Open the Registry Editor on the machine where the SEPM is installed.
Go to HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\InstalledApps
On the right-hand side, look for the following String entries: SymcData-spcVirDef32, SymcData-spcIPSdef32, SymcData-sesmIPSdef64 and SymcData-spcVirDef64
For the following entries, check the value data and confirm that they read as follows:
- (Windows 2003) For SymcData-spcVirDef32 and SymcData-sesmIPSdef32, they always should look as below:
  C:\Program Files\Common Files\Symantec Shared\SymcData\spcVirDef32
  C:\Program Files\Common Files\Symantec Shared\SymcData\sesmIPSdef32
- (Windows 2003) For SymcData-sesmVirDef64 and SymcData-sesmIPSdef64, they always should look as below:
  C:\Program Files\Common Files\Symantec Shared\SymcData\spcVirDef64
  C:\Program Files\Common Files\Symantec Shared\SymcData\sesmIPSdef64
- (Windows 2008) For SymcData-sesmVirDef32 and SymcData-sesmIPSdef32, they always should look as below:
  C:\Program Data\Symantec\Definitions\SymcData\spcVirDef32
  C:\Program Data\Symantec\Definitions\SymcData\sesmIPSdef32
- (Windows 2008) For SymcData-sesmVirDef64 and SymcData-sesmIPSdef64, they always should look as below:
  C:\Program Data\Symantec\Definitions\SymcData\spcVirDef64
  C:\Program Data\Symantec\Definitions\SymcData\sesmIPSdef64
If the value data for these String entries does not match what is described above, modify the String and adjust accordingly
Restart SEPM service.
Start > Run > LUALL
LiveUpdate will download 32-bit definitions correctly.

If using 32 bit Operating System, follow the steps below (SEP 12.1.x):

On the machine that has the SEPM installed, open the Registry Editor
Go to HKEY_LOCAL_MACHINE\SOFTWARE\symantec\InstalledApps
On the right-hand side, look for the following String entries: SymcData-spcVirDef32, SymcData-sesmIPSdef32, SymcData-sesmIPSdef64 and SymcData-spcVirDef64
For the following entries, check the value data and confirm that they read as follows:
- (Windows 2003) For SymcData-spcVirDef32 and SymcData-sesmIPSdef32, they always should look as below:
  C:\Program Files\Common Files\Symantec Shared\SymcData\spcVirDef32
  C:\Program Files\Common Files\Symantec Shared\SymcData\sesmIPSdef32
- (Windows 2003) For SymcData-spcVirDef64 and SymcData-sesmIPSdef64, they always should look as below:
  C:\Program Files\Common Files\Symantec Shared\SymcData\spcVirDef64
  C:\Program Files\Common Files\Symantec Shared\SymcData\sesmIPSdef64
- (Windows 2008) For SymcData-spcVirDef32 and SymcData-sesmIPSdef32, they always should look as below:
  C:\Program Data\Symantec\Definitions\SymcData\spcVirDef32
  C:\Program Files\Symantec\Definitions\SymcData\sesmIPSdef32
- (Windows 2008) For SymcData-spcVirDef64 and SymcData-sesmIPSdef64, they always should look as below:
  C:\Program Data\Symantec\Definitions\SymcData\spcVirDef64
  C:\Program Data\Symantec\Definitions\SymcData\sesmIPSdef64
If the value data for these String entries does not match what is described above, modify the String and adjust accordingly
Restart SEPM service.
Start > Run > LUALL
LiveUpdate will download 32-bit definitions correctly.

Prachand MCSE-2012 Symantec Technical Specialist (SCTS)

SOLUTION

Mithun Sanghavi Symantec Employee Technical Support Accredited

How to clean the previous virus definition in sep12.5 - Comment:25 Apr 2012 : Link

Hello,

How many machines do you want to clean the Definitions on ?

If you want to perform this on small number of machines then you could download the latest version of Intelligent Updater from this page Daily Certified definitions for Symantec Endpoint Protection / Symantec Antivirus Corporate Edition.

Check this Article:

http://www.symantec.com/docs/TECH102606

If you would like to perform this activity on a huge number of machines, then you could also try Rollback of Virus definitions -

How to Backdate Virus Definitions in Symantec Endpoint Protection Manager

http://www.symantec.com/docs/TECH102935

Symantec Endpoint Protection 12.1: How to roll back the BASH definitions to a known good version

http://www.symantec.com/docs/HOWTO53366

Hope that helps!!

Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | MCTS | STS | ITIL v3

Twitter: @mithun_sanghavi

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<&a

How to clean the previous virus definition in sep12.5

Comments 6 Comments • Jump to latest comment

Would you like to reply?

Links