Endpoint Protection

 View Only

  • 1.  Ver 10 w/ scan engine missing issue

    Posted Mar 14, 2008 10:07 AM
    Every so often, the client side will lose it's scan engine version and no longer receive updates from the server.
     
    I'm running program version 10.0.0.359 w/ scan engine 103.0.2.7
     
    Is there a reg key that I can copy between machines to correct the missing setting?
     
    Right now I have to reinstall the program to correct it and that's to too practical.
     
    Thanks is advance.


  • 2.  RE: Ver 10 w/ scan engine missing issue

    Posted Mar 20, 2008 09:37 PM
    I've experienced a handful of computers with that problem. Doing a reinstall over top of the existing installation has not been successful for me, so I changed tactics and removed Symantec Antivirus and Live Update via Add/Remove Programs then did a fresh installation from the parent server. So far I've had good results with that procedure.
     
    Lawson...


  • 3.  RE: Ver 10 w/ scan engine missing issue

    Posted Mar 21, 2008 01:56 PM
    This is another effect of corrupted defs.  Try this..
     
    1. Stop symantec av and symantec defwatch services
    2. Delete the c:\program files\common files\symantec shared\virusdefs folder
    3. Copy the above mentioned folder from a workstation that is working properly
    4. Start symantec defwatch and symantec av services.


  • 4.  RE: Ver 10 w/ scan engine missing issue

    Posted Oct 11, 2008 07:31 AM

    Hi

     

    I have tried the above two options. Still the symantec scan engine is missing. 

     

    Any solutions ????

     

    Thanx in advance



  • 5.  RE: Ver 10 w/ scan engine missing issue

    Posted Oct 14, 2008 01:23 AM

    I have dealt with this problem in the following way (not by any documented process mind you):

     

     

     1. Connect to: <\\%COMPUTERNAME%\c$\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5>

    - Delete all files in the main directory here (NOT folders!) except the Fwdstat.log.
    - Delete folders inside the folder "I2_LDVP.VDB".

     

     

    2. Connect to: <\\%COMPUTERNAME%\c$\Program Files\Common Files\Symantec Shared\VirusDefs>

    - Delete all *.tmp folders here.

     

     

    3. Connect to an unaffected Computer and copy the 2 most recent Def folders (YYYYMMDD.###) found in
    <\\%COMPUTERNAME%\c$\Program Files\Common Files\Symantec Shared\VirusDefs>
    Also copy the "definfo.dat" and "usage.dat" files from the good computer and overwrite the one's on the target (problem) computer.

     

     

    4. Watch the problem Computer you are working on in the SSC (refresh the console). After 5-10 minutes it should refresh and display the scan engine value and the most recent defitions. If you want to speed up the process you may want to try to restart the SAV service on the target computer.

     

    5. Connect to (original computer): <\\%COMPUTERNAME%\c$\Program Files\Common Files\Symantec Shared\VirusDefs>. Delete old YYYYMMDD.### folders.

     

    6. Check SSC for client status (Scan engine version and Definitions version updated?).

     

     

    Note: I have read that this problem was resolved in the 10.1.6.6010 release of SAV:

     

    Symantec AntiVirus Client unable to recover from corrupted definitions and accumulation of .vdb files in 7.5 folder
    Fix ID: 838436
    Symptom: A large number of corrupted .vdb files are accumulated, and the client is unable to download or install any further definitions.
    Solution: Added a definition check to ensure the definitions are downloaded correctly, and if corruption is located, the file is removed and remediation occurs.

     

     

    Message Edited by bellboy on 10-13-2008 10:23 PM
    Message Edited by bellboy on 10-13-2008 10:23 PM