Endpoint Protection

 View Only
  • 1.  Virus def update error Status 20000032

    Posted Jan 17, 2012 07:53 PM

    Hi,

    The logs in our SAV 10.X server are getting filled up with the following error.

    "Update to computer XXXXXXXXXXXX of virus definition file 140117c failed. Status 20000032"

    These errors start right after a new virus def is loaded on the server and continue for the next 3-4 hours. Any ideas why these errors and logged and is there a solution.

    The endpoints do get updated though.



  • 2.  RE: Virus def update error Status 20000032

    Posted Jan 17, 2012 08:40 PM

    Dear Abinash

    Best option is to upgrade to SEP 12.1

    There are many bug and error which are fixed.



  • 3.  RE: Virus def update error Status 20000032

    Posted Jan 17, 2012 11:21 PM

    Hi,

    Status 20000032 translates to the error message: "ERROR_COPY_OUT_OF_DATE."

    You can see this error in the SAV when an attempt is made to copy the same virus definition files a second time.

    SAV log is indicating that virus definitions are already updated and is logging that a check was made. Virus definitions were not downloaded a second time.

     

    There is no major impact due to this. But still if you want you can try Removing & Re-installing the SAV client.

    Which will definitely resolve your issue.
     



  • 4.  RE: Virus def update error Status 20000032

    Posted Jan 18, 2012 04:44 AM

    Hi Abinash,

    "Thumbs up" to the advice, above.  Plus, it is definitelty time to start migrating to SEP.  SAV 10.1 is still currently supported, but only until July 2012. SAV 10.x and SCS 3.x entered End of Life on January 4, 2010, meaning the 30-month Standard Support window will end July 4, 2012.  After that date, AV definitions may no longer be available at all for SAV. 

    http://www.symantec.com/theme.jsp?themeid=eol_av_ce&depthpath=0

    http://www.symantec.com/business/support/index?page=content&id=TECH178551

    Best regards,

    Mick



  • 5.  RE: Virus def update error Status 20000032

    Trusted Advisor
    Posted Jan 18, 2012 07:56 AM

    Hello,

    I completely agree with the Suggestions above.

    However, speaking about your issue:

    If you update Symantec AntiVirus Corporate Edition (SAVCE) with LiveUpdate it fails and you see an error message like "LiveUpdate was unable to load the catalog file of available Symantec product updates are not." You may also see an error message like "Unable to connect to the LiveUpdate server."

    Solution:

    For this problem there are several possible causes: In most cases, there is one of the following two reasons:

    Symantec System Center

    Check the server properties in the Symantec System Center. If the tab "live update" refers to an internal server, change it to a Symantec LiveUpdate server.

    Existence of the file S32luhl1.dll

    First Find the file S32luhl1.dll the folder C: \ Program Files \ Symantec \ LiveUpdate. If the file exists, delete it.

    Second Open, delete the file and then the line Settings.LiveUpdate PREFERENCES \ LAN_HAL_PRESENT = YES.

    NOTE: Only change the one Settings.LiveUpdate file whose name no number is prefixed. To delete or modify these files, you must have read-write access. For Settings.LiveUpdate may write protection is set.


    The particular location of the file Settings.LiveUpdate is operating system dependent:

    For Windows 95/98: C: \ Windows \ All Users \ Application Data \ Symantec \ LiveUpdate

    For Windows NT 4: C: \ WinNT \ Profiles \ All Users \ Application Data \ Symantec \ LiveUpdate

    For Windows 2000: C: \ Documents and Settings \ All Users \ Application Data \ Symantec \ LiveUpdate

    NOTE: Before removing the line PREFERENCES \ LAN_HAL_PRESENT = YES from the file you must delete the file Settings.LiveUpdate S32luhl1.dll.

    Otherwise, contact Symantec Technical Support.



  • 6.  RE: Virus def update error Status 20000032

    Posted Jan 18, 2012 12:21 PM

    Guys, Thanks for all the feedback. A part of our infra is already on SEPM and the rest is being migrated but these errors are filling up the event logs and driving our log monitoring software mad.

    Mithun,

    We dont use Liveupdate, its all through VDTM.

    I'll try reinstalling a few clients and see if that changes anything.