Yes I saw similar when I installed SAM - and like your AV comment can confirm SEP 11.0.5002.333 is installed.
Also noticed one of the services didn't restart cleanly and the web optimisation timed out.
Fine when I re-ran the install with SEP disabled.