Endpoint Protection

Hello

We are using SEP 11.0.4014.26

We received this error today on our SBS 2008 server's application log:

The description for Event ID 59 from source LiveUpdate cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

C:\ProgramData\Symantec\LiveUpdate\Downloads\1242256104jtun_nav2k8ennful25.m25.seg1.zip

the message resource is present but the message is not found in the string/message table



Any ideas as to the cause ? and remedy ?

Thank you

Live Update doesn't appear to be updating virus definitions (at least, we also have BE Exec), since receiving the error in my original post. I should note that that is the first time I've ever seen that error. It came out of the blue on a server that's been running SEP ok for 2 months.

Any ideas as to the cause ? and remedy ?

Thank you

Hi have you tried manually launching liveupdate?

Check if you can manually update the SEP by start..run..luall.

If this doesnt work as well, you can refer to http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007100907303548


....Barkha

Seeing the same thing here on 5 out of 7 servers, these servers are all in different client locations. Logs show the following error:

Event ID 59

6004: Internal authentication failed for the C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\1242256104jtun_emt64nav2k8encful.m25.seg1.zip file. Run LiveUpdate again as the cause may have been a transmission error. If the error persists, contact your network administrator or LiveUpdate provider.

Perhaps another set of bad defs....

It looks like it was either a network blip, or a set of bad defs as Voodoo suggested. Have just got 15r3 virus defs pulled down automatically and installed.

Thanks for your replies

This error message continues to show up in our server log.  Any idea how to remedy?  I can not find the file referenced in the message.

Event Type: Error
Event Source: LiveUpdate
Event Category: None
Event ID: 59
Date: 6/15/2009
Time: 10:37:59 AM
User: NT AUTHORITY\SYSTEM
Computer: xxxxxxxxxx
Description:
The description for Event ID ( 59 ) in Source ( LiveUpdate ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: C:\Documents and Settings\All Users\ApplicationData\Symantec\LiveUpdate\Downloads\1242256104jtun_emt64nav2k8encful.m25.seg1.zip.

Please post the LiveUpdate logs, it Log.Liveupdate usually it is located at \Documents and Settings\All Users\Application Data\Symantec\LiveUpdate

Anyways, try to

1. Repair Liveupdate by going on to the Control Panel then repair the installation.
2. Internal Authentication Failed for the <path>\luadmin\temp\symxxxx.zip or geluxxx file. Run LiveUpdate again as the cause may have been a transmission error. If the error persists, please check SYSTEM account permissions on the path