How to check the version of AV Engine and Eraser Engine from the client computer

Article:TECH95856  |  Created: 2009-01-27  |  Updated: 2013-11-05  |  Article URL
Article Type
Technical Solution



New definitions incorporating an engine update have been installed; what is the method to confirm that the AV Engine and/or Eraser Engine updates have been successfully applied?



The version of the Eraser Engine, Sonar Engine, IPS Engine and other engines can be viewed using the SEP client's built-in Help and Support, Troubleshooting utility.  Simply click on the Versions tab.  For more details, please see How to Export Basic Troubleshooting Information from Symantec Endpoint Protection Clients.

For the AntiVirus Engine (AVE), check the date and version number of the following files in the folder C:\Program Files\Common Files\Symantec Shared\VirusDefs\ Note: Check the folder with the latest date.

For AV engine:


Engine details can also be confirmed for Eraser engine in a similar way:




The DLL and SYS files do not necessarily have the same version for each engine.

The version number can be checked by right-clicking on the file > Properties > Version > Product Version or by adding a column for Product Version.

Technical Information
Symantec Antivirus (SAV) and Symantec Endpoint Protection (SEP) contain an AV Scan Engine and an Eraser Engine to provide detection and side effects repair for threats found in the environment. Updates to each of these engines are released via definition update packages (typically, via LiveUpdate): there is no separate manual installation necessary. AV Engine and Eraser releases are scheduled on a quarterly basis with maintenance updates released as needed. A reboot is not usually required for AV Engine or Eraser Engines to be applied.


Legacy ID


Article URL

Terms of use for this information are found in Legal Notices