 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://liveupdate.symantecliveupdate.com/liveupdate_3.3.0.96_english_livetri.zip", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\liveupdate_3.3.0.96_english_livetri.zip" HR: 0x802A0026
5/20/2011, 19:53:40 GMT -> HR 0x802A0026 DECODE: E_HTTP_NOT_FOUND
5/20/2011, 19:53:40 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 0
5/20/2011, 19:53:40 GMT -> LiveUpdate will check for Mini-TRI file support on the server since the first Mini-TRI file was not available (liveupdate_3.3.0.96_english_livetri.zip).
5/20/2011, 19:53:40 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
5/20/2011, 19:53:40 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantecliveupdate.com/minitri.flg", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
5/20/2011, 19:53:40 GMT -> HttpSendRequest (status 304): Request succeeded - File up to date so download is not required
5/20/2011, 19:53:40 GMT -> Progress Update: DOWNLOAD_FILE_NOT_MODIFIED: URL: "http://liveupdate.symantecliveupdate.com/minitri.flg", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\minitri.flg"
5/20/2011, 19:53:40 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: URL: "http://liveupdate.symantecliveupdate.com/minitri.flg", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\minitri.flg" HR: 0x0      
5/20/2011, 19:53:40 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 1
5/20/2011, 19:53:40 GMT -> Progress Update: HOST_SELECTED: Host IP: "204.2.215.32" URL: "http://liveupdate.symantecliveupdate.com" HostNumber: 0
5/20/2011, 19:53:40 GMT -> Attempting to load SymCrypt...
5/20/2011, 19:53:40 GMT -> SymCrypt.dll does not exist.
5/20/2011, 19:53:40 GMT -> EVENT - SERVER SELECTION SUCCESSFUL EVENT - LiveUpdate connected to server liveupdate.symantecliveupdate.com at path  via a HTTP connection. The server connection connected with a return code of 200, Successfully download TRI file
5/20/2011, 19:53:40 GMT -> LiveUpdate is connected to a server with Mini-TRI file support.  LiveUpdate will download and process the remaining Mini-TRI files.
5/20/2011, 19:53:40 GMT -> Check for updates to:  Product: Automatic LiveUpdate, Version: 3.3.0.96, Language: English.  Mini-TRI file name: automatic$20liveupdate_3.3.0.96_english_livetri.zip
5/20/2011, 19:53:40 GMT -> Check for updates to:  Product: Symevent64x86 Installer, Version: 12.8, Language: SymAllLanguages.  Mini-TRI file name: symevent64x86$20installer_12.8_symalllanguages_livetri.zip
5/20/2011, 19:53:40 GMT -> Check for updates to:  Product: MS Light, Version: 5.0, Language: SymAllLanguages.  Mini-TRI file name: ms$20light_5.0_symalllanguages_livetri.zip
5/20/2011, 19:53:40 GMT -> Progress Update: TRIFILE_DOWNLOAD_END: Number of TRI files: "0"
5/20/2011, 19:53:40 GMT -> Progress Update: TRIFILE_DOWNLOAD_START: Number of TRI files: 3 Downloading Mini-TRI files
5/20/2011, 19:53:40 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
5/20/2011, 19:53:40 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantecliveupdate.com/automatic$20liveupdate_3.3.0.96_english_livetri.zip", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
5/20/2011, 19:53:40 GMT -> HttpSendRequest (status 404): Request failed - File does not exist on the server.
5/20/2011, 19:53:40 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://liveupdate.symantecliveupdate.com/automatic$20liveupdate_3.3.0.96_english_livetri.zip", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\automatic$20liveupdate_3.3.0.96_english_livetri.zip" HR: 0x802A0026
5/20/2011, 19:53:40 GMT -> HR 0x802A0026 DECODE: E_HTTP_NOT_FOUND
5/20/2011, 19:53:40 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 0
5/20/2011, 19:53:40 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
5/20/2011, 19:53:41 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantecliveupdate.com/symevent64x86$20installer_12.8_symalllanguages_livetri.zip", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
5/20/2011, 19:53:41 GMT -> HttpSendRequest (status 404): Request failed - File does not exist on the server.
5/20/2011, 19:53:41 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://liveupdate.symantecliveupdate.com/symevent64x86$20installer_12.8_symalllanguages_livetri.zip", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\symevent64x86$20installer_12.8_symalllanguages_livetri.zip" HR: 0x802A0026
5/20/2011, 19:53:41 GMT -> HR 0x802A0026 DECODE: E_HTTP_NOT_FOUND
5/20/2011, 19:53:41 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 0
5/20/2011, 19:53:41 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
5/20/2011, 19:53:41 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantecliveupdate.com/ms$20light_5.0_symalllanguages_livetri.zip", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
5/20/2011, 19:53:41 GMT -> HttpSendRequest (status 404): Request failed - File does not exist on the server.
5/20/2011, 19:53:41 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://liveupdate.symantecliveupdate.com/ms$20light_5.0_symalllanguages_livetri.zip", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\ms$20light_5.0_symalllanguages_livetri.zip" HR: 0x802A0026
5/20/2011, 19:53:41 GMT -> HR 0x802A0026 DECODE: E_HTTP_NOT_FOUND
5/20/2011, 19:53:41 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 0
5/20/2011, 19:53:41 GMT -> Progress Update: TRIFILE_DOWNLOAD_END: Number of TRI files: "0"
5/20/2011, 19:53:41 GMT -> ********* Finished Finding Available Updates *********

5/20/2011, 19:53:41 GMT -> LiveUpdate did not find any new updates for the given products.
5/20/2011, 19:53:41 GMT -> EVENT - SESSION END SUCCESSFUL EVENT - The LiveUpdate session ran in Express Mode. LiveUpdate found 0 updates available, of which 0 were installed and 0 failed to install.  The LiveUpdate session exited with a return code of 100, LiveUpdate ran successfully.  There are no new updates to your products.
5/20/2011, 19:53:41 GMT -> ProductRegCom/luGroup(PID=3980/TID=2628): Successfully created an instance of an luGroup object!
5/20/2011, 19:53:41 GMT -> ProductRegCom/luGroup(PID=3980/TID=2628): Path for calling process executable is C:\Program Files (x86)\Symantec\LiveUpdate\LUALL.EXE.
5/20/2011, 19:53:41 GMT -> ProductRegCom/luGroup(PID=3980/TID=2628): Destroyed luGroup object.
5/20/2011, 19:53:45 GMT -> LiveUpdate is about to execute a PostSession callback for product SESC Virus Definitions Win64 (x64) v11.
5/20/2011, 19:53:45 GMT -> ProductRegCom/luProductReg(PID=3280/TID=1244): Successfully created an instance of an luProductReg object!
5/20/2011, 19:53:45 GMT -> ProductRegCom/luProductReg(PID=3280/TID=1244): Path for calling process executable is C:\Program Files (x86)\Symantec\LiveUpdate\LuCallbackProxy.exe.
5/20/2011, 19:53:45 GMT -> ProductRegCom/luProductReg(PID=3280/TID=1244): Destroyed luProductReg object.
5/20/2011, 19:53:45 GMT -> The callback proxy finished executing the callback with a result code of 0x0
5/20/2011, 19:53:45 GMT -> The PostSession callback for product SESC Virus Definitions Win64 (x64) v11 completed with a result of 0x0      
5/20/2011, 19:53:45 GMT -> Successfully released callback {855BA5F4-6588-4F09-AE61-847E59D08CB0}
5/20/2011, 19:53:45 GMT -> LiveUpdate has called the last callback for product SESC Virus Definitions Win64 (x64) v11, so LiveUpdate is informing the callback proxy that it can exit.
5/20/2011, 19:53:45 GMT -> The callback proxy executable for product {1CD85198-26C6-4bac-8C72-5D34B025DE35} is exiting with no errors
5/20/2011, 19:53:45 GMT -> ***********************           End of LU Session           ***********************
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
// End LuComServer
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////

////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
// Start LuComServer
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
5/20/2011, 19:54:18 GMT -> LuComServer version: 3.3.0.96
5/20/2011, 19:54:18 GMT -> LiveUpdate Language: English
5/20/2011, 19:54:18 GMT -> LuComServer Sequence Number: 20091211
5/20/2011, 19:54:18 GMT -> OS: Windows 2008R2 Standard Edition, Service Pack: 0, Major: 6, Minor: 1, Build: 7600 (64-bit)
5/20/2011, 19:54:18 GMT -> System Language:[0x0409], User Language:[0x0409]
5/20/2011, 19:54:18 GMT -> IE 7 Support
5/20/2011, 19:54:18 GMT -> ComCtl32 version: 6.16
5/20/2011, 19:54:18 GMT -> IP Addresses: fe80::8d27:8807:57a4:93f7%11, fe80::18e4:207c:3f57:1b9b%13, 192.168.228.100, 2001:0:4137:9e76:18e4:207c:3f57:1b9b
5/20/2011, 19:54:18 GMT -> Loading C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
5/20/2011, 19:54:18 GMT -> Opened the product inventory at "C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
5/20/2011, 19:54:18 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
5/20/2011, 19:54:18 GMT -> LiveUpdate flag value for this run is 0
5/20/2011, 19:54:18 GMT -> ProductRegCom/luGroup(PID=3700/TID=2828): Successfully created an instance of an luGroup object!
5/20/2011, 19:54:18 GMT -> ProductRegCom/luGroup(PID=3700/TID=2828): Path for calling process executable is C:\Program Files (x86)\Symantec\LiveUpdate\luall.exe.
5/20/2011, 19:54:18 GMT -> ProductRegCom/luGroup(PID=3700/TID=2828): Destroyed luGroup object.
5/20/2011, 19:54:18 GMT -> Scanning the following file for potentially malicious host entries: C:\Windows\system32\Drivers\etc\hosts
5/20/2011, 19:54:18 GMT -> Scanning the following file for potentially malicious host entries: C:\Windows\system32\Drivers\etc\lmhosts.sam
5/20/2011, 19:54:18 GMT -> LiveUpdate did not find any malicious host entries in any hosts files.
5/20/2011, 19:54:18 GMT -> **** Starting an Express Mode LiveUpdate Session ****
5/20/2011, 19:54:18 GMT -> User Type: Administrator.
5/20/2011, 19:54:24 GMT -> ***********************        Start of New LU Session        ***********************
5/20/2011, 19:54:24 GMT -> EVENT - SESSION START EVENT - The LiveUpdate session is running in Express Mode.
5/20/2011, 19:54:24 GMT -> Check for updates to:  Product: LiveUpdate, Version: 3.3.0.96, Language: English.  Mini-TRI file name: liveupdate_3.3.0.96_english_livetri.zip
5/20/2011, 19:54:24 GMT -> LiveUpdate is about to launch a new callback proxy process for product SESC Virus Definitions Win64 (x64) v11 with moniker {1CD85198-26C6-4bac-8C72-5D34B025DE35}.
5/20/2011, 19:54:24 GMT -> Starting Callback Proxy Worker thread.
5/20/2011, 19:54:24 GMT -> The callback proxy for moniker {1CD85198-26C6-4bac-8C72-5D34B025DE35} was successfully registered with LiveUpdate.
5/20/2011, 19:54:24 GMT -> LiveUpdate successfully launched a new callback proxy process for product SESC Virus Definitions Win64 (x64) v11.
5/20/2011, 19:54:24 GMT -> LiveUpdate is about to execute a PreSession callback for product SESC Virus Definitions Win64 (x64) v11.
5/20/2011, 19:54:24 GMT -> ProductRegCom/luProductReg(PID=1348/TID=4032): Successfully created an instance of an luProductReg object!
5/20/2011, 19:54:24 GMT -> ProductRegCom/luProductReg(PID=1348/TID=4032): Path for calling process executable is C:\Program Files (x86)\Symantec\LiveUpdate\LuCallbackProxy.exe.
5/20/2011, 19:54:24 GMT -> ProductRegCom/luProductReg(PID=1348/TID=4032): Setting property for Moniker = {DFB8BBDD-52DE-427e-9EB3-FB7665893221}, PropertyName = SEQ.HUBDEFS, Value = 0
5/20/2011, 19:54:24 GMT -> ProductRegCom/luProductReg(PID=1348/TID=4032): Setting property for Moniker = {DFB8BBDD-52DE-427e-9EB3-FB7665893221}, PropertyName = SEQ.CURDEFS, Value = 0
5/20/2011, 19:54:24 GMT -> ProductRegCom/luProductReg(PID=1348/TID=4032): Setting property for Moniker = {1CD85198-26C6-4bac-8C72-5D34B025DE35}, PropertyName = SEQ.CURDEFS, Value = 0
5/20/2011, 19:54:24 GMT -> ProductRegCom/luProductReg(PID=1348/TID=4032): Destroyed luProductReg object.
5/20/2011, 19:54:24 GMT -> ProductRegCom/luProductReg(PID=1348/TID=4032): Successfully created an instance of an luProductReg object!
5/20/2011, 19:54:24 GMT -> ProductRegCom/luProductReg(PID=1348/TID=4032): Path for calling process executable is C:\Program Files (x86)\Symantec\LiveUpdate\LuCallbackProxy.exe.
5/20/2011, 19:54:24 GMT -> ProductRegCom/luProductReg(PID=1348/TID=4032): Setting property for Moniker = {DFB8BBDD-52DE-427e-9EB3-FB7665893221}, PropertyName = VERSION, Value = MicroDefsB.Error
5/20/2011, 19:54:24 GMT -> ProductRegCom/luProductReg(PID=1348/TID=4032): Setting property for Moniker = {DFB8BBDD-52DE-427e-9EB3-FB7665893221}, PropertyName = SEQ.HUBDEFS, Value = 0
5/20/2011, 19:54:24 GMT -> ProductRegCom/luProductReg(PID=1348/TID=4032): Setting property for Moniker = {DFB8BBDD-52DE-427e-9EB3-FB7665893221}, PropertyName = SEQ.CURDEFS, Value = 0
5/20/2011, 19:54:24 GMT -> ProductRegCom/luProductReg(PID=1348/TID=4032): Destroyed luProductReg object.
5/20/2011, 19:54:24 GMT -> ProductRegCom/luProductReg(PID=1348/TID=4032): Successfully created an instance of an luProductReg object!
5/20/2011, 19:54:24 GMT -> ProductRegCom/luProductReg(PID=1348/TID=4032): Path for calling process executable is C:\Program Files (x86)\Symantec\LiveUpdate\LuCallbackProxy.exe.
5/20/2011, 19:54:24 GMT -> ProductRegCom/luProductReg(PID=1348/TID=4032): Setting property for Moniker = {1CD85198-26C6-4bac-8C72-5D34B025DE35}, PropertyName = SEQ.CURDEFS, Value = 0
5/20/2011, 19:54:24 GMT -> ProductRegCom/luProductReg(PID=1348/TID=4032): Destroyed luProductReg object.
5/20/2011, 19:54:24 GMT -> ProductRegCom/luProductReg(PID=1348/TID=4032): Successfully created an instance of an luProductReg object!
5/20/2011, 19:54:24 GMT -> ProductRegCom/luProductReg(PID=1348/TID=4032): Path for calling process executable is C:\Program Files (x86)\Symantec\LiveUpdate\LuCallbackProxy.exe.
5/20/2011, 19:54:24 GMT -> ProductRegCom/luProductReg(PID=1348/TID=4032): Setting property for Moniker = {DFB8BBDD-52DE-427e-9EB3-FB7665893221}, PropertyName = SEQ.CURDEFS, Value = 0
5/20/2011, 19:54:24 GMT -> ProductRegCom/luProductReg(PID=1348/TID=4032): Destroyed luProductReg object.
5/20/2011, 19:54:24 GMT -> ProductRegCom/luProductReg(PID=1348/TID=4032): Successfully created an instance of an luProductReg object!
5/20/2011, 19:54:24 GMT -> ProductRegCom/luProductReg(PID=1348/TID=4032): Path for calling process executable is C:\Program Files (x86)\Symantec\LiveUpdate\LuCallbackProxy.exe.
5/20/2011, 19:54:24 GMT -> ProductRegCom/luProductReg(PID=1348/TID=4032): Setting property for Moniker = {DFB8BBDD-52DE-427e-9EB3-FB7665893221}, PropertyName = SEQ.HUBDEFS, Value = 0
5/20/2011, 19:54:24 GMT -> ProductRegCom/luProductReg(PID=1348/TID=4032): Destroyed luProductReg object.
5/20/2011, 19:54:24 GMT -> The callback proxy finished executing the callback with a result code of 0x0
5/20/2011, 19:54:24 GMT -> The PreSession callback for product SESC Virus Definitions Win64 (x64) v11 completed with a result of 0x0      
5/20/2011, 19:54:24 GMT -> Progress Update: TRYING_HOST: HostName: "liveupdate.symantecliveupdate.com" URL: "http://liveupdate.symantecliveupdate.com" HostNumber: 0
5/20/2011, 19:54:24 GMT -> Progress Update: TRIFILE_DOWNLOAD_START: Number of TRI files: 0 Downloading LiveUpdate catalog file
5/20/2011, 19:54:24 GMT -> LiveUpdate will download the first Mini-TRI file, liveupdate_3.3.0.96_english_livetri.zip
5/20/2011, 19:54:24 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
5/20/2011, 19:54:24 GMT -> Progress Update: PRE_CONNECT: Proxy: "(not-available)" Agent: "Symantec LiveUpdate" AccessType: 0x0      
5/20/2011, 19:54:25 GMT -> Progress Update: CONNECTED: Proxy: "(not-available)" Agent: "zPEl4hsSdis1B2NtCLv2ZrA6B806sbWTQAAAAA" AccessType: 0x0      
5/20/2011, 19:54:25 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantecliveupdate.com/liveupdate_3.3.0.96_english_livetri.zip", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
5/20/2011, 19:54:25 GMT -> HttpSendRequest (status 404): Request failed - File does not exist on the server.
5/20/2011, 19:54:25 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://liveupdate.symantecliveupdate.com/liveupdate_3.3.0.96_english_livetri.zip", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\liveupdate_3.3.0.96_english_livetri.zip" HR: 0x802A0026
5/20/2011, 19:54:25 GMT -> HR 0x802A0026 DECODE: E_HTTP_NOT_FOUND
5/20/2011, 19:54:25 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 0
5/20/2011, 19:54:25 GMT -> LiveUpdate will check for Mini-TRI file support on the server since the first Mini-TRI file was not available (liveupdate_3.3.0.96_english_livetri.zip).
5/20/2011, 19:54:25 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
5/20/2011, 19:54:25 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantecliveupdate.com/minitri.flg", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
5/20/2011, 19:54:25 GMT -> HttpSendRequest (status 304): Request succeeded - File up to date so download is not required
5/20/2011, 19:54:25 GMT -> Progress Update: DOWNLOAD_FILE_NOT_MODIFIED: URL: "http://liveupdate.symantecliveupdate.com/minitri.flg", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\minitri.flg"
5/20/2011, 19:54:25 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: URL: "http://liveupdate.symantecliveupdate.com/minitri.flg", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\minitri.flg" HR: 0x0      
5/20/2011, 19:54:25 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 1
5/20/2011, 19:54:25 GMT -> Progress Update: HOST_SELECTED: Host IP: "204.2.215.75" URL: "http://liveupdate.symantecliveupdate.com" HostNumber: 0
5/20/2011, 19:54:25 GMT -> Attempting to load SymCrypt...
5/20/2011, 19:54:25 GMT -> SymCrypt.dll does not exist.
5/20/2011, 19:54:25 GMT -> EVENT - SERVER SELECTION SUCCESSFUL EVENT - LiveUpdate connected to server liveupdate.symantecliveupdate.com at path  via a HTTP connection. The server connection connected with a return code of 200, Successfully download TRI file
5/20/2011, 19:54:25 GMT -> LiveUpdate is connected to a server with Mini-TRI file support.  LiveUpdate will download and process the remaining Mini-TRI files.
5/20/2011, 19:54:25 GMT -> Check for updates to:  Product: Automatic LiveUpdate, Version: 3.3.0.96, Language: English.  Mini-TRI file name: automatic$20liveupdate_3.3.0.96_english_livetri.zip
5/20/2011, 19:54:25 GMT -> Check for updates to:  Product: Symevent64x86 Installer, Version: 12.8, Language: SymAllLanguages.  Mini-TRI file name: symevent64x86$20installer_12.8_symalllanguages_livetri.zip
5/20/2011, 19:54:25 GMT -> Check for updates to:  Product: MS Light, Version: 5.0, Language: SymAllLanguages.  Mini-TRI file name: ms$20light_5.0_symalllanguages_livetri.zip
5/20/2011, 19:54:25 GMT -> Progress Update: TRIFILE_DOWNLOAD_END: Number of TRI files: "0"
5/20/2011, 19:54:25 GMT -> Progress Update: TRIFILE_DOWNLOAD_START: Number of TRI files: 3 Downloading Mini-TRI files
5/20/2011, 19:54:25 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
5/20/2011, 19:54:25 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantecliveupdate.com/automatic$20liveupdate_3.3.0.96_english_livetri.zip", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
5/20/2011, 19:54:25 GMT -> HttpSendRequest (status 404): Request failed - File does not exist on the server.
5/20/2011, 19:54:25 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://liveupdate.symantecliveupdate.com/automatic$20liveupdate_3.3.0.96_english_livetri.zip", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\automatic$20liveupdate_3.3.0.96_english_livetri.zip" HR: 0x802A0026
5/20/2011, 19:54:25 GMT -> HR 0x802A0026 DECODE: E_HTTP_NOT_FOUND
5/20/2011, 19:54:25 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 0
5/20/2011, 19:54:25 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
5/20/2011, 19:54:25 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantecliveupdate.com/symevent64x86$20installer_12.8_symalllanguages_livetri.zip", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
5/20/2011, 19:54:25 GMT -> HttpSendRequest (status 404): Request failed - File does not exist on the server.
5/20/2011, 19:54:25 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://liveupdate.symantecliveupdate.com/symevent64x86$20installer_12.8_symalllanguages_livetri.zip", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\symevent64x86$20installer_12.8_symalllanguages_livetri.zip" HR: 0x802A0026
5/20/2011, 19:54:25 GMT -> HR 0x802A0026 DECODE: E_HTTP_NOT_FOUND
5/20/2011, 19:54:25 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 0
5/20/2011, 19:54:25 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
5/20/2011, 19:54:25 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantecliveupdate.com/ms$20light_5.0_symalllanguages_livetri.zip", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
5/20/2011, 19:54:25 GMT -> HttpSendRequest (status 404): Request failed - File does not exist on the server.
5/20/2011, 19:54:25 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://liveupdate.symantecliveupdate.com/ms$20light_5.0_symalllanguages_livetri.zip", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\ms$20light_5.0_symalllanguages_livetri.zip" HR: 0x802A0026
5/20/2011, 19:54:25 GMT -> HR 0x802A0026 DECODE: E_HTTP_NOT_FOUND
5/20/2011, 19:54:25 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 0
5/20/2011, 19:54:25 GMT -> Progress Update: TRIFILE_DOWNLOAD_END: Number of TRI files: "0"
5/20/2011, 19:54:25 GMT -> ********* Finished Finding Available Updates *********

5/20/2011, 19:54:25 GMT -> LiveUpdate did not find any new updates for the given products.
5/20/2011, 19:54:25 GMT -> EVENT - SESSION END SUCCESSFUL EVENT - The LiveUpdate session ran in Express Mode. LiveUpdate found 0 updates available, of which 0 were installed and 0 failed to install.  The LiveUpdate session exited with a return code of 100, LiveUpdate ran successfully.  There are no new updates to your products.
5/20/2011, 19:54:25 GMT -> ProductRegCom/luGroup(PID=3700/TID=2828): Successfully created an instance of an luGroup object!
5/20/2011, 19:54:25 GMT -> ProductRegCom/luGroup(PID=3700/TID=2828): Path for calling process executable is C:\Program Files (x86)\Symantec\LiveUpdate\luall.exe.
5/20/2011, 19:54:25 GMT -> ProductRegCom/luGroup(PID=3700/TID=2828): Destroyed luGroup object.
5/20/2011, 19:54:28 GMT -> LiveUpdate is about to execute a PostSession callback for product SESC Virus Definitions Win64 (x64) v11.
5/20/2011, 19:54:28 GMT -> ProductRegCom/luProductReg(PID=1348/TID=4032): Successfully created an instance of an luProductReg object!
5/20/2011, 19:54:28 GMT -> ProductRegCom/luProductReg(PID=1348/TID=4032): Path for calling process executable is C:\Program Files (x86)\Symantec\LiveUpdate\LuCallbackProxy.exe.
5/20/2011, 19:54:28 GMT -> ProductRegCom/luProductReg(PID=1348/TID=4032): Destroyed luProductReg object.
5/20/2011, 19:54:28 GMT -> The callback proxy finished executing the callback with a result code of 0x0
5/20/2011, 19:54:28 GMT -> The PostSession callback for product SESC Virus Definitions Win64 (x64) v11 completed with a result of 0x0      
5/20/2011, 19:54:28 GMT -> Successfully released callback {855BA5F4-6588-4F09-AE61-847E59D08CB0}
5/20/2011, 19:54:28 GMT -> LiveUpdate has called the last callback for product SESC Virus Definitions Win64 (x64) v11, so LiveUpdate is informing the callback proxy that it can exit.
5/20/2011, 19:54:28 GMT -> The callback proxy executable for product {1CD85198-26C6-4bac-8C72-5D34B025DE35} is exiting with no errors
5/20/2011, 19:54:28 GMT -> ***********************           End of LU Session           ***********************
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
// End LuComServer
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////

////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
// Start LuComServer
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
5/20/2011, 19:59:37 GMT -> LuComServer version: 3.3.0.96
5/20/2011, 19:59:37 GMT -> LiveUpdate Language: English
5/20/2011, 19:59:37 GMT -> LuComServer Sequence Number: 20091211
5/20/2011, 19:59:37 GMT -> OS: Windows 2008R2 Standard Edition, Service Pack: 0, Major: 6, Minor: 1, Build: 7600 (64-bit)
5/20/2011, 19:59:37 GMT -> System Language:[0x0409], User Language:[0x0409]
5/20/2011, 19:59:37 GMT -> IE 7 Support
5/20/2011, 19:59:37 GMT -> ComCtl32 version: 6.16
5/20/2011, 19:59:37 GMT -> IP Addresses: fe80::8d27:8807:57a4:93f7%11, fe80::18e4:207c:3f57:1b9b%13, 192.168.228.100, 2001:0:4137:9e76:18e4:207c:3f57:1b9b
5/20/2011, 19:59:37 GMT -> Loading C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
5/20/2011, 19:59:37 GMT -> Opened the product inventory at "C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
5/20/2011, 19:59:37 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
5/20/2011, 19:59:37 GMT -> LiveUpdate flag value for this run is 0
5/20/2011, 19:59:37 GMT -> ProductRegCom/luGroup(PID=656/TID=896): Successfully created an instance of an luGroup object!
5/20/2011, 19:59:37 GMT -> ProductRegCom/luGroup(PID=656/TID=896): Path for calling process executable is C:\Program Files (x86)\Symantec\LiveUpdate\LUALL.EXE.
5/20/2011, 19:59:37 GMT -> ProductRegCom/luGroup(PID=656/TID=896): Destroyed luGroup object.
5/20/2011, 19:59:37 GMT -> Scanning the following file for potentially malicious host entries: C:\Windows\system32\Drivers\etc\hosts
5/20/2011, 19:59:37 GMT -> Scanning the following file for potentially malicious host entries: C:\Windows\system32\Drivers\etc\lmhosts.sam
5/20/2011, 19:59:37 GMT -> LiveUpdate did not find any malicious host entries in any hosts files.
5/20/2011, 19:59:37 GMT -> **** Starting an Express Mode LiveUpdate Session ****
5/20/2011, 19:59:37 GMT -> User Type: Administrator.
5/20/2011, 19:59:40 GMT -> ***********************        Start of New LU Session        ***********************
5/20/2011, 19:59:40 GMT -> EVENT - SESSION START EVENT - The LiveUpdate session is running in Express Mode.
5/20/2011, 19:59:40 GMT -> Check for updates to:  Product: LiveUpdate, Version: 3.3.0.96, Language: English.  Mini-TRI file name: liveupdate_3.3.0.96_english_livetri.zip
5/20/2011, 19:59:40 GMT -> LiveUpdate is about to launch a new callback proxy process for product SESC Virus Definitions Win64 (x64) v11 with moniker {1CD85198-26C6-4bac-8C72-5D34B025DE35}.
5/20/2011, 19:59:40 GMT -> Starting Callback Proxy Worker thread.
5/20/2011, 19:59:40 GMT -> The callback proxy for moniker {1CD85198-26C6-4bac-8C72-5D34B025DE35} was successfully registered with LiveUpdate.
5/20/2011, 19:59:40 GMT -> LiveUpdate successfully launched a new callback proxy process for product SESC Virus Definitions Win64 (x64) v11.
5/20/2011, 19:59:40 GMT -> LiveUpdate is about to execute a PreSession callback for product SESC Virus Definitions Win64 (x64) v11.
5/20/2011, 19:59:40 GMT -> ProductRegCom/luProductReg(PID=860/TID=3076): Successfully created an instance of an luProductReg object!
5/20/2011, 19:59:40 GMT -> ProductRegCom/luProductReg(PID=860/TID=3076): Path for calling process executable is C:\Program Files (x86)\Symantec\LiveUpdate\LuCallbackProxy.exe.
5/20/2011, 19:59:40 GMT -> ProductRegCom/luProductReg(PID=860/TID=3076): Setting property for Moniker = {DFB8BBDD-52DE-427e-9EB3-FB7665893221}, PropertyName = SEQ.HUBDEFS, Value = 0
5/20/2011, 19:59:40 GMT -> ProductRegCom/luProductReg(PID=860/TID=3076): Setting property for Moniker = {DFB8BBDD-52DE-427e-9EB3-FB7665893221}, PropertyName = SEQ.CURDEFS, Value = 0
5/20/2011, 19:59:40 GMT -> ProductRegCom/luProductReg(PID=860/TID=3076): Setting property for Moniker = {1CD85198-26C6-4bac-8C72-5D34B025DE35}, PropertyName = SEQ.CURDEFS, Value = 0
5/20/2011, 19:59:40 GMT -> ProductRegCom/luProductReg(PID=860/TID=3076): Destroyed luProductReg object.
5/20/2011, 19:59:40 GMT -> ProductRegCom/luProductReg(PID=860/TID=3076): Successfully created an instance of an luProductReg object!
5/20/2011, 19:59:40 GMT -> ProductRegCom/luProductReg(PID=860/TID=3076): Path for calling process executable is C:\Program Files (x86)\Symantec\LiveUpdate\LuCallbackProxy.exe.
5/20/2011, 19:59:40 GMT -> ProductRegCom/luProductReg(PID=860/TID=3076): Setting property for Moniker = {DFB8BBDD-52DE-427e-9EB3-FB7665893221}, PropertyName = VERSION, Value = MicroDefsB.Error
5/20/2011, 19:59:40 GMT -> ProductRegCom/luProductReg(PID=860/TID=3076): Setting property for Moniker = {DFB8BBDD-52DE-427e-9EB3-FB7665893221}, PropertyName = SEQ.HUBDEFS, Value = 0
5/20/2011, 19:59:40 GMT -> ProductRegCom/luProductReg(PID=860/TID=3076): Setting property for Moniker = {DFB8BBDD-52DE-427e-9EB3-FB7665893221}, PropertyName = SEQ.CURDEFS, Value = 0
5/20/2011, 19:59:40 GMT -> ProductRegCom/luProductReg(PID=860/TID=3076): Destroyed luProductReg object.
5/20/2011, 19:59:41 GMT -> ProductRegCom/luProductReg(PID=860/TID=3076): Successfully created an instance of an luProductReg object!
5/20/2011, 19:59:41 GMT -> ProductRegCom/luProductReg(PID=860/TID=3076): Path for calling process executable is C:\Program Files (x86)\Symantec\LiveUpdate\LuCallbackProxy.exe.
5/20/2011, 19:59:41 GMT -> ProductRegCom/luProductReg(PID=860/TID=3076): Setting property for Moniker = {1CD85198-26C6-4bac-8C72-5D34B025DE35}, PropertyName = SEQ.CURDEFS, Value = 0
5/20/2011, 19:59:41 GMT -> ProductRegCom/luProductReg(PID=860/TID=3076): Destroyed luProductReg object.
5/20/2011, 19:59:41 GMT -> ProductRegCom/luProductReg(PID=860/TID=3076): Successfully created an instance of an luProductReg object!
5/20/2011, 19:59:41 GMT -> ProductRegCom/luProductReg(PID=860/TID=3076): Path for calling process executable is C:\Program Files (x86)\Symantec\LiveUpdate\LuCallbackProxy.exe.
5/20/2011, 19:59:41 GMT -> ProductRegCom/luProductReg(PID=860/TID=3076): Setting property for Moniker = {DFB8BBDD-52DE-427e-9EB3-FB7665893221}, PropertyName = SEQ.CURDEFS, Value = 0
5/20/2011, 19:59:41 GMT -> ProductRegCom/luProductReg(PID=860/TID=3076): Destroyed luProductReg object.
5/20/2011, 19:59:41 GMT -> ProductRegCom/luProductReg(PID=860/TID=3076): Successfully created an instance of an luProductReg object!
5/20/2011, 19:59:41 GMT -> ProductRegCom/luProductReg(PID=860/TID=3076): Path for calling process executable is C:\Program Files (x86)\Symantec\LiveUpdate\LuCallbackProxy.exe.
5/20/2011, 19:59:41 GMT -> ProductRegCom/luProductReg(PID=860/TID=3076): Setting property for Moniker = {DFB8BBDD-52DE-427e-9EB3-FB7665893221}, PropertyName = SEQ.HUBDEFS, Value = 0
5/20/2011, 19:59:41 GMT -> ProductRegCom/luProductReg(PID=860/TID=3076): Destroyed luProductReg object.
5/20/2011, 19:59:41 GMT -> The callback proxy finished executing the callback with a result code of 0x0
5/20/2011, 19:59:41 GMT -> The PreSession callback for product SESC Virus Definitions Win64 (x64) v11 completed with a result of 0x0      
5/20/2011, 19:59:41 GMT -> Progress Update: TRYING_HOST: HostName: "liveupdate.symantecliveupdate.com" URL: "http://liveupdate.symantecliveupdate.com" HostNumber: 0
5/20/2011, 19:59:41 GMT -> Progress Update: TRIFILE_DOWNLOAD_START: Number of TRI files: 0 Downloading LiveUpdate catalog file
5/20/2011, 19:59:41 GMT -> LiveUpdate will download the first Mini-TRI file, liveupdate_3.3.0.96_english_livetri.zip
5/20/2011, 19:59:41 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
5/20/2011, 19:59:41 GMT -> Progress Update: PRE_CONNECT: Proxy: "(not-available)" Agent: "Symantec LiveUpdate" AccessType: 0x0      
5/20/2011, 19:59:41 GMT -> Progress Update: CONNECTED: Proxy: "(not-available)" Agent: "zPEl4hsSdis1B2NtCLv2ZrA6B80KcjWTQAAAAA" AccessType: 0x0      
5/20/2011, 19:59:41 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantecliveupdate.com/liveupdate_3.3.0.96_english_livetri.zip", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
5/20/2011, 19:59:41 GMT -> HttpSendRequest (status 404): Request failed - File does not exist on the server.
5/20/2011, 19:59:41 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://liveupdate.symantecliveupdate.com/liveupdate_3.3.0.96_english_livetri.zip", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\liveupdate_3.3.0.96_english_livetri.zip" HR: 0x802A0026
5/20/2011, 19:59:41 GMT -> HR 0x802A0026 DECODE: E_HTTP_NOT_FOUND
5/20/2011, 19:59:41 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 0
5/20/2011, 19:59:41 GMT -> LiveUpdate will check for Mini-TRI file support on the server since the first Mini-TRI file was not available (liveupdate_3.3.0.96_english_livetri.zip).
5/20/2011, 19:59:41 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
5/20/2011, 19:59:41 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantecliveupdate.com/minitri.flg", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
5/20/2011, 19:59:41 GMT -> HttpSendRequest (status 304): Request succeeded - File up to date so download is not required
5/20/2011, 19:59:41 GMT -> Progress Update: DOWNLOAD_FILE_NOT_MODIFIED: URL: "http://liveupdate.symantecliveupdate.com/minitri.flg", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\minitri.flg"
5/20/2011, 19:59:41 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: URL: "http://liveupdate.symantecliveupdate.com/minitri.flg", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\minitri.flg" HR: 0x0      
5/20/2011, 19:59:41 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 1
5/20/2011, 19:59:41 GMT -> Progress Update: HOST_SELECTED: Host IP: "204.2.215.58" URL: "http://liveupdate.symantecliveupdate.com" HostNumber: 0
5/20/2011, 19:59:41 GMT -> Attempting to load SymCrypt...
5/20/2011, 19:59:41 GMT -> SymCrypt.dll does not exist.
5/20/2011, 19:59:41 GMT -> EVENT - SERVER SELECTION SUCCESSFUL EVENT - LiveUpdate connected to server liveupdate.symantecliveupdate.com at path  via a HTTP connection. The server connection connected with a return code of 200, Successfully download TRI file
5/20/2011, 19:59:41 GMT -> LiveUpdate is connected to a server with Mini-TRI file support.  LiveUpdate will download and process the remaining Mini-TRI files.
5/20/2011, 19:59:41 GMT -> Check for updates to:  Product: Automatic LiveUpdate, Version: 3.3.0.96, Language: English.  Mini-TRI file name: automatic$20liveupdate_3.3.0.96_english_livetri.zip
5/20/2011, 19:59:41 GMT -> Check for updates to:  Product: Symevent64x86 Installer, Version: 12.8, Language: SymAllLanguages.  Mini-TRI file name: symevent64x86$20installer_12.8_symalllanguages_livetri.zip
5/20/2011, 19:59:41 GMT -> Check for updates to:  Product: MS Light, Version: 5.0, Language: SymAllLanguages.  Mini-TRI file name: ms$20light_5.0_symalllanguages_livetri.zip
5/20/2011, 19:59:41 GMT -> Progress Update: TRIFILE_DOWNLOAD_END: Number of TRI files: "0"
5/20/2011, 19:59:41 GMT -> Progress Update: TRIFILE_DOWNLOAD_START: Number of TRI files: 3 Downloading Mini-TRI files
5/20/2011, 19:59:41 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
5/20/2011, 19:59:41 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantecliveupdate.com/automatic$20liveupdate_3.3.0.96_english_livetri.zip", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
5/20/2011, 19:59:41 GMT -> HttpSendRequest (status 404): Request failed - File does not exist on the server.
5/20/2011, 19:59:41 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://liveupdate.symantecliveupdate.com/automatic$20liveupdate_3.3.0.96_english_livetri.zip", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\automatic$20liveupdate_3.3.0.96_english_livetri.zip" HR: 0x802A0026
5/20/2011, 19:59:41 GMT -> HR 0x802A0026 DECODE: E_HTTP_NOT_FOUND
5/20/2011, 19:59:41 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 0
5/20/2011, 19:59:41 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
5/20/2011, 19:59:41 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantecliveupdate.com/symevent64x86$20installer_12.8_symalllanguages_livetri.zip", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
5/20/2011, 19:59:42 GMT -> HttpSendRequest (status 404): Request failed - File does not exist on the server.
5/20/2011, 19:59:42 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://liveupdate.symantecliveupdate.com/symevent64x86$20installer_12.8_symalllanguages_livetri.zip", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\symevent64x86$20installer_12.8_symalllanguages_livetri.zip" HR: 0x802A0026
5/20/2011, 19:59:42 GMT -> HR 0x802A0026 DECODE: E_HTTP_NOT_FOUND
5/20/2011, 19:59:42 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 0
5/20/2011, 19:59:42 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
5/20/2011, 19:59:42 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantecliveupdate.com/ms$20light_5.0_symalllanguages_livetri.zip", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
5/20/2011, 19:59:42 GMT -> HttpSendRequest (status 404): Request failed - File does not exist on the server.
5/20/2011, 19:59:42 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://liveupdate.symantecliveupdate.com/ms$20light_5.0_symalllanguages_livetri.zip", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\ms$20light_5.0_symalllanguages_livetri.zip" HR: 0x802A0026
5/20/2011, 19:59:42 GMT -> HR 0x802A0026 DECODE: E_HTTP_NOT_FOUND
5/20/2011, 19:59:42 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 0
5/20/2011, 19:59:42 GMT -> Progress Update: TRIFILE_DOWNLOAD_END: Number of TRI files: "0"
5/20/2011, 19:59:42 GMT -> ********* Finished Finding Available Updates *********

5/20/2011, 19:59:42 GMT -> LiveUpdate did not find any new updates for the given products.
5/20/2011, 19:59:42 GMT -> EVENT - SESSION END SUCCESSFUL EVENT - The LiveUpdate session ran in Express Mode. LiveUpdate found 0 updates available, of which 0 were installed and 0 failed to install.  The LiveUpdate session exited with a return code of 100, LiveUpdate ran successfully.  There are no new updates to your products.
5/20/2011, 19:59:42 GMT -> ProductRegCom/luGroup(PID=656/TID=896): Successfully created an instance of an luGroup object!
5/20/2011, 19:59:42 GMT -> ProductRegCom/luGroup(PID=656/TID=896): Path for calling process executable is C:\Program Files (x86)\Symantec\LiveUpdate\LUALL.EXE.
5/20/2011, 19:59:42 GMT -> ProductRegCom/luGroup(PID=656/TID=896): Destroyed luGroup object.
5/20/2011, 19:59:46 GMT -> LiveUpdate is about to execute a PostSession callback for product SESC Virus Definitions Win64 (x64) v11.
5/20/2011, 19:59:47 GMT -> ProductRegCom/luProductReg(PID=860/TID=3076): Successfully created an instance of an luProductReg object!
5/20/2011, 19:59:47 GMT -> ProductRegCom/luProductReg(PID=860/TID=3076): Path for calling process executable is C:\Program Files (x86)\Symantec\LiveUpdate\LuCallbackProxy.exe.
5/20/2011, 19:59:47 GMT -> ProductRegCom/luProductReg(PID=860/TID=3076): Destroyed luProductReg object.
5/20/2011, 19:59:47 GMT -> The callback proxy finished executing the callback with a result code of 0x0
5/20/2011, 19:59:47 GMT -> The PostSession callback for product SESC Virus Definitions Win64 (x64) v11 completed with a result of 0x0      
5/20/2011, 19:59:47 GMT -> Successfully released callback {855BA5F4-6588-4F09-AE61-847E59D08CB0}
5/20/2011, 19:59:47 GMT -> LiveUpdate has called the last callback for product SESC Virus Definitions Win64 (x64) v11, so LiveUpdate is informing the callback proxy that it can exit.
5/20/2011, 19:59:47 GMT -> The callback proxy executable for product {1CD85198-26C6-4bac-8C72-5D34B025DE35} is exiting with no errors
5/20/2011, 19:59:47 GMT -> ***********************           End of LU Session           ***********************
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
// End LuComServer
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////

 

 

 

 

 

[Migration User]

Can you replace C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate from a working PC to this and try.

[Migration User]

I would recommend changing it to Interactive Mode to (possibly) get more information (via Control Panels, Symantec LiveUpdate).

 5/20/2011, 19:51:32 GMT -> Integrity check of the newly saved product inventory failed with error code=0x802A0044.
...
5/20/2011, 19:59:37 GMT -> OS: Windows 2008R2 Standard Edition, Service Pack: 0, Major: 6, Minor: 1, Build: 7600 (64-bit)
...
5/20/2011, 19:59:37 GMT -> Loading C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
5/20/2011, 19:59:37 GMT -> Opened the product inventory at "C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate". 

Based on the first line, it looks like the Product Inventory might be corrupted. When you removed the LiveUpdate folders did you get C:\ProgramData\Symantec\LiveUpdate?

sandra

[Migration User]

Well, hats off for Aravind. Any root cause for this? What if too many clients experience that... ?

[Migration User]

I removed manually the C:\ProgramData\Symantec\LiveUpdate folder after uninstalling LiveUpdate.

Then I reinstalled, repaired SEP to register LU with AV. Wasn't that the procedure?

[Migration User]

Yes your procedure is right. But some times Product.Inventory.LiveUpdate file will not not get updated properly. I am also do not know the reason for this.