Endpoint Protection 12.1 Clients fail to apply Virus and Spyware Protection definitions from LiveUpdate Administrator 2.x

book

Article ID: 157062

calendar_today

Updated On:

Products

Endpoint Protection

Issue/Introduction

Symantec Endpoint Protection (SEP) 12.1 client computers with Virus and Spyware Protection definitions content older than 28 days fail to apply Virus and Spyware Protection definitions updates downloaded from an internal LiveUpdate Administrator 2.x (LUA 2.x) Distribution Center (DC).

One of the following is written to the SEP client's log.lue file:

  • 64-bit SEP clients:
    •   Update for moniker: {07B590B3-9282-482f-BBAA-6D515D385869}, P: SEPC Virus Definitions Win64 (x64) v12.1, V: MicroDefsB.CurDefs, L: SymAllLanguages, package: 1349039111jtun_emt64sep12encful.m26, SeqName: CurDefs, SeqNum: 120930009, has update status code: 208
      * Reporting error: 0x80004005 Update failed PVL=SEPC Virus Definitions Win64 (x64) v12.1 MicroDefsB.CurDefs SymAllLanguages
      * PostSession Callbacks Failed. Update status code for moniker {07B590B3-9282-482f-BBAA-6D515D385869}, P: SEPC Virus Definitions Win64 (x64) v12.1, V: MicroDefsB.CurDefs, L: SymAllLanguages is: 0x      D0.
       
    •   Update for moniker: {FC1DE9A6-0007-4f4a-9CDB-BB89A857F51D}, P: SEPC Virus Definitions Win64 (x64) v12.1, V: MicroDefsB.Error, L: SymAllLanguages, package: 1342510013jtun_emt64sep12encful.m26, SeqName: HubDefs, SeqNum: 120716018, has update status code: 208
      * Reporting error: 0x80004005 Update failed PVL=SEPC Virus Definitions Win64 (x64) v12.1 MicroDefsB.Error SymAllLanguages
      * PostSession Callbacks Failed. Update status code for moniker {FC1DE9A6-0007-4f4a-9CDB-BB89A857F51D}, P: SEPC Virus Definitions Win64 (x64) v12.1, V: MicroDefsB.Error, L: SymAllLanguages is: 0x      D0.
       
  • 32 bit SEP clients:
    •   Update for moniker: {535CB6A4-441F-4e8a-A897-804CD859100E}, P: SEPC Virus Definitions Win32 v12.1, V: MicroDefsB.CurDefs, L: SymAllLanguages, package: 1345415178jtun_sep12ennful26.m26, SeqName: CurDefs, SeqNum: 120819007, has update status code: 208
      * Reporting error: 0x80004005 Update failed PVL=SEPC Virus Definitions Win32 v12.1 MicroDefsB.CurDefs SymAllLanguages
      * PostSession Callbacks Failed. Update status code for moniker {535CB6A4-441F-4e8a-A897-804CD859100E}, P: SEPC Virus Definitions Win32 v12.1, V: MicroDefsB.CurDefs, L: SymAllLanguages is: 0x      D0.
       
    •   Update for moniker: {6AAE5D6B-C70C-4cdf-96C9-110AA1378E8C}, P: SEPC Virus Definitions Win32 v12.1, V: MicroDefsB.Error, L: SymAllLanguages, package: 1342510013jtun_sep12ennful26.m26, SeqName: HubDefs, SeqNum: 120716018, has update status code: 208
      * Reporting error: 0x80004005 Update failed PVL=SEPC Virus Definitions Win32 v12.1 MicroDefsB.Error SymAllLanguages
      * PostSession Callbacks Failed. Update status code for moniker {6AAE5D6B-C70C-4cdf-96C9-110AA1378E8C}, P: SEPC Virus Definitions Win32 v12.1, V: MicroDefsB.Error, L: SymAllLanguages is: 0x      D0.

Cause

Symantec modified the antivirus definition update process for SEP 12.1 clients in August 2012. Since this modification, SEP 12.1 clients that download their antivirus definition updates from a LiveUpdate Administrator and happen to be out of date by more than 28 days may no longer update their antivirus definitions successfully.

Resolution

Symantec released an update on October 15, 2012, which is automatically downloaded by LUA servers as part of their normal download task. Once LUA servers download and process this update, the problem will be automatically resolved. No further actions are required.