Symantec Endpoint Protection 12.1 clients stop updating until rebooted.

Article:TECH171347  |  Created: 2011-10-07  |  Updated: 2012-11-20  |  Article URL
Article Type
Technical Solution



The Symantec Endpoint Protection client stops updating virus definitions. When the problem occurs, the Symantec Endpoint Protection Support Tool may report that the computer needs to be rebooted to delete several files, including files related to Symantec Endpoint Protection.

Example: C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Data\Definitions\IPSDefs\20110917.033\IDSxpx86.dll

Rebooting the computer or restarting SMC.exe fixes the problem. Attempting to delete the SEP files by hand results in an error message stating that the file is in use.


The issue has been fixed in SEP 12.1 RU1 MP1. Please install / migrate to this version after reviewing the supported migration paths.

Supplemental Materials


Article URL

Terms of use for this information are found in Legal Notices