Video Screencast Help
Give us your opinion and win with Symantec! Please help us by taking this survey to tell us about your experience with Symantec Connect, so that we can continue to grow and improve.  Take the survey.

Error: LiveUpdate encountered one or more errors. Return code = 4

Created: 29 Apr 2011 | 5 comments
L K's picture

"Error: LiveUpdate encountered one or more errors. Return code = 4" in LiveUpdate status in Symantec Endpoint Protection Manager, but when I run C:\Program Files\Symantec\LiveUpdate\LUALL.EXE, SEPM updated without any errors.

Comments 5 CommentsJump to latest comment

Raja Mohammed's picture

Go to this link...

"Error: LiveUpdate encountered one or more errors. Return code = 4" in LiveUpdate status in Symantec Endpoint Protection Manager


Raja Mohd

Mithun Sanghavi's picture


Incase, the above steps haven't resolved your issue.

Could you upload the Log.liveupdate from

C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate

Mithun Sanghavi
Associate Security Architect


Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Rafeeq's picture

do u use proxy?

check your firewall if the management server is able to search the Symantec liveudpate server

that should be the issue.

jcocozzo's picture

I had a similar/same issue. LU would not run because I had the windows installer continually pop up trying to install SEPM. I had to repair the SEPM to get it working. I followed the steps in the link below.

You should only have to do the back up part of this page.

Preparing for Disaster Recovery.

Next, I ran a repair for both the SEP client and the SEP manager from Add/Remove programs or programs and features depending on what server you are running.

Mick2009's picture

Hi L K,

There are several possible causes. "Thumbs up" for Mithun's advice, above: it really would take a look at the log.liveupdate to determine which is affecting your SEPM, and then recommend a course of action.  For instance, if the error code in that log is 1603:

Scheduled LiveUpdate through the Symantec Endpoint Protection Manager console fails with an error Return code of 6013 (

Also: can you supply some details about your environment-?  Does this SEPM connect to Internet LiveUpdate sources, or from an internal LiveUpdate Administrator 2.x server?  Is there a proxy server between the SEPM and the LiveUpdate servers?  Was LU successfully working before a certain date/certain change was made-?

Thanks and best regards,


With thanks and best regards,