Video Screencast Help

Symantec Endpoint Protection 12.1 failed to update virus defs

Created: 16 Jan 2012 | 2 comments

I have downloaded and installed today a trial version of Symantec Endpoint Protection 12.1 Small Business Edition on two PC's:

  • Windows XP SP 3 Russian
  • WIndows 7 Russian

Both PC on same network. At Windows 7 everything is OK, but at XP i have a problem with updating of Virus Definitions with Live Update. Always get en error (russian language):

Обнаружена ошибка при  распаковке файла C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Data\LUE\Downloads\1323894943jtun_sep12ennful26.m26.
Обнаружена ошибка при обработке обновления для Описания вирусов и программ-шпионов для Win32 (концентратор).
Не удалось установить обновление для Описания вирусов и программ-шпионов для Win32.
Не удалось установить обновление для Описания вирусов и программ-шпионов для Win32 (концентратор).
 
Wich can be translated as:
There was a problem extracting the file C: \ Documents and Settings \ All Users \ Application Data \ Symantec \ Symantec Endpoint Protection \ 12.1.1000.157.105 \ Data \ LUE \ Downloads \ 1323894943jtun_sep12ennful26.m26.
An error was detected while processing an update for virus definitions and spywarefor Win32 (hub).
Unable to install update for virus definitions and spyware for Win32.
Unable to install update for virus definitions and spyware for Win32 (hub).

 

There are 30 GB of free disk space on XP. 

I tried to uninstall SEP, then manualy delete every folder / registry entry containing string "symantec" - no effect. 

How to fix it?

 

Fragment of log.lue file:

****************************************************************************************************
Symantec LiveUpdate Engine 2.0.2.5   (Release)
OS: Windows XP Professional  32-bit 
 
VerInfo: 5.1 
 
ServicePack: 3.0
LanguageID: 00000419
WinHttp.dll Version: 5.1.2600.5868
----------------------------------------------------------------------------------------------------
Session started at: 2012/01/16 18:15:21.375    (UTC +04:00)
ProcessId: 1700, ThreadId: 3592, SessionId: 4
Machine ID: 6476D7C8-6001-07D4-E2E2-820CC87B04F7
Agent Field: SEP/12.1.1000.157 MID/{6476D7C8-6001-07D4-E2E2-820CC87B04F7} SID/4
----------------------------------------------------------------------------------------------------
  Component: Moniker: {20209388-19DA-443e-ABC2-A706D2AAF9E9}, P: SESC AntiVirus Client Win32, V: 12.1, L: Russian.
  Component: Moniker: {263395A0-D3D8-4be4-80B5-202C94EF4AA0}, P: SEPC Iron Settings v12.1, V: MicroDefsB.CurDefs, L: SymAllLanguages.
  Component: Moniker: {31D8C93E-8DB2-4eeb-8D75-87FD92F1C62C}, P: SEPC CIDS Signatures v12.1, V: MicroDefsB.Jan, L: SymAllLanguages.
  Component: Moniker: {535CB6A4-441F-4e8a-A897-804CD859100E}, P: SEPC Virus Definitions Win32 v12.1, V: MicroDefsB.CurDefs, L: SymAllLanguages.
  Component: Moniker: {55DE35DC-862A-44c9-8A2B-3EF451665D0A}, P: SEPC CIDS Signatures v12.1, V: MicroDefsB.CurDefs, L: SymAllLanguages.
  Component: Moniker: {6AAE5D6B-C70C-4cdf-96C9-110AA1378E8C}, P: SEPC Virus Definitions Win32 v12.1, V: MicroDefsB.Error, L: SymAllLanguages.
  Component: Moniker: {810D5A61-809F-49c2-BD75-177F0647D2BA}, P: SEPC Iron Revocation List v12.1, V: MicroDefsB.CurDefs, L: SymAllLanguages.
  Component: Moniker: {B6DC6C8F-46FA-40c7-A806-B669BE1D2D19}, P: SEPC Submission Control Data, V: 12.1, L: SymAllLanguages.
  Component: Moniker: {D6AEBC07-D833-485f-9723-6C908D37F806}, P: SEPC Behavior And Security Heuristics v12.1, V: MicroDefsB.CurDefs, L: SymAllLanguages.
  Component: Moniker: {EDBD3BD0-8395-4d4d-BAC9-19DD32EF4758}, P: SEPC Iron Whitelist v12.1, V: MicroDefsB.CurDefs, L: SymAllLanguages.
  OnNotify() method for callback {EDBD3BD0-BEEF-4d4d-BAC9-19DD32EF4758} returned 0x0
  OnNotify() method for callback {2F090208-20DC-42f0-BBD8-B68B472F7215} returned 0x0
  OnNotify() method for callback {72DA128F-2591-43f2-B272-29DA5452A197} returned 0x0
  OnNotify() method for callback {810D5A61-BEEF-49c2-BD75-177F0647D2BA} returned 0x0
  OnNotify() method for callback {B6DC6C8F-BEEF-40c7-A806-B669BE1D2D19} returned 0x0
  OnNotify() method for callback {263395A0-BEEF-4be4-80B5-202C94EF4AA0} returned 0x0
  OnNotify() method for callback {511C2222-DEFD-22EE-B154-4A6A546B9793} returned 0x0
  Server selection complete. Server is HTTP://liveupdate.symantecliveupdate.com/ on port 80.
  OnNotify() method for callback {72DA128F-2591-43f2-B272-29DA5452A197} returned 0x0
  OnNotify() method for callback {72DA128F-2591-43f2-B272-29DA5452A197} returned 0x0
* Decompression failed for package C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Data\LUE\Downloads\1323894943jtun_sep12ennful26.m26 to directory C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Data\LUE\Downloads\Patch1860
* Install Skipped code set for moniker {6AAE5D6B-C70C-4cdf-96C9-110AA1378E8C}, package 1323894943jtun_sep12ennful26.m26, error while decompressing.
* Deleting package C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Data\LUE\Downloads\1323894943jtun_sep12ennful26.m26 in directory C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Data\LUE\Downloads\Patch1860 due to decompression failure.
  OnNotify() method for callback {EDBD3BD0-BEEF-4d4d-BAC9-19DD32EF4758} returned 0x0
  OnNotify() method for callback {2F090208-20DC-42f0-BBD8-B68B472F7215} returned 0x0
* Inventory SetAbort called on Moniker {535CB6A4-441F-4e8a-A897-804CD859100E} (Inventory Module), with abort code 500
* Inventory SetAbort called on Moniker {6AAE5D6B-C70C-4cdf-96C9-110AA1378E8C} (Inventory Module), with abort code 500
* Inventory SetAbort called on Moniker {535CB6A4-441F-4e8a-A897-804CD859100E} (Inventory Module), with abort code 500
* Inventory SetAbort called on Moniker {6AAE5D6B-C70C-4cdf-96C9-110AA1378E8C} (Inventory Module), with abort code 500
* OnNotify() method for callback {72DA128F-2591-43f2-B272-29DA5452A197} failed; err = 0x80004005
* Inventory SetAbort called on Moniker {535CB6A4-441F-4e8a-A897-804CD859100E} (Inventory Module), with abort code 517
* Inventory SetAbort called on Moniker {6AAE5D6B-C70C-4cdf-96C9-110AA1378E8C} (Inventory Module), with abort code 517
* Inventory SetAbort called on Moniker {535CB6A4-441F-4e8a-A897-804CD859100E} (Inventory Module), with abort code 517
* Inventory SetAbort called on Moniker {6AAE5D6B-C70C-4cdf-96C9-110AA1378E8C} (Inventory Module), with abort code 517
* Callback {72DA128F-2591-43f2-B272-29DA5452A197} is a PostSession callback. Callback Failed. Result -2147467259
  OnNotify() method for callback {810D5A61-BEEF-49c2-BD75-177F0647D2BA} returned 0x0
  OnNotify() method for callback {B6DC6C8F-BEEF-40c7-A806-B669BE1D2D19} returned 0x0
  OnNotify() method for callback {263395A0-BEEF-4be4-80B5-202C94EF4AA0} returned 0x0
  OnNotify() method for callback {511C2222-DEFD-22EE-B154-4A6A546B9793} returned 0x0
* Update Failed - PostSession for moniker {535CB6A4-441F-4e8a-A897-804CD859100E}
  Update for moniker: {535CB6A4-441F-4e8a-A897-804CD859100E}, P: SEPC Virus Definitions Win32 v12.1, V: MicroDefsB.CurDefs, L: SymAllLanguages, package: 1326644544jtun_sep12enncur26.m26, SeqName: CurDefs, SeqNum: 120115009, has update status code: 208
* Reporting error: 0x80004005 Update failed PVL=SEPC Virus Definitions Win32 v12.1 MicroDefsB.CurDefs SymAllLanguages
* PostSession Callbacks Failed. Update status code for moniker {535CB6A4-441F-4e8a-A897-804CD859100E}, P: SEPC Virus Definitions Win32 v12.1, V: MicroDefsB.CurDefs, L: SymAllLanguages is: 0x      D0.
  Update for moniker: {6AAE5D6B-C70C-4cdf-96C9-110AA1378E8C}, P: SEPC Virus Definitions Win32 v12.1, V: MicroDefsB.Error, L: SymAllLanguages, package: 1323894943jtun_sep12ennful26.m26, SeqName: HubDefs, SeqNum: 111214009, has update status code: 201
* Reporting error: 0xFFFFFF00 Update failed PVL=SEPC Virus Definitions Win32 v12.1 MicroDefsB.Error SymAllLanguages
* PostSession Callbacks Failed. Update status code for moniker {6AAE5D6B-C70C-4cdf-96C9-110AA1378E8C}, P: SEPC Virus Definitions Win32 v12.1, V: MicroDefsB.Error, L: SymAllLanguages is: 0x      C9.
  ***** Session Results *****
  Total Updates Available: 2
  Total Updates Succeeded: 0
  Total Updates Succeeded - Reboot Req: 0
  Total Updates Skipped: 0
  Total Updates Failed: 2
  RunLiveUpdate result code: 0x00000000
  Session max recursion count = 2
  Error report submitted
----------------------------------------------------------------------------------------------------
Session ended at: 2012/01/16 18:19:19.187    (UTC +04:00)
****************************************************************************************************
 
 

Comments 2 CommentsJump to latest comment

Chetan Savade's picture

Hi,

Will it be possible to check by following way

1) Uninstall SEP

2) Uninstall SP3

3) Install SEP then SP3.

Let me know if it worked.

What's your IE version ?

Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<