Endpoint Protection

Due to a server crash, we had to reinstall Symantec AntiVirus version 10.1.394.0 from CD. However, the Symantec Antivirus service always keeps stopping. We get the following errors in the System event log:
Event ID 7034: "The Symantec AntiVirus service terminated unexpectedly"
Event ID 7031: "The Symantec AntiViurs service terminated unexpectedly" - then attempts to restart service
Event ID 7011: "Timeout (30000 milliseconds) waiting for a transaction response from the Symantec Antivirus service"

We never had these issues before the server crash and the Symantec AntiVirus service was always up and running with Symantec AntiVirus version 10.1.394.0 installed.

Any help on getting this service issue resolved would be very much appreciated.

 You say the version you are installing from the cd is 10.1.394? I have seen this issue happening with earlier versions so if you could double check you are not installing an earlier version that would be great. There was an article made for this issue and has some possible workarounds you might want to check out. Here is the link http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2005060211491948.

Hope this helps,
Grant-

 Pls.create a full memory dump and submit to symantec support for further troubleshooting.

Are you running an AMS (Alert Management System) server on this system? If so, try uninstalling AMS.

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2005051616275448?Open&docid=2002031914291648&nsf=ent-security.nsf&view=0

We double checked the version is 10.1.394. We disabled the cache as per http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2005060211491948 and rebooted the server. The problem still persists. We are not running AMS server on this system. What else can we try? Any suggestions would be appreciated.

Any event id in the event viewer??

Say like  ??

We set the "Reset fail count after" to 45 minutes. Now, the EventID we constantly get is Event ID 7011.

This problem is fixed in Maintenance Patch 1 for Maintenance Release 5 of Symantec AntiVirus 10.1.


Event ID 7011: "Timeout (30000ms) waiting for a transaction response from the SAV service"

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2006052414094848

Cheers,
Thomas

The URL in the last response indicates "With the use of this patch, you can upgrade only those computers that run Symantec Client Security 3.1.5.x or Symantec AntiVirus 10.1.5.x.". The Symantec Antivirus version that is installed is 10.1.394.0.

Hi KCB, better upgrade to SAV 10.1.8

that is right KCB...
This would resolve the issues you have...
Thanks...

As I am new to the Symantec Antivirus software, could anyone please provide help in terms of how we should upgrade from SAV 10.1.0.394 to SAV Version 8? Any help would be very much appreciated.

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2006040414002748

When you say Version 8 , you mean SAV 10 MR8 ?
This link will help you to upgrade from 10.1.0.394 to 10.1.8.8000

Migrating to Symantec AntiVirus 10.1
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2006040414002748

Better also to back up... in an event of failure...

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2005040513373748?Open&docid=2006040414002748&nsf=ent-security.nsf&view=docid

You might also need to install optional components..
please kindly read..
thanks..

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2005033118471548?Open&docid=2006040414002748&nsf=ent-security.nsf&view=docid

How can we download SAV 10.1.8.800?

If your serial number is current, download from fileconnect (https://fileconnect.symantec.com). 

Otherwise you will need to call in so your entitlement can be verified, and once that’s done we can provide you with the FTP credentials to download the product.