Endpoint Protection

I've got a case open with Symantec regarding this but hte mysupport site isnt working.

Anyways we had few thousand clients get corrupted signatures on 2/3/2010. After that these clients would download the latest signature each day and then revert back to 2/2/2010. We pushed intelligent updater and rx4defs to these systems. This resolved most of the clients issues but now we have some clients that wont update at all.

Live Update hangs without errors. We have tried using cleanwipe and reinstalling SAV10 (latest 9 release). Basically once Live Update is lauched LUALL.exe and LUCOM~1.exe process kicks off, does something for about 10 seconds, and then just hangs. No CPU activity on these processes, etc... This is a repeat over and over again. The only way to update these systems is using Intelligent Updater.


Any ideas? We have tried using internal LU, external Symantec LU, nothing works. Tried managed and unmanged as well.

XP SP2 systems.

go to services.
look for LU service
configure the account to your name ( logged in user name)
launch luall.exe
check it on one client. 

In control panel..change Liveupdate to Interactive mode and error support change it to enhanced.
then launch LUALL

check where does it fail and then we can check the log.liveupdate as well. 

////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
// Start LuComServer
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
3/11/2010, 6:36:59 GMT -> LuComServer version: 3.3.0.85
3/11/2010, 6:36:59 GMT -> LiveUpdate Language: English
3/11/2010, 6:36:59 GMT -> LuComServer Sequence Number: 20090320
3/11/2010, 6:36:59 GMT -> OS: Windows XP Professional, Service Pack: 2, Major: 5, Minor: 1, Build: 2600 (32-bit)
3/11/2010, 6:36:59 GMT -> System Language:[0x0409], User Language:[0x0409]
3/11/2010, 6:36:59 GMT -> IE 6 Support
3/11/2010, 6:36:59 GMT -> ComCtl32 version: 6.0
3/11/2010, 6:36:59 GMT -> IP Addresses: XXX.XXX.XXX.100
3/11/2010, 6:36:59 GMT -> Unable to find the property 'PREFERENCES\REQUIRED_FREE_DISK_SPACE' in settings file; using default: 10485760.
3/11/2010, 6:36:59 GMT -> Loading C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
3/11/2010, 6:36:59 GMT -> Opened the product inventory at "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
3/11/2010, 6:36:59 GMT -> Account launching LiveUpdate is not a logged in user's account
3/11/2010, 6:36:59 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
3/11/2010, 6:36:59 GMT -> LiveUpdate flag value for this run is 0
3/11/2010, 6:36:59 GMT -> Unable to find the property 'PREFERENCES\INTERNET_CONNECT_TIMEOUT' in settings file; using default: 45.
3/11/2010, 6:36:59 GMT -> Unable to find the property 'PREFERENCES\INTERNET_READ_DATA_TIMEOUT' in settings file; using default: 45.
3/11/2010, 6:36:59 GMT -> Unable to find the property 'PREFERENCES\CACHE_LIMIT' in settings file; using default: 1505327411.
3/11/2010, 6:36:59 GMT -> Performing Daffy WelComeText Callback removal.
3/11/2010, 6:36:59 GMT -> Successfully added property PREFERENCES\DAFCALLBACK_REMOVAL to the settings file.
3/11/2010, 6:36:59 GMT -> Entering SetSequenceNumberEx()...
3/11/2010, 6:36:59 GMT -> LuComServer version: 3.3.0.85
3/11/2010, 6:36:59 GMT -> LiveUpdate Language: English
3/11/2010, 6:36:59 GMT -> LuComServer Sequence Number: 20090320
3/11/2010, 6:36:59 GMT -> OS: Windows XP Professional, Service Pack: 2, Major: 5, Minor: 1, Build: 2600 (32-bit)
3/11/2010, 6:36:59 GMT -> System Language:[0x0409], User Language:[0x0409]
3/11/2010, 6:36:59 GMT -> IE 6 Support
3/11/2010, 6:36:59 GMT -> ComCtl32 version: 6.0
3/11/2010, 6:36:59 GMT -> IP Addresses: XXX.XXX.XXX.100
3/11/2010, 6:36:59 GMT -> Loading C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
3/11/2010, 6:36:59 GMT -> Opened the product inventory at "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
3/11/2010, 6:36:59 GMT -> Account launching LiveUpdate is not a logged in user's account
3/11/2010, 6:36:59 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
3/11/2010, 6:36:59 GMT -> LiveUpdate flag value for this run is 0
3/11/2010, 6:36:59 GMT -> Leaving SetSequenceNumberEx(); retcode = 0
3/11/2010, 6:36:59 GMT -> LuComServer version: 3.3.0.85
3/11/2010, 6:36:59 GMT -> LiveUpdate Language: English
3/11/2010, 6:36:59 GMT -> LuComServer Sequence Number: 20090320
3/11/2010, 6:36:59 GMT -> OS: Windows XP Professional, Service Pack: 2, Major: 5, Minor: 1, Build: 2600 (32-bit)
3/11/2010, 6:36:59 GMT -> System Language:[0x0409], User Language:[0x0409]
3/11/2010, 6:36:59 GMT -> IE 6 Support
3/11/2010, 6:36:59 GMT -> ComCtl32 version: 6.0
3/11/2010, 6:36:59 GMT -> IP Addresses: XXX.XXX.XXX.100
3/11/2010, 6:36:59 GMT -> Loading C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
3/11/2010, 6:36:59 GMT -> Opened the product inventory at "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
3/11/2010, 6:36:59 GMT -> Account launching LiveUpdate is not a logged in user's account
3/11/2010, 6:36:59 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
3/11/2010, 6:36:59 GMT -> LiveUpdate flag value for this run is 0
3/11/2010, 6:36:59 GMT -> Entering SetSequenceNumberEx()...
3/11/2010, 6:37:00 GMT -> LuComServer version: 3.3.0.85
3/11/2010, 6:37:00 GMT -> LiveUpdate Language: English
3/11/2010, 6:37:00 GMT -> LuComServer Sequence Number: 20090320
3/11/2010, 6:37:00 GMT -> OS: Windows XP Professional, Service Pack: 2, Major: 5, Minor: 1, Build: 2600 (32-bit)
3/11/2010, 6:37:00 GMT -> System Language:[0x0409], User Language:[0x0409]
3/11/2010, 6:37:00 GMT -> IE 6 Support
3/11/2010, 6:37:00 GMT -> ComCtl32 version: 6.0
3/11/2010, 6:37:00 GMT -> IP Addresses: XXX.XXX.XXX.100
3/11/2010, 6:37:00 GMT -> Loading C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
3/11/2010, 6:37:00 GMT -> Opened the product inventory at "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
3/11/2010, 6:37:00 GMT -> Account launching LiveUpdate is not a logged in user's account
3/11/2010, 6:37:00 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
3/11/2010, 6:37:00 GMT -> LiveUpdate flag value for this run is 0
3/11/2010, 6:37:00 GMT -> Leaving SetSequenceNumberEx(); retcode = 0
3/11/2010, 6:37:00 GMT -> LuComServer version: 3.3.0.85
3/11/2010, 6:37:00 GMT -> LiveUpdate Language: English
3/11/2010, 6:37:00 GMT -> LuComServer Sequence Number: 20090320
3/11/2010, 6:37:00 GMT -> OS: Windows XP Professional, Service Pack: 2, Major: 5, Minor: 1, Build: 2600 (32-bit)
3/11/2010, 6:37:00 GMT -> System Language:[0x0409], User Language:[0x0409]
3/11/2010, 6:37:00 GMT -> IE 6 Support
3/11/2010, 6:37:00 GMT -> ComCtl32 version: 6.0
3/11/2010, 6:37:00 GMT -> IP Addresses: XXX.XXX.XXX.100
3/11/2010, 6:37:00 GMT -> Loading C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
3/11/2010, 6:37:00 GMT -> Opened the product inventory at "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
3/11/2010, 6:37:00 GMT -> Account launching LiveUpdate is not a logged in user's account
3/11/2010, 6:37:00 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
3/11/2010, 6:37:00 GMT -> LiveUpdate flag value for this run is 0
3/11/2010, 6:37:00 GMT -> Entering SetSequenceNumberEx()...
3/11/2010, 6:37:00 GMT -> LuComServer version: 3.3.0.85
3/11/2010, 6:37:00 GMT -> LiveUpdate Language: English
3/11/2010, 6:37:00 GMT -> LuComServer Sequence Number: 20090320
3/11/2010, 6:37:00 GMT -> OS: Windows XP Professional, Service Pack: 2, Major: 5, Minor: 1, Build: 2600 (32-bit)
3/11/2010, 6:37:00 GMT -> System Language:[0x0409], User Language:[0x0409]
3/11/2010, 6:37:00 GMT -> IE 6 Support
3/11/2010, 6:37:00 GMT -> ComCtl32 version: 6.0
3/11/2010, 6:37:00 GMT -> IP Addresses: XXX.XXX.XXX.100
3/11/2010, 6:37:00 GMT -> Loading C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
3/11/2010, 6:37:00 GMT -> Opened the product inventory at "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
3/11/2010, 6:37:00 GMT -> Account launching LiveUpdate is not a logged in user's account
3/11/2010, 6:37:00 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
3/11/2010, 6:37:00 GMT -> LiveUpdate flag value for this run is 0
3/11/2010, 6:37:00 GMT -> Leaving SetSequenceNumberEx(); retcode = 0
3/11/2010, 6:37:00 GMT -> LuComServer version: 3.3.0.85
3/11/2010, 6:37:00 GMT -> LiveUpdate Language: English
3/11/2010, 6:37:00 GMT -> LuComServer Sequence Number: 20090320
3/11/2010, 6:37:00 GMT -> OS: Windows XP Professional, Service Pack: 2, Major: 5, Minor: 1, Build: 2600 (32-bit)
3/11/2010, 6:37:00 GMT -> System Language:[0x0409], User Language:[0x0409]
3/11/2010, 6:37:00 GMT -> IE 6 Support
3/11/2010, 6:37:00 GMT -> ComCtl32 version: 6.0
3/11/2010, 6:37:00 GMT -> IP Addresses: XXX.XXX.XXX.100
3/11/2010, 6:37:00 GMT -> Loading C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
3/11/2010, 6:37:00 GMT -> Opened the product inventory at "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
3/11/2010, 6:37:00 GMT -> Account launching LiveUpdate is not a logged in user's account
3/11/2010, 6:37:00 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
3/11/2010, 6:37:00 GMT -> LiveUpdate flag value for this run is 0
3/11/2010, 6:37:00 GMT -> Begin s32live1's DoOnRamp.
3/11/2010, 6:37:00 GMT -> LuComServer version: 3.3.0.85
3/11/2010, 6:37:00 GMT -> LiveUpdate Language: English
3/11/2010, 6:37:00 GMT -> LuComServer Sequence Number: 20090320
3/11/2010, 6:37:00 GMT -> OS: Windows XP Professional, Service Pack: 2, Major: 5, Minor: 1, Build: 2600 (32-bit)
3/11/2010, 6:37:00 GMT -> System Language:[0x0409], User Language:[0x0409]
3/11/2010, 6:37:00 GMT -> IE 6 Support
3/11/2010, 6:37:00 GMT -> ComCtl32 version: 6.0
3/11/2010, 6:37:00 GMT -> IP Addresses: XXX.XXX.XXX.100
3/11/2010, 6:37:00 GMT -> Loading C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
3/11/2010, 6:37:00 GMT -> Opened the product inventory at "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
3/11/2010, 6:37:00 GMT -> Account launching LiveUpdate is not a logged in user's account
3/11/2010, 6:37:00 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
3/11/2010, 6:37:00 GMT -> LiveUpdate flag value for this run is 0
3/11/2010, 6:37:00 GMT -> Begin s32live1's LaunchAndWait.
3/11/2010, 6:37:01 GMT -> LuComServer version: 3.3.0.85
3/11/2010, 6:37:01 GMT -> LiveUpdate Language: English
3/11/2010, 6:37:01 GMT -> LuComServer Sequence Number: 20090320
3/11/2010, 6:37:01 GMT -> OS: Windows XP Professional, Service Pack: 2, Major: 5, Minor: 1, Build: 2600 (32-bit)
3/11/2010, 6:37:01 GMT -> System Language:[0x0409], User Language:[0x0409]
3/11/2010, 6:37:01 GMT -> IE 6 Support
3/11/2010, 6:37:01 GMT -> ComCtl32 version: 6.0
3/11/2010, 6:37:01 GMT -> IP Addresses: XXX.XXX.XXX.100
3/11/2010, 6:37:01 GMT -> Loading C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
3/11/2010, 6:37:02 GMT -> Opened the product inventory at "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
3/11/2010, 6:37:02 GMT -> Account launching LiveUpdate is not a logged in user's account
3/11/2010, 6:37:02 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
3/11/2010, 6:37:02 GMT -> LiveUpdate flag value for this run is 0
3/11/2010, 6:37:02 GMT -> **** Starting a Silent LiveUpdate Session ****
3/11/2010, 6:37:02 GMT -> ***********************        Start of New LU Session        ***********************
3/11/2010, 6:37:02 GMT -> Legacy Command Line is: -a -s [-p"Avenge MicroDefs25 SavCorp10" -l"SymAllLanguages" -v"MicroDefsB.Aug"] [-p"Avenge MicroDefs25 SavCorp10" -l"SymAllLanguages" -v"MicroDefsB.CurDefs"] [-p"Symantec AntiVirus Corporate Client" -l"English" -v"10.1"]
3/11/2010, 6:37:02 GMT -> EVENT - SESSION START EVENT - The LiveUpdate session is running in Silent Mode.
3/11/2010, 6:37:02 GMT -> Check for updates to:  Product: LiveUpdate, Version: 3.3.0.85, Language: English.  Mini-TRI file name: liveupdate_3.3.0.85_english_livetri.zip
3/11/2010, 6:37:02 GMT -> Progress Update: TRYING_HOST: HostName: "liveupdate.symantecliveupdate.com" URL: "http://liveupdate.symantecliveupdate.com" HostNumber: 0
3/11/2010, 6:37:02 GMT -> Progress Update: TRIFILE_DOWNLOAD_START: Number of TRI files: 0 Downloading LiveUpdate catalog file
3/11/2010, 6:37:02 GMT -> LiveUpdate will download the first Mini-TRI file, liveupdate_3.3.0.85_english_livetri.zip
3/11/2010, 6:37:02 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
3/11/2010, 6:37:02 GMT -> Progress Update: PRE_CONNECT: Proxy: "(not-available)" Agent: "Symantec LiveUpdate" AccessType: 0x0      
3/11/2010, 6:37:02 GMT -> Progress Update: PROMPT_RAS_DIALUP:possibly prompting the RAS dialogue...
3/11/2010, 6:37:02 GMT -> Progress Update: CONNECTED: Proxy: "(not-available)" Agent: "EC0JJlyeMdD8KdSQAOS8UzHtVL0jY+YSwAAAAA" AccessType: 0x0      
3/11/2010, 6:37:02 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantecliveupdate.com/liveupdate_3.3.0.85_english_livetri.zip", Estimated Size: 0, Destination Folder: "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads"
3/11/2010, 6:37:02 GMT -> Unable to find the property 'PREFERENCES\MAX_LIVETRI_SIZE' in settings file; using default: 1048

The logs doesn't show it is failing may be you missed that part..
However it shows your Liveupdate is connecting to a Internal Liveupdate server and is failing..Would suggest it to configure back to take update from internet and run LUALL again.

////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
// Start LuComServer
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
3/11/2010, 5:23:42 GMT -> LuComServer version: 3.3.0.85
3/11/2010, 5:23:42 GMT -> LiveUpdate Language: English
3/11/2010, 5:23:42 GMT -> LuComServer Sequence Number: 20090320
3/11/2010, 5:23:42 GMT -> OS: Windows XP Professional, Service Pack: 2, Major: 5, Minor: 1, Build: 2600 (32-bit)
3/11/2010, 5:23:42 GMT -> System Language:[0x0409], User Language:[0x0409]
3/11/2010, 5:23:42 GMT -> IE 6 Support
3/11/2010, 5:23:42 GMT -> ComCtl32 version: 6.0
3/11/2010, 5:23:43 GMT -> IP Addresses: XXX.XXX.XXX.100
3/11/2010, 5:23:43 GMT -> Unable to find the property 'PREFERENCES\REQUIRED_FREE_DISK_SPACE' in settings file; using default: 10485760.
3/11/2010, 5:23:43 GMT -> Loading C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
3/11/2010, 5:23:43 GMT -> Opened the product inventory at "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
3/11/2010, 5:23:43 GMT -> Account launching LiveUpdate is not a logged in user's account
3/11/2010, 5:23:43 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
3/11/2010, 5:23:43 GMT -> LiveUpdate flag value for this run is 0
3/11/2010, 5:23:43 GMT -> Unable to find the property 'PREFERENCES\INTERNET_CONNECT_TIMEOUT' in settings file; using default: 45.
3/11/2010, 5:23:43 GMT -> Unable to find the property 'PREFERENCES\INTERNET_READ_DATA_TIMEOUT' in settings file; using default: 45.
3/11/2010, 5:23:43 GMT -> Unable to find the property 'PREFERENCES\CACHE_LIMIT' in settings file; using default: 1505327411.
3/11/2010, 5:23:43 GMT -> Performing Daffy WelComeText Callback removal.
3/11/2010, 5:23:43 GMT -> Successfully added property PREFERENCES\DAFCALLBACK_REMOVAL to the settings file.
3/11/2010, 5:23:43 GMT -> Entering SetSequenceNumberEx()...
3/11/2010, 5:23:43 GMT -> LuComServer version: 3.3.0.85
3/11/2010, 5:23:43 GMT -> LiveUpdate Language: English
3/11/2010, 5:23:43 GMT -> LuComServer Sequence Number: 20090320
3/11/2010, 5:23:43 GMT -> OS: Windows XP Professional, Service Pack: 2, Major: 5, Minor: 1, Build: 2600 (32-bit)
3/11/2010, 5:23:43 GMT -> System Language:[0x0409], User Language:[0x0409]
3/11/2010, 5:23:43 GMT -> IE 6 Support
3/11/2010, 5:23:43 GMT -> ComCtl32 version: 6.0
3/11/2010, 5:23:43 GMT -> IP Addresses: XXX.XXX.XXX.100
3/11/2010, 5:23:43 GMT -> Loading C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
3/11/2010, 5:23:43 GMT -> Opened the product inventory at "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
3/11/2010, 5:23:43 GMT -> Account launching LiveUpdate is not a logged in user's account
3/11/2010, 5:23:43 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
3/11/2010, 5:23:43 GMT -> LiveUpdate flag value for this run is 0
3/11/2010, 5:23:43 GMT -> Leaving SetSequenceNumberEx(); retcode = 0
3/11/2010, 5:23:43 GMT -> LuComServer version: 3.3.0.85
3/11/2010, 5:23:43 GMT -> LiveUpdate Language: English
3/11/2010, 5:23:43 GMT -> LuComServer Sequence Number: 20090320
3/11/2010, 5:23:43 GMT -> OS: Windows XP Professional, Service Pack: 2, Major: 5, Minor: 1, Build: 2600 (32-bit)
3/11/2010, 5:23:43 GMT -> System Language:[0x0409], User Language:[0x0409]
3/11/2010, 5:23:43 GMT -> IE 6 Support
3/11/2010, 5:23:43 GMT -> ComCtl32 version: 6.0
3/11/2010, 5:23:43 GMT -> IP Addresses:  XXX.XXX.XXX.100
3/11/2010, 5:23:43 GMT -> Loading C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
3/11/2010, 5:23:43 GMT -> Opened the product inventory at "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
3/11/2010, 5:23:43 GMT -> Account launching LiveUpdate is not a logged in user's account
3/11/2010, 5:23:43 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
3/11/2010, 5:23:43 GMT -> LiveUpdate flag value for this run is 0
3/11/2010, 5:23:43 GMT -> Entering SetSequenceNumberEx()...
3/11/2010, 5:23:43 GMT -> LuComServer version: 3.3.0.85
3/11/2010, 5:23:43 GMT -> LiveUpdate Language: English
3/11/2010, 5:23:43 GMT -> LuComServer Sequence Number: 20090320
3/11/2010, 5:23:43 GMT -> OS: Windows XP Professional, Service Pack: 2, Major: 5, Minor: 1, Build: 2600 (32-bit)
3/11/2010, 5:23:43 GMT -> System Language:[0x0409], User Language:[0x0409]
3/11/2010, 5:23:43 GMT -> IE 6 Support
3/11/2010, 5:23:43 GMT -> ComCtl32 version: 6.0
3/11/2010, 5:23:43 GMT -> IP Addresses:  XXX.XXX.XXX.100
3/11/2010, 5:23:43 GMT -> Loading C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
3/11/2010, 5:23:43 GMT -> Opened the product inventory at "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
3/11/2010, 5:23:43 GMT -> Account launching LiveUpdate is not a logged in user's account
3/11/2010, 5:23:43 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
3/11/2010, 5:23:43 GMT -> LiveUpdate flag value for this run is 0
3/11/2010, 5:23:43 GMT -> Leaving SetSequenceNumberEx(); retcode = 0
3/11/2010, 5:23:43 GMT -> LuComServer version: 3.3.0.85
3/11/2010, 5:23:43 GMT -> LiveUpdate Language: English
3/11/2010, 5:23:43 GMT -> LuComServer Sequence Number: 20090320
3/11/2010, 5:23:43 GMT -> OS: Windows XP Professional, Service Pack: 2, Major: 5, Minor: 1, Build: 2600 (32-bit)
3/11/2010, 5:23:43 GMT -> System Language:[0x0409], User Language:[0x0409]
3/11/2010, 5:23:43 GMT -> IE 6 Support
3/11/2010, 5:23:43 GMT -> ComCtl32 version: 6.0
3/11/2010, 5:23:43 GMT -> IP Addresses:  XXX.XXX.XXX.100
3/11/2010, 5:23:43 GMT -> Loading C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
3/11/2010, 5:23:43 GMT -> Opened the product inventory at "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
3/11/2010, 5:23:43 GMT -> Account launching LiveUpdate is not a logged in user's account
3/11/2010, 5:23:43 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
3/11/2010, 5:23:43 GMT -> LiveUpdate flag value for this run is 0
3/11/2010, 5:23:43 GMT -> Entering SetSequenceNumberEx()...
3/11/2010, 5:23:43 GMT -> LuComServer version: 3.3.0.85
3/11/2010, 5:23:43 GMT -> LiveUpdate Language: English
3/11/2010, 5:23:43 GMT -> LuComServer Sequence Number: 20090320
3/11/2010, 5:23:43 GMT -> OS: Windows XP Professional, Service Pack: 2, Major: 5, Minor: 1, Build: 2600 (32-bit)
3/11/2010, 5:23:43 GMT -> System Language:[0x0409], User Language:[0x0409]
3/11/2010, 5:23:43 GMT -> IE 6 Support
3/11/2010, 5:23:43 GMT -> ComCtl32 version: 6.0
3/11/2010, 5:23:43 GMT -> IP Addresses:  XXX.XXX.XXX.100
3/11/2010, 5:23:43 GMT -> Loading C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
3/11/2010, 5:23:43 GMT -> Opened the product inventory at "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
3/11/2010, 5:23:43 GMT -> Account launching LiveUpdate is not a logged in user's account
3/11/2010, 5:23:43 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
3/11/2010, 5:23:43 GMT -> LiveUpdate flag value for this run is 0
3/11/2010, 5:23:43 GMT -> Leaving SetSequenceNumberEx(); retcode = 0
3/11/2010, 5:23:43 GMT -> LuComServer version: 3.3.0.85
3/11/2010, 5:23:43 GMT -> LiveUpdate Language: English
3/11/2010, 5:23:43 GMT -> LuComServer Sequence Number: 20090320
3/11/2010, 5:23:43 GMT -> OS: Windows XP Professional, Service Pack: 2, Major: 5, Minor: 1, Build: 2600 (32-bit)
3/11/2010, 5:23:43 GMT -> System Language:[0x0409], User Language:[0x0409]
3/11/2010, 5:23:43 GMT -> IE 6 Support
3/11/2010, 5:23:43 GMT -> ComCtl32 version: 6.0
3/11/2010, 5:23:43 GMT -> IP Addresses:  XXX.XXX.XXX.100
3/11/2010, 5:23:43 GMT -> Loading C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
3/11/2010, 5:23:43 GMT -> Opened the product inventory at "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
3/11/2010, 5:23:43 GMT -> Account launching LiveUpdate is not a logged in user's account
3/11/2010, 5:23:43 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
3/11/2010, 5:23:43 GMT -> LiveUpdate flag value for this run is 0
3/11/2010, 5:23:43 GMT -> Begin s32live1's DoOnRamp.
3/11/2010, 5:23:43 GMT -> LuComServer version: 3.3.0.85
3/11/2010, 5:23:43 GMT -> LiveUpdate Language: English
3/11/2010, 5:23:43 GMT -> LuComServer Sequence Number: 20090320
3/11/2010, 5:23:43 GMT -> OS: Windows XP Professional, Service Pack: 2, Major: 5, Minor: 1, Build: 2600 (32-bit)
3/11/2010, 5:23:43 GMT -> System Language:[0x0409], User Language:[0x0409]
3/11/2010, 5:23:43 GMT -> IE 6 Support
3/11/2010, 5:23:43 GMT -> ComCtl32 version: 6.0
3/11/2010, 5:23:43 GMT -> IP Addresses:  XXX.XXX.XXX.100
3/11/2010, 5:23:43 GMT -> Loading C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
3/11/2010, 5:23:43 GMT -> Opened the product inventory at "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
3/11/2010, 5:23:43 GMT -> Account launching LiveUpdate is not a logged in user's account
3/11/2010, 5:23:43 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
3/11/2010, 5:23:43 GMT -> LiveUpdate flag value for this run is 0
3/11/2010, 5:23:43 GMT -> Begin s32live1's LaunchAndWait.
3/11/2010, 5:23:45 GMT -> LuComServer version: 3.3.0.85
3/11/2010, 5:23:45 GMT -> LiveUpdate Language: English
3/11/2010, 5:23:45 GMT -> LuComServer Sequence Number: 20090320
3/11/2010, 5:23:45 GMT -> OS: Windows XP Professional, Service Pack: 2, Major: 5, Minor: 1, Build: 2600 (32-bit)
3/11/2010, 5:23:45 GMT -> System Language:[0x0409], User Language:[0x0409]
3/11/2010, 5:23:45 GMT -> IE 6 Support
3/11/2010, 5:23:45 GMT -> ComCtl32 version: 6.0
3/11/2010, 5:23:45 GMT -> IP Addresses:  XXX.XXX.XXX.100
3/11/2010, 5:23:45 GMT -> Loading C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
3/11/2010, 5:23:45 GMT -> Opened the product inventory at "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
3/11/2010, 5:23:45 GMT -> Account launching LiveUpdate is not a logged in user's account
3/11/2010, 5:23:45 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
3/11/2010, 5:23:45 GMT -> LiveUpdate flag value for this run is 0
3/11/2010, 5:23:45 GMT -> **** Starting a Silent LiveUpdate Session ****
3/11/2010, 5:23:45 GMT -> ***********************        Start of New LU Session        ***********************
3/11/2010, 5:23:45 GMT -> Legacy Command Line is: -a -s [-p"Avenge MicroDefs25 SavCorp10" -l"SymAllLanguages" -v"MicroDefsB.Aug"] [-p"Avenge MicroDefs25 SavCorp10" -l"SymAllLanguages" -v"MicroDefsB.CurDefs"] [-p"Symantec AntiVirus Corporate Client" -l"English" -v"10.1"]
3/11/2010, 5:23:45 GMT -> EVENT - SESSION START EVENT - The LiveUpdate session is running in Silent Mode.
3/11/2010, 5:23:45 GMT -> Check for updates to:  Product: LiveUpdate, Version: 3.3.0.85, Language: English.  Mini-TRI file name: liveupdate_3.3.0.85_english_livetri.zip
3/11/2010, 5:23:45 GMT -> Progress Update: TRYING_HOST: HostName: "Test LiveUpdate Server" URL: "ftp://test.com" HostNumber: 0
3/11/2010, 5:23:45 GMT -> Progress Update: TRIFILE_DOWNLOAD_START: Number of TRI files: 0 Downloading LiveUpdate catalog file
3/11/2010, 5:23:45 GMT -> LiveUpdate will download the first Mini-TRI file, liveupdate_3.3.0.85_english_livetri.zip
3/11/2010, 5:23:45 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
3/11/2010, 5:23:45 GMT -> Progress Update: PRE_CONNECT: Proxy: "(not-available)" Agent: "Symantec LiveUpdate" AccessType: 0x0      
3/11/2010, 5:23:45 GMT -> Progress Update: PROMPT_RAS_DIALUP:possibly prompting the RAS dialogue...
3/11/2010, 5:23:45 GMT -> Progress Update: CONNECTED: Proxy: "(not-available)" Agent: "IiY00y8Lrg88NZdzuQuHojZh2/EYX6YSwAAAAA" AccessType: 0x0      
3/11/2010, 5:23:45 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "ftp://test.com/liveupdate_3.3.0.85_english_livetri.zip", Estimated Size: 0, Destination Folder: "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads"
3/11/2010, 5:23:45 GMT -> Unable to find the property 'PREFERENCES\MAX_LIVETRI_SIZE' in settings file; using default: 1048576.

I don't think it's failing because it downloads some files. It just never processes them and stays locked.

Any concern about the user account message in the logs?

  Account launching LiveUpdate is not a logged in user's account
I do't think this is a issue because Liveupdate is not installed as looged in user account it is installed as a Local System Account.

You can try un-installing liveupdate
delete 
C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\

then re-install liveupdate.

We have removed and reinstalled everything related to SAV and Live Update 10 times now and nothing helps.

 Do you see any DCOM permission warning /errors in eventviewer or any other event logged during or after liveupdate ?