Endpoint Protection

 View Only
  • 1.  deleted imp DIR when troubleshooting SEPM not updating virus definitions

    Posted May 14, 2014 03:25 PM

    While trying to troubleshooting why SEPM in 12.1.4 was not updating virus definitions, I came across an article that said to try deleting existing definitions. So I followed the instructions in: http://www.symantec.com/business/support/index?page=content&id=TECH166923

    However I misread STEP 3 and deleted folders: {535CB6A4- and {07B590B3-   instead of deleting numbered or TMP folders inside those folders. I am not sure what the ramifications of this are and I am not sure how to recover those directories either. The only thing I can do is restore the VM from a snapshot of an earlier date.

    Is there an easy fix for what I might have screwed up or should I just restore the entire VM from backup?



  • 2.  RE: deleted imp DIR when troubleshooting SEPM not updating virus definitions

    Posted May 14, 2014 03:27 PM

    It's probably quickest to restore from backup



  • 3.  RE: deleted imp DIR when troubleshooting SEPM not updating virus definitions

    Posted May 14, 2014 03:49 PM

    Thanks Brian. Any idea what those folders are for or what I broke by deleting them?



  • 4.  RE: deleted imp DIR when troubleshooting SEPM not updating virus definitions

    Posted May 14, 2014 03:55 PM

    They hold the content revisions. I can't say for sure exactly what it will break but the SEPM distributes those defs to clients so if they don't exist, clients won't update. It may be as simple as re-creating them but I'm not sure if I'd take the chance, especially if you have a backup.



  • 5.  RE: deleted imp DIR when troubleshooting SEPM not updating virus definitions

    Posted May 14, 2014 05:08 PM

    Brain, Just went to restore the VM and hit a road block. Turns out my snapshot schedule was not configred for that server so I do not have a snapshot of the VM. Thats really bad. 

     

    Anyone have any ideas on what I can do to recover from this? Can I do a repair of the installation? Can I just recreate?



  • 6.  RE: deleted imp DIR when troubleshooting SEPM not updating virus definitions

    Posted May 15, 2014 08:15 AM

    Looks like those folders just get recreated. I downloaded a jdb file to see what happens and they were back.



  • 7.  RE: deleted imp DIR when troubleshooting SEPM not updating virus definitions

    Posted May 15, 2014 08:24 AM

    So they updated?