Video Screencast Help
Search Video Help Close Back
to help
Not able to make it to Vision this year? Get a sampling in the Best of Vision on Demand group.

LiveUpdate returned a non-critical error

Updated: 03 Apr 2012 | 38 comments
sumitgupta786's picture
0 0 Votes
Login to vote
This issue has been solved. See solution.

 

 

Time Severity Event Type Description
2/5/2012 16:14 Warning LiveUpdate manual task failed LiveUpdate failed.
2/5/2012 16:14 Warning LiveUpdate All process failed to launch LiveUpdate encountered one or more errors. Return code = 4.

 Yesterday I was faced above live update issue but on that time I have got resolution but today I have still not recieve update and below event have generated on server. Pls help

LiveUpdate returned a non-critical error. Available content updates may have failed to install.

Comments

pete_4u2002's picture
06
Feb
2012
1 Vote +1
Login to vote

check this link, if it does

check this link, if it does not help pass on log.liveupdate.,

https://www-secure.symantec.com/connect/forums/sepm-liveupdate-has-error-liveupdate-encountered-one-or-more-errors-return-code-4

 

Possible Causes: Legacy proxy settings in the registry still persist after environmental changes on client machine.

Solution

The legacy proxy settings can be removed by performing the following steps:

1.   Open the registry (Start->Run->type "regedit").

2.  Go to HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\InternetSettings\connections

3.  Delete the registry keys "DefaultConnectionSettings" and "SavedLegacySettings".

4.  Reboot the machine.

Note:  These registry keys will automatically regenerate after reboot of machine.

 

Also, this also could be caused due to incorrect proxy server information in the following registry location: HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\InternetSettings

Removing the incorrect proxy info from this key and then rebooting allowed the client to communicate normally.

One important thing to keep in mind is that any incorrect proxy information must also be removed from the following two locations as well:

HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\DefaultConnectionSettings HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings

If the settings are not removed from these two keys, they will repopulate the Internet Settings key after every reboot.

Remove the incorrect proxy information from all 3 registry locations noted above, then reboot.

 

Just to add, in many of my cases, where was an issue with the System Account at User Proxy Level. They had to Bypass the Proxy on the server.

sumitgupta786's picture
07
Feb
2012
0 Votes 0
Login to vote

Hi- Can I change/delete in

Hi- Can I change/delete in the registry on Server??

Regard

Sumit G.

Swapnil's picture
06
Feb
2012
0 Votes 0
Login to vote

Hello Sumit ,   Is this

Hello Sumit ,

 

Is this version 12.1 after upgrade ?

Swapnil

SOC Team .

Please don't forget to mark your thread solved with whatever answer helped you.

Swapnil's picture
06
Feb
2012
0 Votes 0
Login to vote

Could you please post

Could you please post log.liveupdate in zip format ?

Swapnil

SOC Team .

Please don't forget to mark your thread solved with whatever answer helped you.

Swapnil's picture
06
Feb
2012
0 Votes 0
Login to vote

In event id do you see sesclu

In event id do you see sesclu 13

Swapnil

SOC Team .

Please don't forget to mark your thread solved with whatever answer helped you.

sumitgupta786's picture
07
Feb
2012
0 Votes 0
Login to vote

Hi- Sep Server version is

Hi- Sep Server version is 11.0.6005. Share the path of  log.liveupdate

Regard

Sumit G.

sumitgupta786's picture
07
Feb
2012
0 Votes 0
Login to vote

Hi   Now the below error is

Hi

  Now the below error is display while running the luall command manually

 

Regard

Sumit G.

Baljeet Singh's picture
07
Feb
2012
0 Votes 0
Login to vote

Dear, Your Symantec Live

Dear,

Your Symantec Live Update is cruppted.

Please install the LUsetup  (liveupdate) agin on machine.

then go to run and type luall command.

your problem will be resolve...

pete_4u2002's picture
07
Feb
2012
0 Votes 0
Login to vote

check the taskmanager, it

check the taskmanager, it seems to be LUall.exe is already running, hence the message.

You may want to reinstall Liveupdate on this machine and then register

http://www.symantec.com/business/support/index?page=content&id=TECH102609&locale=en_US

sumitgupta786's picture
07
Feb
2012
0 Votes 0
Login to vote

Hi Same error i have day

Hi Same error i have day before day. On that time I have endtask the service of Lucoms~1.exe. Then it work but same it now. So any idea to resolve without uninstallation..

Regard

Sumit G.

pete_4u2002's picture
07
Feb
2012
0 Votes 0
Login to vote

let the lucome exit on it's

let the lucome exit on it's own. It might be in process of downloading the definition.

sumitgupta786's picture
07
Feb
2012
0 Votes 0
Login to vote

Hi- this error has started

Hi- this error has started when i have change the Live Update setting as dailybase.

Below is the snap of LU setting

Is it ok, pls confirm

Regard

Sumit G.

sumitgupta786's picture
07
Feb
2012
0 Votes 0
Login to vote

Hi I want to confirm that, I

Hi I want to confirm that, I have set the live update as a dailybase.

Download time mention in above comments.

Retry interval time is 15 minute.

Retry window is one hour.

Is it ok.

What the role of Retry interval 7 Retry window there.

Pls confirm because I have update the same setting at last week. Till time i have not get any update automatically.

Regard

Sumit G.

pete_4u2002's picture
07
Feb
2012
0 Votes 0
Login to vote

  Retry interval (in

 

Retry interval (in minutes | hours) and Retry window (in hours | days)

Specifies when to retry running LiveUpdate if for some reason LiveUpdate failed to run or complete due to a network outage or some other problem. The window value and the interval value depend on the frequency that you select.

These options are disabled if you select Continuously for Frequency.

sumitgupta786's picture
07
Feb
2012
0 Votes 0
Login to vote

I want to confirm that if I

I want to confirm that if I have setted the Retry interval at 15 min, it mean that it will retry after 15 min if not get update, then what the mean of "Retry window" because it has setted 1 hour??

Regard

Sumit G.

pete_4u2002's picture
07
Feb
2012
0 Votes 0
Login to vote

retry every 15 minutes for 1

retry every 15 minutes for 1 hour time window

sumitgupta786's picture
07
Feb
2012
0 Votes 0
Login to vote

It's mean if I have set the

It's mean if I have set the time of daily (10:30pm to 3:00am). It will retry to update after 15 min till 1 hour. After 11:30pm it will not be try again till next day.

Regard

Sumit G.

sumitgupta786's picture
07
Feb
2012
0 Votes 0
Login to vote

Hi,     can you help me to

Hi,

    can you help me to set the update setting. Server get update on timely but client will be update at evening under the timing of 11:00pm  to 7am.

Regard

Sumit G.

sumitgupta786's picture
07
Feb
2012
0 Votes 0
Login to vote

Hi,   I am going to set the

Hi,

  I am going to set the client update setting as per below attach snap.

Daily Base nad update time"10:30pm" & keep trying for 7 hours.

Server setting will be set continuosly then is it possible that server get update daily on time and client will be update at evening time"10:30pm"

Regard

Sumit G.

pete_4u2002's picture
07
Feb
2012
0 Votes 0
Login to vote

client will trigger the

client will trigger the Liveupdate between said hour, to get the updates from Symantec Liveupdate,

sumitgupta786's picture
07
Feb
2012
0 Votes 0
Login to vote

it mean if I set client time

it mean if I set client time at 10:30 daily and keep trying 7 hours. Then client will try to get update at 10:30pm till 7hours(6:30 am)

Regard

Sumit G.

pete_4u2002's picture
07
Feb
2012
0 Votes 0
Login to vote

yes, it will try if the

yes, it will try if the scheduled one is incomplete or cannot run.

Mithun Sanghavi's picture
07
Feb
2012
0 Votes 0
Login to vote

Liveupdate and LU1823 and Return code = 4

Hello Sumit,

In your case, when the Running the Luall.exe from the START > Run window you receive an Error LU1823, in that case, you can work on this:

http://service1.symantec.com/SUPPORT/sharedtech.nsf/38d4e82edf5ecb2e85256ed700450c69/d8e199731f6e34bf80256ccb004cbea8?

Coming back to your Original Issue of "LiveUpdate encountered one or more errors. Return code = 4", 

You are SEPM version 11.0.6005. Please upload the log.liveupdate from C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate

That would assist us getting to the Root cause of the issue.

Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | SCTS | ITIL v3

Follow me on Twitter: @mithun_sanghavi

Don't forget to mark your thread as 'SOLVED' with the answer that best helped yo

sumitgupta786's picture
07
Feb
2012
0 Votes 0
Login to vote

Hi- Pls find the attachment.

Hi- Pls find the attachment.

AttachmentSize
Log.LiveUpdate.txt 3.26 MB

Regard

Sumit G.

pete_4u2002's picture
07
Feb
2012
2 Votes +2
Login to vote

looks like LU was

looks like LU was unsuccessful

2/6/2012, 15:47:54 GMT -> EVENT - SESSION END SUCCESSFUL EVENT - The LiveUpdate session ran in Express Mode. LiveUpdate found 2 updates available, of which 0 were installed and 2 failed to install.  The LiveUpdate session exited with a return code of 1800, Success

 

2/6/2012, 16:04:55 GMT -> EVENT - SESSION END FAILED EVENT - The LiveUpdate session ran in Silent Mode. LiveUpdate found 0 updates available, of which 0 were installed and 0 failed to install.  The LiveUpdate session exited with a return code of 1814, LiveUpdate could not retrieve the catalog file of available Symantec product and component updates.

 

1814 error, i would say try reinstall LU and check

http://www.symantec.com/business/support/index?page=content&id=TECH102609&locale=en_US

Swapnil's picture
07
Feb
2012
0 Votes 0
Login to vote

Firstly go to command prompt

Firstly go to command prompt and give cleanup & then update command as below

%Program Files%\Symantec\Symantec Endpoint Protection Manager\Bin"  and type "lucatalog -cleanup" and then the next command as  "lucatalog -update"

Try running the liveudpate from the console again.
 
if still this fails then Install Liveupdate using local admin account and e register liveupdate from command prompt

Swapnil

SOC Team .

Please don't forget to mark your thread solved with whatever answer helped you.

Mithun Sanghavi's picture
07
Feb
2012
0 Votes 0
Login to vote

I agree

Hello,

I agree with Pete.

As of now, after looking at the Logs, the only thing is to Uninstall and Reinstall the Liveupdate Application.

Check this Article -

http://www.symantec.com/docs/TECH102609

Hope that helps!!

Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | SCTS | ITIL v3

Follow me on Twitter: @mithun_sanghavi

Don't forget to mark your thread as 'SOLVED' with the answer that best helped yo

SameerU's picture
07
Feb
2012
0 Votes 0
Login to vote

Hi

Please do the following:

1. Unistalled the Liveupdate

2. Restart the Server.

3. Install the Liveupdate.

: To re-register the SEPM with LiveUpdate, follow the steps below:

  1. Open a command window, then browse to:
    C:\Program Files\Symantec\Symantec Endpoint Protection Manager\bin
  2. Type lucatalog -update and press Enter.
  3. Run LiveUpdate to verify that there are no errors.

 For Symantec Endpoint Protection 12.1, follow the steps below:

  1. Open a command window, then browse to:
    C:\Program Files\Symantec\Symantec Endpoint Protection Manager\bin
  2. Type lucatalog -cleanup and press Enter.
  3. Type lucatalog -forcedupdate and press Enter.
  4. Run LiveUpdate to verify that there are no errors.

Regards

sumitgupta786's picture
08
Feb
2012
0 Votes 0
Login to vote

Hi Pete/Mithun, Today I have

Hi Pete/Mithun,

Today I have set the live update setting as continuously. After that it working fine till time

AttachmentSize
Log.LiveUpdate.txt 3.96 MB

Regard

Sumit G.

pete_4u2002's picture
08
Feb
2012
1 Vote +1
Login to vote

yea :-), however note that

yea :-), however note that running LU continous would be resource consuming

2/8/2012, 7:22:51 GMT -> EVENT - SESSION END SUCCESSFUL EVENT - The LiveUpdate session ran in Silent Mode. LiveUpdate found 12 updates available, of which 11 were installed and 1 failed to install.  The LiveUpdate session exited with a return code of 1800, Success

 

2/8/2012, 7:46:41 GMT -> EVENT - SESSION END SUCCESSFUL EVENT - The LiveUpdate session ran in Silent Mode. LiveUpdate found 2 updates available, of which 2 were installed and 0 failed to install.  The LiveUpdate session exited with a return code of 1800, Success

 

Mithun Sanghavi's picture
08
Feb
2012
0 Votes 0
Login to vote

I agree again

Hello,

I agree with pete again.

NOTE that when you set the liveupdate to update continuously it would consume lot of your resource and Bandwidth.

The Continuous setting causes the client computers that are infrequently powered on or that infrequently communicate with a management server to get the latest updates. They get the latest updates when they connect to the network and authenticate to a Symantec Endpoint Protection Manager.

The Symantec updates its definitions only thrice a day. So again, the question arises why to waste the valuable resources?

Here is an Article to Understand the Liveupdate Policies - http://www.symantec.com/docs/TECH104435

Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | SCTS | ITIL v3

Follow me on Twitter: @mithun_sanghavi

Don't forget to mark your thread as 'SOLVED' with the answer that best helped yo

sumitgupta786's picture
08
Feb
2012
0 Votes 0
Login to vote

k. Pls confirm if I will set

k. Pls confirm if I will set the blow setting in client then will pick defintion from default manager server or from any other path??

 

Regard

Sumit G.

pete_4u2002's picture
08
Feb
2012
0 Votes 0
Login to vote

i believe that is for client

i believe that is for client LU policy, correct?

highlight server settings. The source there will tell which one you have selected. If you select Symantec Liveupdate and SEPM, the client might get definition from either one of them.

sumitgupta786's picture
08
Feb
2012
0 Votes 0
Login to vote

Yes this client LU Setting. i

Yes this client LU Setting. i have set the below setting, pls find the attach below snap

 

Regard

Sumit G.

pete_4u2002's picture
08
Feb
2012
0 Votes 0
Login to vote

the configuration is to get

the configuration is to get the updates from SEPM as well as SYmantec Liveupdate.

Whenever the LU on client triggers it will connect to symantec liveupdate to check for new content, if it is present then it will download.

sumitgupta786's picture
12
Feb
2012
0 Votes 0
Login to vote

hi- i have raise the case in

hi- i have raise the case in symantec tool. one engg have removed the old defintion. after that it working but till case is in observe

Regard

Sumit G.

GRonski's picture
13
Feb
2012
0 Votes 0
Login to vote

Insoluble problem

I have had the same problem, even after removed old definition I have the same situation after few days.

sumitgupta786's picture
13
Feb
2012
0 Votes 0
Login to vote

then what the step you have

then what the step you have resolved it.?

Regard

Sumit G.