How to clear out corrupted definitions for a Symantec Protection Center and Symantec Endpoint Protection Client manually

Article:TECH98276  |  Created: 2009-01-23  |  Updated: 2010-01-23  |  Article URL http://www.symantec.com/docs/TECH98276
Article Type
Technical Solution

Product(s)

Environment

Languages

Problem



How to fix and rebuild corrupted definitions for a Symantec Protection Center and Symantec Endpoint Protection Client


Solution



For Windows 2003/XP
    1. Stop the Symantec Endpoint Protection Services:
      1. Click the Start button and then click Run
      2. Type services.msc and click OK
      3. Right-click Symantec Management Client and click Stop.
      4. Right-click Symantec Endpoint Protection and click Stop.
      5. Minimize the Services window
    2. Delete the data from the Definition folders:
      • Virus Definitions
        C:\Program Files\Common Files\Symantec Shared\VirusDefs\
        - Delete all files and subfolders
      • Delete the downloaded data in the c:\documents and settings\all users\application data\symantec\liveupdate\downloads
    3. Delete the data from the registry:
      1. Click the Start button and then click Run
      2. Type regedit and click OK
      3. Navigate to:
        HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\SharedDefs
      4. Delete the following values:
        1. SRTSP
        2. NAVCORP_70
        3. DEFWATCH_10
        4. SepCache3
        5. SepCache2
        6. SepCache1
    4. Restart the Symantec Endpoint Protection Services:
      1. Maximize the Services window.
      2. Right-click Symantec Management Client service and click Start.
      3. Right-click Symantec Endpoint Protection service and click Start.
For Windows Vista/Server 2008
    1. Stop the Symantec Endpoint Protection Services:
      1. Click the Start button.
      2. In the search bar type services and then press Enter.
        Note: If the User Account Control prompt pops up click Continue.
      3. Right-click Symantec Management Client and click Stop.
      4. Right-click Symantec Endpoint Protection and click Stop.
    2. Delete the data from the Definition folders:
      • Virus Definitions
        C:\ProgramData\Symantec\Definitions\VirusDefs\
        - Delete all files and subfolders
    3. Delete the data from the registry:
      1. Click the Start button
      2. Type regedit and press Enter
      3. Navigate to:
        HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\SharedDefs
      4. Delete the following values:
        1. SRTSP
        2. NAVCORP_70
        3. DEFWATCH_10
        4. SepCache3
        5. SepCache2
        6. SepCache1
    4. Restart the Symantec Endpoint Protection Services:
      1. Maximize the Services window.
      2. Right-click Symantec Management Client and click Start.
      3. Right-click Symantec Endpoint Protection and click Start.



    Technical Information
    How to disable Tamper Protection:
      1. Open and log into the Symantec Endpoint Protection Manager console
      2. Click the Clients view.
      3. Select the appropriate group.
      4. Under the Policies tab, in the "Settings" section, click General Settings.
      5. Under the Tamper Protection tab, uncheck Protect Symantec security software from being tampered with or shut down.
      6. Click OK.

    Legacy ID



    2009122400332648


    Article URL http://www.symantec.com/docs/TECH98276


    Terms of use for this information are found in Legal Notices

    Please Sign In

    Login using SymAccount.

    Knowledge Base Search

    Knowledge Base Search

    Rate this Article

    Help us improve your support experience.

    MySymantec

    MySymantec

    Contacting Support

    Contacting Support