It is reported that the Symantec Endpoint Protection (SEP) clients are not updating the definitions correctly. Review of the Symantec Endpoint Protection Manager ‘s (SEPM) Log.LiveUpdate shows many LUXXXX errors when decompressing the various downloads.
These errors can be caused if the LiveUpdate (LU) client version was not upgraded when SEP 12.1 RU1 was installed.
1) Uninstall LiveUpdate from the Control Panel > Programs and Features.
2) Clear the catalog file:
C:Program Files\Symantec\Symantec Endpoint Protection Manager\bin and type the command “ lucatalog –cleanup” (Sans quotes.)
3) Reboot the machine.
4) Re-install the correct version of LiveUpdate or the latest available LiveUpdate client. See the articles below for details on obtaining the correct client.
5) Go to Start > Run > type CMD
6) Go to Start > Run and Type LUALL
This should allow LiveUpdate to run successfully and correctly update the SEPM’s content.
Symantec Endpoint Protection version 12.1 RU1
Windows 2008 R2