Only 32 Bit Antivirus / Antispyware Definitions are not updating on the 32 Bit / 64 Bit Operating System.
| Article:TECH122857 | | | Created: 2010-01-29 | | | Updated: 2012-02-27 | | | Article URL http://www.symantec.com/docs/TECH122857 |
Problem
Symantec Endpoint Protection Manager (SEPM) is not up to date and is not updating 32 bit Antivirus/Antispyware Definitions (on 32 bit / 64 bit Operating Systems)
Symptoms
32 Bit Antivirus/Antispyware Definitions are not updating.
Solution
If using a 64 bit Operating System, follow the steps below (SEP 11.x):
- Open the Registry Editor on the machine where the SEPM is installed.
- Go to HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\InstalledApps

- On the right-hand side, look for the following String entries: SymcData-sesmVirDef32, SymcData-sesmIPSdef32, SymcData-sesmIPSdef64 and SymcData-sesmVirDef64
- For the following entries, check the value data and confirm that they read as follows:
- (Windows 2003) For SymcData-sesmVirDef32 and SymcData-sesmIPSdef32, they always should look as below:
C:\Program Files\Common Files\Symantec Shared\SymcData\sesmvirdef32
C:\Program Files\Common Files\Symantec Shared\SymcData\sesmipsdef32
- (Windows 2003) For SymcData-sesmVirDef64 and SymcData-sesmIPSdef64, they always should look as below:
C:\Program Files\Common Files\Symantec Shared\SymcData\sesmvirdef64
C:\Program Files\Common Files\Symantec Shared\SymcData\sesmipsdef64
- (Windows 2008) For SymcData-sesmVirDef32 and SymcData-sesmIPSdef32, they always should look as below:
C:\Program Data\Symantec\Definitions\SymcData\sesmvirdef32
C:\Program Data\Symantec\Definitions\SymcData\sesmipsdef32
- (Windows 2008) For SymcData-sesmVirDef64 and SymcData-sesmIPSdef64, they always should look as below:
C:\Program Data\Symantec\Definitions\SymcData\sesmvirdef64
C:\Program Data\Symantec\Definitions\SymcData\sesmipsdef64
- (Windows 2003) For SymcData-sesmVirDef32 and SymcData-sesmIPSdef32, they always should look as below:
- If the value data for these String entries does not match what is described above, modify the String and adjust accordingly
- Restart SEPM service.
- Start > Run > LUALL
LiveUpdate will download 32-bit definitions correctly.
If using 32 bit Operating System, follow the steps below (SEP 11.x):
- On the machine that has the SEPM installed, open the Registry Editor
- Go to HKEY_LOCAL_MACHINE\SOFTWARE\symantec\InstalledApps

- On the right-hand side, look for the following String entries: SymcData-sesmvirdef32, SymcData-sesmipsdef32, SymcData-sesmipsdef64 and SymcData-sesmvirdef64
- For the following entries, check the value data and confirm that they read as follows:
- (Windows 2003) For SymcData-sesmVirDef32 and SymcData-sesmIPSdef32, they always should look as below:
C:\Program Files\Common Files\Symantec Shared\SymcData\sesmvirdef32
C:\Program Files\Common Files\Symantec Shared\SymcData\sesmipsdef32
- (Windows 2003) For SymcData-sesmVirDef64 and SymcData-sesmIPSdef64, they always should look as below:
C:\Program Files\Common Files\Symantec Shared\SymcData\sesmvirdef64
C:\Program Files\Common Files\Symantec Shared\SymcData\sesmipsdef64
- (Windows 2008) For SymcData-sesmVirDef32 and SymcData-sesmIPSdef32, they always should look as below:
C:\ProgramData\Symantec\Definitions\SymcData\sesmvirdef32
C:\ProgramData\Symantec\Definitions\SymcData\sesmipsdef32
- (Windows 2008) For SymcData-sesmVirDef64 and SymcData-sesmIPSdef64, they always should look as below:
C:\ProgramData\Symantec\Definitions\SymcData\sesmvirdef64
C:\ProgramData\Symantec\Definitions\SymcData\sesmipsdef64
- (Windows 2003) For SymcData-sesmVirDef32 and SymcData-sesmIPSdef32, they always should look as below:
- If the value data for these String entries does not match what is described above, modify the String and adjust accordingly
- Restart SEPM service.
- Start > Run > LUALL
LiveUpdate will download 32-bit definitions correctly.
If using a 64 bit Operating System, follow the steps below (SEP 12.1.x):
- Open the Registry Editor on the machine where the SEPM is installed.
- Go to HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\InstalledApps
- On the right-hand side, look for the following String entries: SymcData-spcVirDef32, SymcData-spcIPSdef32, SymcData-sesmIPSdef64 and SymcData-spcVirDef64
- For the following entries, check the value data and confirm that they read as follows:
- (Windows 2003) For SymcData-spcVirDef32 and SymcData-sesmIPSdef32, they always should look as below:
C:\Program Files\Common Files\Symantec Shared\SymcData\spcVirDef32
C:\Program Files\Common Files\Symantec Shared\SymcData\sesmIPSdef32
- (Windows 2003) For SymcData-sesmVirDef64 and SymcData-sesmIPSdef64, they always should look as below:
C:\Program Files\Common Files\Symantec Shared\SymcData\spcVirDef64
C:\Program Files\Common Files\Symantec Shared\SymcData\sesmIPSdef64
- (Windows 2008) For SymcData-sesmVirDef32 and SymcData-sesmIPSdef32, they always should look as below:
C:\Program Data\Symantec\Definitions\SymcData\spcVirDef32
C:\Program Data\Symantec\Definitions\SymcData\sesmIPSdef32
- (Windows 2008) For SymcData-sesmVirDef64 and SymcData-sesmIPSdef64, they always should look as below:
C:\Program Data\Symantec\Definitions\SymcData\spcVirDef64
C:\Program Data\Symantec\Definitions\SymcData\sesmIPSdef64
- (Windows 2003) For SymcData-spcVirDef32 and SymcData-sesmIPSdef32, they always should look as below:
- If the value data for these String entries does not match what is described above, modify the String and adjust accordingly
- Restart SEPM service.
- Start > Run > LUALL
LiveUpdate will download 32-bit definitions correctly.
If using 32 bit Operating System, follow the steps below (SEP 12.1.x):
- On the machine that has the SEPM installed, open the Registry Editor
- Go to HKEY_LOCAL_MACHINE\SOFTWARE\symantec\InstalledApps
- On the right-hand side, look for the following String entries: SymcData-spcVirDef32, SymcData-sesmIPSdef32, SymcData-sesmIPSdef64 and SymcData-spcVirDef64
- For the following entries, check the value data and confirm that they read as follows:
- (Windows 2003) For SymcData-spcVirDef32 and SymcData-sesmIPSdef32, they always should look as below:
C:\Program Files\Common Files\Symantec Shared\SymcData\spcVirDef32
C:\Program Files\Common Files\Symantec Shared\SymcData\sesmIPSdef32
- (Windows 2003) For SymcData-spcVirDef64 and SymcData-sesmIPSdef64, they always should look as below:
C:\Program Files\Common Files\Symantec Shared\SymcData\spcVirDef64
C:\Program Files\Common Files\Symantec Shared\SymcData\sesmIPSdef64
- (Windows 2008) For SymcData-spcVirDef32 and SymcData-sesmIPSdef32, they always should look as below:
C:\Program Data\Symantec\Definitions\SymcData\spcVirDef32
C:\Program Files\Symantec\Definitions\SymcData\sesmIPSdef32
- (Windows 2008) For SymcData-spcVirDef64 and SymcData-sesmIPSdef64, they always should look as below:
C:\Program Data\Symantec\Definitions\SymcData\spcVirDef64
C:\Program Data\Symantec\Definitions\SymcData\sesmIPSdef64
- (Windows 2003) For SymcData-spcVirDef32 and SymcData-sesmIPSdef32, they always should look as below:
- If the value data for these String entries does not match what is described above, modify the String and adjust accordingly
- Restart SEPM service.
- Start > Run > LUALL
LiveUpdate will download 32-bit definitions correctly.
If the above steps do not resolve the issue, uninstall and re-install Symantec Endpoint Protection Manager.
The following articles will help should this be necessary:
About uninstalling Symantec Endpoint Protection Manager
Best Practices for Disaster Recovery with the Symantec Endpoint Protection Manager
|
|
Legacy ID
2010012923154448
Article URL http://www.symantec.com/docs/TECH122857
Terms of use for this information are found in Legal Notices









Thank you.