Endpoint Protection Small Business Edition

 View Only
Back to discussions
Expand all | Collapse all

Symantec Endpoint Protection 12.1 failed to update virus defs

  • 1.  Symantec Endpoint Protection 12.1 failed to update virus defs

    Posted Jan 16, 2012 09:41 AM

    I have downloaded and installed today a trial version of Symantec Endpoint Protection 12.1 Small Business Edition on two PC's:

    • Windows XP SP 3 Russian
    • WIndows 7 Russian

    Both PC on same network. At Windows 7 everything is OK, but at XP i have a problem with updating of Virus Definitions with Live Update. Always get en error (russian language):

    Обнаружена ошибка при  распаковке файла C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Data\LUE\Downloads\1323894943jtun_sep12ennful26.m26.
    Обнаружена ошибка при обработке обновления для Описания вирусов и программ-шпионов для Win32 (концентратор).
    Не удалось установить обновление для Описания вирусов и программ-шпионов для Win32.
    Не удалось установить обновление для Описания вирусов и программ-шпионов для Win32 (концентратор).
     
    Wich can be translated as:
    There was a problem extracting the file C: \ Documents and Settings \ All Users \ Application Data \ Symantec \ Symantec Endpoint Protection \ 12.1.1000.157.105 \ Data \ LUE \ Downloads \ 1323894943jtun_sep12ennful26.m26.
    An error was detected while processing an update for virus definitions and spywarefor Win32 (hub).
    Unable to install update for virus definitions and spyware for Win32.
    Unable to install update for virus definitions and spyware for Win32 (hub).

     

    There are 30 GB of free disk space on XP. 

    I tried to uninstall SEP, then manualy delete every folder / registry entry containing string "symantec" - no effect. 

    How to fix it?

     

    Fragment of log.lue file:

    ****************************************************************************************************
    Symantec LiveUpdate Engine 2.0.2.5   (Release)
    OS: Windows XP Professional  32-bit 
     
    VerInfo: 5.1 
     
    ServicePack: 3.0
    LanguageID: 00000419
    WinHttp.dll Version: 5.1.2600.5868
    ----------------------------------------------------------------------------------------------------
    Session started at: 2012/01/16 18:15:21.375    (UTC +04:00)
    ProcessId: 1700, ThreadId: 3592, SessionId: 4
    Machine ID: 6476D7C8-6001-07D4-E2E2-820CC87B04F7
    Agent Field: SEP/12.1.1000.157 MID/{6476D7C8-6001-07D4-E2E2-820CC87B04F7} SID/4
    ----------------------------------------------------------------------------------------------------
      Component: Moniker: {20209388-19DA-443e-ABC2-A706D2AAF9E9}, P: SESC AntiVirus Client Win32, V: 12.1, L: Russian.
      Component: Moniker: {263395A0-D3D8-4be4-80B5-202C94EF4AA0}, P: SEPC Iron Settings v12.1, V: MicroDefsB.CurDefs, L: SymAllLanguages.
      Component: Moniker: {31D8C93E-8DB2-4eeb-8D75-87FD92F1C62C}, P: SEPC CIDS Signatures v12.1, V: MicroDefsB.Jan, L: SymAllLanguages.
      Component: Moniker: {535CB6A4-441F-4e8a-A897-804CD859100E}, P: SEPC Virus Definitions Win32 v12.1, V: MicroDefsB.CurDefs, L: SymAllLanguages.
      Component: Moniker: {55DE35DC-862A-44c9-8A2B-3EF451665D0A}, P: SEPC CIDS Signatures v12.1, V: MicroDefsB.CurDefs, L: SymAllLanguages.
      Component: Moniker: {6AAE5D6B-C70C-4cdf-96C9-110AA1378E8C}, P: SEPC Virus Definitions Win32 v12.1, V: MicroDefsB.Error, L: SymAllLanguages.
      Component: Moniker: {810D5A61-809F-49c2-BD75-177F0647D2BA}, P: SEPC Iron Revocation List v12.1, V: MicroDefsB.CurDefs, L: SymAllLanguages.
      Component: Moniker: {B6DC6C8F-46FA-40c7-A806-B669BE1D2D19}, P: SEPC Submission Control Data, V: 12.1, L: SymAllLanguages.
      Component: Moniker: {D6AEBC07-D833-485f-9723-6C908D37F806}, P: SEPC Behavior And Security Heuristics v12.1, V: MicroDefsB.CurDefs, L: SymAllLanguages.
      Component: Moniker: {EDBD3BD0-8395-4d4d-BAC9-19DD32EF4758}, P: SEPC Iron Whitelist v12.1, V: MicroDefsB.CurDefs, L: SymAllLanguages.
      OnNotify() method for callback {EDBD3BD0-BEEF-4d4d-BAC9-19DD32EF4758} returned 0x0
      OnNotify() method for callback {2F090208-20DC-42f0-BBD8-B68B472F7215} returned 0x0
      OnNotify() method for callback {72DA128F-2591-43f2-B272-29DA5452A197} returned 0x0
      OnNotify() method for callback {810D5A61-BEEF-49c2-BD75-177F0647D2BA} returned 0x0
      OnNotify() method for callback {B6DC6C8F-BEEF-40c7-A806-B669BE1D2D19} returned 0x0
      OnNotify() method for callback {263395A0-BEEF-4be4-80B5-202C94EF4AA0} returned 0x0
      OnNotify() method for callback {511C2222-DEFD-22EE-B154-4A6A546B9793} returned 0x0
      Server selection complete. Server is HTTP://liveupdate.symantecliveupdate.com/ on port 80.
      OnNotify() method for callback {72DA128F-2591-43f2-B272-29DA5452A197} returned 0x0
      OnNotify() method for callback {72DA128F-2591-43f2-B272-29DA5452A197} returned 0x0
    * Decompression failed for package C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Data\LUE\Downloads\1323894943jtun_sep12ennful26.m26 to directory C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Data\LUE\Downloads\Patch1860
    * Install Skipped code set for moniker {6AAE5D6B-C70C-4cdf-96C9-110AA1378E8C}, package 1323894943jtun_sep12ennful26.m26, error while decompressing.
    * Deleting package C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Data\LUE\Downloads\1323894943jtun_sep12ennful26.m26 in directory C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Data\LUE\Downloads\Patch1860 due to decompression failure.
      OnNotify() method for callback {EDBD3BD0-BEEF-4d4d-BAC9-19DD32EF4758} returned 0x0
      OnNotify() method for callback {2F090208-20DC-42f0-BBD8-B68B472F7215} returned 0x0
    * Inventory SetAbort called on Moniker {535CB6A4-441F-4e8a-A897-804CD859100E} (Inventory Module), with abort code 500
    * Inventory SetAbort called on Moniker {6AAE5D6B-C70C-4cdf-96C9-110AA1378E8C} (Inventory Module), with abort code 500
    * Inventory SetAbort called on Moniker {535CB6A4-441F-4e8a-A897-804CD859100E} (Inventory Module), with abort code 500
    * Inventory SetAbort called on Moniker {6AAE5D6B-C70C-4cdf-96C9-110AA1378E8C} (Inventory Module), with abort code 500
    * OnNotify() method for callback {72DA128F-2591-43f2-B272-29DA5452A197} failed; err = 0x80004005
    * Inventory SetAbort called on Moniker {535CB6A4-441F-4e8a-A897-804CD859100E} (Inventory Module), with abort code 517
    * Inventory SetAbort called on Moniker {6AAE5D6B-C70C-4cdf-96C9-110AA1378E8C} (Inventory Module), with abort code 517
    * Inventory SetAbort called on Moniker {535CB6A4-441F-4e8a-A897-804CD859100E} (Inventory Module), with abort code 517
    * Inventory SetAbort called on Moniker {6AAE5D6B-C70C-4cdf-96C9-110AA1378E8C} (Inventory Module), with abort code 517
    * Callback {72DA128F-2591-43f2-B272-29DA5452A197} is a PostSession callback. Callback Failed. Result -2147467259
      OnNotify() method for callback {810D5A61-BEEF-49c2-BD75-177F0647D2BA} returned 0x0
      OnNotify() method for callback {B6DC6C8F-BEEF-40c7-A806-B669BE1D2D19} returned 0x0
      OnNotify() method for callback {263395A0-BEEF-4be4-80B5-202C94EF4AA0} returned 0x0
      OnNotify() method for callback {511C2222-DEFD-22EE-B154-4A6A546B9793} returned 0x0
    * Update Failed - PostSession for moniker {535CB6A4-441F-4e8a-A897-804CD859100E}
      Update for moniker: {535CB6A4-441F-4e8a-A897-804CD859100E}, P: SEPC Virus Definitions Win32 v12.1, V: MicroDefsB.CurDefs, L: SymAllLanguages, package: 1326644544jtun_sep12enncur26.m26, SeqName: CurDefs, SeqNum: 120115009, has update status code: 208
    * Reporting error: 0x80004005 Update failed PVL=SEPC Virus Definitions Win32 v12.1 MicroDefsB.CurDefs SymAllLanguages
    * PostSession Callbacks Failed. Update status code for moniker {535CB6A4-441F-4e8a-A897-804CD859100E}, P: SEPC Virus Definitions Win32 v12.1, V: MicroDefsB.CurDefs, L: SymAllLanguages is: 0x      D0.
      Update for moniker: {6AAE5D6B-C70C-4cdf-96C9-110AA1378E8C}, P: SEPC Virus Definitions Win32 v12.1, V: MicroDefsB.Error, L: SymAllLanguages, package: 1323894943jtun_sep12ennful26.m26, SeqName: HubDefs, SeqNum: 111214009, has update status code: 201
    * Reporting error: 0xFFFFFF00 Update failed PVL=SEPC Virus Definitions Win32 v12.1 MicroDefsB.Error SymAllLanguages
    * PostSession Callbacks Failed. Update status code for moniker {6AAE5D6B-C70C-4cdf-96C9-110AA1378E8C}, P: SEPC Virus Definitions Win32 v12.1, V: MicroDefsB.Error, L: SymAllLanguages is: 0x      C9.
      ***** Session Results *****
      Total Updates Available: 2
      Total Updates Succeeded: 0
      Total Updates Succeeded - Reboot Req: 0
      Total Updates Skipped: 0
      Total Updates Failed: 2
      RunLiveUpdate result code: 0x00000000
      Session max recursion count = 2
      Error report submitted
    ----------------------------------------------------------------------------------------------------
    Session ended at: 2012/01/16 18:19:19.187    (UTC +04:00)
    ****************************************************************************************************
     
     


  • 2.  RE: Symantec Endpoint Protection 12.1 failed to update virus defs

    Broadcom Employee
    Posted Jan 19, 2012 09:11 AM

    Hi,

    Will it be possible to check by following way

    1) Uninstall SEP

    2) Uninstall SP3

    3) Install SEP then SP3.

    Let me know if it worked.

    What's your IE version ?



  • 3.  RE: Symantec Endpoint Protection 12.1 failed to update virus defs

    Posted Jan 20, 2012 09:13 AM

    Hi! I'm afraid not.

    IE 8.0.6001.18702