Only 32 Bit Antivirus / Antispyware Definitions are not updating on the 32 Bit / 64 Bit Operating System.
search cancel

Only 32 Bit Antivirus / Antispyware Definitions are not updating on the 32 Bit / 64 Bit Operating System.

book

Article ID: 152103

calendar_today

Updated On:

Products

Endpoint Protection

Issue/Introduction

Symantec Endpoint Protection Manager (SEPM) is not up to date and is not updating 32 bit Antivirus/Antispyware Definitions (on 32 bit / 64 bit Operating Systems)

Symptoms
32 Bit Antivirus/Antispyware Definitions are not updating.

 

Resolution

If using a 64 bit Operating System, follow the steps below (SEP 11.x):

  1. Open the Registry Editor on the machine where the SEPM is installed.
  2. Go to HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\InstalledApps


  3. On the right-hand side, look for the following String entries: SymcData-sesmVirDef32, SymcData-sesmIPSdef32, SymcData-sesmIPSdef64 and SymcData-sesmVirDef64
  4. For the following entries, check the value data and confirm that they read as follows:

    • (Windows 2003) For SymcData-sesmVirDef32 and SymcData-sesmIPSdef32, they always should look as below:

      C:\Program Files\Common Files\Symantec Shared\SymcData\sesmvirdef32
      C:\Program Files\Common Files\Symantec Shared\SymcData\sesmipsdef32
       
    • (Windows 2003) For SymcData-sesmVirDef64 and SymcData-sesmIPSdef64, they always should look as below:

      C:\Program Files\Common Files\Symantec Shared\SymcData\sesmvirdef64
      C:\Program Files\Common Files\Symantec Shared\SymcData\sesmipsdef64
       
    • (Windows 2008) For SymcData-sesmVirDef32 and SymcData-sesmIPSdef32, they always should look as below:

      C:\Program Data\Symantec\Definitions\SymcData\sesmvirdef32
      C:\Program Data\Symantec\Definitions\SymcData\sesmipsdef32
       
    • (Windows 2008) For SymcData-sesmVirDef64 and SymcData-sesmIPSdef64, they always should look as below:

      C:\Program Data\Symantec\Definitions\SymcData\sesmvirdef64
      C:\Program Data\Symantec\Definitions\SymcData\sesmipsdef64
       
  5. If the value data for these String entries does not match what is described above, modify the String and adjust accordingly
  6. Restart SEPM service.
  7. Start > Run > LUALL

    LiveUpdate will download 32-bit definitions correctly.



If using 32 bit Operating System, follow the steps below (SEP 11.x):

  1. On the machine that has the SEPM installed, open the Registry Editor
  2. Go to HKEY_LOCAL_MACHINE\SOFTWARE\symantec\InstalledApps


  3. On the right-hand side, look for the following String entries: SymcData-sesmvirdef32, SymcData-sesmipsdef32, SymcData-sesmipsdef64 and SymcData-sesmvirdef64
  4. For the following entries, check the value data and confirm that they read as follows:

    • (Windows 2003) For SymcData-sesmVirDef32 and SymcData-sesmIPSdef32, they always should look as below:

      C:\Program Files\Common Files\Symantec Shared\SymcData\sesmvirdef32
      C:\Program Files\Common Files\Symantec Shared\SymcData\sesmipsdef32
       
    • (Windows 2003) For SymcData-sesmVirDef64 and SymcData-sesmIPSdef64, they always should look as below:

      C:\Program Files\Common Files\Symantec Shared\SymcData\sesmvirdef64
      C:\Program Files\Common Files\Symantec Shared\SymcData\sesmipsdef64
       
    • (Windows 2008) For SymcData-sesmVirDef32 and SymcData-sesmIPSdef32, they always should look as below:

      C:\ProgramData\Symantec\Definitions\SymcData\sesmvirdef32
      C:\ProgramData\Symantec\Definitions\SymcData\sesmipsdef32
       
    • (Windows 2008) For SymcData-sesmVirDef64 and SymcData-sesmIPSdef64, they always should look as below:

      C:\ProgramData\Symantec\Definitions\SymcData\sesmvirdef64
      C:\ProgramData\Symantec\Definitions\SymcData\sesmipsdef64
  5. If the value data for these String entries does not match what is described above, modify the String and adjust accordingly
  6. Restart SEPM service.
  7. Start > Run > LUALL

    LiveUpdate will download 32-bit definitions correctly.

If using a 64 bit Operating System, follow the steps below (SEP 12.1.x):

  1. Open the Registry Editor on the machine where the SEPM is installed.
  2. Go to HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\InstalledApps
  3. On the right-hand side, look for the following String entries: SymcData-spcVirDef32, SymcData-spcIPSdef32, SymcData-sesmIPSdef64 and SymcData-spcVirDef64
  4. For the following entries, check the value data and confirm that they read as follows:

    • (Windows 2003) For SymcData-spcVirDef32 and SymcData-sesmIPSdef32, they always should look as below:

      C:\Program Files\Common Files\Symantec Shared\SymcData\spcVirDef32
      C:\Program Files\Common Files\Symantec Shared\SymcData\sesmIPSdef32
       
    • (Windows 2003) For SymcData-sesmVirDef64 and SymcData-sesmIPSdef64, they always should look as below:

      C:\Program Files\Common Files\Symantec Shared\SymcData\spcVirDef64
      C:\Program Files\Common Files\Symantec Shared\SymcData\sesmIPSdef64
       
    • (Windows 2008) For SymcData-sesmVirDef32 and SymcData-sesmIPSdef32, they always should look as below:

      C:\Program Data\Symantec\Definitions\SymcData\spcVirDef32
      C:\Program Data\Symantec\Definitions\SymcData\sesmIPSdef32
       
    • (Windows 2008) For SymcData-sesmVirDef64 and SymcData-sesmIPSdef64, they always should look as below:

      C:\Program Data\Symantec\Definitions\SymcData\spcVirDef64
      C:\Program Data\Symantec\Definitions\SymcData\sesmIPSdef64
       
  5. If the value data for these String entries does not match what is described above, modify the String and adjust accordingly
  6. Restart SEPM service.
  7. Start > Run > LUALL

    LiveUpdate will download 32-bit definitions correctly.



If using 32 bit Operating System, follow the steps below (SEP 12.1.x):

  1. On the machine that has the SEPM installed, open the Registry Editor
  2. Go to HKEY_LOCAL_MACHINE\SOFTWARE\symantec\InstalledApps
  3. On the right-hand side, look for the following String entries: SymcData-spcVirDef32, SymcData-sesmIPSdef32, SymcData-sesmIPSdef64 and SymcData-spcVirDef64
  4. For the following entries, check the value data and confirm that they read as follows:

    • (Windows 2003) For SymcData-spcVirDef32 and SymcData-sesmIPSdef32, they always should look as below:

      C:\Program Files\Common Files\Symantec Shared\SymcData\spcVirDef32
      C:\Program Files\Common Files\Symantec Shared\SymcData\sesmIPSdef32
       
    • (Windows 2003) For SymcData-spcVirDef64 and SymcData-sesmIPSdef64, they always should look as below:

      C:\Program Files\Common Files\Symantec Shared\SymcData\spcVirDef64
      C:\Program Files\Common Files\Symantec Shared\SymcData\sesmIPSdef64
       
    • (Windows 2008) For SymcData-spcVirDef32 and SymcData-sesmIPSdef32, they always should look as below:

      C:\Program Data\Symantec\Definitions\SymcData\spcVirDef32
      C:\Program Files\Symantec\Definitions\SymcData\sesmIPSdef32
       
    • (Windows 2008) For SymcData-spcVirDef64 and SymcData-sesmIPSdef64, they always should look as below:

      C:\Program Data\Symantec\Definitions\SymcData\spcVirDef64
      C:\Program Data\Symantec\Definitions\SymcData\sesmIPSdef64
  5. If the value data for these String entries does not match what is described above, modify the String and adjust accordingly
  6. Restart SEPM service.
  7. Start > Run > LUALL

    LiveUpdate will download 32-bit definitions correctly.




If the above steps do not resolve the issue, uninstall and re-install Symantec Endpoint Protection Manager.

The following articles will help should this be necessary:

About uninstalling Symantec Endpoint Protection Manager
Best Practices for Disaster Recovery with the Symantec Endpoint Protection Manager
 


Attachments

Powered by Wolken Software