Symantec Endpoint Protection processes and modules crash or will not start on Windows 7 SP1 32-bit when Citrix XenDesktop components are installed, such as (Desktop Delivery Controller, Virtual Desktop Agent, etc.)
The following Event ID 1000 errors seen in application log:
The Citrix Presentation Server API hooks attach to running processes and load a number of dll modules into the address space of the running application. This can cause problems for some applications which requires disabling the API hooks from attaching to those processes.
Exclude Citrix from attaching to the Symantec Endpoint Protection processes by following the instructions in the following Citrix document. Please ensure you backup the registry before making any changes:
It is recommended, on 64-bit machines, to add the exclusions to the 32-bit and 64-bit registry hives outlined in the document. Exclude the following files, others may be needed as well if you're seeing crashing of other applications or modules:
ccsvchst.exe, smc.exe, sesclu.exe, smcgui.exe
See related article regarding Symantec Endpoint Protection 11.x:
RTVScan.exe crashes on a Windows 2008 R2 64-bit Citrix XenApp 6 server