This is most likely the result of a default configured antivirus scan on the login server which has the time incorrectly set by one hour as someone failed to change it for the daylight savings time change.
In other words, several server admin mistakes lumped together. But, that's what you get with remote support from China.