See if this makes it easier to follow than the original TECH166923 (I don't typically start a process then jump to the end to see if there are notes that change what I should be doing, so the fact there are "notes" at the end of the original don't help a bit as you get part way down and realize, it's not matching up. Shouldn't have to search a document to find corrections or changes, they should be in the flow or stream of the process.)
Problem
Symantec Endpoint Protection (SEP) Clients do not update virus definitions.
· Symantec Endpoint Protection Manager (SEPM) shows old virus definitions in "Admin > Server > Local Site > Show LiveUpdate Downloads".
Environment
SEPM 12.1
WIndows 2003 SP 2 32 bit
Windows Server 2008 R2 64bit
SEP clients Windows XP , Windows 7 .
Cause
Old or corrupted virus definitions present on the SEPM prevent the SEPM's ability to update the SEP clients with new virus definitions.
Solution
For Server 2003 and 32 bit OS
1. Delete the content of folder "C:\Documents and Settings\All users\Application Data\Symantec\LiveUpdate\Downloads\"
Note: Application Data is a hidden folder. Delete the content of the Downloads folder, but not the folder itself.
2. Stop the service "Symantec Endpoint Protection Manager".
To stop this service:
1. Go to Start > Run.
2. Type the following: Services.msc
3. Select and stop the above mentioned service
3. Delete the numbered or TMP folders inside the paths:
· %programfiles%\symantec\symantec endpoint protection manager\inetpub\content\{535CB6A4-...
· %programfiles%\symantec\symantec endpoint protection manager\inetpub\content\{07B590B3-...
· %commonprogramfiles%\Symantec Shared\SymcData\spcVirDef32
· %commonprogramfiles%\Symantec Shared\SymcData\spcVirDef64
For Server 2008/2008R2 64 bit
1. Delete the content of folder "%programdata%\Symantec\LIveUpdate\Downloads"
2. Stop the service "Symantec Endpoint Protection Manager".
To stop this service:
4. Go to Start > Run.
5. Type the following: Services.msc
6. Select and stop the above mentioned service
3. Delete the numbered or TMP folders inside the paths:
· %Program Files(x86)%\symantec\symantec endpoint protection manager\inetpub\content\{535CB6A4-...
· %Program Files(x86)%\symantec\symantec endpoint protection manager\inetpub\content\{07B590B3-...
· %ProgramData%\Symantec\Definitions\SymcData\spcVirDef32
· %ProgramData%\Symantec\Definitions\SymcData\spcVirDef64
4. Launch the process LUALL.EXE
5. Restart the Symantec Endpoint Protection Manager service when LiveUpdate is complete.
1. Log on to Symantec Endpoint Protection Manager Console and launch a LiveUpdate from Admin >Server > Local Site > Download LiveUpdate content.
2. Verify the correct download/usage of new virus definitions from "Admin > Server > Local Site>Show LiveUpdate Downloads".