Endpoint Protection

Everything was going fine until May 11 :( 

Then the wheels fell off the wagon.  Here is my Liveupdate output from within SEPM MR4 MP1a:

May 14, 2009 5:19:53 PM MDT: LiveUpdate failed. [Site: ALSED] [Server: ALSEDWS001]
May 14, 2009 5:19:53 PM MDT: LUALL.EXE finished running. [Site: ALSED] [Server: ALSEDWS001]
May 14, 2009 5:19:51 PM MDT: LiveUpdate encountered one or more errors. Return code = 4. [Site: ALSED] [Server: ALSEDWS001]
May 14, 2009 5:18:38 PM MDT: Symantec Endpoint Protection Win64 11.0.4000.2295 (English) failed to update. [Site: ALSED] [Server: ALSEDWS001]
May 14, 2009 5:18:30 PM MDT: Symantec Endpoint Protection Win64 11.0.4014.26 (English) is up-to-date. [Site: ALSED] [Server: ALSEDWS001]
May 14, 2009 5:17:42 PM MDT: Symantec Endpoint Protection Win32 11.0.4014.26 (English) is up-to-date. [Site: ALSED] [Server: ALSEDWS001]
May 14, 2009 5:17:34 PM MDT: Symantec Endpoint Protection Win32 11.0.4000.2295 (English) failed to update. [Site: ALSED] [Server: ALSEDWS001]
May 14, 2009 5:17:32 PM MDT: TruScan proactive threat scan engine Win32 11.0 is up-to-date. [Site: ALSED] [Server: ALSEDWS001]
May 14, 2009 5:17:25 PM MDT: TruScan proactive threat scan commercial application list Win32 11.0 failed to update. [Site: ALSED] [Server: ALSEDWS001]
May 14, 2009 5:17:24 PM MDT: TruScan proactive threat scan whitelist Win64 11.0 failed to update. [Site: ALSED] [Server: ALSEDWS001]
May 14, 2009 5:17:21 PM MDT: Intrusion Prevention signatures Win64 11.0 is up-to-date. [Site: ALSED] [Server: ALSEDWS001]
May 14, 2009 5:17:15 PM MDT: TruScan proactive threat scan engine Win64 11.0 is up-to-date. [Site: ALSED] [Server: ALSEDWS001]
May 14, 2009 5:17:09 PM MDT: Submission Control signatures 11.0 is up-to-date. [Site: ALSED] [Server: ALSEDWS001]
May 14, 2009 5:17:02 PM MDT: TruScan proactive threat scan data 11.0 is up-to-date. [Site: ALSED] [Server: ALSEDWS001]
May 14, 2009 5:16:56 PM MDT: TruScan proactive threat scan whitelist Win32 11.0 failed to update. [Site: ALSED] [Server: ALSEDWS001]
May 14, 2009 5:16:54 PM MDT: TruScan proactive threat scan commercial application list Win64 11.0 failed to update. [Site: ALSED] [Server: ALSEDWS001]
May 14, 2009 5:16:52 PM MDT: Virus and spyware definitions Win32 11.0 MicroDefsB.CurDefs failed to update. [Site: ALSED] [Server: ALSEDWS001]
May 14, 2009 5:16:50 PM MDT: Decomposer Win32 and Win64 11.0 is up-to-date. [Site: ALSED] [Server: ALSEDWS001]
May 14, 2009 5:16:44 PM MDT: Symantec Protection Center Content Catalog 11.0 is up-to-date. [Site: ALSED] [Server: ALSEDWS001]
May 14, 2009 5:16:38 PM MDT: TruScan proactive threat scan commercial application engine 11.0 is up-to-date. [Site: ALSED] [Server: ALSEDWS001]
May 14, 2009 5:16:26 PM MDT: Intrusion Prevention signatures Win32 11.0 is up-to-date. [Site: ALSED] [Server: ALSEDWS001]
May 14, 2009 5:09:36 PM MDT: LUALL.EXE has been launched. [Site: ALSED] [Server: ALSEDWS001]
May 14, 2009 5:09:34 PM MDT: Download started. [Site: ALSED] [Server: ALSEDWS001]

The log entries at 5:16:52, 5:17:24/25  are the points of concern.

I have tried blowing away all the various defs, even the reg entries and then starting the LUALL again... It's STUCK at May 11 and I can't figure out how to make it take the new defs.

If I drop a JDB file in, a directory gets made... all whirs and churns and then about 3 minutes later  a NEW directory is created.... ad nauseum.

Something, somewhere is stuck. 

Help, I need some digital drain cleaner!

Please check this link

http://service1.symantec.com/SUPPORT/ent-security.nsf/febc48e5db73822a882573410063331b/5fe90bc001d96b5d88256c0e0057700b?OpenDocument

It's still stuck at May 11.  According to that document it LOOKS like the may 11 definitions are there and correct.  It's STUCK there.  It won't go out and get newer ones :(

Please try to download manually and update on the management server.

"rapid response content failed to install"

No love.

Folder created... things spin.  Folder dissappears and NEW folder appears. 

Lather, Rinse, Repeat.

Can you repair liveupdate on the Add/Remove on the control panel?

try to restart SEPM service
if will not help - read the post of sandip_sali on
https://www-secure.symantec.com/connect/forums/def-versions

There is no repair option - just remove :(

I have rebooted the box a couple of times.

I have also gone through the whole "Wipe out the folders" game... STILL it insists on telling me that my defs are from May 11 and that they were D/L'ed May 12 and that they continue to fail when downloading :(

ARRRRRGGGH.

Maybe try increasing the disk space that LU can use. Inside the Liveupdate Configuration Window increase the "Maximum disk space used to store update". My guess is this won't matter but why  not try. Also are you running a proxy? If yes then post back and tell us. If you are not then make sure that you have the LU configuration window under the FTP and HTTP tabs selected to "I do not use a proxy server". We had a customer with a similar error that did not have this enabled. So just a couple of things to try. Cheers,
Grant

Here is the log of the VirDEF32 problem.

ALL OTHER Definitions download and install fine....


May 15 09, 07:36:09 PM INFO(Med) sesmVirDef32 SesmLu: PreProcessing started for sesmVirDef32 ({7916E109-F6A1-4d5a-8F10-5D8CEFA18FDE})
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::InitBase - start.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::SetDefsDir - starts.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 m_pszDefsDir : C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1 pre-exists, being removed.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::GetVirusDefsDir - start.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::GetVirusDefsDir -- end, pszDefsDir: C:\PROGRA~1\COMMON~1\SYMANT~1\SymcData\SESMVI~1, returning: success.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 Getting updated DefsDir Called GetVirusDefsDir( C:\PROGRA~1\COMMON~1\SYMANT~1\SymcData\SESMVI~1 ).
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::SetDefsDir( m_pszDefsDir = C:\PROGRA~1\COMMON~1\SYMANT~1\SymcData\SESMVI~1 ) - ends, returns: success.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::SetupNames(sesmvirdef32) - start
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::SetupNames() - end
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::InitBase - end, returning DU_S_OK.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::InitWindowsApp(SesmInstallApp) - start
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::InitWindowsApp(): end, returning true.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::GetNewestDefsDate(LPWORD pwYear,..) - start.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::GetNewestDefs() - start.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::GetNewestDefs(): Start ProcessingIncomingDir()
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::ProcessIncomingDir() - start.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::GetIncomingDir(): end, incomingdir = C:\PROGRA~1\COMMON~1\SYMANT~1\SymcData\SESMVI~1\incoming.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::DirIsEmpty( C:\PROGRA~1\COMMON~1\SYMANT~1\SymcData\SESMVI~1\incoming )- start.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::DirIsEmpty returns: success.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::ProcessIncomingDir() - returning DU_S_OK.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::GetNewestDefs(): Finish ProcessingIncomingDir()
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::GetNewestDefs(): Calling GetPrivateProfileString: C:\PROGRA~1\COMMON~1\SYMANT~1\SymcData\SESMVI~1\definfo.dat.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::GetNewestDefs(): szNewestDir is 20090515.032 before the if block.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::GetNewestDefs(): returning DU_S_OK.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 Called GetNewestDefs(C:\PROGRA~1\COMMON~1\SYMANT~1\SymcData\SESMVI~1\20090515.032).
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::GetDefDate - start.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::GetDefDate( szDir: C:\PROGRA~1\COMMON~1\SYMANT~1\SymcData\SESMVI~1\20090515.032 ) - end, returning: DU_S_OK.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 Called GetDefDate(C:\PROGRA~1\COMMON~1\SYMANT~1\SymcData\SESMVI~1\20090515.032, year:2009, month:5, day:15, rev:32.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::GetNewestDefsDate - end, returning DU_S_OK.
May 15 09, 07:36:09 PM INFO(Med) sesmVirDef32 SesmLu: Synchronizing LiveUpdate information with the SESM Server's inventory.
May 15 09, 07:36:09 PM INFO(Med) sesmVirDef32 MicroDefs25DefUtilsContentHandler: Current SESM AV defs path: C:\Program Files\Symantec\Symantec Endpoint Protection Manager\Inetpub\content\{C60DC234-65F9-4674-94AE-62158EFCA433}\90511034\full
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::PreDefUpdate() - start
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::PreDefUpdateInternal(..., type: 1) - start
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::GetHubDirectory(C:\PROGRA~1\COMMON~1\SYMANT~1\SymcData\SESMVI~1\BinHub) - returning true
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::LockLiveUpdate() - start.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::TakeFileLock( C:\PROGRA~1\COMMON~1\SYMANT~1\SymcData\SESMVI~1, lulock.dat ) - start.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::TakeFileLock( C:\PROGRA~1\COMMON~1\SYMANT~1\SymcData\SESMVI~1, lulock.dat ) - end, returning: failure.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::LockLiveUpdate() returns false
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::PreDefUpdateInternal() - failed ... cleaning up.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::PreDefUpdateInternal (szDir1: , szDir2: <null>) - returning DU_E_LU_LOCK_FAILED
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::PreDefUpdate() - returning DU_E_LU_LOCK_FAILED
May 15 09, 07:36:09 PM ERROR sesmVirDef32 MicroDefs25DefUtilsContentHandler: Failed to import AV content: PreDefUpdate failed at .\MicroDefs25DefUtilsContentHandler.cpp[229]
May 15 09, 07:36:09 PM ERROR sesmVirDef32 MicroDefs25DefUtilsContentHandler: Failed to update local systes's content to be in sync with the SESM server's content at .\MicroDefs25DefUtilsContentHandler.cpp[186]
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::PreMicroDef25Update() - start
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::PreMicroDefUpdateInternal(..., type: 1) - start
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::PreDefUpdateInternal(..., type: 1) - start
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::GetHubDirectory(C:\PROGRA~1\COMMON~1\SYMANT~1\SymcData\SESMVI~1\BinHub) - returning true
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::LockLiveUpdate() - start.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::TakeFileLock( C:\PROGRA~1\COMMON~1\SYMANT~1\SymcData\SESMVI~1, lulock.dat ) - start.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::TakeFileLock( C:\PROGRA~1\COMMON~1\SYMANT~1\SymcData\SESMVI~1, lulock.dat ) - end, returning: failure.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::LockLiveUpdate() returns false
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::PreDefUpdateInternal() - failed ... cleaning up.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::PreDefUpdateInternal (szDir1: , szDir2: ) - returning DU_E_LU_LOCK_FAILED
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::PreMicroDefUpdateInternal() - returning DU_E_LU_LOCK_FAILED
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::PreMicroDef25Update() - returning DU_E_LU_LOCK_FAILED
May 15 09, 07:36:09 PM ERROR sesmVirDef32 MicroDefs25DefUtilsContentHandler: DU_E_LU_LOCK_FAILED
May 15 09, 07:36:09 PM INFO(Med) sesmVirDef32 MicroDefs25DefUtilsContentHandler: Hub Dir:
May 15 09, 07:36:09 PM INFO(Med) sesmVirDef32 MicroDefs25DefUtilsContentHandler:
May 15 09, 07:36:09 PM INFO(Med) sesmVirDef32 MicroDefs25DefUtilsContentHandler: Cur Dir:
May 15 09, 07:36:09 PM INFO(Med) sesmVirDef32 MicroDefs25DefUtilsContentHandler:
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::InitWindowsApp(SesmInstallApp) - start
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::InitWindowsApp(): end, returning true.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::GetNewestDefsDate(LPWORD pwYear,..) - start.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::GetNewestDefs() - start.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::GetNewestDefs(): Start ProcessingIncomingDir()
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::ProcessIncomingDir() - start.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::GetIncomingDir(): end, incomingdir = C:\PROGRA~1\COMMON~1\SYMANT~1\SymcData\SESMVI~1\incoming.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::DirIsEmpty( C:\PROGRA~1\COMMON~1\SYMANT~1\SymcData\SESMVI~1\incoming )- start.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::DirIsEmpty returns: success.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::ProcessIncomingDir() - returning DU_S_OK.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::GetNewestDefs(): Finish ProcessingIncomingDir()
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::GetNewestDefs(): Calling GetPrivateProfileString: C:\PROGRA~1\COMMON~1\SYMANT~1\SymcData\SESMVI~1\definfo.dat.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::GetNewestDefs(): szNewestDir is 20090515.032 before the if block.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::GetNewestDefs(): returning DU_S_OK.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 Called GetNewestDefs(C:\PROGRA~1\COMMON~1\SYMANT~1\SymcData\SESMVI~1\20090515.032).
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::GetDefDate - start.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::GetDefDate( szDir: C:\PROGRA~1\COMMON~1\SYMANT~1\SymcData\SESMVI~1\20090515.032 ) - end, returning: DU_S_OK.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 Called GetDefDate(C:\PROGRA~1\COMMON~1\SYMANT~1\SymcData\SESMVI~1\20090515.032, year:2009, month:5, day:15, rev:32.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::GetNewestDefsDate - end, returning DU_S_OK.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::GetBinHubDefsDate - start.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::GetDefDate - start.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::GetDefDate( szDir: C:\PROGRA~1\COMMON~1\SYMANT~1\SymcData\SESMVI~1\BinHub ) - end, returning: DU_S_OK.
May 15 09, 07:36:09 PM INFO(Low) sesmVirDef32 DefaultDefUtilsContentHandler: 01EF4B28 CDefUtils::GetBinHubDefsDate - end, returning DU_S_OK.
May 15 09, 07:36:15 PM INFO(Med) sesmVirDef32 SesmLu: PreProcessing... finished. Result: -2144731115

1)  Kind of a long shot, but have you tried clearing the LU cache/download directory as well? (see https://www-secure.symantec.com/connect/forums/safely-delete-live-update-files?sym=TRUE)
2)  Uninstall LU, then reinstall from your SEP/SEPM media

Not your main problem, but fyi:  If you deleted the 11.0.4000.2295 packages, the failure messages for those are a known bug.  When the packages are deleted, references are left in a binary file in the database that controls what LU checks for.  It's annoying, but harmless.  Supposed to be fixed in the upcoming MR4MP2.  Now if those install packages do still exist in SEPM, then those entries are the same issue your experiencing with the lists and Microdefs.

After uninstalling/reinstalling/upgrading my LU to 3.4 and unregistering/registering all my SEP via LUCATALOG  -cleanup and -update, I went and out got the latest jdb file.

Slapped that in and it took!

now - the challenge is to see if this will now work automatically, regularly.

Thanks

It doesn't work still.

:(

Hi brian, but for the manual running of liveupdate, its working?

Maybe try increasing the disk space that LU can use. Inside the Liveupdate Configuration Window increase the "Maximum disk space used to store update".

LUALL doesn't work.  It brings back "you may need a newer version to install these defs" for the Win32microdefs

If I drop in a JDB file, I get messages about files not being found: "virscan8.dat" not found etc.... :(

No updates now since the 15th :(

I've given it 6GB to use.  I've cleared the cache, I've changed the number of revisions to keep... all with no success.

I'm surprised nobody told you to call Symantec Support for this.

Just a quick question. Is this a problem on the server or on a client?

Thankfully nobody has said "call support"

"Official support" hasn't generally been the most helpful in my calls in the past :(

Hi brian, are you using a proxy?

Nope.  No proxy.

1. Can you monitor task manager and see if the LU processes launch at all at the right time (they are easy to spot)
2. Does LU run if you click Start, Run and type "LUALL" then hit OK?

hi
please tell how much RAM do you have on SEPM server
also please try to run liveupdate several times - it seems that it cannot download definitions - so every time it will continue downloading
you can check files at c:\documents and settings\all users\application data\symantec\liveupdate\download
"today's" file have to be about 40 Mb (*.m25)

Live update actually runs.

New development....  It doesn't even SHOW an attempt to D/L the Win32 microdefs now... It's as if it "forgot"

I had gone into the HKLM\Software\Symantec\InstalledApps

and changed the "DOS"ed path to show the full path without ~'s.   Now... no Win32 defs even attempted.  Sigh.

If you search "Live Update antivirus" on this forum you will find many replies and questions that are all the same and all point to articles that do basically nothing. Yes you can delete the files and manually get your def's to take but the automatic live update process will stop on the next attempt. It seems that enough users have experienced the same problem and Symantec should create a bug report and just fix it.

Hello,

I have been experiencing the same issue and Symantec support have been completely unhelpful. I do not agree with the suggested "reinstall everything" fix. The error I get is:

Virus and spyware definitions Win32 11.0 MicroDefsB.CurDefs failed to update.

Does anyone have an idea how to fix this?

Can some one ressolve my issue?? It is posted as NOT UPDATING DEFINITIONS.

Is this occuring on 1 client only? Server?

Any update on the issue? This is occuring on the main SEP managers but not on every other....

 "I have tried blowing away all the various defs, even the reg entries and then starting the LUALL again... It's STUCK at May 11 and I can't figure out how to make it take the new defs.

If I drop a JDB file in, a directory gets made... all whirs and churns and then about 3 minutes later  a NEW directory is created.... ad nauseum."

I'm having this same issue on one of three SEP Managers, on a network that is not connected to the internet so I have to use the manual updates via the JDB... were you ever able to solve this problem Brian?

-EDIT- I posted a new thread that I didn't check before posting this, and there's some good suggestions there.  I'll try them out and update this with the results.

Yes, I solved it.  No, I have no idea how.  I just kept deleting things, and kept dumping in new downloaded defs. etc...

Then - suddenly it worked again.  Sorry I can't be more helpful :(

Thanks, I got it though :)  Reinstalling LiveUpdate did it.  It was a pain in the ass, and my SEPM console seems to be broken, but I have a feeling that will be an easy fix... I was able to drop in the JDB, it took, and the client (on the server at least) was successfully able to "update policy" and pull the new defs.