Managed SEP Client Virus definition is not updated
Updated: 03 Oct 2010 | 36 comments
Hi all,
Finally my LUA Server managed to download virus definition successfully.
However i got another issue. Almost 80 managed SEP user failed to updat to the latest virus definitions..
My SEPM manager version is 11.0.5002.333
Anyone can assist me?
discussion Filed Under:
Comments
How have you defined your
How have you defined your definitions update
LUA to SEPM --SEPM to Clients or Clients directly from LUA?
VMWARE-- SEP 12.1 vs McAfee vs Trend Micro
are the clients getting the
are the clients getting the updates from SEPM? Is the SEPm updated, if yes check the communication between the client and the SEPM.
If the SEP client is getting the updates from LUA , post the sylink logs ( in both the cases).
Cheers!
Pete
Help Link: http://www.symantec.com/business/support/overview.jsp?pid=54619
On the client run the sylink
On the client run the sylink toggle and paste the logs here. But before doing this make sure that the SEPM is updated.
https://www-secure.symantec.com/connect/downloads/sylink-toggle
Prachand Kumar MCSE-2003 Symantec Technical Specialist (SCTS)
SEPM download from LUA
SEPM download from LUA server
managed SEP client download definitions from LUA server as well
Are you sure that the clients
Are you sure that the clients are not taking the update from the SEPM but taking it from the LUA?
Is the SEPM updated?
Prachand Kumar MCSE-2003 Symantec Technical Specialist (SCTS)
i unzip the file.... which
i unzip the file....
which apps should i run? SyToggleOn 1.1 or SyToggleOff 1.1?
First run On and then run off
First run On and then run off
Prachand Kumar MCSE-2003 Symantec Technical Specialist (SCTS)
after that,which log should i
after that,which log should i copy here?
sylink.log?
do i need to run a liveupdate after running the "ON" and "OFF" before copy the log?
We need the sylink.log and
We need the sylink.log and you don't need to run LU after that.
Prachand Kumar MCSE-2003 Symantec Technical Specialist (SCTS)
Here is the sylink from one
Here is the sylink from one of the managed SEP Client
03/18 11:56:05 [1408] ~~~Sylink log started. (SEP Product Version in registry: 11.0.5002.333, Sylink File Version: 11.0.5002.301)
03/18 11:56:05 [1408] Stored HostGUID=1C8B9084C0A8011101D52A294EADBB10; outlen=16
03/18 11:56:05 [1408] <RestoreSettings>Stored UserGuid=0; outlen=2
03/18 11:56:05 [1408] <mfn_DecodeSSN>Sygate-SSN=452066
03/18 11:56:05 [1408] <mfn_DecodeSSN>Read CSN=452067
03/18 11:56:05 [1408] <mfn_DecodeSSN>Sygate-SSN=104
03/18 11:56:05 [1408] <mfn_DecodeSSN>Read CSN=105
03/18 11:56:05 [1408] Product Type=1,Major Ver=5,Minor Ver=1,Platform ID=2,OSType=17105154
03/18 11:56:05 [1408] OS=Windows XP Professional ; number=5.1.2600
03/18 11:56:05 [1408] SyLinkCreateInstance => Instance created: 01B78DE8 Registry path: SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\SYLINK
03/18 11:56:05 [1408] <GetOnlineNicInfo>:Netport Count=1
03/18 11:56:05 [1408] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="10.65.36.128" Mac="00-1a-a0-0c-19-b1" Gateway="10.65.36.1" SubnetMask="255.255.255.0"/></SSANICs>
03/18 11:56:05 [1408] SyLinkCreateConfig => Created instance: 01B97A30
03/18 11:56:05 [1408] UseNewConfig => Created m_hNewConfig: 01B97A30
03/18 11:56:05 [1408] Importing ConfigObject: 01B77B48 into: 01B97A30
03/18 11:56:05 [1408] Importing ConfigObject: 01B77B48 into: 01B95788
03/18 11:56:05 [1408] <PostEvent>stopping...ignore event ID=EVENT_SYLINK_CONFIG_SETTING_CHANGED
03/18 11:56:05 [1408] SSA packageType is set as 105
03/18 11:56:05 [1408] SyLinkDeleteConfig => Deleting instance: 01B77B48
03/18 11:56:05 [1408] <SetHiStatus>HI status is changed to=3; reason=105; rule=Host Integrity check is disabled.
Host Integrity policy has been disabled by the administrator.
03/18 11:56:06 [1408] SyLinkCreateConfig => Created instance: 031E0150
03/18 11:56:06 [1408] SetCurLocationName: Name is set to - Default
03/18 11:56:06 [1408] SetCurLocationID: ID is set to - FAE98A24C0A80111003F0B70ECA71500
03/18 11:56:06 [1408] SyLinkCreateConfig => Created instance: 031E13F0
03/18 11:56:06 [1408] Importing ConfigObject: 031E13F0 into: 01B97A30
03/18 11:56:06 [1408] Importing ConfigObject: 031E13F0 into: 01B95788
03/18 11:56:06 [1408] <PostEvent>stopping...ignore event ID=EVENT_SYLINK_CONFIG_SETTING_CHANGED
03/18 11:56:06 [1408] SyLinkDeleteConfig => Deleting instance: 031E13F0
03/18 11:56:06 [1408] SyLinkDeleteConfig => Deleting instance: 031E0150
03/18 11:56:06 [2516] <ScheduleNextUpdate>Manually assigned heartbeat=1 seconds
03/18 11:56:06 [3192] <ScheduleNextUpdate>Manually assigned heartbeat=1 seconds
03/18 11:56:07 [1408] <CSyLink::Start()>
03/18 11:56:07 [1408] <EncodeHelper::DecryptUrl>
03/18 11:56:07 [1408] <CSyLink::Start> The last server used was '192.168.1.17'
03/18 11:56:07 [1408] <CSyLink::ImportConfigFile()>
03/18 11:56:07 [1408] CUpdateConfig::Dump
03/18 11:56:07 [1408] </CSyLink::ImportConfigFile()>
03/18 11:56:07 [1408] <GetDomainHostName>msz_DomainName is taken from szDomainName
03/18 11:56:07 [1408] <GetDomainHostName>DomainName (Final)=financial-training.com.sg
03/18 11:56:07 [1408] <HWID CSyLink::GetHardwareKey> Get Hardware ID
03/18 11:56:11 [1408] <HWID CSyLink::GetHardwareKey> Hardware ID assigned: 569B13EFA37A4E758096CDD41E439BC9
03/18 11:56:12 [1408] <Start>Unable to create Session with 'User Proxy' settings - Proxy Server: Error Code: 87
03/18 11:56:12 [1408] <Start>Unable to create Session with 'No Proxies' settings - Error Code: 87
03/18 11:56:12 [420] <ScheduleNextUpdate>Manually assigned heartbeat=277 seconds
03/18 11:56:12 [2696] <HeartbeatThreadProc:>Thread is about to begin..
03/18 11:56:12 [420] Successfully created the heartbeat thread
03/18 11:56:12 [1408] <Start>Started, contact SMS every 300 seconds
03/18 11:56:12 [1408] <PostEvent>going to post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED
03/18 11:56:12 [1408] <PostEvent>done post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED, return=0
03/18 11:56:12 [1408] </CSyLink::Start()>
03/18 11:56:12 [2696] <CheckHeartbeatTimer>====== Heartbeat loop starts at 11:56:12 ======
03/18 11:56:13 [1408] <SetClientAuth>Received new User/Domain from SMC.. User: lucas.lee User Domain: FTCFILE01
03/18 11:56:13 [1408] <SetClientAuth>Getting RDNS Domain Name (user domain in AD setup)..
03/18 11:56:13 [1408] <GetLoginRdnsDomain>DNS domain=FINANCIAL-TRAINING.COM.SG
03/18 11:56:13 [1408] <SetClientAuth>Setting the User Domain to RDNS Domain ..
03/18 11:56:13 [1408] <SetClientAuth>Logged in user info set to: FINANCIAL-TRAINING.COM.SG/lucas.lee
03/18 11:56:13 [1408] <SetClientAuth>Marking User Change Notify to redo registration..
03/18 11:56:13 [2696] <GetOnlineNicInfo>:Netport Count=1
03/18 11:56:13 [2696] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="10.65.36.128" Mac="00-1a-a0-0c-19-b1" Gateway="10.65.36.1" SubnetMask="255.255.255.0"/></SSANICs>
03/18 11:56:13 [2516] SyLinkCreateConfig => Created instance: 01AF92F0
03/18 11:56:13 [2516] Importing ConfigObject: 01B95788 into: 01AF92F0
03/18 11:56:13 [2516] SyLinkDeleteConfig => Deleting instance: 01AF92F0
03/18 11:56:13 [2696] <CalcAgentHashKey>:CH=B9E6DA2BC0A80111010B5EFBDD8E6B6C1apmi07-com03financial-training.com.sg569B13EFA37A4E758096CDD41E439BC9
03/18 11:56:13 [2696] <CalcAgentHashKey>:CHKey=095678C87062944C4EF413C32248797A
03/18 11:56:13 [2696] <CalcAgentHashKey>:C=B9E6DA2BC0A80111010B5EFBDD8E6B6C1apmi07-com03financial-training.com.sg
03/18 11:56:13 [2696] <CalcAgentHashKey>:CKey=BF8FE638AFA3E4D736F9A72308915B3F
03/18 11:56:13 [2696] <CalcAgentHashKey>:UCH=B9E6DA2BC0A80111010B5EFBDD8E6B6C0lucas.leeFINANCIAL-TRAINING.COM.SGapmi07-com03financial-training.com.sg569B13EFA37A4E758096CDD41E439BC9
03/18 11:56:13 [2696] <CalcAgentHashKey>:UCHKey=8AD5CC57863ED13C283A75EEB16F8DCB
03/18 11:56:13 [2696] <CalcAgentHashKey>:UC=B9E6DA2BC0A80111010B5EFBDD8E6B6C0lucas.leeFINANCIAL-TRAINING.COM.SGapmi07-com03financial-training.com.sg
03/18 11:56:13 [2696] <CalcAgentHashKey>:UCKey=A92DECC83CBAC1E0E258BB121263251C
03/18 11:56:13 [2696] <DoHeartbeat>HardwareID=569B13EFA37A4E758096CDD41E439BC9
03/18 11:56:13 [2696] <DoHeartbeat>CHKey=095678C87062944C4EF413C32248797A
03/18 11:56:13 [2696] <DoHeartbeat>CKey=BF8FE638AFA3E4D736F9A72308915B3F
03/18 11:56:13 [2696] <DoHeartbeat>UCHKey=8AD5CC57863ED13C283A75EEB16F8DCB
03/18 11:56:13 [2696] <DoHeartbeat>UCKey=A92DECC83CBAC1E0E258BB121263251C
03/18 11:56:13 [2696] <DoHeartbeat> Set heartbeat event
03/18 11:56:13 [2696] Use new configuration
03/18 11:56:13 [2696] <RegHeartbeatProc>====== Reg Heartbeat loop starts at 11:56:13 ======
03/18 11:56:14 [2696] HEARTBEAT: Check Point 1
03/18 11:56:14 [2696] HEARTBEAT: Check Point 2
03/18 11:56:14 [2696] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
03/18 11:56:14 [2696] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
03/18 11:56:14 [2696] HEARTBEAT: Check Point 3
03/18 11:56:14 [2696] <RegHeartbeatProc>Setting the session timeout on Profile Session (Registration) to 30000
03/18 11:56:14 [2696] HEARTBEAT: Check Point 4
03/18 11:56:14 [2696] <RegHeartbeatProc>===Registration STAGE===
03/18 11:56:14 [2696] <MakeRegisterData:>logon id (domain/user)=FINANCIAL-TRAINING.COM.SG/lucas.lee
03/18 11:56:14 [2696] <MakeRegisterData:>XML data: <?xml version="1.0" encoding="UTF-8" ?><SSARegData NameSpace="rpc"><AgentInfo DomainID="B9E6DA2BC0A80111010B5EFBDD8E6B6C" AgentType="105" UserDomain="FINANCIAL-TRAINING.COM.SG" LoginUser="lucas.lee" ComputerDomain="financial-training.com.sg" ComputerName="apmi07-com03" PreferredGroup="Global%5cUsers%5cStaff" PreferredMode="1" HardwareKey="569B13EFA37A4E758096CDD41E439BC9" SiteDomainName=""/>
<SSAHostInfo><NetworkIdentity UserDomain="FINANCIAL-TRAINING.COM.SG" LogonUser="lucas.lee" HostDomain="financial-training.com.sg" HostName="apmi07-com03" HostDesc="" />
<SSAProduct Version="11.0.5002.333" />
<SSAOS Version="5.1.2600" Desc="Windows%20XP%20Professional%20" Type="17105154" ServicePack="Service%20Pack%202"/>
<Processor ProcessorType="x86%20Family%2015%20Model%206%20Stepping%205" ProcessorClock="3000" ProcessorNum="2"/>
<Memory Size="501116928"/>
<BIOS Version="DELL%20%20%20-%2014"/>
<TpmDevice Id="0"/>
<SSAProfile Version="5.0.0" SerialNumber="BE72-03%2f11%2f2010%2015%3a59%3a53%20578"/>
<SSAIDS Version="" SerialNumber=""/>
<SSAUTC Bias="-480" />
<DNSs><DNS Address="192.168.1.2"/><DNS Address="192.168.1.4"/></DNSs>
<DHCPServer Address="192.168.1.2"/><SSANICs><SSANIC Ip="10.65.36.128" Mac="00-1a-a0-0c-19-b1" Gateway="10.65.36.1" SubnetMask="255.255.255.0"/></SSANICs>
</SSAHostInfo>
</SSARegData>
03/18 11:56:14 [2696] <SyLink>[MakeRegisterData] registration Hardware Key=569B13EFA37A4E758096CDD41E439BC9
03/18 11:56:14 [2696] ************Reg CSN=106
03/18 11:56:14 [2696] <mfn_GenPostData (for Registration):>Request is: s_origin_length: 1328
s_session_id: 569B13EFA37A4E758096CDD41E439BC9
Sygate-SSN: 106
<?xml version="1.0" encoding="UTF-8" ?><SSARegData NameSpace="rpc"><AgentInfo DomainID="B9E6DA2BC0A80111010B5EFBDD8E6B6C" AgentType="105" UserDomain="FINANCIAL-TRAINING.COM.SG" LoginUser="lucas.lee" ComputerDomain="financial-training.com.sg" ComputerName="apmi07-com03" PreferredGroup="Global%5cUsers%5cStaff" PreferredMode="1" HardwareKey="569B13EFA37A4E758096CDD41E439BC9" SiteDomainName=""/>
<SSAHostInfo><NetworkIdentity UserDomain="FINANCIAL-TRAINING.COM.SG" LogonUser="lucas.lee" HostDomain="financial-training.com.sg" HostName="apmi07-com03" HostDesc="" />
<SSAProduct Version="11.0.5002.333" />
<SSAOS Version="5.1.2600" Desc="Windows%20XP%20Professional%20" Type="17105154" ServicePack="Service%20Pack%202"/>
<Processor ProcessorType="x86%20Family%2015%20Model%206%20Stepping%205" ProcessorClock="3000" ProcessorNum="2"/>
<Memory Size="501116928"/>
<BIOS Version="DELL%20%20%20-%2014"/>
<TpmDevice Id="0"/>
<SSAProfile Version="5.0.0" SerialNumber="BE72-03%2f11%2f2010%2015%3a59%3a53%20578"/>
<SSAIDS Version="" SerialNumber=""/>
<SSAUTC Bias="-480" />
<DNSs><DNS Address="192.168.1.2"/><DNS Address="192.168.1.4"/></DNSs>
<DHCPServer Address="192.168.1.2"/><SSANICs><SSANIC Ip="10.65.36.128" Mac="00-1a-a0-0c-19-b1" Gateway="10.65.36.1" SubnetMask="255.255.255.0"/></SSANICs>
</SSAHostInfo>
</SSARegData>
03/18 11:56:14 [2696] <SendRegistrationRequest:>http://192.168.1.17:80 [encrypted data]
03/18 11:56:14 [2696] 11:56:14=>Send HTTP REQUEST
03/18 11:56:14 [2696] 11:56:14=>HTTP REQUEST sent
03/18 11:56:14 [2696] 11:56:14=>QUERY return code
03/18 11:56:14 [2696] 11:56:14=>QUERY return code completed
03/18 11:56:14 [2696] <SendRegistrationRequest:>SMS return=200
03/18 11:56:14 [2696] <ParseHTTPStatusCode:>200=>200 OK
03/18 11:56:14 [2696] <SendRegistrationRequest:>Content Lenght => 350
03/18 11:56:14 [2696] HTTP returns status code=200
03/18 11:56:14 [2696] <SendRegistrationRequest:>RECEIVE STAGE COMPLETED
03/18 11:56:14 [2696] <SendRegistrationRequest:>COMPLETED, returned 0
03/18 11:56:14 [2696] <IsInClientIPorOnLink> NextHop Not equal 192.168.1.17,return FALSE
03/18 11:56:14 [2696] <IsInClientIPorOnLink> NextHop is OnLink with 10.65.36.128,return TRUE
03/18 11:56:14 [2696] <mfn_GetOutIP> Next Hop IP is a local IP or ONLINK:10.65.36.128
03/18 11:56:14 [2696] HEARTBEAT: Check Point 5.1
03/18 11:56:14 [2696] <ScheduleNextUpdate>Manually assigned heartbeat=3 seconds
03/18 11:56:14 [2696] <PostEvent>going to post event=EVENT_SERVER_ONLINE
03/18 11:56:14 [2696] <PostEvent>done post event=EVENT_SERVER_ONLINE, return=0
03/18 11:56:14 [2696] HEARTBEAT: Check Point 8
03/18 11:56:14 [2696] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
03/18 11:56:14 [2696] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
03/18 11:56:14 [2696] <RegHeartbeatProc>====== Registration Procedure stops at 11:56:14 ======
03/18 11:56:14 [2696] HEARTBEAT: Check Point 10
03/18 11:56:14 [1500] <CSyLink::SetNewLearnedAppList()>
03/18 11:56:14 [1500] ***NewLearnedApps - Current count: 0
03/18 11:56:14 [1500] ***app=autochk.exe
03/18 11:56:14 [1500] ***app=mpnotify.exe
03/18 11:56:14 [1500] ***app=ati2sgag.exe
03/18 11:56:14 [1500] ***app=SescLU.exe
03/18 11:56:14 [1500] ***app=LUCOMS~1.EXE
03/18 11:56:14 [1500] ***app=net.exe
03/18 11:56:14 [1500] ***app=cmd.exe
03/18 11:56:14 [1500] ***app=verclsid.exe
03/18 11:56:14 [1500] ***app=userinit.exe
03/18 11:56:14 [1500] ***app=imjpmig.exe
03/18 11:56:14 [1500] ***app=imapi.exe
03/18 11:56:14 [1500] ***app=TINTSETP.EXE
03/18 11:56:14 [1500] ***app=IMSCINST.EXE
03/18 11:56:14 [1500] ***app=ISUSPM.exe
03/18 11:56:14 [1500] ***app=agent.exe
03/18 11:56:14 [1500] ***app=ctfmon.exe
03/18 11:56:14 [1500] ***app=quickstart.exe
03/18 11:56:14 [1500] ***app=agent.exe
03/18 11:56:14 [1500] ***app=stclient_wrapper.exe
03/18 11:56:14 [1500] ***app=wmiprvse.exe
03/18 11:56:14 [1500] ***app=reader_sl.exe
03/18 11:56:14 [1500] ***app=javaw.exe
03/18 11:56:14 [1500] ***app=javaws.exe
03/18 11:56:14 [1500] ***app=dwwin.exe
03/18 11:56:14 [1500] ***app=WINWORD.EXE
03/18 11:56:14 [1500] ***app=Rtvscan.exe
03/18 11:56:14 [1500] ***app=drwtsn32.exe
03/18 11:56:14 [1500] ***app=OfficeLiveSignIn.exe
03/18 11:56:14 [1500] ***app=wuauclt.exe
03/18 11:56:14 [1500] ***app=EXCEL.EXE
03/18 11:56:14 [1500] ***app=cpwsave.exe
03/18 11:56:14 [1500] ***app=gswin32c.exe
03/18 11:56:14 [1500] ***app=finsql.exe
03/18 11:56:14 [1500] ***app=AcroRd32Info.exe
03/18 11:56:14 [1500] ***app=GoogleUpdaterService.exe
03/18 11:56:14 [1500] ***app=COH32.exe
03/18 11:56:14 [1500] ***app=AcroRd32.exe
03/18 11:56:14 [1500] ***app=LuCallbackProxy.exe
03/18 11:56:14 [1500] ***app=LUALL.EXE
03/18 11:56:14 [1500] ***app=DWHWizrd.exe
03/18 11:56:14 [1500] ***app=OUTLOOK.EXE
03/18 11:56:14 [1500] ***app=smcinst.exe
03/18 11:56:14 [1500] ***app=PatchWrap.exe
03/18 11:56:14 [1500] ***app=MSI59.tmp
03/18 11:56:14 [1500] ***app=MSI66.tmp
03/18 11:56:14 [1500] ***app=closeui.exe
03/18 11:56:14 [1500] ***app=SmcGui.exe
03/18 11:56:14 [1500] ***app=Smc.exe
03/18 11:56:14 [1500] ***app=ccSvcHst.exe
03/18 11:56:14 [1500] ***app=ccApp.exe
03/18 11:56:14 [1500] ***app=SYMANT~1.EXE
03/18 11:56:14 [1500] ***app=Lsetup.exe
03/18 11:56:14 [1500] ***app=LUSETUP.EXE
03/18 11:56:14 [1500] ***app=LUCHECK.EXE
03/18 11:56:14 [1500] ***app=sevinst.exe
03/18 11:56:14 [1500] ***app=sevinst.exe
03/18 11:56:14 [1500] ***app=MSI104.tmp
03/18 11:56:14 [1500] ***app=MSI117.tmp
03/18 11:56:14 [1500] ***app=MSI13B.tmp
03/18 11:56:14 [1500] ***app=msiexec.exe
03/18 11:56:14 [1500] ***app=setup.exe
03/18 11:56:14 [1500] ***app=runonce.exe
03/18 11:56:14 [1500] ***app=smss.exe
03/18 11:56:14 [1500] ***app=csrss.exe
03/18 11:56:14 [1500] ***app=winlogon.exe
03/18 11:56:14 [1500] ***app=services.exe
03/18 11:56:14 [1500] ***app=lsass.exe
03/18 11:56:14 [1500] ***app=ati2evxx.exe
03/18 11:56:14 [1500] ***app=svchost.exe
03/18 11:56:14 [1500] ***app=explorer.exe
03/18 11:56:14 [1500] ***app=spoolsv.exe
03/18 11:56:14 [1500] ***app=ntoskrnl.exe
03/18 11:56:14 [1500] ***app=alg.exe
03/18 11:56:14 [1500] ***app=jqs.exe
03/18 11:56:14 [1500] ***app=SeaPort.exe
03/18 11:56:14 [1500] ***app=smax4pnp.exe
03/18 11:56:14 [1500] ***app=soffice.bin
03/18 11:56:14 [1500] ***app=DLACTRLW.EXE
03/18 11:56:14 [1500] ***app=jusched.exe
03/18 11:56:14 [1500] ***app=issch.exe
03/18 11:56:14 [1500] ***app=wlcomm.exe
03/18 11:56:14 [1500] ***app=rundll32.exe
03/18 11:56:14 [1500] ***app=qttask.exe
03/18 11:56:14 [1500] ***app=GoogleToolbarNotifier.exe
03/18 11:56:14 [1500] ***app=msnmsgr.exe
03/18 11:56:14 [1500] ***app=ISUSPM.exe
03/18 11:56:14 [1500] ***app=soffice.exe
03/18 11:56:14 [1500] ***app=iexplore.exe
03/18 11:56:14 [1500] ***app=wltuser.exe
03/18 11:56:14 [1500] ***app=java.exe
03/18 11:56:14 [1500] ***app=jucheck.exe
03/18 11:56:14 [1500] ***app=defrag.exe
03/18 11:56:14 [1500] ***app=dfrgntfs.exe
03/18 11:56:14 [1500] ***app=jre-6u17-windows-i586-iftw-rv.exe
03/18 11:56:14 [1500] ***app=MSI27.tmp
03/18 11:56:14 [1500] ***app=MSI30.tmp
03/18 11:56:14 [1500] ***app=patchjre.exe
03/18 11:56:14 [1500] ***app=wmic.exe
03/18 11:56:14 [1500] ***app=HelpSvc.exe
03/18 11:56:14 [1500] ***app=iedw.exe
03/18 11:56:14 [1500] ***app=SavUI.exe
03/18 11:56:14 [1500] ***app=mspaint.exe
03/18 11:56:14 [1500] ***app=Moc.exe
03/18 11:56:14 [1500] ***app=Wordconv.exe
03/18 11:56:14 [1500] ***app=sbase.exe
03/18 11:56:14 [1500] ***app=MSOHELP.EXE
03/18 11:56:14 [1500] ***app=MSOHTMED.EXE
03/18 11:56:14 [1500] ***app=taskmgr.exe
03/18 11:56:14 [1500] ***app=wmplayer.exe
03/18 11:56:14 [1500] ***app=excelcnv.exe
03/18 11:56:14 [1500] ***app=AdobeUpdater.exe
03/18 11:56:14 [1500] ***app=AdobeARM.exe
03/18 11:56:14 [1500] ***app=SoftwareUpdate.exe
03/18 11:56:14 [1500] ***app=POWERPNT.EXE
03/18 11:56:14 [1500] ***app=tracert.exe
03/18 11:56:14 [1500] ***app=gpupdate.exe
03/18 11:56:14 [1500] ***app=sndvol32.exe
03/18 11:56:14 [1500] ***app=dumprep.exe
03/18 11:56:14 [1500] ***app=WLXQuickTimeControlHost.exe
03/18 11:56:14 [1500] ***app=QuickTimePlayer.exe
03/18 11:56:14 [1500] ***app=ExportController.exe
03/18 11:56:14 [1500] ***app=MSPVIEW.EXE
03/18 11:56:14 [1500] ***app=WISPTIS.EXE
03/18 11:56:14 [1500] ***app=update.exe
03/18 11:56:14 [1500] ***app=wiaacmgr.exe
03/18 11:56:14 [1500] ***app=ieudinit.exe
03/18 11:56:14 [1500] ***app=ie4uinit.exe
03/18 11:56:14 [1500] ***app=regsvr32.exe
03/18 11:56:14 [1500] ***app=setup50.exe
03/18 11:56:14 [1500] ***app=shmgrate.exe
03/18 11:56:14 [1500] ***app=wmdbexport.exe
03/18 11:56:14 [1500] ***app=unregmp2.exe
03/18 11:56:14 [1500] ***app=fsquirt.exe
03/18 11:56:14 [1500] ***app=tourstart.exe
03/18 11:56:14 [1500] ***app=notepad.exe
03/18 11:56:14 [1500] ***app=ipconfig.exe
03/18 11:56:14 [1500] ***app=KPSS.scr
03/18 11:56:14 [1500] ***app=DW20.EXE
03/18 11:56:14 [1500] ***app=WLXPhotoAcquireWizard.exe
03/18 11:56:14 [1500] ***app=FlashUtil10b.exe
03/18 11:56:14 [1500] ***app=LaunchU3.exe
03/18 11:56:14 [1500] ***app=LaunchPad.exe
03/18 11:56:14 [1500] ***app=U3AppWrapper.exe
03/18 11:56:14 [1500] ***app=LaunchU3.exe
03/18 11:56:14 [1500] ***app=appstop.exe
03/18 11:56:14 [1500] ***app=cleanup.exe
03/18 11:56:14 [1500] ***app=mmc.exe
03/18 11:56:14 [1500] ***app=SymCorpUI.exe
03/18 11:56:14 [1500] ***app=20100304.exe
03/18 11:56:14 [1500] ***app=intiupdater.exe
03/18 11:56:14 [1500] ***app=OSE.EXE
03/18 11:56:14 [1500] ***app=20100209-025-v5i32.exe
03/18 11:56:14 [1500] ***app=setup.exe
03/18 11:56:14 [1500] ***app=ose.exe
03/18 11:56:14 [1500] ***app=ose00000.exe
03/18 11:56:14 [1500] ***app=setup.exe
03/18 11:56:14 [1500] ***app=ose00001.exe
03/18 11:56:14 [1500] ***app=ose00002.exe
03/18 11:56:14 [1500] ***app=ose.exe
03/18 11:56:14 [1500] ***app=OUTLOOK.EXE
03/18 11:56:14 [1500] ***app=wmiadap.exe
03/18 11:56:14 [1500] ***app=PPCNVCOM.EXE
03/18 11:56:14 [1500] ***app=ESUGReg.exe
03/18 11:56:14 [1500] ***app=regedit.exe
03/18 11:56:14 [1500] ***app=SyToggleON 1.1.exe
03/18 11:56:14 [1500] ***NewLearnedApps - New count: 165
03/18 11:56:14 [1500] </CSyLink::SetNewLearnedAppList()>
03/18 11:56:15 [2696] HEARTBEAT: Check Point Complete
03/18 11:56:15 [2696] <RegHeartbeatProc>Done, Heartbeat=3seconds
03/18 11:56:15 [2696] <CheckHeartbeatTimer>====== Heartbeat loop stops at 11:56:15 ======
03/18 11:56:19 [2696] <CheckHeartbeatTimer>====== Heartbeat loop starts at 11:56:19 ======
03/18 11:56:19 [2696] <GetOnlineNicInfo>:Netport Count=1
03/18 11:56:19 [2696] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="10.65.36.128" Mac="00-1a-a0-0c-19-b1" Gateway="10.65.36.1" SubnetMask="255.255.255.0"/></SSANICs>
03/18 11:56:19 [2696] <CalcAgentHashKey>:CH=B9E6DA2BC0A80111010B5EFBDD8E6B6C1apmi07-com03financial-training.com.sg569B13EFA37A4E758096CDD41E439BC9
03/18 11:56:19 [2696] <CalcAgentHashKey>:CHKey=095678C87062944C4EF413C32248797A
03/18 11:56:19 [2696] <CalcAgentHashKey>:C=B9E6DA2BC0A80111010B5EFBDD8E6B6C1apmi07-com03financial-training.com.sg
03/18 11:56:19 [2696] <CalcAgentHashKey>:CKey=BF8FE638AFA3E4D736F9A72308915B3F
03/18 11:56:19 [2696] <CalcAgentHashKey>:UCH=B9E6DA2BC0A80111010B5EFBDD8E6B6C0lucas.leeFINANCIAL-TRAINING.COM.SGapmi07-com03financial-training.com.sg569B13EFA37A4E758096CDD41E439BC9
03/18 11:56:19 [2696] <CalcAgentHashKey>:UCHKey=8AD5CC57863ED13C283A75EEB16F8DCB
03/18 11:56:19 [2696] <CalcAgentHashKey>:UC=B9E6DA2BC0A80111010B5EFBDD8E6B6C0lucas.leeFINANCIAL-TRAINING.COM.SGapmi07-com03financial-training.com.sg
03/18 11:56:19 [2696] <CalcAgentHashKey>:UCKey=A92DECC83CBAC1E0E258BB121263251C
03/18 11:56:19 [2696] <DoHeartbeat>HardwareID=569B13EFA37A4E758096CDD41E439BC9
03/18 11:56:19 [2696] <DoHeartbeat>CHKey=095678C87062944C4EF413C32248797A
03/18 11:56:19 [2696] <DoHeartbeat>CKey=BF8FE638AFA3E4D736F9A72308915B3F
03/18 11:56:19 [2696] <DoHeartbeat>UCHKey=8AD5CC57863ED13C283A75EEB16F8DCB
03/18 11:56:19 [2696] <DoHeartbeat>UCKey=A92DECC83CBAC1E0E258BB121263251C
03/18 11:56:19 [2696] <DoHeartbeat> Set heartbeat event
03/18 11:56:19 [2696] Use new configuration
03/18 11:56:19 [2696] <CSyLink::IndexHeartbeatProc()>
03/18 11:56:19 [2696] <IndexHeartbeatProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 01B95788
03/18 11:56:19 [2696] <IndexHeartbeatProc>====== Reg Heartbeat loop starts at 11:56:19 ======
03/18 11:56:20 [2696] HEARTBEAT: Check Point 1
03/18 11:56:20 [2696] Get First Server!
03/18 11:56:20 [2696] HEARTBEAT: Check Point 2
03/18 11:56:20 [2696] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
03/18 11:56:20 [2696] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
03/18 11:56:20 [2696] HEARTBEAT: Check Point 3
03/18 11:56:20 [2696] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
03/18 11:56:20 [2696] HEARTBEAT: Check Point 4
03/18 11:56:20 [2696] <IndexHeartbeatProc>===Get Index STAGE===
03/18 11:56:20 [2696] ************CSN=452068
03/18 11:56:20 [2696] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=1C8B9084C0A8011101D52A294EADBB10&chk=095678C87062944C4EF413C32248797A&ck=BF8FE638AFA3E4D736F9A72308915B3F&uchk=8AD5CC57863ED13C283A75EEB16F8DCB&uck=A92DECC83CBAC1E0E258BB121263251C&hid=569B13EFA37A4E758096CDD41E439BC9&groupid=B9E6DA2BC0A80111010B5EFBDD8E6B6C&mode=0&hbt=300&as=452068&cn=[hex]61706D6930372D636F6D3033&lun=[hex]6C756361732E6C6565&udn=[hex]46494E414E4349414C2D545241494E494E472E434F4D2E5347
03/18 11:56:20 [2696] <GetIndexFileRequest:>http://192.168.1.17:80/secars/secars.dll?h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
03/18 11:56:20 [2696] 11:56:20=>Send HTTP REQUEST
03/18 11:56:20 [2696] 11:56:20=>HTTP REQUEST sent
03/18 11:56:20 [2696] <GetIndexFileRequest:>SMS return=200
03/18 11:56:20 [2696] <ParseHTTPStatusCode:>200=>200 OK
03/18 11:56:20 [2696] <FindHeader>Sem-HashKey:=>095678C87062944C4EF413C32248797A
03/18 11:56:20 [2696] <FindHeader>Sem-LANSensor:=>0
03/18 11:56:20 [2696] <FindHeader>Sem-Signatue:=>13B17D2B6A5920B5CEE9CE6AAC34A10A809724F3D78A4EE22FCF0F1C7D18556964C9DD45710E1E3182FF6A0495FB23A4D663FB21CA436BB7AEAB589A5D03DB163398B3333D095637BA6ED3B385E1540DD51D72D312C70CFC0D53206745E4F0468BD7FE299293AA0156ED67E0D3CFF66039F02051A7DA40E1478D1AE42E69DA85
03/18 11:56:20 [2696] <mfn_DoGetIndexFile200>Content Lenght => 1367
03/18 11:56:20 [2696] SignIf::VerifySignature(data, dataLen, sig, sigLen) => Verification Successful..
03/18 11:56:20 [2696] <mfn_DoGetIndexFile200>Index File: <?xml version="1.0" encoding="UTF-8" ?><GroupIndex SiteID="0C9C0071C0A80111017D7C01550581A4" ServerID="D9123CF1C0A80111008E68BD4AF25012" GroupID="BE729101C0A80111009789EEFE1D7F9E" GroupCheckSum="842CEA790A323210858413531" LastModifiedTime = "18/03/2010 06:02:52"> <Profile Checksum="43A767BB5842B18F31BDD5BB33400591" SerialNumber="BE72-03/11/2010 15:59:53 578" LastModifiedTime="11/03/2010 16:00:38"/> <ConfigFile Checksum="DD02CFD412910C7CDE82A3FFD457355E" LastModifiedTime="11/03/2010 10:06:59"/> <IDSFile Checksum="698A3F6B490E5DB5E5F5F2202FBF6F3E" LastModifiedTime="11/03/2010 10:06:59"/> <SylinkFile Checksum="11131CC58BAD4088B1B9249CD6C10BD4" LastModifiedTime="11/03/2010 16:00:38"/> <LSProfile Checksum="4A70FDDF670750BD58C4C022EA272B54" SerialNumber ="BE72-03/11/2010 15:59:53 578" LastModifiedTime ="11/03/2010 16:00:38"/>
<LiveUpdate>
<File Checksum="2ED6B28CD1A48097942E9AAB72840493" DeltaFlag="1" FullSize="75113376" LastModifiedTime="1268171962915" Moniker="{C60DC234-65F9-4674-94AE-62158EFCA433}" Seq="100309009"/>
<File Checksum="DAC09E43D93EE013D2103B9F3815F7AB" DeltaFlag="1" FullSize="76728599" LastModifiedTime="1268171867964" Moniker="{1CD85198-26C6-4bac-8C72-5D34B025DE35}" Seq="100309009"/>
<File Checksum="B98410E5B392634B0CFDCCA31A91E0CC" DeltaFlag="1" FullSize="1379056" LastModifiedTime="1267534773343" Moniker="{42B17E5E-4E9D-4157-88CB-966FB4985928}" Seq="100301001"/>
<File Checksum="B5F2A5404BBE14086628996AFE2F9B3A" DeltaFlag="1" FullSize="1360437" LastModifiedTime="1267534590377" Moniker="{D3769926-05B7-4ad1-9DCF-23051EEE78E3}" Seq="100301001"/>
<File Checksum="5C01B94EE636CBC3C5FDD4C78795FE84" DeltaFlag="1" FullSize="650307" LastModifiedTime="1215745722629" Moniker="{ECCC5006-EF61-4c99-829A-417B6C6AD963}" Seq="2008021700"/>
<File Checksum="9A746C0EA16AD3E9C752607F4F6DECD9" DeltaFlag="1" FullSize="669829" LastModifiedTime="1222811007554" Moniker="{C25CEA47-63E5-447b-8D95-C79CAE13FF79}" Seq="80929016"/>
<File Checksum="A2F2CA2AA93ED3F1069E5C3AC13D956A" DeltaFlag="1" FullSize="88188" LastModifiedTime="1223504027407" Moniker="{EA960B33-2196-4d53-8AC4-D5043A5B6F9B}" Seq="80820001"/>
<File Checksum="BFADF72A64E8D13D2DEC6229AA52F180" DeltaFlag="1" FullSize="1662247" LastModifiedTime="1223504031016" Moniker="{DB206823-FFD2-440a-9B89-CCFD45F3F1CD}" Seq="80820001"/>
<File Checksum="3D2415A537675039FCCEA7898F97B17E" DeltaFlag="1" FullSize="1419193" LastModifiedTime="1223504039563" Moniker="{C13726A9-8DF7-4583-9B39-105B7EBD55E2}" Seq="80820001"/>
<File Checksum="16B671AEC3DC323C7B383BF6EE680088" DeltaFlag="1" FullSize="6487" LastModifiedTime="1258063994061" Moniker="{4F889C4A-784D-40de-8539-6A29BAA43139}" Seq="91111048"/>
<File Checksum="E1C8F66F941C7B78081C3EFF2127F1F6" DeltaFlag="1" FullSize="76805" LastModifiedTime="1268863301339" Moniker="{CC40C428-1830-44ef-B8B2-920A0B761793}" Seq="100317019"/>
<File Checksum="244541122599F989693F16E7323FA3D2" DeltaFlag="1" FullSize="888979" LastModifiedTime="1268863322135" Moniker="{812CD25E-1049-4086-9DDD-A4FAE649FBDF}" Seq="100317019"/>
<File Checksum="2F282B70060BD404A695D4AD4FCD6C7A" DeltaFlag="1" FullSize="888999" LastModifiedTime="1268863324854" Moniker="{E1A6B4FF-6873-4200-B6F6-04C13BF38CF3}" Seq="100317019"/>
<File Checksum="418137E8A16E03F9C69B1862498FF48C" DeltaFlag="1" FullSize="76788" LastModifiedTime="1268863346792" Moniker="{E5A3EBEE-D580-421e-86DF-54C0B3739522}" Seq="100317019"/>
</LiveUpdate>
</GroupIndex>
03/18 11:56:20 [2696] <mfn_DoGetIndexFile200>Parser Index File!
03/18 11:56:20 [2696] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
03/18 11:56:20 [2696] <GetIndexFileRequest:>COMPLETED
03/18 11:56:20 [2696] <IndexHeartbeatProc>GetIndexFile handling status: 0
03/18 11:56:20 [2696] <IndexHeartbeatProc>Switch Server flag=0
03/18 11:56:20 [2696] HEARTBEAT: Check Point 5.1
03/18 11:56:20 [2696] <IsInClientIPorOnLink> NextHop Not equal 192.168.1.17,return FALSE
03/18 11:56:20 [2696] <IsInClientIPorOnLink> NextHop is OnLink with 10.65.36.128,return TRUE
03/18 11:56:20 [2696] <mfn_GetOutIP> Next Hop IP is a local IP or ONLINK:10.65.36.128
03/18 11:56:20 [2696] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
03/18 11:56:20 [2696] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=16
03/18 11:56:20 [2696] <mfn_LiveUpdate> Client configured to not get content from SEPM server - Ignore LU content. Moniker: {C60DC234-65F9-4674-94AE-62158EFCA433} Seq:100309009
03/18 11:56:20 [2696] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
03/18 11:56:20 [2696] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=16
03/18 11:56:20 [2696] <mfn_LiveUpdate> Client configured to not get content from SEPM server - Ignore LU content. Moniker: {1CD85198-26C6-4bac-8C72-5D34B025DE35} Seq:100309009
03/18 11:56:20 [2696] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
03/18 11:56:20 [2696] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=16
03/18 11:56:20 [2696] <mfn_LiveUpdate> Client configured to not get content from SEPM server - Ignore LU content. Moniker: {42B17E5E-4E9D-4157-88CB-966FB4985928} Seq:100301001
03/18 11:56:20 [2696] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
03/18 11:56:20 [2696] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=16
03/18 11:56:20 [2696] <mfn_LiveUpdate> Client configured to not get content from SEPM server - Ignore LU content. Moniker: {D3769926-05B7-4ad1-9DCF-23051EEE78E3} Seq:100301001
03/18 11:56:20 [2696] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
03/18 11:56:20 [2696] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=16
03/18 11:56:20 [2696] <mfn_LiveUpdate> Client configured to not get content from SEPM server - Ignore LU content. Moniker: {ECCC5006-EF61-4c99-829A-417B6C6AD963} Seq:2008021700
03/18 11:56:20 [2696] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
03/18 11:56:20 [2696] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=16
03/18 11:56:20 [2696] <mfn_LiveUpdate> Client configured to not get content from SEPM server - Ignore LU content. Moniker: {C25CEA47-63E5-447b-8D95-C79CAE13FF79} Seq:80929016
03/18 11:56:20 [2696] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
03/18 11:56:20 [2696] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=16
03/18 11:56:20 [2696] <mfn_LiveUpdate> Client configured to not get content from SEPM server - Ignore LU content. Moniker: {EA960B33-2196-4d53-8AC4-D5043A5B6F9B} Seq:80820001
03/18 11:56:20 [2696] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
03/18 11:56:20 [2696] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=16
03/18 11:56:20 [2696] <mfn_LiveUpdate> Client configured to not get content from SEPM server - Ignore LU content. Moniker: {DB206823-FFD2-440a-9B89-CCFD45F3F1CD} Seq:80820001
03/18 11:56:20 [2696] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
03/18 11:56:20 [2696] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=16
03/18 11:56:20 [2696] <mfn_LiveUpdate> Client configured to not get content from SEPM server - Ignore LU content. Moniker: {C13726A9-8DF7-4583-9B39-105B7EBD55E2} Seq:80820001
03/18 11:56:20 [2696] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
03/18 11:56:20 [2696] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=16
03/18 11:56:20 [2696] <mfn_LiveUpdate> Client configured to not get content from SEPM server - Ignore LU content. Moniker: {4F889C4A-784D-40de-8539-6A29BAA43139} Seq:91111048
03/18 11:56:20 [2696] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
03/18 11:56:20 [2696] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=16
03/18 11:56:20 [2696] <mfn_LiveUpdate> Client configured to not get content from SEPM server - Ignore LU content. Moniker: {CC40C428-1830-44ef-B8B2-920A0B761793} Seq:100317019
03/18 11:56:20 [2696] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
03/18 11:56:20 [2696] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=16
03/18 11:56:20 [2696] <mfn_LiveUpdate> Client configured to not get content from SEPM server - Ignore LU content. Moniker: {812CD25E-1049-4086-9DDD-A4FAE649FBDF} Seq:100317019
03/18 11:56:20 [2696] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
03/18 11:56:20 [2696] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=16
03/18 11:56:20 [2696] <mfn_LiveUpdate> Client configured to not get content from SEPM server - Ignore LU content. Moniker: {E1A6B4FF-6873-4200-B6F6-04C13BF38CF3} Seq:100317019
03/18 11:56:20 [2696] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
03/18 11:56:20 [2696] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=16
03/18 11:56:20 [2696] <mfn_LiveUpdate> Client configured to not get content from SEPM server - Ignore LU content. Moniker: {E5A3EBEE-D580-421e-86DF-54C0B3739522} Seq:100317019
03/18 11:56:20 [2696] <PostEvent>going to post event=EVENT_SERVER_ONLINE
03/18 11:56:20 [2696] <PostEvent>done post event=EVENT_SERVER_ONLINE, return=0
03/18 11:56:20 [2696] <ScheduleNextUpdate>Reset Heartbeat factor index, hearbeat=300 seconds
03/18 11:56:20 [2696] HEARTBEAT: Check Point 6
03/18 11:56:20 [2696] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: AVMan
03/18 11:56:20 [2696] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: GUP
03/18 11:56:20 [2696] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: LUMan
03/18 11:56:20 [2696] <mfn_PostAgentInfo>===REQUESTING CMC OP-STATE ===
03/18 11:56:20 [2696] <PostEvent>going to post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE
03/18 11:56:20 [2696] <PostEvent>done post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE, return=0
03/18 11:56:20 [2696] ReasonDescForFailure*** = Host Integrity check is disabled.
03/18 11:56:20 [2696] ReasonDescForFailure*** = Host Integrity check is disabled.
03/18 11:56:20 [2696] *** = <SSAInfo NameSpace="rpc" AgentID="1C8B9084C0A8011101D52A294EADBB10" ComputerID="557FA4FCC0A8011101D52A297F64D66C" HardwareKey="569B13EFA37A4E758096CDD41E439BC9" GroupID="BE729101C0A80111009789EEFE1D7F9E">
<AgentHIInfo Status="3" ReasonCode="105" ReasonDescForFailure="Host Integrity check is disabled."/>
<SSAHostInfo>
<NetworkIdentity UserDomain="FINANCIAL-TRAINING.COM.SG" LogonUser="lucas.lee" HostDomain="financial-training.com.sg" HostName="apmi07-com03" HostDesc=""/>
<SSAProduct Version="11.0.5002.333"/>
<SSAOS Version="5.1.2600" Desc="Windows XP Professional " Type="17105154" ServicePack="Service Pack 2" Language="9"/>
<Processor ProcessorType="x86 Family 15 Model 6 Stepping 5" ProcessorClock="3000" ProcessorNum="2"/>
<Memory Size="501116928"/>
<Disk Letter="C:\" Size="41940668416"/>
<BIOS Version="DELL - 14"/>
<TpmDevice Id="0"/>
<SSAProfile Version="5.0.0" SerialNumber="BE72-03/11/2010 15:59:53 578"/>
<SSAIDS Version="" SerialNumber=""/>
<Deuce Signature="100224001"/>
<SSAUTC Bias="-480"/>
<DNSs><DNS Address="192.168.1.2"/><DNS Address="192.168.1.4"/></DNSs>
<DHCPServer Address="192.168.1.2"/><SSANICs><SSANIC Ip="10.65.36.128" Mac="00-1a-a0-0c-19-b1" Gateway="10.65.36.1" SubnetMask="255.255.255.0"/></SSANICs><Firewall OnOff="1" Installed="1"/>
</SSAHostInfo>
<RebootRequired Status="0"></RebootRequired>
<InstalledFeatures><Feature Id ="256"/></InstalledFeatures>
</SSAInfo>
03/18 11:56:20 [2696] <mfn_PostAgentInfo>Volatile op-state damper: 0, Interval passed: 1268884580
03/18 11:56:20 [2696] <mfn_PostAgentInfo>Free memory difference: 75128832, Threshold: 0
03/18 11:56:20 [2696] <mfn_PostAgentInfo>Free disk space difference: 21377196032, Threshold: 0
03/18 11:56:20 [2696] <PostEvent>going to post event=EVENT_SYLINK_QUERY_COMMANDSTATUS
03/18 11:56:20 [2696] <PostEvent>done post event=EVENT_SYLINK_QUERY_COMMANDSTATUS, return=0
03/18 11:56:20 [2696] <mfn_PostAgentInfo><?xml version='1.0' encoding='UTF-8' ?>
<SESAgentOpState AgentID="1C8B9084C0A8011101D52A294EADBB10" Timestamp="1268884580306"><TechID Name="AVMan"><Data><![CDATA[<avstate version="1.0"><RTVScanRunning>1</RTVScanRunning><PatternFileRevision>49</PatternFileRevision><UsingPattern>3175985</UsingPattern><PatternFileSequence>106360</PatternFileSequence><PatternFileDate>28001B000000</PatternFileDate><TimeOfLastVirus>27060E022900</TimeOfLastVirus><TimeOfLastScan>28020F020839</TimeOfLastScan><WorstInfectionType>0</WorstInfectionType><OnOff>1</OnOff><SymProtectOnOff>1</SymProtectOnOff><SymSentryInstalled>0</SymSentryInstalled><SavProductVersion>19011542</SavProductVersion><Licensed>0</Licensed><LicenseStatus>0</LicenseStatus><LicenseExpirationTime>000000000000</LicenseExpirationTime><DecAbiVer>1.2.5</DecAbiVer><EraserEngineVer>7143426:196620</EraserEngineVer><Moniker Id="{C25CEA47-63E5-447b-8D95-C79CAE13FF79}" Version="1.5.0" Seq="80929017" Owner="SyKnAppS" /><Moniker Id="{E5A3EBEE-D580-421e-86DF-54C0B3739522}" Version="MicroDefsB.CurDefs" Seq="100226020" Owner="SyKnAppS" /><Moniker Id="{812CD25E-1049-4086-9DDD-A4FAE649FBDF}" Version="MicroDefsB.CurDefs" Seq="100226020" Owner="SyKnAppS" /><Moniker Id="{EA960B33-2196-4d53-8AC4-D5043A5B6F9B}" Version="6.1.0" Seq="80820001" Owner="COH" /><Moniker Id="{C13726A9-8DF7-4583-9B39-105B7EBD55E2}" Version="6.1.0" Seq="80820001" Owner="COH" /></avstate>]]></Data></TechID><TechID Name="GUP"><Data><![CDATA[<?xml version='1.0' encoding='UTF-8' ?>
<GupStatus IsGup="0" NameSpace="rpc" ComputerID="557FA4FCC0A8011101D52A297F64D66C"/>]]></Data></TechID><TechID Name="LUMan"><Data><![CDATA[<lustate><lastUpdateTime>1268806182380</lastUpdateTime></lustate>]]></Data></TechID><TechID Name="SEP"><Data><![CDATA[<SSAInfo NameSpace="rpc" AgentID="1C8B9084C0A8011101D52A294EADBB10" ComputerID="557FA4FCC0A8011101D52A297F64D66C" HardwareKey="569B13EFA37A4E758096CDD41E439BC9" GroupID="BE729101C0A80111009789EEFE1D7F9E">
<AgentHIInfo Status="3" ReasonCode="105" ReasonDescForFailure="Host Integrity check is disabled."/>
<SSAHostInfo>
<NetworkIdentity UserDomain="FINANCIAL-TRAINING.COM.SG" LogonUser="lucas.lee" HostDomain="financial-training.com.sg" HostName="apmi07-com03" HostDesc=""/>
<SSAProduct Version="11.0.5002.333"/>
<SSAOS Version="5.1.2600" Desc="Windows XP Professional " Type="17105154" ServicePack="Service Pack 2" Language="9"/>
<Processor ProcessorType="x86 Family 15 Model 6 Stepping 5" ProcessorClock="3000" ProcessorNum="2"/>
<Memory Size="501116928"/>
<Disk Letter="C:\" Size="41940668416"/>
<BIOS Version="DELL - 14"/>
<TpmDevice Id="0"/>
<SSAProfile Version="5.0.0" SerialNumber="BE72-03/11/2010 15:59:53 578"/>
<SSAIDS Version="" SerialNumber=""/>
<Deuce Signature="100224001"/>
<SSAUTC Bias="-480"/>
<DNSs><DNS Address="192.168.1.2"/><DNS Address="192.168.1.4"/></DNSs>
<DHCPServer Address="192.168.1.2"/><SSANICs><SSANIC Ip="10.65.36.128" Mac="00-1a-a0-0c-19-b1" Gateway="10.65.36.1" SubnetMask="255.255.255.0"/></SSANICs><Firewall OnOff="1" Installed="1"/>
</SSAHostInfo>
<RebootRequired Status="0"></RebootRequired>
<InstalledFeatures><Feature Id ="256"/></InstalledFeatures>
</SSAInfo>
]]></Data></TechID><TechID Name="SEP"><Data><![CDATA[<SSAInfo NameSpace="rpc" AgentID="1C8B9084C0A8011101D52A294EADBB10" ComputerID="557FA4FCC0A8011101D52A297F64D66C" HardwareKey="569B13EFA37A4E758096CDD41E439BC9" GroupID="BE729101C0A80111009789EEFE1D7F9E">
<SSAHostInfo>
<Memory Free="75128832"/>
<Disk Letter="C:\" Free="21377196032"/>
</SSAHostInfo>
</SSAInfo>
]]></Data></TechID></SESAgentOpState>
03/18 11:56:20 [2696] ************CSN=452069
03/18 11:56:20 [2696] <mfn_MakePostUrl:>Request is: action=192&hostid=1C8B9084C0A8011101D52A294EADBB10&chk=095678C87062944C4EF413C32248797A&ck=BF8FE638AFA3E4D736F9A72308915B3F&uchk=8AD5CC57863ED13C283A75EEB16F8DCB&uck=A92DECC83CBAC1E0E258BB121263251C&as=452069&cn=[hex]61706D6930372D636F6D3033&lun=[hex]6C756361732E6C6565&udn=[hex]46494E414E4349414C2D545241494E494E472E434F4D2E5347
03/18 11:56:20 [2696] <mfn_PostAgentInfo>http://192.168.1.17:80/secars/secars.dll?h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
03/18 11:56:20 [2696] <mfn_PostAgentInfo>POST the total size=1556
03/18 11:56:20 [2696] <mfn_PostAgentInfo>Done with return code = 200
03/18 11:56:20 [2696] <IndexHeartbeatProc>===UPLOAD STAGE===
03/18 11:56:20 [2696] <PostEvent>going to post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG
03/18 11:56:20 [2696] <PostEvent>done post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG, return=0
03/18 11:56:20 [1408] SyLinkDeleteConfig => Deleting instance: 00FE1160
03/18 11:56:20 [2696] <IndexHeartbeatProc>===PREPARE EVENT LOG STAGE===
03/18 11:56:20 [2696] <PrepareEventLog>initialized technology extension processing ok
03/18 11:56:20 [1408] <PostEvent>going to post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED
03/18 11:56:20 [1408] <PostEvent>done post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED, return=0
03/18 11:56:20 [1408] <Stop>Stopping SyLink module...
03/18 11:56:20 [1408] 11:56:20=>To stop LU download thread
03/18 11:56:20 [1408] 11:56:20=>To stop LU download thread returned
03/18 11:56:20 [1408] 11:56:20=>To stop MAIN thread
03/18 11:56:20 [420] <MainThreadProc:>***** Main Thread Exit ****
03/18 11:56:20 [1408] 11:56:20=>To stop MAIN thread returned
03/18 11:56:20 [1408] 11:56:20=>To stop HEARTBEAT thread
03/18 11:56:20 [1408] HEARTBEAT RUN TIME=1sec
03/18 11:56:20 [1408] 11:56:20=>To close Heartbeat thread...
03/18 11:56:20 [2696] <CalcEventLogIndex>Need to send Event Log Type(0) from id 17 to 28
03/18 11:56:20 [2696] <PrepareEventLog>Allow total logs to send=12
03/18 11:56:20 [2696] <PrepareEventLog>nSecurityRecordsTotal=0
03/18 11:56:20 [2696] <PrepareEventLog>nSecurityRecordsToSend=0
03/18 11:56:20 [2696] <PrepareEventLog>nSystemRecordsTotal=12
03/18 11:56:20 [2696] <PrepareEventLog>nSystemRecordsToSend=100
03/18 11:56:20 [2696] <PrepareEventLog>nTrafficRecordsTotal=0
03/18 11:56:20 [2696] <PrepareEventLog>nTrafficRecordsToSend=0
03/18 11:56:20 [2696] <PrepareEventLog>nRawRecordsTotal=0
03/18 11:56:20 [2696] <PrepareEventLog>nRawRecordsToSend=0
03/18 11:56:20 [2696] <PrepareEventLog>nProcessRecordsTotal=0
03/18 11:56:20 [2696] <PrepareEventLog>nProcessRecordsToSend=0
03/18 11:56:20 [2696] <PrepareEventLog>nLANSensorRecordsTotal=0
03/18 11:56:20 [2696] <PrepareEventLog>nLANSensorRecordsToSend=0
03/18 11:56:20 [2696] <PrepareEventLog>nTechExtensionRecordsTotal=0
03/18 11:56:20 [2696] <PrepareEventLog>nTechExtensionRecordsToSend=0
03/18 11:56:20 [2696] <MakeSystemLog>The size of SYSTEM event logs is 4974.
03/18 11:56:20 [2696] <SyLink>The size of SYSTEM event logs is 4974.
03/18 11:56:20 [2696] <MakeSecurityLog>Attached total 0 bytes SECURITY event logs.
03/18 11:56:20 [2696] <MakeTrafficLog>Attached total 0 bytes TRAFFIC event logs.
03/18 11:56:20 [2696] <MakeRawTrafficLog>Attached total 0 bytes RAW TRAFFIC event logs.
03/18 11:56:20 [2696] <MakeProcessLog>Attached total 0 bytes process event logs.
03/18 11:56:20 [2696] <IsToStop:>stopping
03/18 11:56:20 [2696] <PostEvent>stopping...ignore event ID=EVENT_SERVER_DISCONNECTED
03/18 11:56:20 [2696] <IndexHeartbeatProc>====== IndexHeartbeat Procedure stops at 11:56:20 ======
03/18 11:56:20 [2696] <IndexHeartbeatProc>Set Heartbeat Result= 2
03/18 11:56:20 [2696] <IndexHeartbeatProc>Sylink Comm.Flags: 'Connection Failed' = 0, 'Using Backup Sylink' = 0, 'Using Location Config' = 0
03/18 11:56:20 [2696] Use new configuration
03/18 11:56:20 [2696] HEARTBEAT: Check Point Complete
03/18 11:56:20 [2696] <IndexHeartbeatProc>Done, Heartbeat=300seconds
03/18 11:56:20 [2696] </CSyLink::IndexHeartbeatProc()>
03/18 11:56:20 [2696] <CheckHeartbeatTimer>====== Heartbeat loop stops at 11:56:20 ======
03/18 11:56:20 [2696] <IsToStop:>stopping
03/18 11:56:20 [2696] <CheckHeartbeatTimer>Sylink is Stopping mode
03/18 11:56:20 [2696] <IsToStop:>stopping
03/18 11:56:20 [2696] <HeartbeatThreadProc:>Thread is stopping..
03/18 11:56:20 [1408] 11:56:20=>To close Heartbeat thread returned
03/18 11:56:20 [1408] <StopHbThread>Heartbeat thread stopped, Heartbeat=300
03/18 11:56:20 [1408] 11:56:20=>To stop HEARTBEAT thread returned
03/18 11:56:20 [1408] 11:56:20=>To stop DOWNLOAD THREAD
03/18 11:56:20 [1408] <CDownloadManager::mfn_StopDownload()>
03/18 11:56:20 [1408] </CDownloadManager::mfn_StopDownload()>
03/18 11:56:20 [1408] 11:56:20=>To stop DOWNLOAD THREAD returned
03/18 11:56:20 [1408] <Stop>Switch the new setting.
03/18 11:56:20 [1408] Importing ConfigObject: 01B97A30 into: 01B95788
03/18 11:56:20 [1408] SyLinkDeleteConfig => Deleting instance: 01B97A30
03/18 11:56:20 [1408] Write to registry UserGUID=0
03/18 11:56:20 [1408] <Stop>Stopped!
03/18 11:56:20 [1408] 11:56:20=>STOP command completed
03/18 11:56:20 [1408] SyLinkDeleteInstance => Deleting instance: 01B78DE8
03/18 11:56:20 [1408] <PostEvent>stopping...ignore event ID=EVENT_SYLINK_CONFIG_SETTING_CHANGED
03/18 11:56:20 [1408] <Stop>Not started yet!.
03/18 11:56:20 [1408] SyLinkDeleteConfig => Deleting instance: 01B95788
03/18 11:56:20 [1408] <FreeProcessingDetails> Freeing: AVMan
03/18 11:56:20 [1408] <FreeProcessingDetails> Freeing: GUP
03/18 11:56:20 [1408] <FreeProcessingDetails> Freeing: LUMan
03/18 11:56:20 [1408] <FreeProcessingDetails> Freeing: NacMan
03/18 11:56:20 [1408] SyLink object is deleted !
Do you have any proxy setting
Do you have any proxy setting in IE?
If yes try by bypassing it..
Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind
i managed to update one of
i managed to update one of the SEP Client after uncheck "user automatic configuration script".
all my users IE are configure to use proxy server....and some of them are able to obtain update from LUA server successfully.
by the way,on my ISA server,i allow everything..
anyone has the similiar configuration like me?
please help!!
In IE---->Internet
In IE---->Internet options---->connection---->Lan settings--->proxy settings--->advanced
here in exception add your LUA and see whether it is getting the updates..
Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind
I am selecting "Automatic
I am selecting "Automatic Browser Configuration" for IE..
I never enable/select "proxy settings".
Go to control
Go to control panel---->symantec liveupdate ,change the mode to interactive mode and see any difference present..
Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind
same issue.... anything like
same issue....
anything like port no i can allow in my ISA Server?
open IE access the URL of the
open IE access the URL of the LUA and assure that you are able to access it.(By default port no is 7070 I believe).You can confirm this port by checking the distribution center configuration..
Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind
almost same problem here.
Hi
can I join the discussion..
I have the same problem.. My SEP maneger get´s the updates, but can´t push it out.. running 11.5002.333.
I have this log witch a Symantec employ helped me with, but have not jet call back on (2 days ago):
-------------------------------------------------------------------
03/16 11:39:11 [3568] ~~~Sylink log started. (SEP Product Version in registry: 11.0.5002.333, Sylink File Version: 11.0.5002.301)
03/16 11:39:11 [3568] Stored HostGUID=FC5EC3D8AC1E027E01A4036FB90DA4C9; outlen=16
03/16 11:39:11 [3568] <RestoreSettings>Stored UserGuid=0; outlen=2
03/16 11:39:11 [3568] <mfn_DecodeSSN>Sygate-SSN=12115
03/16 11:39:11 [3568] <mfn_DecodeSSN>Read CSN=12116
03/16 11:39:11 [3568] <mfn_DecodeSSN>Sygate-SSN=367
03/16 11:39:11 [3568] <mfn_DecodeSSN>Read CSN=368
03/16 11:39:11 [3568] Product Type=1,Major Ver=5,Minor Ver=1,Platform ID=2,OSType=17105154
03/16 11:39:11 [3568] OS=Windows XP Professional ; number=5.1.2600
03/16 11:39:11 [3568] SyLinkCreateInstance => Instance created: 01C02008 Registry path: SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\SYLINK
03/16 11:39:11 [3568] <GetOnlineNicInfo>:Netport Count=1
03/16 11:39:11 [3568] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="172.30.2.94" Mac="00-21-86-98-51-b5" Gateway="172.30.2.53" SubnetMask="255.255.255.0"/></SSANICs>
03/16 11:39:11 [3568] SyLinkCreateConfig => Created instance: 01BD5890
03/16 11:39:11 [3568] UseNewConfig => Created m_hNewConfig: 01BD5890
03/16 11:39:11 [3568] Importing ConfigObject: 01BD1340 into: 01BD5890
03/16 11:39:11 [3568] Importing ConfigObject: 01BD1340 into: 01BD35E8
03/16 11:39:11 [3568] <PostEvent>stopping...ignore event ID=EVENT_SYLINK_CONFIG_SETTING_CHANGED
03/16 11:39:11 [3568] SSA packageType is set as 105
03/16 11:39:11 [3568] SyLinkDeleteConfig => Deleting instance: 01BD1340
03/16 11:39:11 [3568] <SetHiStatus>HI status is changed to=3; reason=105; rule=Host Integrity check is disabled.
Host Integrity policy has been disabled by the administrator.
03/16 11:39:12 [3568] SyLinkCreateConfig => Created instance: 0322EA28
03/16 11:39:12 [3568] SetCurLocationName: Name is set to - Default
03/16 11:39:12 [3568] SetCurLocationID: ID is set to - D293438CAC1E023101AFF40FE7BDA2F6
03/16 11:39:12 [3568] SyLinkCreateConfig => Created instance: 032389B8
03/16 11:39:12 [3568] Importing ConfigObject: 032389B8 into: 01BD5890
03/16 11:39:12 [3568] Importing ConfigObject: 032389B8 into: 01BD35E8
03/16 11:39:12 [3568] <PostEvent>stopping...ignore event ID=EVENT_SYLINK_CONFIG_SETTING_CHANGED
03/16 11:39:12 [3568] SyLinkDeleteConfig => Deleting instance: 032389B8
03/16 11:39:12 [3568] SyLinkDeleteConfig => Deleting instance: 0322EA28
03/16 11:39:12 [3568] <CSyLink::Start()>
03/16 11:39:12 [3568] <EncodeHelper::DecryptUrl>
03/16 11:39:12 [3568] <CSyLink::Start> The last server used was '172.30.2.126'
03/16 11:39:12 [3568] <CSyLink::ImportConfigFile()>
03/16 11:39:12 [3568] CUpdateConfig::Dump
<Client Package-Checksum: a7149f8b18aa81bf910dbd45c0faa427, DownloadStartTime: 0:0, DurationMin: 1439, RandomizeTime: 0>
03/16 11:39:12 [3568] </CSyLink::ImportConfigFile()>
03/16 11:39:12 [3568] ******Sid=S-1-5-21-1489915688-1804100725-619646970-1413
03/16 11:39:12 [3568] <GetDomainHostName>NT user Name=
03/16 11:39:12 [3568] <GetDomainHostName>NT domain Name=
03/16 11:39:12 [3568] <GetDomainHostName>Current Login User Name=/
03/16 11:39:12 [3568] <GetDomainHostName>use netbios to query computer domain name. IP and Host name are: 172.30.2.94hcpc211
03/16 11:39:12 [3568] Got domain name using NetWkstaGetInfo
03/16 11:39:12 [3568] <GetDomainHostName>Got domain name (using netbios) for IP 172.30.2.94
03/16 11:39:12 [3568] <GetDomainHostName>computer domain name = HCH
03/16 11:39:12 [3568] <GetDomainHostName>msz_DomainName is taken from szDomainName
03/16 11:39:12 [3568] <GetDomainHostName>DomainName (Final)=HCH
03/16 11:39:12 [3568] <HWID CSyLink::GetHardwareKey> Get Hardware ID
03/16 11:39:13 [3568] <HWID CSyLink::GetHardwareKey> Hardware ID assigned: E19DD7175138636A9A1D320EBFDFBC77
03/16 11:39:13 [3568] <Start>Unable to create Session with 'No Proxies' settings - Error Code: 87
03/16 11:39:13 [4348] <ScheduleNextUpdate>Manually assigned heartbeat=656 seconds
03/16 11:39:13 [824] <HeartbeatThreadProc:>Thread is about to begin..
03/16 11:39:13 [4348] Successfully created the heartbeat thread
03/16 11:39:13 [3568] <Start>Started, contact SMS every 900 seconds
03/16 11:39:13 [3568] <PostEvent>going to post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED
03/16 11:39:13 [3568] <PostEvent>done post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED, return=0
03/16 11:39:13 [3568] </CSyLink::Start()>
03/16 11:39:14 [3568] <SetClientAuth>Received new User/Domain from SMC.. User: MMF User Domain: HCH
03/16 11:39:14 [3568] <SetClientAuth>Getting RDNS Domain Name (user domain in AD setup)..
03/16 11:39:14 [3568] <GetLoginRdnsDomain>DNS domain=
03/16 11:39:14 [3568] <SetClientAuth>Checking if the new user domain name is the same as Local Host ..
03/16 11:39:14 [3568] <SetClientAuth>HostName=hcpc211
03/16 11:39:14 [3568] <SetClientAuth>New User DomainName=hch
03/16 11:39:14 [3568] <SetClientAuth>Setting the User Domain to one specified by SMC..
03/16 11:39:14 [3568] <SetClientAuth>Logged in user info set to: HCH/MMF
03/16 11:39:14 [3568] <SetClientAuth>Marking User Change Notify to redo registration..
03/16 11:39:14 [824] <CheckHeartbeatTimer>====== Heartbeat loop starts at 11:39:14 ======
03/16 11:39:14 [5280] SyLinkCreateConfig => Created instance: 01B5D508
03/16 11:39:14 [5280] Importing ConfigObject: 01BD35E8 into: 01B5D508
03/16 11:39:14 [5280] SyLinkDeleteConfig => Deleting instance: 01B5D508
03/16 11:39:14 [824] <GetOnlineNicInfo>:Netport Count=1
03/16 11:39:14 [824] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="172.30.2.94" Mac="00-21-86-98-51-b5" Gateway="172.30.2.53" SubnetMask="255.255.255.0"/></SSANICs>
03/16 11:39:14 [4688] <CSyLink::SetNewLearnedAppList()>
03/16 11:39:14 [4688] ***NewLearnedApps - Current count: 0
03/16 11:39:14 [4688] ***app=SescLU.exe
03/16 11:39:14 [4688] ***app=LUCOMS~1.EXE
03/16 11:39:14 [4688] ***app=wmiprvse.exe
03/16 11:39:14 [4688] ***app=infocard.exe
03/16 11:39:14 [4688] ***app=dwwin.exe
03/16 11:39:14 [4688] ***app=nlnhook.exe
03/16 11:39:14 [4688] ***app=DWRCC.exe
03/16 11:39:14 [4688] ***app=TotalViewClient.exe
03/16 11:39:14 [4688] ***app=taskmgr.exe
03/16 11:39:14 [4688] ***app=xdelta3.exe
03/16 11:39:14 [4688] ***app=SymDelta.exe
03/16 11:39:14 [4688] ***app=LuCallbackProxy.exe
03/16 11:39:14 [4688] ***app=rundll32.exe
03/16 11:39:14 [4688] ***app=LUALL.EXE
03/16 11:39:14 [4688] ***app=SymCorpUI.exe
03/16 11:39:14 [4688] ***app=ntoskrnl.exe
03/16 11:39:14 [4688] ***app=smss.exe
03/16 11:39:14 [4688] ***app=csrss.exe
03/16 11:39:14 [4688] ***app=winlogon.exe
03/16 11:39:14 [4688] ***app=services.exe
03/16 11:39:14 [4688] ***app=lsass.exe
03/16 11:39:14 [4688] ***app=ibmpmsvc.exe
03/16 11:39:14 [4688] ***app=svchost.exe
03/16 11:39:14 [4688] ***app=S24EvMon.exe
03/16 11:39:14 [4688] ***app=spoolsv.exe
03/16 11:39:14 [4688] ***app=TPHKSVC.exe
03/16 11:39:14 [4688] ***app=IPSSVC.EXE
03/16 11:39:14 [4688] ***app=AcPrfMgrSvc.exe
03/16 11:39:14 [4688] ***app=DWRCS.EXE
03/16 11:39:14 [4688] ***app=EvtEng.exe
03/16 11:39:14 [4688] ***app=PresentationFontCache.exe
03/16 11:39:14 [4688] ***app=ibguard.exe
03/16 11:39:14 [4688] ***app=jqs.exe
03/16 11:39:14 [4688] ***app=nsd.exe
03/16 11:39:14 [4688] ***app=nslsvice.exe
03/16 11:39:14 [4688] ***app=nvsvc32.exe
03/16 11:39:14 [4688] ***app=RegSrvc.exe
03/16 11:39:14 [4688] ***app=tvt_reg_monitor_svc.exe
03/16 11:39:14 [4688] ***app=TPHDEXLG.exe
03/16 11:39:14 [4688] ***app=TpKmpSVC.exe
03/16 11:39:14 [4688] ***app=tvtsched.exe
03/16 11:39:14 [4688] ***app=PWMDBSVC.exe
03/16 11:39:14 [4688] ***app=SUService.exe
03/16 11:39:14 [4688] ***app=AcSvc.exe
03/16 11:39:14 [4688] ***app=btwdins.exe
03/16 11:39:14 [4688] ***app=DWRCST.exe
03/16 11:39:14 [4688] ***app=ibserver.exe
03/16 11:39:14 [4688] ***app=Explorer.EXE
03/16 11:39:14 [4688] ***app=alg.exe
03/16 11:39:14 [4688] ***app=SvcGuiHlpr.exe
03/16 11:39:14 [4688] ***app=scheduler_proxy.exe
03/16 11:39:14 [4688] ***app=TPOSDSVC.exe
03/16 11:39:14 [4688] ***app=TPFNF6R.exe
03/16 11:39:14 [4688] ***app=TPFNF7SP.exe
03/16 11:39:14 [4688] ***app=EzEjMnAp.Exe
03/16 11:39:14 [4688] ***app=ACTray.exe
03/16 11:39:14 [4688] ***app=TPONSCR.exe
03/16 11:39:14 [4688] ***app=ACWLIcon.exe
03/16 11:39:14 [4688] ***app=TpScrex.exe
03/16 11:39:14 [4688] ***app=SynTPEnh.exe
03/16 11:39:14 [4688] ***app=TpShocks.exe
03/16 11:39:14 [4688] ***app=LPMGR.exe
03/16 11:39:14 [4688] ***app=LPMLCHK.exe
03/16 11:39:14 [4688] ***app=smax4pnp.exe
03/16 11:39:14 [4688] ***app=Amsg.exe
03/16 11:39:14 [4688] ***app=AwaySch.EXE
03/16 11:39:14 [4688] ***app=jusched.exe
03/16 11:39:14 [4688] ***app=ctfmon.exe
03/16 11:39:14 [4688] ***app=SynTPLpr.exe
03/16 11:39:14 [4688] ***app=NLNOTES.EXE
03/16 11:39:14 [4688] ***app=notes2.exe
03/16 11:39:14 [4688] ***app=iexplore.exe
03/16 11:39:14 [4688] ***app=ntaskldr.EXE
03/16 11:39:14 [4688] ***app=msiexec.exe
03/16 11:39:14 [4688] ***app=ccSvcHst.exe
03/16 11:39:14 [4688] ***app=Smc.exe
03/16 11:39:14 [4688] ***app=Rtvscan.exe
03/16 11:39:14 [4688] ***app=SmcGui.exe
03/16 11:39:14 [4688] ***app=sndvol32.exe
03/16 11:39:14 [4688] ***app=cmd.exe
03/16 11:39:14 [4688] ***app=notes.exe
03/16 11:39:14 [4688] ***app=verclsid.exe
03/16 11:39:14 [4688] ***app=kvoop.exe
03/16 11:39:14 [4688] ***app=COH32.exe
03/16 11:39:14 [4688] ***app=imapi.exe
03/16 11:39:14 [4688] ***app=mshta.exe
03/16 11:39:14 [4688] ***app=setup.exe
03/16 11:39:14 [4688] ***app=setup.exe
03/16 11:39:14 [4688] ***app=ngen.exe
03/16 11:39:14 [4688] ***app=mscorsvw.exe
03/16 11:39:14 [4688] ***app=setup.exe
03/16 11:39:14 [4688] ***app=msdtc.exe
03/16 11:39:14 [4688] ***app=dllhost.exe
03/16 11:39:14 [4688] ***app=dexplore.exe
03/16 11:39:14 [4688] ***app=vsaenv.exe
03/16 11:39:14 [4688] ***app=devenv.exe
03/16 11:39:14 [4688] ***app=MSI1FA.tmp
03/16 11:39:14 [4688] ***app=MSI26E.tmp
03/16 11:39:14 [4688] ***app=MSI26F.tmp
03/16 11:39:14 [4688] ***app=MSI2D6.tmp
03/16 11:39:14 [4688] ***app=MSI33A.tmp
03/16 11:39:14 [4688] ***app=MSI3A6.tmp
03/16 11:39:14 [4688] ***app=MSI3CC.tmp
03/16 11:39:14 [4688] ***app=MSI443.tmp
03/16 11:39:14 [4688] ***app=MSI4D9.tmp
03/16 11:39:14 [4688] ***app=MSI538.tmp
03/16 11:39:14 [4688] ***app=SqlWb.exe
03/16 11:39:14 [4688] ***app=wmiadap.exe
03/16 11:39:14 [4688] ***app=mmc.exe
03/16 11:39:14 [4688] ***app=wupdmgr.exe
03/16 11:39:14 [4688] ***app=wuauclt.exe
03/16 11:39:14 [4688] ***app=windows-kb890830-v3.0-delta.exe
03/16 11:39:14 [4688] ***app=mrtstub.exe
03/16 11:39:14 [4688] ***app=MRT.exe
03/16 11:39:14 [4688] ***app=HTMLlog.exe
03/16 11:39:14 [4688] ***app=Adobe_Updater.exe
03/16 11:39:14 [4688] ***app=autochk.exe
03/16 11:39:14 [4688] ***app=tpnumlk.exe
03/16 11:39:14 [4688] ***app=userinit.exe
03/16 11:39:14 [4688] ***app=sc.exe
03/16 11:39:14 [4688] ***app=micmute.exe
03/16 11:39:14 [4688] ***app=mpnotify.exe
03/16 11:39:14 [4688] ***app=tpnumlkd.exe
03/16 11:39:14 [4688] ***app=net.exe
03/16 11:39:14 [4688] ***app=WgaTray.exe
03/16 11:39:14 [4688] ***app=nwiz.exe
03/16 11:39:14 [4688] ***app=TpKmapAp.exe
03/16 11:39:14 [4688] ***app=net1.exe
03/16 11:39:14 [4688] ***app=SMax4.exe
03/16 11:39:14 [4688] ***app=AcFnF5.exe
03/16 11:39:14 [4688] ***app=cwbunplp.exe
03/16 11:39:14 [4688] ***app=GoogleToolbarNotifier.exe
03/16 11:39:14 [4688] ***app=cwbckver.exe
03/16 11:39:14 [4688] ***app=cwbsvstr.exe
03/16 11:39:14 [4688] ***app=cwbwlwiz.exe
03/16 11:39:14 [4688] ***app=AdobeARM.exe
03/16 11:39:14 [4688] ***app=cwbinhlp.exe
03/16 11:39:14 [4688] ***app=rcplauncher.exe
03/16 11:39:14 [4688] ***app=reader_sl.exe
03/16 11:39:14 [4688] ***app=AcroRd32.exe
03/16 11:39:14 [4688] ***app=nfileret.exe
03/16 11:39:14 [4688] ***app=ndyncfg.exe
03/16 11:39:14 [4688] ***app=javaws.exe
03/16 11:39:14 [4688] ***app=javaws.exe
03/16 11:39:14 [4688] ***app=javaw.exe
03/16 11:39:14 [4688] ***app=javaw.exe
03/16 11:39:14 [4688] ***app=mvPCinfoEveryLaunch.exe
03/16 11:39:14 [4688] ***app=ccApp.exe
03/16 11:39:14 [4688] ***app=calc.exe
03/16 11:39:14 [4688] ***app=DWHWizrd.exe
03/16 11:39:14 [4688] ***app=ipconfig.exe
03/16 11:39:14 [4688] ***app=GoogleUpdaterService.exe
03/16 11:39:14 [4688] ***app=GoogleUpdate.exe
03/16 11:39:14 [4688] ***app=GoogleUpdate.exe
03/16 11:39:15 [4688] ***app=googleupdatesetup.exe
03/16 11:39:15 [4688] ***app=GoogleCrashHandler.exe
03/16 11:39:15 [4688] ***app=GoogleEarth-Win-5.1.3509.4636.exe
03/16 11:39:15 [4688] ***app=GoogleEarth.exe
03/16 11:39:15 [4688] ***app=expand.exe
03/16 11:39:15 [4688] ***app=chrome_installer.exe
03/16 11:39:15 [4688] ***app=setup.exe
03/16 11:39:15 [4688] ***app=googleearth.exe
03/16 11:39:15 [4688] ***app=helpsvc.exe
03/16 11:39:15 [4688] ***app=DNTU.exe
03/16 11:39:15 [4688] ***app=notepad.exe
03/16 11:39:15 [4688] ***app=cwbunnav.exe
03/16 11:39:15 [4688] ***app=javaw.exe
03/16 11:39:15 [4688] ***app=EXCEL.EXE
03/16 11:39:15 [4688] ***app=ping.exe
03/16 11:39:15 [4688] ***app=ntvdm.exe
03/16 11:39:15 [4688] ***app=WINWORD.EXE
03/16 11:39:15 [4688] ***app=wltn_mot_mc3000_ce50_7_0_79_as.exe
03/16 11:39:15 [4688] ***app=wl_license_server_42001.exe
03/16 11:39:15 [4688] ***app=SpaceObServer-Client.exe
03/16 11:39:15 [4688] ***app=is-OKTMH.tmp
03/16 11:39:15 [4688] ***app=SpaceObServer.exe
03/16 11:39:15 [4688] ***app=wmplayer.exe
03/16 11:39:15 [4688] ***app=setup_wm.exe
03/16 11:39:15 [4688] ***app=unregmp2.exe
03/16 11:39:15 [4688] ***app=defrag.exe
03/16 11:39:15 [4688] ***app=dfrgntfs.exe
03/16 11:39:15 [4688] ***app=AcroRd32Info.exe
03/16 11:39:15 [4688] ***app=videoconvertersetup[1].exe
03/16 11:39:15 [4688] ***app=softwarelaunchersetup.exe
03/16 11:39:15 [4688] ***app=need4videoconverter.exe
03/16 11:39:15 [4688] ***app=need4softwarelauncher.exe
03/16 11:39:15 [4688] ***app=chrome.exe
03/16 11:39:15 [4688] ***app=setup.exe
03/16 11:39:15 [4688] ***app=uninst.exe
03/16 11:39:15 [4688] ***app=Au_.exe
03/16 11:39:15 [4688] ***app=uninst.exe
03/16 11:39:15 [4688] ***app=dumprep.exe
03/16 11:39:15 [4688] ***app=procexp.exe
03/16 11:39:15 [4688] ***app=procexp.exe
03/16 11:39:15 [4688] ***app=TelnetConfig.exe
03/16 11:39:15 [4688] ***app=HOSTEDIT.EXE
03/16 11:39:15 [4688] ***app=CFGMGR.EXE
03/16 11:39:15 [4688] ***app=SCRPTEDT.EXE
03/16 11:39:15 [4688] ***app=WLOCAL.EXE
03/16 11:39:15 [4688] ***app=Access Connections.exe
03/16 11:39:15 [4688] ***app=netsh.exe
03/16 11:39:15 [4688] ***app=iWrap.exe
03/16 11:39:15 [4688] ***app=iCrdCll.exe
03/16 11:39:15 [4688] ***app=java.exe
03/16 11:39:15 [4688] ***app=TeamViewer_Setup_da[1].exe
03/16 11:39:15 [4688] ***app=TeamViewer_.exe
03/16 11:39:15 [4688] ***app=TeamViewer.exe
03/16 11:39:15 [4688] ***app=regsvr32.exe
03/16 11:39:15 [4688] ***app=BTSTAC~1.EXE
03/16 11:39:15 [4688] ***app=Nokia_PC_Suite_6_84_10_3_dan_web.exe
03/16 11:39:15 [4688] ***app=UninstCCD.exe
03/16 11:39:15 [4688] ***app=UninstPCS.exe
03/16 11:39:15 [4688] ***app=UninstPCSFEMsi.exe
03/16 11:39:15 [4688] ***app=MSI130.tmp
03/16 11:39:15 [4688] ***app=setupext.exe
03/16 11:39:15 [4688] ***app=MSI13E.tmp
03/16 11:39:15 [4688] ***app=MSI140.tmp
03/16 11:39:15 [4688] ***app=ServiceLayer.exe
03/16 11:39:15 [4688] ***app=DPInst.exe
03/16 11:39:15 [4688] ***app=MSI148.tmp
03/16 11:39:15 [4688] ***app=DataLayer.exe
03/16 11:39:15 [4688] ***app=MusicManager.exe
03/16 11:39:15 [4688] ***app=MultimediaPlayer.exe
03/16 11:39:15 [4688] ***app=PcSync2.exe
03/16 11:39:15 [4688] ***app=DPInst.exe
03/16 11:39:15 [4688] ***app=ContactsEditor.exe
03/16 11:39:15 [4688] ***app=MSI150.tmp
03/16 11:39:15 [4688] ***app=LaunchApplication.exe
03/16 11:39:15 [4688] ***app=GetConnected.exe
03/16 11:39:15 [4688] ***app=MPAPI3s.exe
03/16 11:39:15 [4688] ***app=NclBTHandler.exe
03/16 11:39:15 [4688] ***app=ImageStore.exe
03/16 11:39:15 [4688] ***app=ConnectionManager.exe
03/16 11:39:15 [4688] ***app=Nokia_PC_Suite_7_1_30_9_dan.exe
03/16 11:39:15 [4688] ***app=UninstCCD.exe
03/16 11:39:15 [4688] ***app=UninstPCS.exe
03/16 11:39:15 [4688] ***app=UninstPCSFEMsi.exe
03/16 11:39:15 [4688] ***app=pcswpcsi.exe
03/16 11:39:15 [4688] ***app=NclInstaller.exe
03/16 11:39:15 [4688] ***app=MSI16B.tmp
03/16 11:39:15 [4688] ***app=MSI171.tmp
03/16 11:39:15 [4688] ***app=MSI172.tmp
03/16 11:39:15 [4688] ***app=setupextcmb.exe
03/16 11:39:15 [4688] ***app=MSI178.tmp
03/16 11:39:15 [4688] ***app=MSI17D.tmp
03/16 11:39:15 [4688] ***app=MSI181.tmp
03/16 11:39:15 [4688] ***app=MSI182.tmp
03/16 11:39:15 [4688] ***app=MSI183.tmp
03/16 11:39:15 [4688] ***app=MSI18A.tmp
03/16 11:39:15 [4688] ***app=MSI18B.tmp
03/16 11:39:15 [4688] ***app=MSI18E.tmp
03/16 11:39:15 [4688] ***app=ApplicationInstaller.exe
03/16 11:39:15 [4688] ***app=PcSync2.exe
03/16 11:39:15 [4688] ***app=DPInst.exe
03/16 11:39:15 [4688] ***app=CommunicationCentre.exe
03/16 11:39:15 [4688] ***app=PCSuite.exe
03/16 11:39:15 [4688] ***app=NclUSBSrv.exe
03/16 11:39:15 [4688] ***app=NclIrSrv.exe
03/16 11:39:15 [4688] ***app=NclRSSrv.exe
03/16 11:39:15 [4688] ***app=NclMSBTSrv.exe
03/16 11:39:15 [4688] ***app=NclBCBTSrv.exe
03/16 11:39:15 [4688] ***app=GetConnected.exe
03/16 11:39:15 [4688] ***app=NokiaSoftwareUpdaterSetup_da[1].exe
03/16 11:39:15 [4688] ***app=vcredistExec.exe
03/16 11:39:15 [4688] ***app=DelayedExecution.exe
03/16 11:39:15 [4688] ***app=vcredist_x86.exe
03/16 11:39:15 [4688] ***app=VCREDI~3.EXE
03/16 11:39:15 [4688] ***app=Sleep.exe
03/16 11:39:15 [4688] ***app=runXml6.exe
03/16 11:39:15 [4688] ***app=msxml6Exec.exe
03/16 11:39:15 [4688] ***app=MSI1B1.tmp
03/16 11:39:15 [4688] ***app=MSI1B2.tmp
03/16 11:39:15 [4688] ***app=nsl_host_process.exe
03/16 11:39:15 [4688] ***app=nsu_ui_client.exe
03/16 11:39:15 [4688] ***app=update.exe
03/16 11:39:15 [4688] ***app=notepad++.exe
03/16 11:39:15 [4688] ***app=telnet.exe
03/16 11:39:15 [4688] ***app=hypertrm.exe
03/16 11:39:15 [4688] ***app=regedit.exe
03/16 11:39:15 [4688] ***app=SUBUPDT.exe
03/16 11:39:15 [4688] ***app=GoogleUpdateSetup.exe
03/16 11:39:15 [4688] ***app=GoogleUpdate.exe
03/16 11:39:15 [4688] ***app=GoogleCrashHandler.exe
03/16 11:39:15 [4688] ***app=HCtankanleg.exe
03/16 11:39:15 [4688] ***app=ftp.exe
03/16 11:39:15 [4688] ***app=FileZilla_3.2.8.1_win32-setup[1].exe
03/16 11:39:15 [4688] ***app=filezilla.exe
03/16 11:39:15 [4688] ***app=jucheck.exe
03/16 11:39:15 [4688] ***app=jre-6u17-windows-i586-iftw-rv.exe
03/16 11:39:15 [4688] ***app=MSI14.tmp
03/16 11:39:15 [4688] ***app=MSI1C.tmp
03/16 11:39:15 [4688] ***app=patchjre.exe
03/16 11:39:15 [4688] ***app=wmic.exe
03/16 11:39:15 [4688] ***app=i_view32.exe
03/16 11:39:15 [4688] ***app=ConnectionManager.exe
03/16 11:39:15 [4688] ***app=runonce.exe
03/16 11:39:15 [4688] ***app=ApplicationInstaller.exe
03/16 11:39:15 [4688] ***app=ImageStore.exe
03/16 11:39:15 [4688] ***app=logon.scr
03/16 11:39:15 [4688] ***app=update.exe
03/16 11:39:15 [4688] ***app=setup.exe
03/16 11:39:15 [4688] ***app=_INS5576._MP
03/16 11:39:15 [4688] ***app=_ISDEL.EXE
03/16 11:39:15 [4688] ***app=SETUP.EXE
03/16 11:39:15 [4688] ***app=_ISDEL.EXE
03/16 11:39:15 [4688] ***app=runas.exe
03/16 11:39:15 [4688] ***app=dotnetfx35setup.exe
03/16 11:39:15 [4688] ***app=setup.exe
03/16 11:39:15 [4688] ***app=clwireg.exe
03/16 11:39:15 [4688] ***app=regtlibv12.exe
03/16 11:39:15 [4688] ***app=mofcomp.exe
03/16 11:39:15 [4688] ***app=aspnet_regiis.exe
03/16 11:39:15 [4688] ***app=RegSvcs.exe
03/16 11:39:15 [4688] ***app=lodctr.exe
03/16 11:39:15 [4688] ***app=XPSEPSC-x86-en-US.exe
03/16 11:39:15 [4688] ***app=update.exe
03/16 11:39:15 [4688] ***app=spupdsvc.exe
03/16 11:39:15 [4688] ***app=printfilterpipelinesvc.exe
03/16 11:39:15 [4688] ***app=printfilterpipelinesvc.exe
03/16 11:39:15 [4688] ***app=cvtres.exe
03/16 11:39:15 [4688] ***app=csc.exe
03/16 11:39:15 [4688] ***app=ServiceModelReg.exe
03/16 11:39:15 [4688] ***app=PerformanceCounterInstaller.exe
03/16 11:39:15 [4688] ***app=WFServicesReg.exe
03/16 11:39:15 [4688] ***app=dotnetfx35langpack_x86da.exe
03/16 11:39:15 [4688] ***app=setup.exe
03/16 11:39:15 [4688] ***app=XPSEPSCLANGPACK-x86-da-DK-langpack.exe
03/16 11:39:15 [4688] ***app=update.exe
03/16 11:39:15 [4688] ***app=wds6.exe
03/16 11:39:15 [4688] ***app=designer.exe
03/16 11:39:15 [4688] ***app=pcssnd.exe
03/16 11:39:15 [4688] ***app=NCP_EntryCl_Symbian_101_019.exe
03/16 11:39:15 [4688] ***app=CEMON.exe
03/16 11:39:15 [4688] ***app=DWHlp.exe
03/16 11:39:15 [4688] ***app=Staff.exe
03/16 11:39:15 [4688] ***app=Staff.exe
03/16 11:39:15 [4688] ***app=xl-byg-update.exe
03/16 11:39:15 [4688] ***app=mspaint.exe
03/16 11:39:15 [4688] ***app=btsendto_explorer.exe
03/16 11:39:15 [4688] ***app=update.exe
03/16 11:39:15 [4688] ***app=update.exe
03/16 11:39:15 [4688] ***app=reg.exe
03/16 11:39:15 [4688] ***app=wsmanhttpconfig.exe
03/16 11:39:15 [4688] ***app=PSCustomSetupUtil.exe
03/16 11:39:15 [4688] ***app=PSSetupNativeUtils.exe
03/16 11:39:15 [4688] ***app=OSE.EXE
03/16 11:39:15 [4688] ***app=MSOHTMED.EXE
03/16 11:39:15 [4688] ***app=nnotesmm.exe
03/16 11:39:15 [4688] ***app=checkPID.exe
03/16 11:39:15 [4688] ***app=javaw.exe
03/16 11:39:15 [4688] ***app=admin.exe
03/16 11:39:15 [4688] ***app=nevent.exe
03/16 11:39:15 [4688] ***app=Moxa NPort U1110 setup.exe
03/16 11:39:15 [4688] ***app=is-J1V8G.tmp
03/16 11:39:15 [4688] ***app=mxuinst.exe
03/16 11:39:15 [4688] ***app=setup.exe
03/16 11:39:15 [4688] ***app=IEOOP.exe
03/16 11:39:15 [4688] ***app=notes2.exe
03/16 11:39:15 [4688] ***app=checkPID.exe
03/16 11:39:15 [4688] ***app=javaw.exe
03/16 11:39:15 [4688] ***app=javacpl.exe
03/16 11:39:15 [4688] ***app=nsenddiag.exe
03/16 11:39:15 [4688] ***app=sethc.exe
03/16 11:39:15 [4688] ***app=mxupcfg.exe
03/16 11:39:15 [4688] ***app=EZEJAPP.EXE
03/16 11:39:15 [4688] ***app=tvsu.exe
03/16 11:39:15 [4688] ***app=Tvsukernel.exe
03/16 11:39:15 [4688] ***app=IA.exe
03/16 11:39:15 [4688] ***app=TvsuCommandLauncher.exe
03/16 11:39:15 [4688] ***app=dirpermission.exe
03/16 11:39:15 [4688] ***app=dm.exe
03/16 11:39:15 [824] <CalcAgentHashKey>:CH=4BB55DD9AC1E0231009FA2FB70E916911hcpc211HCHE19DD7175138636A9A1D320EBFDFBC77
03/16 11:39:15 [4688] ***app=tpisysid2.exe
03/16 11:39:15 [824] <CalcAgentHashKey>:CHKey=13F445D4B208FB674DB80D0B9D9C0CBD
03/16 11:39:15 [4688] ***app=dm.exe
03/16 11:39:15 [824] <CalcAgentHashKey>:C=4BB55DD9AC1E0231009FA2FB70E916911hcpc211HCH
03/16 11:39:15 [4688] ***app=tpisysidsu.exe
03/16 11:39:15 [824] <CalcAgentHashKey>:CKey=75FF48A1B58F08D3A65D516AF833DE7C
03/16 11:39:15 [4688] ***app=dm.exe
03/16 11:39:15 [824] <CalcAgentHashKey>:UCH=4BB55DD9AC1E0231009FA2FB70E916910MMFHCHhcpc211HCHE19DD7175138636A9A1D320EBFDFBC77
03/16 11:39:15 [4688] ***app=tpisysid2.exe
03/16 11:39:15 [824] <CalcAgentHashKey>:UCHKey=37102BE5AFFB87E7291DDFEA0C95DB86
03/16 11:39:15 [4688] ***app=7kwc50ww.exe
03/16 11:39:15 [824] <CalcAgentHashKey>:UC=4BB55DD9AC1E0231009FA2FB70E916910MMFHCHhcpc211HCH
03/16 11:39:15 [4688] ***app=iProInst.exe
03/16 11:39:15 [824] <CalcAgentHashKey>:UCKey=B3FC9FF281A2FA9ADE1224DCC20AC15D
03/16 11:39:15 [4688] ***app=SavUI.exe
03/16 11:39:15 [824] <DoHeartbeat>HardwareID=E19DD7175138636A9A1D320EBFDFBC77
03/16 11:39:15 [4688] ***app=delphi32.exe
03/16 11:39:15 [824] <DoHeartbeat>CHKey=13F445D4B208FB674DB80D0B9D9C0CBD
03/16 11:39:15 [4688] ***app=HCFaxKontrol.exe
03/16 11:39:15 [824] <DoHeartbeat>CKey=75FF48A1B58F08D3A65D516AF833DE7C
03/16 11:39:15 [4688] ***app=attrib.exe
03/16 11:39:15 [824] <DoHeartbeat>UCHKey=37102BE5AFFB87E7291DDFEA0C95DB86
03/16 11:39:15 [4688] ***app=Microsoft Kernel-Mode Driver Framework Install-v1.7-Win2k-WinXP-Win2k3.exe
03/16 11:39:15 [824] <DoHeartbeat>UCKey=B3FC9FF281A2FA9ADE1224DCC20AC15D
03/16 11:39:15 [4688] ***app=update.exe
03/16 11:39:15 [824] <DoHeartbeat> Set heartbeat event
03/16 11:39:15 [4688] ***app=W3LGO103.EXE
03/16 11:39:15 [824] Use new configuration
03/16 11:39:15 [4688] ***app=VikaOrdreUdsendelse.exe
03/16 11:39:15 [824] <RegHeartbeatProc>====== Reg Heartbeat loop starts at 11:39:15 ======
03/16 11:39:15 [4688] ***app=ContentCopier.exe
03/16 11:39:15 [4688] ***app=setup.exe
03/16 11:39:15 [4688] ***app=msxml4-KB973688-enu.exe
03/16 11:39:15 [4688] ***app=update.exe
03/16 11:39:15 [4688] ***app=update.exe
03/16 11:39:15 [4688] ***app=wksprt.exe
03/16 11:39:15 [4688] ***app=mstsc.exe
03/16 11:39:15 [4688] ***app=TSWbPrxy.exe
03/16 11:39:15 [4688] ***app=updroots.exe
03/16 11:39:15 [4688] ***app=rootsupd.exe
03/16 11:39:15 [4688] ***app=a4deskpro_setup[1].exe
03/16 11:39:15 [4688] ***app=a4deskpro_setup[1].tmp
03/16 11:39:15 [4688] ***app=a4deskpro.exe
03/16 11:39:15 [4688] ***app=autocadlt2008lockedsp1.exe
03/16 11:39:15 [4688] ***app=Autocad 2000i lt u091_u181p_lt.exe
03/16 11:39:15 [4688] ***app=wiaacmgr.exe
03/16 11:39:15 [4688] ***app=i_view32.exe
03/16 11:39:15 [4688] ***app=wrar391b2[1].exe
03/16 11:39:15 [4688] ***app=Uninstall.exe
03/16 11:39:15 [4688] ***app=WinRAR.exe
03/16 11:39:15 [4688] ***app=autorun.exe
03/16 11:39:15 [4688] ***app=setup.exe
03/16 11:39:15 [4688] ***app=InitProject.exe
03/16 11:39:15 [4688] ***app=DriverInstallx86x64.exe
03/16 11:39:15 [4688] ***app=KMWDSrv.exe
03/16 11:39:15 [4688] ***app=KMProcess.exe
03/16 11:39:15 [4688] ***app=StartAutorun.exe
03/16 11:39:15 [4688] ***app=KMConfig.exe
03/16 11:39:15 [4688] ***app=unins000.exe
03/16 11:39:15 [4688] ***app=_iu14D2N.tmp
03/16 11:39:15 [4688] ***app=setup.exe
03/16 11:39:15 [4688] ***app=setup.exe
03/16 11:39:15 [4688] ***app=gtb7.tmp.exe
03/16 11:39:15 [4688] ***app=GoToAssistStarter[1].exe
03/16 11:39:15 [4688] ***app=GoToAssist_chat2way_service_508_en.exe
03/16 11:39:15 [4688] ***app=G2AInstaller.exe
03/16 11:39:15 [4688] ***app=g2asessioncontrol.exe
03/16 11:39:15 [4688] ***app=g2alaunchercustomer.exe
03/16 11:39:15 [4688] ***app=g2aservice.exe
03/16 11:39:15 [4688] ***app=g2acomm.exe
03/16 11:39:15 [4688] ***app=g2auicustomer.exe
03/16 11:39:15 [4688] ***app=g2achat.exe
03/16 11:39:15 [4688] ***app=g2aremotediagnostics.exe
03/16 11:39:15 [4688] ***app=g2ahost.exe
03/16 11:39:15 [4688] ***app=g2afiletransfer.exe
03/16 11:39:15 [4688] ***app=GoogleUpdaterService_5898FABCFA121C11.exe
03/16 11:39:15 [4688] ***app=SearchWithGoogleUpdate_C58171F2E8870EA4.exe
03/16 11:39:15 [4688] ***app=GoogleToolbarManager_0E996B068B56FCA2.exe
03/16 11:39:15 [4688] ***app=pcsws.exe
03/16 11:39:15 [4688] ***app=pcscm.exe
03/16 11:39:15 [4688] ***app=cwblmsrv.exe
03/16 11:39:15 [4688] ***app=MSOXMLED.EXE
03/16 11:39:15 [4688] ***app=pcspcoc.exe
03/16 11:39:15 [4688] ***app=GoogleEarth-Win-5.1.3533.1731.exe
03/16 11:39:15 [4688] ***app=GoogleEarth.exe
03/16 11:39:15 [4688] ***app=update.exe
03/16 11:39:15 [4688] ***app=update.exe
03/16 11:39:15 [4688] ***app=update.exe
03/16 11:39:15 [4688] ***app=update.exe
03/16 11:39:15 [4688] ***app=update.exe
03/16 11:39:15 [4688] ***app=update.exe
03/16 11:39:15 [4688] ***app=update.exe
03/16 11:39:15 [4688] ***app=Setup[1].exe
03/16 11:39:15 [4688] ***app=irsetup.exe
03/16 11:39:15 [4688] ***app=AcLauncher.exe
03/16 11:39:15 [4688] ***app=DWGVIEWR.exe
03/16 11:39:15 [4688] ***app=pcsbat.exe
03/16 11:39:15 [4688] ***app=putty.exe
03/16 11:39:15 [4688] ***app=pcsws.exe
03/16 11:39:15 [4688] ***app=FileZilla_3.3.0.1_win32-setup.exe
03/16 11:39:15 [4688] ***app=uninstall.exe
03/16 11:39:15 [4688] ***app=MvPCview.exe
03/16 11:39:15 [4688] ***app=dfsvc.exe
03/16 11:39:15 [4688] ***app=DellDriverDownloadManager.exe
03/16 11:39:15 [4688] ***app=flashmx_trial_en[1].exe
03/16 11:39:15 [4688] ***app=IKernel.exe
03/16 11:39:15 [4688] ***app=Setup.exe
03/16 11:39:15 [4688] ***app=Silent Install Flash Player 6 AX.exe
03/16 11:39:15 [4688] ***app=grpconv.exe
03/16 11:39:15 [4688] ***app=VSetupT.exe
03/16 11:39:15 [4688] ***app=Flash.exe
03/16 11:39:15 [4688] ***app=vboxm.dll
03/16 11:39:15 [4688] ***app=setup.exe
03/16 11:39:15 [4688] ***app=SWFText.exe
03/16 11:39:15 [4688] ***app=SAFlashPlayer.exe
03/16 11:39:15 [4688] ***app=UNWISE.EXE
03/16 11:39:15 [4688] ***app=UNINST~1.EXE
03/16 11:39:15 [4688] ***app=GLB1A2B.EXE
03/16 11:39:15 [4688] ***app=update.exe
03/16 11:39:15 [4688] ***app=windows-kb890830-v3.2.exe
03/16 11:39:15 [4688] ***app=mrtstub.exe
03/16 11:39:15 [4688] ***app=spybotsd162[1].exe
03/16 11:39:15 [4688] ***app=spybotsd162[1].tmp
03/16 11:39:15 [4688] ***app=spybotsd_includes.exe
03/16 11:39:15 [4688] ***app=SpybotSD.exe
03/16 11:39:15 [4688] ***app=SDUpdate.exe
03/16 11:39:15 [4688] ***app=Update.exe
03/16 11:39:15 [4688] ***app=advcheck165.tmp
03/16 11:39:15 [4688] ***app=advcheck165.exe
03/16 11:39:15 [4688] ***app=teatimer166.tmp
03/16 11:39:15 [4688] ***app=teatimer166.exe
03/16 11:39:15 [4688] ***app=TeaTimer.exe
03/16 11:39:15 [4688] ***app=Flash.exe
03/16 11:39:15 [4688] ***app=GoogleEarth-Win-5.1.7894.7252.exe
03/16 11:39:15 [4688] ***app=OIS.EXE
03/16 11:39:15 [4688] ***app=Staff.exe
03/16 11:39:15 [4688] ***app=FlashUtil10c.exe
03/16 11:39:15 [4688] ***app=uninstall_activeX.exe
03/16 11:39:15 [4688] ***app=nsD.tmp
03/16 11:39:15 [4688] ***app=FlashUtil10d.exe
03/16 11:39:15 [4688] ***app=FlashPlayerUpdate.exe
03/16 11:39:15 [4688] ***app=AdobeCollabSync.exe
03/16 11:39:15 [4688] ***app=CPWSave.exe
03/16 11:39:15 [4688] ***app=gswin32c.exe
03/16 11:39:15 [4688] ***app=Setup.exe
03/16 11:39:15 [4688] ***app=setup.exe
03/16 11:39:15 [4688] ***app=Staff.exe
03/16 11:39:15 [4688] ***app=MSTORDB.EXE
03/16 11:39:15 [4688] ***app=Nokia_PC_Suite_7_1_40_1_dan.exe
03/16 11:39:15 [4688] ***app=UninstCCD.exe
03/16 11:39:15 [4688] ***app=UninstPCS.exe
03/16 11:39:15 [4688] ***app=UninstPCSFEMsi.exe
03/16 11:39:15 [4688] ***app=pcswpcsi.exe
03/16 11:39:15 [4688] ***app=MSI3D.tmp
03/16 11:39:15 [4688] ***app=MSI43.tmp
03/16 11:39:15 [4688] ***app=MSI44.tmp
03/16 11:39:15 [4688] ***app=MSI52.tmp
03/16 11:39:15 [4688] ***app=MSI53.tmp
03/16 11:39:15 [4688] ***app=MSI56.tmp
03/16 11:39:15 [4688] ***app=MSI59.tmp
03/16 11:39:15 [4688] ***app=MSI5D.tmp
03/16 11:39:15 [4688] ***app=MSI5E.tmp
03/16 11:39:15 [4688] ***app=MSI5F.tmp
03/16 11:39:15 [4688] ***app=MSI64.tmp
03/16 11:39:15 [4688] ***app=MSI65.tmp
03/16 11:39:15 [4688] ***app=MSI66.tmp
03/16 11:39:15 [4688] ***app=MSI67.tmp
03/16 11:39:15 [4688] ***app=update.exe
03/16 11:39:15 [4688] ***app=xcopy.exe
03/16 11:39:15 [4688] ***app=lttsetup_60544931x86.exe
03/16 11:39:15 [4688] ***app=Setup.exe
03/16 11:39:15 [4688] ***app=vcredist_x86.exe
03/16 11:39:15 [4688] ***app=install.exe
03/16 11:39:15 [4688] ***app=psexec.exe
03/16 11:39:15 [4688] ***app=pcdr5cuiw32.exe
03/16 11:39:15 [4688] ***app=6mwc15ww.tmp
03/16 11:39:15 [4688] ***app=6mwc15ww.exe
03/16 11:39:15 [4688] ***app=Setup.exe
03/16 11:39:15 [4688] ***app=KillAC.exe
03/16 11:39:15 [4688] ***app=iprodifx.exe
03/16 11:39:15 [4688] ***app=dpinst32.exe
03/16 11:39:15 [4688] ***app=iconvrtr.exe
03/16 11:39:15 [4688] ***app=cacls.exe
03/16 11:39:15 [4688] ***app=unsecapp.exe
03/16 11:39:15 [4688] ***app=install_flash_player_ax.exe
03/16 11:39:15 [4688] ***app=update.exe
03/16 11:39:15 [4688] ***app=IKernel.exe
03/16 11:39:15 [4688] ***app=Set25.tmp
03/16 11:39:15 [4688] ***app=wordview_en-us[1].exe
03/16 11:39:15 [4688] ***app=WORDVIEW.EXE
03/16 11:39:15 [4688] ***app=TMViewerSetup[1].exe
03/16 11:39:15 [4688] ***app=spi.exe
03/16 11:39:15 [4688] ***app=TMViewer.exe
03/16 11:39:15 [4688] ***app=uninstall.exe
03/16 11:39:15 [4688] ***app=TeamViewer_Service.exe
03/16 11:39:15 [4688] ***app=install.exe
03/16 11:39:15 [4688] ***app=ns58.tmp
03/16 11:39:15 [4688] ***app=ns59.tmp
03/16 11:39:15 [4688] ***app=help.exe
03/16 11:39:15 [4688] ***app=NokiaSoftwareUpdaterSetup_en[1].exe
03/16 11:39:15 [4688] ***app=MSIA9.tmp
03/16 11:39:15 [4688] ***app=MSIAA.tmp
03/16 11:39:15 [4688] ***app=update.exe
03/16 11:39:15 [4688] ***app=POWERPNT.EXE
03/16 11:39:15 [4688] ***app=Staff.exe
03/16 11:39:15 [4688] ***app=HPTOOL.exe
03/16 11:39:15 [4688] ***app=HPUSBFormatter.exe
03/16 11:39:15 [4688] ***app=Setup.exe
03/16 11:39:15 [4688] ***app=HPUSBFW.EXE
03/16 11:39:15 [4688] ***app=DTLite4355-0068[1].exe
03/16 11:39:15 [4688] ***app=SPTDinst-x86.exe
03/16 11:39:15 [4688] ***app=DAEMON Tools Toolbar.exe
03/16 11:39:15 [4688] ***app=DTToolbar1110014_SMART.exe
03/16 11:39:15 [4688] ***app=DTLite.exe
03/16 11:39:15 [4688] ***app=windows-kb890830-v3.3-delta.exe
03/16 11:39:15 [4688] ***app=mrtstub.exe
03/16 11:39:15 [4688] ***app=Sep_SupportTool[1].exe
03/16 11:39:15 [4688] ***app=ST_Gui.exe
03/16 11:39:15 [4688] ***app=ST_EnumDriversx86.exe
03/16 11:39:15 [4688] ***app=Sd_Capture.exe
03/16 11:39:15 [4688] ***app=asupport[1].exe
03/16 11:39:15 [4688] ***app=winvnc.exe
03/16 11:39:15 [4688] ***app=uninst.exe
03/16 11:39:15 [4688] ***app=wordview_en-us.exe
03/16 11:39:15 [4688] ***app=WORDVIEW.EXE
03/16 11:39:15 [4688] ***app=LGE.exe
03/16 11:39:15 [4688] ***app=SETUP.EXE
03/16 11:39:15 [4688] ***app=WI_SETUP.EXE
03/16 11:39:15 [4688] ***app=dmremote.exe
03/16 11:39:15 [4688] ***app=dmadmin.exe
03/16 11:39:15 [4688] ***app=converter.exe
03/16 11:39:15 [4688] ***app=Setup.exe
03/16 11:39:15 [4688] ***app=GoogleEarth-Win-Bundle-5.1.7938.4346.exe
03/16 11:39:15 [4688] ***app=pcdlauncher.exe
03/16 11:39:15 [4688] ***app=pcdsecondarysplash.exe
03/16 11:39:15 [4688] ***app=pcdrsysinfobluetooth.p5x
03/16 11:39:15 [4688] ***app=pcdrsysinfocommunication.p5x
03/16 11:39:15 [4688] ***app=pcdrsysinfocsmi.p5x
03/16 11:39:15 [4688] ***app=pcdrsysinfoperipheral.p5x
03/16 11:39:15 [4688] ***app=pcdrsysinfocpu_x86.p5x
03/16 11:39:15 [4688] ***app=pcdrsysinfosmbios2.p5x
03/16 11:39:15 [4688] ***app=pcdrsysinfodirect.p5x
03/16 11:39:15 [4688] ***app=pcdrsysinfovideocapture.p5x
03/16 11:39:15 [4688] ***app=pcdrsysinfosoftware.p5x
03/16 11:39:15 [4688] ***app=pcdrsysinfostorage.p5x
03/16 11:39:15 [4688] ***app=pcdrsysinfosystemboard.p5x
03/16 11:39:15 [4688] ***app=WISPTIS.EXE
03/16 11:39:15 [4688] ***app=_is4C.exe
03/16 11:39:15 [4688] ***app=update.exe
03/16 11:39:15 [4688] ***app=update.exe
03/16 11:39:15 [4688] ***app=update.exe
03/16 11:39:15 [4688] ***app=update.exe
03/16 11:39:15 [4688] ***app=update.exe
03/16 11:39:15 [4688] ***app=update.exe
03/16 11:39:15 [4688] ***app=update.exe
03/16 11:39:15 [4688] ***app=mrtstub.exe
03/16 11:39:15 [4688] ***app=windows-kb890830-v3.4-delta.exe
03/16 11:39:15 [4688] ***app=update.exe
03/16 11:39:15 [4688] ***app=update.exe
03/16 11:39:15 [4688] ***app=FlashUtil10e.exe
03/16 11:39:15 [4688] ***app=TMViewerSetup.exe
03/16 11:39:15 [4688] ***app=spi.exe
03/16 11:39:15 [4688] ***app=iedw.exe
03/16 11:39:15 [4688] ***app=update.exe
03/16 11:39:15 [4688] ***app=a1rad06us13.exe
03/16 11:39:15 [4688] ***app=winphlash.exe
03/16 11:39:15 [4688] ***app=s3.tmp
03/16 11:39:15 [4688] ***app=PREPARE.EXE
03/16 11:39:15 [4688] ***app=GoogleUpdateSetup.exe
03/16 11:39:15 [4688] ***app=GoogleCrashHandler.exe
03/16 11:39:15 [4688] ***app=GoogleUpdate.exe
03/16 11:39:15 [4688] ***app=TeamViewer_Setup[1].exe
03/16 11:39:15 [4688] ***app=TeamViewer_.exe
03/16 11:39:15 [4688] ***app=TeamViewer.exe
03/16 11:39:15 [4688] ***app=Staff.exe
03/16 11:39:15 [4688] ***app=iTunesSetup[1].exe
03/16 11:39:15 [4688] ***app=SetupAdmin.exe
03/16 11:39:15 [4688] ***app=AppleMobileDeviceService.exe
03/16 11:39:15 [4688] ***app=SoftwareUpdate.exe
03/16 11:39:15 [4688] ***app=QTTask.exe
03/16 11:39:15 [4688] ***app=mDNSResponder.exe
03/16 11:39:15 [4688] ***app=DifXInstall32.exe
03/16 11:39:15 [4688] ***app=iTunes.exe
03/16 11:39:15 [4688] ***app=iTunesPhotoProcessor.exe
03/16 11:39:15 [4688] ***app=iPodService.exe
03/16 11:39:15 [4688] ***app=iTunesHelper.exe
03/16 11:39:15 [4688] ***app=AppleMobileDeviceHelper.exe
03/16 11:39:15 [4688] ***app=upgradedb.exe
03/16 11:39:15 [4688] ***app=distnoted.exe
03/16 11:39:15 [4688] ***app=SyncServer.exe
03/16 11:39:15 [4688] ***app=MDCrashReportTool.exe
03/16 11:39:15 [4688] ***app=AppleMobileBackup.exe
03/16 11:39:15 [4688] ***app=WindowsMailSync.exe
03/16 11:39:15 [4688] ***app=WindowsContactsSync.exe
03/16 11:39:15 [4688] ***app=iPhoneConfigUtilitySetup[1].exe
03/16 11:39:15 [4688] ***app=iPCU.exe
03/16 11:39:15 [4688] ***app=LaunchU3.exe
03/16 11:39:15 [4688] ***app=LaunchPad.exe
03/16 11:39:15 [4688] ***app=LaunchU3.exe
03/16 11:39:15 [4688] ***app=cleanup.exe
03/16 11:39:15 [4688] ***app=savedump.exe
03/16 11:39:15 [4688] ***app=windows-kb890830-v3.5-delta.exe
03/16 11:39:15 [4688] ***app=mrtstub.exe
03/16 11:39:15 [4688] ***app=atcliun.exe
03/16 11:39:15 [4688] ***app=Rx4DefsSep_1.5.exe
03/16 11:39:15 [4688] ***app=find.exe
03/16 11:39:15 [4688] ***app=ESUGRegEx.exe
03/16 11:39:15 [4688] ***app=more.com
03/16 11:39:15 [4688] ***app=eventcreate.exe
03/16 11:39:15 [4688] ***app=ESUGReg.exe
03/16 11:39:15 [4688] ***app=TestSec.exe
03/16 11:39:15 [4688] ***app=ESUGDir.exe
03/16 11:39:15 [4688] ***app=ESUGMSI.exe
03/16 11:39:15 [4688] ***app=ESUGUnEn.exe
03/16 11:39:15 [4688] ***app=tasklist.exe
03/16 11:39:15 [4688] ***app=ServiceShutdown.exe
03/16 11:39:15 [4688] ***app=ESUGSleep.exe
03/16 11:39:15 [4688] ***app=20100310-037-v5i32.exe
03/16 11:39:15 [4688] ***app=intiupdater.exe
03/16 11:39:15 [4688] ***app=LSETUP.EXE
03/16 11:39:15 [4688] ***app=ALUSCH~1.EXE
03/16 11:39:15 [4688] ***app=LUInit.exe
03/16 11:39:15 [4688] ***app=lusetup.exe
03/16 11:39:15 [4688] ***app=LuMsiBoot.exe
03/16 11:39:15 [4688] ***app=LuComServer_3_4.EXE
03/16 11:39:15 [4688] ***app=MSI49.tmp
03/16 11:39:15 [4688] ***app=sevinst.exe
03/16 11:39:15 [4688] ***app=ESUGReg.exe
03/16 11:39:15 [4688] ***app=SyToggleON 1.1.exe
03/16 11:39:15 [4688] ***app=ESUGSleep.exe
03/16 11:39:15 [4688] ***app=SylinkMonitor_6733.exe
03/16 11:39:15 [4688] ***NewLearnedApps - New count: 685
03/16 11:39:15 [4688] </CSyLink::SetNewLearnedAppList()>
03/16 11:39:15 [824] HEARTBEAT: Check Point 1
03/16 11:39:15 [824] HEARTBEAT: Check Point 2
03/16 11:39:15 [824] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
03/16 11:39:15 [824] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
03/16 11:39:15 [824] HEARTBEAT: Check Point 3
03/16 11:39:15 [824] <RegHeartbeatProc>Setting the session timeout on Profile Session (Registration) to 30000
03/16 11:39:15 [824] HEARTBEAT: Check Point 4
03/16 11:39:15 [824] <RegHeartbeatProc>===Registration STAGE===
03/16 11:39:15 [824] <MakeRegisterData:>logon id (domain/user)=HCH/MMF
03/16 11:39:15 [824] <MakeRegisterData:>XML data: <?xml version="1.0" encoding="UTF-8" ?><SSARegData NameSpace="rpc"><AgentInfo DomainID="4BB55DD9AC1E0231009FA2FB70E91691" AgentType="105" UserDomain="HCH" LoginUser="MMF" ComputerDomain="HCH" ComputerName="hcpc211" PreferredGroup="Myompany +Default 9.10372E-289roup" PreferredMode="1" HardwareKey="E19DD7175138636A9A1D320EBFDFBC77" SiteDomainName=""/>
<SSAHostInfo><NetworkIdentity UserDomain="HCH" LogonUser="MMF" HostDomain="HCH" HostName="hcpc211" HostDesc="" />
<SSAProduct Version="11.0.5002.333" />
<SSAOS Version="5.1.2600" Desc="Windows 421BF84PProfessional" Type="17105154" ServicePack="ServicePack"/>
<Processor ProcessorType="x86 0x1.d34e86p+636mily%20Model%20Stepping" ProcessorClock="1994" ProcessorNum="2"/>
<Memory Size="3202584576"/>
<BIOS Version="LENOVO-"/>
<TpmDevice Id="0"/>
<SSAProfile Version="5.0.0" SerialNumber="CF6A-030.000000160.0000002010%3a190x1.7000b0p-102118"/>
<SSAIDS Version="" SerialNumber=""/>
<SSAUTC Bias="-60" />
<DNSs><DNS Address="172.30.2.241"/><DNS Address="172.30.2.53"/></DNSs>
<WINSs><WINS Address="172.30.2.54"/></WINSs>
<DHCPServer Address="172.30.2.52"/><SSANICs><SSANIC Ip="172.30.2.94" Mac="00-21-86-98-51-b5" Gateway="172.30.2.53" SubnetMask="255.255.255.0"/></SSANICs>
</SSAHostInfo>
</SSARegData>
03/16 11:39:15 [824] <SyLink>[MakeRegisterData] registration Hardware Key=E19DD7175138636A9A1D320EBFDFBC77
03/16 11:39:15 [824] ************Reg CSN=369
03/16 11:39:15 [824] <mfn_GenPostData (for Registration):>Request is: s_origin_length: 1272
s_session_id: E19DD7175138636A9A1D320EBFDFBC77
Sygate-SSN: 369
<?xml version="1.0" encoding="UTF-8" ?><SSARegData NameSpace="rpc"><AgentInfo DomainID="4BB55DD9AC1E0231009FA2FB70E91691" AgentType="105" UserDomain="HCH" LoginUser="MMF" ComputerDomain="HCH" ComputerName="hcpc211" PreferredGroup="Myompany +Default 9.0657E-289roup" PreferredMode="1" HardwareKey="E19DD7175138636A9A1D320EBFDFBC77" SiteDomainName=""/>
<SSAHostInfo><NetworkIdentity UserDomain="HCH" LogonUser="MMF" HostDomain="HCH" HostName="hcpc211" HostDesc="" />
<SSAProduct Version="11.0.5002.333" />
<SSAOS Version="5.1.2600" Desc="Windows 421AC8CPProfessional" Type="17105154" ServicePack="ServicePack"/>
<Processor ProcessorType="x86 0x1.d21f06p+636mily%20Model%20Stepping" ProcessorClock="1994" ProcessorNum="2"/>
<Memory Size="3202584576"/>
<BIOS Version="LENOVO-"/>
<TpmDevice Id="0"/>
<SSAProfile Version="5.0.0" SerialNumber="CF6A-030.000000160.0000002010%3a190x1.7000b0p-102118"/>
<SSAIDS Version="" SerialNumber=""/>
<SSAUTC Bias="-60" />
<DNSs><DNS Address="172.30.2.241"/><DNS Address="172.30.2.53"/></DNSs>
<WINSs><WINS Address="172.30.2.54"/></WINSs>
<DHCPServer Address="172.30.2.52"/><SSANICs><SSANIC Ip="172.30.2.94" Mac="00-21-86-98-51-b5" Gateway="172.30.2.53" SubnetMask="255.255.255.0"/></SSANICs>
</SSAHostInfo>
</SSARegData>
03/16 11:39:15 [824] <SendRegistrationRequest:>http://172.30.2.126:80 [encrypted data]
03/16 11:39:15 [824] 11:39:15=>Send HTTP REQUEST
03/16 11:39:16 [824] 11:39:16=>HTTP REQUEST sent
03/16 11:39:16 [824] 11:39:16=>QUERY return code
03/16 11:39:16 [824] 11:39:16=>QUERY return code completed
03/16 11:39:16 [824] <SendRegistrationRequest:>SMS return=200
03/16 11:39:16 [824] <ParseHTTPStatusCode:>200=>200 OK
03/16 11:39:16 [824] <SendRegistrationRequest:>Content Lenght => 350
03/16 11:39:16 [824] HTTP returns status code=200
03/16 11:39:16 [824] <SendRegistrationRequest:>RECEIVE STAGE COMPLETED
03/16 11:39:16 [824] <SendRegistrationRequest:>COMPLETED, returned 0
03/16 11:39:16 [824] <IsInClientIPorOnLink> NextHop is OnLink with 172.30.2.94,return TRUE
03/16 11:39:16 [824] <mfn_GetOutIP> Out IP is:172.30.2.94
03/16 11:39:16 [824] HEARTBEAT: Check Point 5.1
03/16 11:39:16 [824] <ScheduleNextUpdate>Manually assigned heartbeat=3 seconds
03/16 11:39:16 [824] <PostEvent>going to post event=EVENT_SERVER_ONLINE
03/16 11:39:16 [824] <PostEvent>done post event=EVENT_SERVER_ONLINE, return=0
03/16 11:39:16 [824] HEARTBEAT: Check Point 8
03/16 11:39:16 [824] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
03/16 11:39:16 [824] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
03/16 11:39:16 [824] <RegHeartbeatProc>====== Registration Procedure stops at 11:39:16 ======
03/16 11:39:16 [824] HEARTBEAT: Check Point 10
03/16 11:39:16 [824] HEARTBEAT: Check Point Complete
03/16 11:39:16 [824] <RegHeartbeatProc>Done, Heartbeat=3seconds
03/16 11:39:16 [824] <CheckHeartbeatTimer>====== Heartbeat loop stops at 11:39:16 ======
03/16 11:39:20 [824] <CheckHeartbeatTimer>====== Heartbeat loop starts at 11:39:20 ======
03/16 11:39:21 [824] <GetOnlineNicInfo>:Netport Count=1
03/16 11:39:21 [824] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="172.30.2.94" Mac="00-21-86-98-51-b5" Gateway="172.30.2.53" SubnetMask="255.255.255.0"/></SSANICs>
03/16 11:39:21 [824] <CalcAgentHashKey>:CH=4BB55DD9AC1E0231009FA2FB70E916911hcpc211HCHE19DD7175138636A9A1D320EBFDFBC77
03/16 11:39:21 [824] <CalcAgentHashKey>:CHKey=13F445D4B208FB674DB80D0B9D9C0CBD
03/16 11:39:21 [824] <CalcAgentHashKey>:C=4BB55DD9AC1E0231009FA2FB70E916911hcpc211HCH
03/16 11:39:21 [824] <CalcAgentHashKey>:CKey=75FF48A1B58F08D3A65D516AF833DE7C
03/16 11:39:21 [824] <CalcAgentHashKey>:UCH=4BB55DD9AC1E0231009FA2FB70E916910MMFHCHhcpc211HCHE19DD7175138636A9A1D320EBFDFBC77
03/16 11:39:21 [824] <CalcAgentHashKey>:UCHKey=37102BE5AFFB87E7291DDFEA0C95DB86
03/16 11:39:21 [824] <CalcAgentHashKey>:UC=4BB55DD9AC1E0231009FA2FB70E916910MMFHCHhcpc211HCH
03/16 11:39:21 [824] <CalcAgentHashKey>:UCKey=B3FC9FF281A2FA9ADE1224DCC20AC15D
03/16 11:39:21 [824] <DoHeartbeat>HardwareID=E19DD7175138636A9A1D320EBFDFBC77
03/16 11:39:21 [824] <DoHeartbeat>CHKey=13F445D4B208FB674DB80D0B9D9C0CBD
03/16 11:39:21 [824] <DoHeartbeat>CKey=75FF48A1B58F08D3A65D516AF833DE7C
03/16 11:39:21 [824] <DoHeartbeat>UCHKey=37102BE5AFFB87E7291DDFEA0C95DB86
03/16 11:39:21 [824] <DoHeartbeat>UCKey=B3FC9FF281A2FA9ADE1224DCC20AC15D
03/16 11:39:21 [824] <DoHeartbeat> Set heartbeat event
03/16 11:39:21 [824] Use new configuration
03/16 11:39:21 [824] <CSyLink::IndexHeartbeatProc()>
03/16 11:39:21 [824] <IndexHeartbeatProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 01BD35E8
03/16 11:39:21 [824] <IndexHeartbeatProc>====== Reg Heartbeat loop starts at 11:39:21 ======
03/16 11:39:21 [824] HEARTBEAT: Check Point 1
03/16 11:39:21 [824] Get First Server!
03/16 11:39:21 [824] HEARTBEAT: Check Point 2
03/16 11:39:21 [824] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
03/16 11:39:21 [824] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
03/16 11:39:21 [824] HEARTBEAT: Check Point 3
03/16 11:39:21 [824] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
03/16 11:39:21 [824] HEARTBEAT: Check Point 4
03/16 11:39:21 [824] <IndexHeartbeatProc>===Get Index STAGE===
03/16 11:39:21 [824] ************CSN=12117
03/16 11:39:21 [824] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=FC5EC3D8AC1E027E01A4036FB90DA4C9&chk=13F445D4B208FB674DB80D0B9D9C0CBD&ck=75FF48A1B58F08D3A65D516AF833DE7C&uchk=37102BE5AFFB87E7291DDFEA0C95DB86&uck=B3FC9FF281A2FA9ADE1224DCC20AC15D&hid=E19DD7175138636A9A1D320EBFDFBC77&groupid=4BB55DD9AC1E0231009FA2FB70E91691&mode=0&hbt=900&as=12117&cn=[hex]68637063323131&lun=[hex]4D4D46&udn=[hex]484348
03/16 11:39:21 [824] <GetIndexFileRequest:>http://172.30.2.126:80/secars/secars.dll?h=819E82566819775F854EC68FA0FFF07A82E312C0A11EA416DD43DC10C740E6C6CDABBC5619942EEAB020A75378B7F04CC6A1BAEBD93D701C000D4808FF2D2008F5D5CFE11128EDA28EDD97D567097310101263062C1B284BE54A349A610B81B9B32882BD0A9FE3A55AAECA96151A32096C77CFC8B8F547DC6D5C41F15353B2E631290EDA216623A18C2B48A560FFEFFD60141EF79CE1683A52AB4DE35DFFA6D2A4DEDF48C43BAF7654CEE7FC05C57190DA44755FB30B908B5C47A9EE22147752DE176E50DB6FA784F17E8EC19F1C87B8373B7D50C028C06907808ABF42D39B46D0683F102CDDDB4177683F0ACFAB548352E6935F29FC4A45302E16EAF982721041E68CCF8B47DCC7DBDBB0EB86D9856B18B0295EB74D3B1B5934789350098F89ADF92CE8E518771BA60481D76AA789B5CE47C4F95753A43A1707745D2A79C940D99D486E59104652B26C339748F2D4441F191DC7E4F5AD800228872876A1D274C329FD94D1A012F05D49B3F5435A7E5B
03/16 11:39:21 [824] 11:39:21=>Send HTTP REQUEST
03/16 11:39:21 [824] 11:39:21=>HTTP REQUEST sent
03/16 11:39:21 [824] <GetIndexFileRequest:>SMS return=200
03/16 11:39:21 [824] <ParseHTTPStatusCode:>200=>200 OK
03/16 11:39:21 [824] <FindHeader>Sem-HashKey:=>13F445D4B208FB674DB80D0B9D9C0CBD
03/16 11:39:21 [824] <FindHeader>Sem-LANSensor:=>0
03/16 11:39:21 [824] <FindHeader>Sem-Signatue:=>167054AB421C2756537EA20AEA500A3C12714769205C3E31FB4C3920DB7A19B530B6D4503B71C1A08E96D16037B70E36768491F64229993337C72B8AD983417C618F1FAFFAFFB81BD51B1D1ECF0329A5835E2E50FB0A24B3ADE61F793711BEFB87DE43CA611B44FB11B2A0ECFDC78831677CB111F37D005FD16F516FD6C69D0E
03/16 11:39:21 [824] <mfn_DoGetIndexFile200>Content Lenght => 1363
03/16 11:39:21 [824] SignIf::VerifySignature(data, dataLen, sig, sigLen) => Verification Successful..
03/16 11:39:21 [824] <mfn_DoGetIndexFile200>Index File: <?xml version="1.0" encoding="UTF-8" ?><GroupIndex SiteID="8F225732AC1E02310192B8F52F8BCE57" ServerID="956E1082AC1E0231000D688399DEA9BE" GroupID="CF6ACE19AC1E027E01CBE1ECD5C5FA94" GroupCheckSum="842CEA790A323210858413531" LastModifiedTime = "16/03/2010 11:19:32"> <Profile Checksum="83FDD96F26AEF89AD634175929825F8D" SerialNumber="CF6A-03/16/2010 11:19:18 743" LastModifiedTime="16/03/2010 11:19:32"/> <ConfigFile Checksum="5CBA43BCCB3A0B3C32A23C50614DCAA3" LastModifiedTime="14/03/2010 16:41:01"/> <IDSFile Checksum="703A0AE1B8EC84B36CDBAECB7E800283" LastModifiedTime="16/03/2010 11:19:32"/> <SylinkFile Checksum="B2C5F8AA8B18E637B940841DD472A414" LastModifiedTime="16/03/2010 11:19:32"/> <LSProfile Checksum="AC2C81DA737FCDFA97503CFDD61A335D" SerialNumber ="CF6A-03/16/2010 11:19:18 743" LastModifiedTime ="16/03/2010 11:19:32"/>
<LiveUpdate>
<File Checksum="BC881C4D9F33B1ACA027CE3D6BDE7D7C" DeltaFlag="1" FullSize="1400693" LastModifiedTime="1268731301431" Moniker="{42B17E5E-4E9D-4157-88CB-966FB4985928}" Seq="100313002"/>
<File Checksum="2C6723670227414AC42FB119B9F378A0" DeltaFlag="1" FullSize="75554064" LastModifiedTime="1268731158587" Moniker="{C60DC234-65F9-4674-94AE-62158EFCA433}" Seq="100315040"/>
<File Checksum="B8E7966E4CBD8326A659E52D7768FB02" DeltaFlag="1" FullSize="77169287" LastModifiedTime="1268730924150" Moniker="{1CD85198-26C6-4bac-8C72-5D34B025DE35}" Seq="100315040"/>
<File Checksum="2FDE5772D8BA988C76746181F08F15B1" DeltaFlag="1" FullSize="1382068" LastModifiedTime="1268730574306" Moniker="{D3769926-05B7-4ad1-9DCF-23051EEE78E3}" Seq="100313002"/>
<File Checksum="4E09262FA1C0B8B27230ACE7A75DE8B8" DeltaFlag="1" FullSize="650307" LastModifiedTime="1207658350015" Moniker="{ECCC5006-EF61-4c99-829A-417B6C6AD963}" Seq="2008021700"/>
<File Checksum="F42EA9AFB8F4CB3390CAB696D5C1BD93" DeltaFlag="1" FullSize="669829" LastModifiedTime="1222724073450" Moniker="{C25CEA47-63E5-447b-8D95-C79CAE13FF79}" Seq="80929016"/>
<File Checksum="CF582FBE98964CE88289FB0DDAE0E2BE" DeltaFlag="1" FullSize="88188" LastModifiedTime="1223499520589" Moniker="{EA960B33-2196-4d53-8AC4-D5043A5B6F9B}" Seq="80820001"/>
<File Checksum="E32B898379D2D7B76305C3D027434825" DeltaFlag="1" FullSize="1662247" LastModifiedTime="1223499544073" Moniker="{DB206823-FFD2-440a-9B89-CCFD45F3F1CD}" Seq="80820001"/>
<File Checksum="5E7196BD56F484FCBCC70F08352DC29A" DeltaFlag="1" FullSize="1419193" LastModifiedTime="1223499594308" Moniker="{C13726A9-8DF7-4583-9B39-105B7EBD55E2}" Seq="80820001"/>
<File Checksum="3013981C0B4B5262797B159A2CF5ABA2" DeltaFlag="1" FullSize="6487" LastModifiedTime="1257998969216" Moniker="{4F889C4A-784D-40de-8539-6A29BAA43139}" Seq="91111048"/>
<File Checksum="6DB440F5CD1C6566E9646282E4FC0449" DeltaFlag="1" FullSize="76813" LastModifiedTime="1268731287509" Moniker="{CC40C428-1830-44ef-B8B2-920A0B761793}" Seq="100315019"/>
<File Checksum="5902D63635DFCA880C6C162F91AAFE85" DeltaFlag="1" FullSize="881638" LastModifiedTime="1268731289259" Moniker="{812CD25E-1049-4086-9DDD-A4FAE649FBDF}" Seq="100315019"/>
<File Checksum="654D69F166CE9A38D3FB600DB4C8189C" DeltaFlag="1" FullSize="881668" LastModifiedTime="1268731303806" Moniker="{E1A6B4FF-6873-4200-B6F6-04C13BF38CF3}" Seq="100315019"/>
<File Checksum="2200119B54CA5FACA29F8678257545AB" DeltaFlag="1" FullSize="76789" LastModifiedTime="1268731314040" Moniker="{E5A3EBEE-D580-421e-86DF-54C0B3739522}" Seq="100315019"/>
</LiveUpdate>
</GroupIndex>
03/16 11:39:22 [824] <mfn_DoGetIndexFile200>Parser Index File!
03/16 11:39:22 [824] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
03/16 11:39:22 [824] <GetIndexFileRequest:>COMPLETED
03/16 11:39:22 [824] <IndexHeartbeatProc>GetIndexFile handling status: 0
03/16 11:39:22 [824] <IndexHeartbeatProc>Switch Server flag=0
03/16 11:39:22 [824] HEARTBEAT: Check Point 5.1
03/16 11:39:22 [824] <IsInClientIPorOnLink> NextHop is OnLink with 172.30.2.94,return TRUE
03/16 11:39:22 [824] <mfn_GetOutIP> Out IP is:172.30.2.94
03/16 11:39:22 [824] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
03/16 11:39:22 [824] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
03/16 11:39:22 [824] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {42B17E5E-4E9D-4157-88CB-966FB4985928} Seq:100313002
03/16 11:39:22 [824] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
03/16 11:39:22 [824] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
03/16 11:39:22 [824] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
03/16 11:39:22 [824] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
03/16 11:39:22 [824] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {1CD85198-26C6-4bac-8C72-5D34B025DE35} Seq:100315040
03/16 11:39:22 [824] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
03/16 11:39:22 [824] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
03/16 11:39:22 [824] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
03/16 11:39:23 [824] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=0
03/16 11:39:23 [824] <mfn_LiveUpdate:> Agent returned closest matching seq: <None>
03/16 11:39:23 [824] <Add2LUFileList:>Adding LU Info to LU Download File List: {ECCC5006-EF61-4c99-829A-417B6C6AD963}2008021700
03/16 11:39:23 [824] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
03/16 11:39:23 [824] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
03/16 11:39:23 [824] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
03/16 11:39:23 [824] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
03/16 11:39:23 [824] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
03/16 11:39:23 [824] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
03/16 11:39:23 [824] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {DB206823-FFD2-440a-9B89-CCFD45F3F1CD} Seq:80820001
03/16 11:39:23 [824] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
03/16 11:39:23 [824] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
03/16 11:39:23 [824] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
03/16 11:39:23 [824] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
03/16 11:39:23 [824] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
03/16 11:39:23 [824] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
03/16 11:39:23 [824] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {CC40C428-1830-44ef-B8B2-920A0B761793} Seq:100315019
03/16 11:39:23 [824] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
03/16 11:39:23 [824] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=0
03/16 11:39:23 [824] <mfn_LiveUpdate:> Agent returned closest matching seq: 100304019
03/16 11:39:23 [824] <Add2LUFileList:>Adding LU Info to LU Download File List: {812CD25E-1049-4086-9DDD-A4FAE649FBDF}100315019
03/16 11:39:23 [824] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
03/16 11:39:23 [824] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
03/16 11:39:23 [824] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {E1A6B4FF-6873-4200-B6F6-04C13BF38CF3} Seq:100315019
03/16 11:39:23 [824] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
03/16 11:39:23 [824] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=0
03/16 11:39:23 [824] <mfn_LiveUpdate:> Agent returned closest matching seq: 100304019
03/16 11:39:23 [824] <Add2LUFileList:>Adding LU Info to LU Download File List: {E5A3EBEE-D580-421e-86DF-54C0B3739522}100315019
03/16 11:39:23 [824] <mfn_PrepareLUContent:>Requesting LU Info for : Moniker: {ECCC5006-EF61-4c99-829A-417B6C6AD963} Target Seq:2008021700
03/16 11:39:23 [824] ************CSN=12118
03/16 11:39:23 [824] <GetContentFileInfoUrl:> Request is: action=52&hostid=FC5EC3D8AC1E027E01A4036FB90DA4C9&groupid=4BB55DD9AC1E0231009FA2FB70E91691&fn=[hex]7B45434343353030362D454636312D346339392D383239412D3431374236433641443936337D&cdn=[hex]68637063323131&lun=[hex]4D4D46&udn=[hex]484348&lu=6&lulasttriedseq=&lutargetseq=2008021700&lucontentstate=0
03/16 11:39:23 [824] <mfn_RequestLUContentInfo:>URL: /secars/secars.dll?h=53428C2A0E6236B290B5669E06FC797A82E312C0A11EA416DD43DC10C740E6C6CDABBC5619942EEAB020A75378B7F04C909D4DFB050E63837603EE078FA5045432DC7C1BB84A6F5CD142E21B5DB596D31A45EE33BF9686F6770808D625BDDE0FBD47D4AECE61037FCCE828B499C967D4D919DA1276596426686F7AE64E27C6E486F6BEEB31807774EB1E2E807CB3010F4C393BE9DC2757E2C3444BF3562D59A13816E774AC37B9FEAF9BEA3AD24059ACB35096CC0EDECCB0F320C17B1CCF3780AB10D0D20169B22A943F888473D02F169D0C5160D68EDF4BF8A654FE57289402FACEB25F2810DB0802271E4F78BDD1B0C1AEEFF1E2AA06A3A77E16F6609A7849CF49847CCB7ED5540FEE008555961606382C25CDDC5C32EFE3CA956622A23F51B503A25747FF11B06DB960E5F6BDC4A5
03/16 11:39:23 [824] <SendUrlAndReceiveResponse:>http://172.30.2.126:80/secars/secars.dll?h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
03/16 11:39:23 [824] 11:39:23=>Send HTTP REQUEST
03/16 11:39:23 [824] 11:39:23=>HTTP REQUEST sent
03/16 11:39:23 [824] <SendUrlAndReceiveResponse:>SMS return=200
03/16 11:39:23 [824] <ParseHTTPStatusCode:>200=>200 OK
03/16 11:39:23 [824] <mfn_RequestLUContentInfo:>Received LU Info : Moniker: {ECCC5006-EF61-4c99-829A-417B6C6AD963} Target Seq:2008021700 Response header: HTTP/1.1 200 OK
Connection: close
Date: Tue, 16 Mar 2010 10:39:24 GMT
Server: Microsoft-IIS/6.0
MicrosoftOfficeWebServer: 5.0_Pub
X-Powered-By: ASP.NET
Content-Type: text/html
Content-Length:650307
Sem-LUPath: /content/{ECCC5006-EF61-4c99-829A-417B6C6AD963}/2008021700/Full.zip
Sem-LUFull: 1
Sem-LUDeltaBaseSeqName:
Sem-PackageType: 1
Sem-DeltaMethod: 1
03/16 11:39:23 [824] <FindHeader>Sem-LUFull:=>1
03/16 11:39:23 [824] <mfn_RequestLUContentInfo:>Sem-LUFull:1
03/16 11:39:23 [824] <FindHeader>Sem-PackageType:=>1
03/16 11:39:23 [824] <mfn_RequestLUContentInfo:>Sem-PackageType:1
03/16 11:39:23 [824] <FindHeader>Sem-DeltaMethod:=>1
03/16 11:39:23 [824] <FindHeader>Sem-LUPath:=>/content/{ECCC5006-EF61-4c99-829A-417B6C6AD963}/2008021700/Full.zip
03/16 11:39:23 [824] <FindHeader>Content-Length:=>650307
03/16 11:39:23 [824] <UpdateLUFileList:>Updating existing Download File List with : {ECCC5006-EF61-4c99-829A-417B6C6AD963}2008021700
03/16 11:39:23 [824] <mfn_PrepareLUContent:>Requesting LU Info for : Moniker: {812CD25E-1049-4086-9DDD-A4FAE649FBDF} Target Seq:100315019
03/16 11:39:23 [824] ************CSN=12119
03/16 11:39:23 [824] <GetContentFileInfoUrl:> Request is: action=52&hostid=FC5EC3D8AC1E027E01A4036FB90DA4C9&groupid=4BB55DD9AC1E0231009FA2FB70E91691&fn=[hex]7B38313243443235452D313034392D343038362D394444442D4134464145363439464244467D&cdn=[hex]68637063323131&lun=[hex]4D4D46&udn=[hex]484348&lu=6&luseq=100304019,100302020,100301021,&lulasttriedseq=&lutargetseq=100315019&lucontentstate=0
03/16 11:39:23 [824] <mfn_RequestLUContentInfo:>URL: /secars/secars.dll?h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
03/16 11:39:23 [824] <SendUrlAndReceiveResponse:>http://172.30.2.126:80/secars/secars.dll?h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
03/16 11:39:23 [824] 11:39:23=>Send HTTP REQUEST
03/16 11:39:23 [824] 11:39:23=>HTTP REQUEST sent
03/16 11:39:23 [824] <SendUrlAndReceiveResponse:>SMS return=200
03/16 11:39:23 [824] <ParseHTTPStatusCode:>200=>200 OK
03/16 11:39:23 [824] <mfn_RequestLUContentInfo:>Received LU Info : Moniker: {812CD25E-1049-4086-9DDD-A4FAE649FBDF} Target Seq:100315019 Response header: HTTP/1.1 200 OK
Connection: close
Date: Tue, 16 Mar 2010 10:39:24 GMT
Server: Microsoft-IIS/6.0
MicrosoftOfficeWebServer: 5.0_Pub
X-Powered-By: ASP.NET
Content-Type: text/html
Content-Length:881638
Sem-LUPath: /content/{812CD25E-1049-4086-9DDD-A4FAE649FBDF}/100315019/Full.zip
Sem-LUFull: 1
Sem-LUDeltaBaseSeqName:
Sem-PackageType: 1
Sem-DeltaMethod: 1
03/16 11:39:23 [824] <FindHeader>Sem-LUFull:=>1
03/16 11:39:23 [824] <mfn_RequestLUContentInfo:>Sem-LUFull:1
03/16 11:39:23 [824] <FindHeader>Sem-PackageType:=>1
03/16 11:39:23 [824] <mfn_RequestLUContentInfo:>Sem-PackageType:1
03/16 11:39:23 [824] <FindHeader>Sem-DeltaMethod:=>1
03/16 11:39:23 [824] <FindHeader>Sem-LUPath:=>/content/{812CD25E-1049-4086-9DDD-A4FAE649FBDF}/100315019/Full.zip
03/16 11:39:23 [824] <FindHeader>Content-Length:=>881638
03/16 11:39:23 [824] <UpdateLUFileList:>Updating existing Download File List with : {812CD25E-1049-4086-9DDD-A4FAE649FBDF}100315019
03/16 11:39:23 [824] <mfn_PrepareLUContent:>Requesting LU Info for : Moniker: {E5A3EBEE-D580-421e-86DF-54C0B3739522} Target Seq:100315019
03/16 11:39:23 [824] ************CSN=12120
03/16 11:39:23 [824] <GetContentFileInfoUrl:> Request is: action=52&hostid=FC5EC3D8AC1E027E01A4036FB90DA4C9&groupid=4BB55DD9AC1E0231009FA2FB70E91691&fn=[hex]7B45354133454245452D443538302D343231652D383644462D3534433042333733393532327D&cdn=[hex]68637063323131&lun=[hex]4D4D46&udn=[hex]484348&lu=6&luseq=100304019,100302020,100301021,&lulasttriedseq=&lutargetseq=100315019&lucontentstate=0
03/16 11:39:23 [824] <mfn_RequestLUContentInfo:>URL: /secars/secars.dll?h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
03/16 11:39:23 [824] <SendUrlAndReceiveResponse:>http://172.30.2.126:80/secars/secars.dll?h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
03/16 11:39:23 [824] 11:39:23=>Send HTTP REQUEST
03/16 11:39:23 [824] 11:39:23=>HTTP REQUEST sent
03/16 11:39:23 [824] <SendUrlAndReceiveResponse:>SMS return=200
03/16 11:39:23 [824] <ParseHTTPStatusCode:>200=>200 OK
03/16 11:39:23 [824] <mfn_RequestLUContentInfo:>Received LU Info : Moniker: {E5A3EBEE-D580-421e-86DF-54C0B3739522} Target Seq:100315019 Response header: HTTP/1.1 200 OK
Connection: close
Date: Tue, 16 Mar 2010 10:39:24 GMT
Server: Microsoft-IIS/6.0
MicrosoftOfficeWebServer: 5.0_Pub
X-Powered-By: ASP.NET
Content-Type: text/html
Content-Length:76789
Sem-LUPath: /content/{E5A3EBEE-D580-421e-86DF-54C0B3739522}/100315019/Full.zip
Sem-LUFull: 1
Sem-LUDeltaBaseSeqName:
Sem-PackageType: 1
Sem-DeltaMethod: 1
03/16 11:39:23 [824] <FindHeader>Sem-LUFull:=>1
03/16 11:39:23 [824] <mfn_RequestLUContentInfo:>Sem-LUFull:1
03/16 11:39:23 [824] <FindHeader>Sem-PackageType:=>1
03/16 11:39:23 [824] <mfn_RequestLUContentInfo:>Sem-PackageType:1
03/16 11:39:23 [824] <FindHeader>Sem-DeltaMethod:=>1
03/16 11:39:23 [824] <FindHeader>Sem-LUPath:=>/content/{E5A3EBEE-D580-421e-86DF-54C0B3739522}/100315019/Full.zip
03/16 11:39:23 [824] <FindHeader>Content-Length:=>76789
03/16 11:39:23 [824] <UpdateLUFileList:>Updating existing Download File List with : {E5A3EBEE-D580-421e-86DF-54C0B3739522}100315019
03/16 11:39:23 [824] <PostEvent>going to post event=EVENT_PACKAGE_REQUIRE_STATUS
03/16 11:39:23 [824] <PostEvent>done post event=EVENT_PACKAGE_REQUIRE_STATUS, return=17
03/16 11:39:23 [824] <mfn_GetClientPackage> The package at Index 0 is NOT needed by the client .. Going to the next package..
03/16 11:39:23 [824] <PostEvent>going to post event=EVENT_SERVER_ONLINE
03/16 11:39:23 [824] <PostEvent>done post event=EVENT_SERVER_ONLINE, return=0
03/16 11:39:23 [824] <ScheduleNextUpdate>Reset Heartbeat factor index, hearbeat=900 seconds
03/16 11:39:23 [824] HEARTBEAT: Check Point 6
03/16 11:39:23 [824] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: AVMan
03/16 11:39:23 [824] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: GUP
03/16 11:39:23 [824] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: LUMan
03/16 11:39:23 [824] <mfn_PostAgentInfo>===REQUESTING CMC OP-STATE ===
03/16 11:39:23 [824] <PostEvent>going to post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE
03/16 11:39:23 [824] <PostEvent>done post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE, return=0
03/16 11:39:23 [824] ReasonDescForFailure*** = Host Integrity check is disabled.
03/16 11:39:23 [824] ReasonDescForFailure*** = Host Integrity check is disabled.
03/16 11:39:23 [824] *** = <SSAInfo NameSpace="rpc" AgentID="FC5EC3D8AC1E027E01A4036FB90DA4C9" ComputerID="6C89A661AC1E027E01A4036F0BF25A63" HardwareKey="E19DD7175138636A9A1D320EBFDFBC77" GroupID="CF6ACE19AC1E027E01CBE1ECD5C5FA94">
<AgentHIInfo Status="3" ReasonCode="105" ReasonDescForFailure="Host Integrity check is disabled."/>
<SSAHostInfo>
<NetworkIdentity UserDomain="HCH" LogonUser="MMF" HostDomain="HCH" HostName="hcpc211" HostDesc=""/>
<SSAProduct Version="11.0.5002.333"/>
<SSAOS Version="5.1.2600" Desc="Windows XP Professional " Type="17105154" ServicePack="Service Pack 3" Language="6"/>
<Processor ProcessorType="x86 Family 6 Model 15 Stepping 10" ProcessorClock="1994" ProcessorNum="2"/>
<Memory Size="3202584576"/>
<Disk Letter="C:\" Size="160038756352"/>
<BIOS Version="LENOVO - 2260"/>
<TpmDevice Id="0"/>
<SSAProfile Version="5.0.0" SerialNumber="CF6A-03/16/2010 11:19:18 743"/>
<SSAIDS Version="" SerialNumber=""/>
<Deuce Signature="100313002"/>
<SSAUTC Bias="-60"/>
<DNSs><DNS Address="172.30.2.241"/><DNS Address="172.30.2.53"/></DNSs>
<WINSs><WINS Address="172.30.2.54"/></WINSs>
<DHCPServer Address="172.30.2.52"/><SSANICs><SSANIC Ip="172.30.2.94" Mac="00-21-86-98-51-b5" Gateway="172.30.2.53" SubnetMask="255.255.255.0"/></SSANICs><Firewall OnOff="1" Installed="1"/>
</SSAHostInfo>
<RebootRequired Status="0"></RebootRequired>
<InstalledFeatures><Feature Id ="256"/></InstalledFeatures>
</SSAInfo>
03/16 11:39:23 [824] <mfn_PostAgentInfo>Free memory difference: 1874599936, Threshold: 0
03/16 11:39:23 [824] <mfn_PostAgentInfo>Free disk space difference: 136803188736, Threshold: 0
03/16 11:39:23 [824] <PostEvent>going to post event=EVENT_SYLINK_QUERY_COMMANDSTATUS
03/16 11:39:23 [824] <PostEvent>done post event=EVENT_SYLINK_QUERY_COMMANDSTATUS, return=0
03/16 11:39:23 [824] <mfn_PostAgentInfo><?xml version='1.0' encoding='UTF-8' ?>
<SESAgentOpState AgentID="FC5EC3D8AC1E027E01A4036FB90DA4C9" Timestamp="1268735963296"><TechID Name="AVMan"><Data><![CDATA[<avstate version="1.0"><RTVScanRunning>1</RTVScanRunning><PatternFileRevision>40</PatternFileRevision><UsingPattern>3202600</UsingPattern><PatternFileSequence>0</PatternFileSequence><PatternFileDate>28020F000000</PatternFileDate><TimeOfLastVirus>28000F061722</TimeOfLastVirus><TimeOfLastScan>2802100A1829</TimeOfLastScan><WorstInfectionType>0</WorstInfectionType><OnOff>1</OnOff><SymProtectOnOff>0</SymProtectOnOff><SymSentryInstalled>0</SymSentryInstalled><SavProductVersion>19011542</SavProductVersion><Licensed>0</Licensed><LicenseStatus>0</LicenseStatus><LicenseExpirationTime>000000000000</LicenseExpirationTime><DecAbiVer>1.2.5</DecAbiVer><EraserEngineVer>7143426:196620</EraserEngineVer><Moniker Id="{C25CEA47-63E5-447b-8D95-C79CAE13FF79}" Version="1.5.0" Seq="80929017" Owner="SyKnAppS" /><Moniker Id="{E5A3EBEE-D580-421e-86DF-54C0B3739522}" Version="MicroDefsB.CurDefs" Seq="100304019" Ow
<GupStatus IsGup="0" NameSpace="rpc" ComputerID="6C89A661AC1E027E01A4036F0BF25A63"/>]]></Data></TechID><TechID Name="LUMan"><Data><![CDATA[<lustate><lastUpdateTime>1268735083437</lastUpdateTime></lustate>]]></Data></TechID><TechID Name="SEP"><Data><![CDATA[<SSAInfo NameSpace="rpc" AgentID="FC5EC3D8AC1E027E01A4036FB90DA4C9" ComputerID="6C89A661AC1E027E01A4036F0BF25A63" HardwareKey="E19DD7175138636A9A1D320EBFDFBC77" GroupID="CF6ACE19AC1E027E01CBE1ECD5C5FA94">
<AgentHIInfo Status="3" ReasonCode="105" ReasonDescForFailure="Host Integrity check is disabled."/>
<SSAHostInfo>
<NetworkIdentity UserDomain="HCH" LogonUser="MMF" HostDomain="HCH" HostName="hcpc211" HostDesc=""/>
<SSAProduct Version="11.0.5002.333"/>
<SSAOS Version="5.1.2600" Desc="Windows XP Professional " Type="17105154" ServicePack="Service Pack 3" Language="6"/>
<Processor ProcessorType="x86 Family 6 Model 15 Stepping 10" ProcessorClock="1994" ProcessorNum="2"/>
<Memory Size="3202584576"/>
<Disk Letter="C:\" Size="160038756352"/>
<BIOS Version="LENOVO - 2260"/>
<TpmDevice Id="0"/>
<SSAProfile Version="5.0.0" SerialNumber="CF6A-03/16/2010 11:19:18 743"/>
<SSAIDS Version="" SerialNumber=""/>
<Deuce Signature="100313002"/>
<SSAUTC Bias="-60"/>
<DNSs><DNS Address="172.30.2.241"/><DNS Address="172.30.2.53"/></DNSs>
<WINSs><WINS Address="172.30.2.54"/></WINSs>
<DHCPServer Address="172.30.2.52"/><SSANICs><SSANIC Ip="172.30.2.94" Mac="00-21-86-98-51-b5" Gateway="172.30.2.53" SubnetMask="255.255.255.0"/></SSANICs><Firewall OnOff="1" Installed="1"/>
</SSAHostInfo>
<RebootRequired Status="0"></RebootRequired>
<InstalledFeatures><Feature Id ="256"/></InstalledFeatures>
</SSAInfo>
]]></Data></TechID><TechID Name="SEP"><Data><![CDATA[<SSAInfo NameSpace="rpc" AgentID="FC5EC3D8AC1E027E01A4036FB90DA4C9" ComputerID="6C89A661AC1E027E01A4036F0BF25A63" HardwareKey="E19DD7175138636A9A1D320EBFDFBC77" GroupID="CF6ACE19AC1E027E01CBE1ECD5C5FA94">
<SSAHostInfo>
<Memory Free="1874599936"/>
<Disk Letter="C:\" Free="136803188736"/>
</SSAHostInfo>
</SSAInfo>
]]></Data></TechID></SESAgentOpState>
03/16 11:39:23 [824] ************CSN=12121
03/16 11:39:23 [824] <mfn_MakePostUrl:>Request is: action=192&hostid=FC5EC3D8AC1E027E01A4036FB90DA4C9&chk=13F445D4B208FB674DB80D0B9D9C0CBD&ck=75FF48A1B58F08D3A65D516AF833DE7C&uchk=37102BE5AFFB87E7291DDFEA0C95DB86&uck=B3FC9FF281A2FA9ADE1224DCC20AC15D&as=12121&cn=[hex]68637063323131&lun=[hex]4D4D46&udn=[hex]484348
03/16 11:39:23 [824] <mfn_PostAgentInfo>http://172.30.2.126:80/secars/secars.dll?h=8616D56AE3C53E169317CF85771D0F32632ECBBC30FC4467CF118AB8A4D276C698DA8D4A1DFBA58360E26FFC4BFC430FF4ED4C932E16E88406B40873638BAE4E01ED5FA8C1EB5F07BDFE3F014092DFE83CCE7B922692AC1F5321D6BE0848AFAC6DB083B7BF18E7F0629795F20CCF1218BD5ADF3B19F0D96A3A40E3A20A15C05AC5C6CAF256FDC16CF8E10720090B17435D5CFB9C00E2CA3DF543BC827F70A5E3A1C5E5C98C536B2DC4248F57C3A8147EE88EAFDB50197A71C6E21D4623288A3CFCD2AA9490503361BC4C26CDBD7F435E85159380D7630F7D143B51EC2AC284A385D32E99C18DF0CFC152655D7F158ED84639D834C11BEEEA60C87633236887A20B112B254D2E9B5BB8376906DC0C4E05
03/16 11:39:23 [824] <mfn_PostAgentInfo>POST the total size=1524
03/16 11:39:23 [824] <mfn_PostAgentInfo>Done with return code = 200
03/16 11:39:23 [824] <IndexHeartbeatProc>===UPLOAD STAGE===
03/16 11:39:23 [824] <PostEvent>going to post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG
03/16 11:39:23 [824] <PostEvent>done post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG, return=0
03/16 11:39:23 [824] <IndexHeartbeatProc>===PREPARE EVENT LOG STAGE===
03/16 11:39:23 [824] <PrepareEventLog>initialized technology extension processing ok
03/16 11:39:23 [824] <CalcEventLogIndex>Need to send Event Log Type(0) from id 173 to 183
03/16 11:39:23 [824] <PrepareEventLog>Allow total logs to send=11
03/16 11:39:23 [824] <PrepareEventLog>nSecurityRecordsTotal=0
03/16 11:39:23 [824] <PrepareEventLog>nSecurityRecordsToSend=0
03/16 11:39:23 [824] <PrepareEventLog>nSystemRecordsTotal=11
03/16 11:39:23 [824] <PrepareEventLog>nSystemRecordsToSend=100
03/16 11:39:23 [824] <PrepareEventLog>nTrafficRecordsTotal=0
03/16 11:39:23 [824] <PrepareEventLog>nTrafficRecordsToSend=0
03/16 11:39:23 [824] <PrepareEventLog>nRawRecordsTotal=0
03/16 11:39:23 [824] <PrepareEventLog>nRawRecordsToSend=0
03/16 11:39:23 [824] <PrepareEventLog>nProcessRecordsTotal=0
03/16 11:39:23 [824] <PrepareEventLog>nProcessRecordsToSend=0
03/16 11:39:23 [824] <PrepareEventLog>nLANSensorRecordsTotal=0
03/16 11:39:23 [824] <PrepareEventLog>nLANSensorRecordsToSend=0
03/16 11:39:23 [824] <PrepareEventLog>nTechExtensionRecordsTotal=0
03/16 11:39:23 [824] <PrepareEventLog>nTechExtensionRecordsToSend=0
03/16 11:39:23 [824] <MakeSystemLog>The size of SYSTEM event logs is 4524.
03/16 11:39:23 [824] <SyLink>The size of SYSTEM event logs is 4524.
03/16 11:39:23 [824] <MakeSecurityLog>Attached total 0 bytes SECURITY event logs.
03/16 11:39:23 [824] <MakeTrafficLog>Attached total 0 bytes TRAFFIC event logs.
03/16 11:39:23 [824] <MakeRawTrafficLog>Attached total 0 bytes RAW TRAFFIC event logs.
03/16 11:39:23 [824] <MakeProcessLog>Attached total 0 bytes process event logs.
03/16 11:39:23 [824] <IndexHeartbeatProc>===COMPRESS EVENT LOG STAGE===
03/16 11:39:23 [824] <IndexHeartbeatProc>===SEND EVENT LOG STAGE===
03/16 11:39:23 [824] ************CSN=12122
03/16 11:39:23 [824] <mfn_MakePostUrl:>Request is: action=195&hostid=FC5EC3D8AC1E027E01A4036FB90DA4C9&chk=13F445D4B208FB674DB80D0B9D9C0CBD&ck=75FF48A1B58F08D3A65D516AF833DE7C&uchk=37102BE5AFFB87E7291DDFEA0C95DB86&uck=B3FC9FF281A2FA9ADE1224DCC20AC15D&groupid=4BB55DD9AC1E0231009FA2FB70E91691&as=12122&cn=[hex]68637063323131&lun=[hex]4D4D46&udn=[hex]484348
03/16 11:39:23 [824] <SendEventLogToServer>http://172.30.2.126:80/secars/secars.dll?h=5FA3EA947673183A1BC6AFE8EE824776632ECBBC30FC4467CF118AB8A4D276C698DA8D4A1DFBA58360E26FFC4BFC430FF4ED4C932E16E88406B40873638BAE4E01ED5FA8C1EB5F07BDFE3F014092DFE83CCE7B922692AC1F5321D6BE0848AFAC6DB083B7BF18E7F0629795F20CCF1218BD5ADF3B19F0D96A3A40E3A20A15C05AC5C6CAF256FDC16CF8E10720090B17435D5CFB9C00E2CA3DF543BC827F70A5E3A1C5E5C98C536B2DC4248F57C3A8147EE88EAFDB50197A71C6E21D4623288A3CE9152A2E45A8580693EC718C549C355274077C06F5B66C17B6925611759D2D521A78769E583E03AA3D2FE014CD84BF634641B537AE14A736CD93BD35FD53AB5096565C805BA9595999174577C76BD383C62541BC05B5B48173C7A9F6C7C614FD962478094093882EF4B7583766E8BF56E88D381B4F04218BC941F00823960E09
03/16 11:39:23 [824] <SendEventLogToServer>eventlog-->SMS, size=955
03/16 11:39:23 [824] <SendEventLogToServer>uploads the eventlog to server, size=955
03/16 11:39:23 [824] <SendEventLogToServer>Query return code = 200
03/16 11:39:23 [824] <SendEventLogToServer>EventLog-->SEM DONE!
03/16 11:39:23 [824] <PostEvent>going to post event=EVENT_SERVER_EVENT_LOG_SENT
03/16 11:39:23 [824] <PostEvent>done post event=EVENT_SERVER_EVENT_LOG_SENT, return=0
03/16 11:39:24 [824] ************CSN=12123
03/16 11:39:24 [824] <mfn_MakePostUrl:>Request is: action=196&hostid=FC5EC3D8AC1E027E01A4036FB90DA4C9&chk=13F445D4B208FB674DB80D0B9D9C0CBD&ck=75FF48A1B58F08D3A65D516AF833DE7C&uchk=37102BE5AFFB87E7291DDFEA0C95DB86&uck=B3FC9FF281A2FA9ADE1224DCC20AC15D&ert=1&as=12123&cn=[hex]68637063323131&lun=[hex]4D4D46&udn=[hex]484348
03/16 11:39:24 [824] <mfn_PostApplication>http://172.30.2.126:80/secars/secars.dll?h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
03/16 11:39:24 [824] <mfn_PostApplication>POST the total size=57028
03/16 11:39:24 [824] <mfn_PostApplication>Done with return code = 200
03/16 11:39:24 [824] <CSyLink::mfn_EraseApps()>
03/16 11:39:24 [824] </CSyLink::mfn_EraseApps()>
03/16 11:39:24 [824] <IndexHeartbeatProc>Communication Mode=1(Pull mode)
03/16 11:39:24 [824] HEARTBEAT: Check Point 8
03/16 11:39:24 [824] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
03/16 11:39:24 [824] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
03/16 11:39:24 [824] <IndexHeartbeatProc>====== IndexHeartbeat Procedure stops at 11:39:24 ======
03/16 11:39:24 [824] <IndexHeartbeatProc>Set Heartbeat Result= 2
03/16 11:39:24 [824] <IndexHeartbeatProc>Sylink Comm.Flags: 'Connection Failed' = 0, 'Using Backup Sylink' = 0, 'Using Location Config' = 0
03/16 11:39:24 [824] Use new configuration
03/16 11:39:24 [824] HEARTBEAT: Check Point Complete
03/16 11:39:24 [824] <IndexHeartbeatProc>Done, Heartbeat=900seconds
03/16 11:39:24 [824] </CSyLink::IndexHeartbeatProc()>
03/16 11:39:24 [824] <CheckHeartbeatTimer>====== Heartbeat loop stops at 11:39:24 ======
my LUA failed to download
my LUA failed to download virus definitions but able to download Behavioral crimeware protection,firewall rules and product updates successfully.
and some of SEP managed clients still failed to update via LUA server..
anyone can assist?
is it possible to copy those downloaded files from another LUA to my current LUA?
How many LUAs you have? Among
How many LUAs you have? Among how many having problem?
This doc can help you in getting updates from another LUA
Updating downloads in an internal Live Update Administrator Server using the downloads from an external Live Update Server
Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind
hi
How to determine whether your firewall is blocking LiveUpdate
http://service1.symantec.com/SUPPORT/sharedtech.nsf/docid/2003090514252213
Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq
Hi, Can you attach the
Hi,
Can you attach the log.liveupdate from one of the clients which is not taking definitions.
Aniket
SEP Definitions out-of-date since 2010-03-14
Hi!
I have got also an out-of-date issue since 2010-03-14.
Normally we are using a LUA-Server but as all clients are running out of date, i switched the LiveUpdate Policy directly to SymantecLiveupdate Server.
-> Same Issue!
If i run LiveUpdate manually (interactive or express mode) SymantecLiveupdate Server tells me all products are up to date.
Actual the following NOT up to date definitions are installed:
AntiVirus and Antispyware Protection: 2010-03-14 r3
Proactive Threat Protection: 2010-03-23 r17
Network Threat Protection: 2010-03-13 r2
Any Idea?
In one client try by
In one client try by repairing from add/remove programs and run luall...
Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind
Repairing from add/remove programs and run luall
-> Same issue.
--- Live update express ---
The following Symantec products and components are installed on your computer.
> Antivirus and antispyware definitions
> Intrusion Prevention signatures
> LiveUpdate
> Submission Control signatures
> Symantec Security Software
> Symantec Security Software Update
> Symantec Shared Components
Initializing...
Connecting to liveupdate.symantecliveupdate.com...
Downloading catalog file (1 of 12), product up-to-date.
Downloading catalog file (2 of 12), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (3 of 12), product up-to-date.
Downloading catalog file (4 of 12), product up-to-date.
Downloading catalog file (5 of 12), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (6 of 12), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (7 of 12), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (8 of 12), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (9 of 12), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (10 of 12), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (11 of 12), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (12 of 12), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
All of the Symantec products installed on your computer are currently up-to-date. Remember to check for new updates frequently.
LiveUpdate session is complete.
--- Live update express ---
Try this How to clear out
Try this
How to clear out corrupted definitions for a Symantec Endpoint Protection Client manually.
Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind
Cleared out corrupted definitions manually
After manuall clearing, i did an update via LUA & SymantecLiveupdate Server.
-> "All of the Symantec products installed on your computer are currently up-to-date. Remember to check for new updates frequently."
Result:
AntiVirus and Antispyware Protection: 2010-02-16 r39 ??????????
Proactive Threat Protection: 2010-03-23 r17
Network Threat Protection: 2010-03-13 r2
I am using Client Version: 11.0.4000.2295 -> Not longer supported or something?
regards,
Stefan
Whether your server having
Whether your server having latest updates?
Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind
Manually cleared definition / updated via SymantecUpdate Server
Hi AranvindKM!
Thanks a lot for you assistance!
- I completely cleared manually virus definitions from one of the clients again.
- LiveUpdate Policy is set to "Use the default Symantec LiveUpdate Server" at the SEPM (-> This Policy works, I can see that when i run liveupdate manually at the client...)
But the result is the same: AntiVirus and Antispyware Protection: 2010-02-16 r39
Do you tried for repairing
Do you tried for repairing the client from add/remove programs?
If no try once..
Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind
Repairing SEP-Client
I repaired -> no effect...
LiveUpdate Content / Security Definitions / Revision...
Hi ArvindKM!
At the "LiveUpdate Content" there was manuell set a false revision -> f..k
Thanks a lot for your assistance, my issue is resolved...
regards,
Stefan
Happy to hear your problem
Happy to hear your problem got solved.
Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind
Same Issue Here
I am having the same issue with getting my managed clients to get the latest definitions from the server. I have tried every step on these forums with no luck.
- SEPM set to use the default management server.
- Live update works both by runnning the LUA.exe on the server and from SEPM. Connects and downloads the latest defs
- In the Admin Tab I "Show LiveUpdate Downloads" and I see all the latest defs
- I can send commands to my clients and verify that it has actually been issued in my Monitors tab
- I have all the appropriate proxy information setup up.
- Running 11.0.5002.333
The only way I can update is having the client directly update from Symantec.
The machines that have display the following def dates;
AV/AP 04-01-2010 R2
PTP 04-01-2010 R16
NTP 04-17-2010 R1
But all my other clients that get the update form the SEPM have Virus Defs from 03-25-2010 R002
What can I do to fix this?
(No subject)
(No subject)
Would you like to reply?
Login or Register to post your comment.