Symantec Endpoint Protection Manager is unable to update Virus Definitions via JDB with an Error: "Failed to initialize COM" in SesmLu.log

Article:TECH147268  |  Created: 2010-12-31  |  Updated: 2013-06-19  |  Article URL http://www.symantec.com/docs/TECH147268
Article Type
Technical Solution

Product(s)

Issue



The Symantec Endpoint Protection Manager (SEPM) server cannot run LiveUpdate.  The standalone AntiVirus updater (.JDB file) is being used to update Virus Definitions.

However, when placing the JDB in the incoming folder (by default is C:\Program files\Symantec\Symantec Endpoint Protection Manager\data\inbox\content\incoming), it does not get processed.  The SEPM is not updated.


Error



The SesmLu.log contains:

 

[0b28:0f64] Dec 03 10, 04:16:53 AM INFO(High)  SesmLu: ***************************************************************************************************************
[0b28:0f64] Dec 03 10, 04:16:53 AM INFO(High)  SesmLu: ****                                Starting New SesmLu Session                                            ****
[0b28:0f64] Dec 03 10, 04:16:53 AM INFO(High)  SesmLu: **** Platform: Microsoft Windows Server 2003
[0b28:0f64] Dec 03 10, 04:16:53 AM INFO(High)  SesmLu: **** SesmLu Version: 11.0.6100.645
[0b28:0f64] Dec 03 10, 04:16:53 AM INFO(High)  SesmLu: ***************************************************************************************************************
[0b28:0f64] Dec 03 10, 04:16:53 AM INFO(Med)  SesmContentCatalog: Entered Init().
[0b28:0f64] Dec 03 10, 04:16:53 AM INFO(Low)  ProductUtil: Data root = D:\Program Files\Symantec\Symantec Endpoint Protection Manager\data
[0b28:0f64] Dec 03 10, 04:17:03 AM ERROR  SesmLu: CoCreateInstance failed to create an IluProductReg instance: at .\SesmLu.cpp[677]
[0b28:0f64] Dec 03 10, 04:17:03 AM ERROR  SesmLu: Unitilizing COM. at .\SesmLu.cpp[678]
[0b28:0f64] Dec 03 10, 04:17:03 AM ERROR  SesmLu: Failed to initialize COM. Aborting. at .\SesmLu.cpp[144]
[0b28:0f64] Dec 03 10, 04:17:03 AM ERROR  SesmLu: Failed to initialize SesmLu. Aborting. at .\SesmLu.cpp[308]
[0b28:0f64] Dec 03 10, 04:17:03 AM INFO(Med)  SesmContentCatalog: Entered Init().
[0b28:0f64] Dec 03 10, 04:17:03 AM ERROR  SesmLu: Failed to initialize COM. Aborting. at .\SesmLu.cpp[144]
[0b28:0f64] Dec 03 10, 04:17:03 AM ERROR  SesmLu: Failed to initialize SesmLu. Aborting. at .\SesmLu.cpp[308]
 


Solution



For the SEPM 11.X, which has internet access:

1. Uninstall LiveUpdate via Add/Remove Programs and then reinstall by running Lusetup.exe from the SEP installation media, or downloading the latest client from the article referenced below.

2. Open a command line, Start > Run > CMD

Navigate to C:\Program Files\Symantec\Symantec Endpoint Protection Manager\Bin

3.  Type in the following commands

lucatalog.exe -cleanup

lucatalog.exe -update

4.  The .JDB should now be able to update the SEPM's Virus Definitions.

 

 

For the SEPM 12.X, which has internet access:

1. Uninstall LiveUpdate via Add/Remove Programs and then reinstall by running Lusetup.exe from the SEP installation media, or downloading the latest client from the article referenced below.

2. Open a command line, Start > Run > CMD

Navigate to C:\Program Files\Symantec\Symantec Endpoint Protection Manager\Bin

3.  Type in the following commands

lucatalog.exe -cleanup

lucatalog.exe -forcedupdate

 

4.  The .JDB should now be able to update the SEPM's Virus Definitions.

 





Article URL http://www.symantec.com/docs/TECH147268


Terms of use for this information are found in Legal Notices