SEP shared files keep on corrupting

malfonso's picture

i have encounter a problem on SEP 11, all the .dll and .exe file under the folder C:\Program Files\Common Files\Symantec Shared is converted to 0.tmp, 1.tmp, 2.tmp and so on.
when i copy the original files from other computer and paste it, the SEP 11 will run again properly, but the problem keep on returning, it will be changed again to .tmp files causing the SEP to not run.
any one encountered the same problem?
please help...

AravindKM's picture

TRY  BY REPAIRING THE SEP

TRY  BY REPAIRING THE SEP INSTALLATION 

sandip_sali's picture

Perform an Upgrade

In fact I would suggest you that you can try upgrading to the latest version of SEP i.e. RU5 and then check whether this issue reoccurs.

You can download the latest version from

https://fileconnect.symantec.com/licenselogin.jsp?...

Thanks & Regards

Sandip C Sali

Prachand's picture

Please  try to run a FULL

Please  try to run a FULL SACN is safe mode with the latest virus defintion

Prachand Kumar
MCSE-2003 Symantec Technical Specialist (SCTS)

malfonso's picture

i cannot scan while in safe

i cannot scan while in safe mode, the SEP is cannot be run.
i already repair it and run a full scan,  w32.blackmal.e@mm virus has been detected and deleted, but the problem still exist, its keep on corrupting the SEP shared files.

AravindKM's picture

In safe mode if you try to

In safe mode if you try to open SEP it will ask you symantec management clet service is not running do you want to start  give no there then you will be able to open sep interface and scan..
I think this is the problem you are facing while trying to scan in safe mode if am wrong pls correct me...
 

Prachand's picture

Please try the steps given below

1.         Disable Autoplay , 
 
 
2.         Disable System restore
 
 
 
3.         Disable the open shares, and C$ and Admin$,
 
Restart the machine.
 
4.         Repair or reinstall SEP, If SEP is corrupted.
 
 
5.         Apply the latest Rapid release signatures and start the scan on the network.
 

Prachand Kumar
MCSE-2003 Symantec Technical Specialist (SCTS)

Prachand's picture

If the issue persists then

If the issue persists then try

Title: 'How to clear out corrupted definitions for a Symantec Endpoint Protection Client manually.'
Document ID: 2007123111551948
> Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2007123111551948?Open&seg=ent

Prachand Kumar
MCSE-2003 Symantec Technical Specialist (SCTS)

malfonso's picture

the problem is not the virus

the problem is not the virus definition file, ill post the screen shot of the folder where in the corrupted shared files is located.
I already try to scan it in safe mode, but nothing is detected.

malfonso's picture

(No subject)

corrupted.JPG

Viachaslau Kabak's picture

chkdsk c: /f

chkdsk c: /f

malfonso's picture

what do you mean by chkdsk c:

what do you mean by chkdsk c: /f ?

AravindKM's picture

chkdsk  /f is the command for

chkdsk  /f is the command for fixing the errors of the Hard drive..
You can also specify which drive to be checked
It will fix any error is present in the disk..
You can try this after going to command mode
If the problem is because of  of any HDD issue it will get solved...
 

malfonso's picture

any other suggestion or

any other suggestion or solution to my problem?

Grant_Hall's picture

Have you tried calling in and

Have you tried calling in and making a case on this issue yet? If you do post your case number so we can follow it. You said earlier that you did a full scan and w32.blackmal.e@mm was dected and deleted, but to me it sounds like you are still infected. What happens when you try another scan in safe mode with system restore off? If you are seeing the same virus again you are probably getting re-infected by another computer on your network or by some hidden process your computer can't see. I would try the full scan again and see what comes up. If you see the same virus, then disconnect it from the network and then clean it and see if it comes back. If it doens't then you have to assume that you are being reinfected by another computer on your network. If the scan comes up clean then I would call in and make a case to see what phone support can do for you.

Hope this helps
Grant

Please don't forget to mark your thread solved with whatever answer helped you : )

malfonso's picture

ok thanks, ill try to full

ok thanks, ill try to full scan it again and if it does not not solve ill call it on symantec support.