1067 The process terminated unexpectedly.

Checking the Vontu monitor logs found following entries :-
STATUS | wrapper  | 2012/06/27 16:31:45 |   Licensed to Symantec Corp. for VontuMonitor
STATUS | wrapper  | 2012/06/27 16:31:45 |
STATUS | wrapper  | 2012/06/27 16:31:45 | Launching a JVM...
FATAL  | wrapper  | 2012/06/27 16:31:45 | Unable to execute Java command.  The system cannot find the file specified. (0x2)
FATAL  | wrapper  | 2012/06/27 16:31:45 |     "..\..\jre\bin\java" -Dcom.vontu.properties=../config/Protect.properties -Djava.util.logging.config.file=../config/MonitorLogging.properties -Djava.endorsed.dirs=../lib/endorsed -XX:+UseCompressedOops -Xms128m -Xmx256m -Djava.library.path="../lib/native;D:\Vontu\Protect\lib\native;;D:\Vontu\jre\bin;D:\Vontu\jre\bin\client;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\\" -classpath "../lib/jar/aggregator.jar;../lib/jar/bloomfilter.jar;../lib/jar/boxmonitor.jar;../lib/jar/classificationapi.jar;../lib/jar/command.jar;../lib/jar/communication.jar;../lib/jar/condition.jar;../lib/jar/cracker.jar;../lib/jar/dataidentifier.jar;../lib/jar/detection.jar;../lib/jar/detectioninterfaces.jar;../lib/jar/detectionresponse.jar;../lib/jar/filereader.jar;../lib/jar/flexresponseapi.jar;../lib/jar/incident_conditions.jar;../lib/jar/incidenthandler.jar;../lib/jar/incidentresponse.jar;../lib/jar/itemcatalog.jar;../lib/jar/javatoxml.jar;../lib/jar/jceks.jar;../lib/jar/keystorehouse.jar;../lib/jar/keyworddetection.jar;../lib/jar/license.jar;../lib/jar/logging.jar;../lib/jar/logmanagement.jar;../lib/jar/messaging.jar;../lib/jar/model_ojb.jar;../lib/jar/model_common.jar;../lib/jar/model_data.jar;../lib/jar/model_data_enum.jar;../lib/jar/monitorapi.jar;../lib/jar/monitorcommunication.jar;../lib/jar/nlp.jar;../lib/jar/policycontroller.jar;../lib/jar/policydependencychecker.jar;../lib/jar/policyloader.jar;../lib/jar/profileindex.jar;../lib/jar/profileindexer.jar;../lib/jar/profiles.jar;../lib/jar/protocols.jar;../lib/jar/responseconfig.jar;../lib/jar/security.jar;../lib/jar/statistics.jar;../lib/jar/systempatterns.jar;../lib/jar/updater.jar;../lib/jar/unicodeconverter.jar;../lib/jar/urlconnections.jar;../lib/jar/vontu_utilities.jar;../lib/jar/vontukeystorehouse.jar;../plugins/classification.jar;../plugins/directorycrawler.jar;../plugins/discover.jar;../plugins/inline_smtp.jar;../plugins/icap.jar;../plugins/lotusnotescrawler.jar;../plugins/NCSO.jar;../plugins/network.jar;../plugins/Notes.jar;../plugins/packetcapture.jar;../lib/jar/activation.jar;../lib/jar/axis.jar;../lib/jar/axis-jaxrpc.jar;../lib/jar/axis-wsdl4j.jar;../lib/jar/cern.jar;../lib/jar/concurrent.jar;../lib/jar/commons-beanutils-1.7.0.jar;../lib/jar/commons-codec.jar;../lib/jar/commons-collections-3.1.jar;../lib/jar/commons-configuration-1.4.jar;../lib/jar/commons-dbcp-1.2.1.jar;../lib/jar/commons-discovery.jar;../lib/jar/commons-digester-1.7.jar;../lib/jar/commons-httpclient.jar;../lib/jar/commons-io-1.4.jar;../lib/jar/commons-lang-2.3.jar;../lib/jar/commons-logging.jar;../lib/jar/commons-pool-1.3.jar;../lib/jar/csvfile.jar;../lib/jar/derby.jar;../lib/jar/derbynet.jar;../lib/jar/entropycrawler.jar;../lib/jar/es_common.jar;../lib/jar/es_ecispi.jar;../lib/jar/es_exchangewebstore.jar;../lib/jar/es_sharepointom.jar;../lib/jar/fast-md5.jar;../lib/jar/icu4j-3_6.jar;../lib/jar/icu4j-charsets-3_6.jar;../lib/jar/javax.servlet.jar;../lib/jar/jcifs-1.3.11.jar;../lib/jar/jcs.jar;../lib/jar/jdom-1.0.jar;../lib/jar/jmime.jar;../lib/jar/jsafeJCE.jar;../lib/jar/KeyView.jar;../lib/jar/mail.jar;../lib/jar/org.mortbay.jetty.jar;../lib/jar/rngpack.jar;../lib/jar/scriptengine.jar;../lib/jar/slic.jar;../lib/jar/slide-webdavlib.jar;../lib/jar/spring-beans.jar;../lib/jar/spring-context.jar;../lib/jar/spring-core.jar;../lib/jar/symanteccrypto.jar;../lib/jar/symanteccrypto_intg.jar;../lib/jar/tar.jar;../lib/jar/tomcat/vontu-catalina.jar;../lib/jar/tomcat/commons-modeler-2.0.1.jar;../lib/jar/tomcat/tomcat-coyote.jar;../lib/jar/tomcat/tomcat-http.jar;../lib/jar/tomcat/tomcat-coyote.jar;../lib/jar/tomcat/tomcat-util.jar;../lib/jar/tomcat/naming-resources.jar;../lib/jar/tomcat/naming-factory.jar;../lib/jar/vontu.db-ojb-1.0.4.jar;../lib/jar/wrapper.jar;../lib/jar/jetty/jetty-jmx-7.3.1.v20110307.jar;../lib/jar/jetty/jetty-jndi-7.3.1.v20110307.jar;../lib/jar/jetty/jetty-plus-7.3.1.v20110307.jar;../lib/jar/jetty/jetty-rewrite-7.3.1.v20110307.jar;../lib/jar/jetty/jetty-security-7.3.1.v20110307.jar;../lib/jar/jetty/jetty-server-7.3.1.v20110307.jar;../lib/jar/jetty/jetty-servlet-7.3.1.v20110307.jar;../lib/jar/jetty/jetty-servlets-7.3.1.v20110307.jar;../lib/jar/jetty/jetty-util-7.3.1.v20110307.jar;../lib/jar/jetty/jetty-webapp-7.3.1.v20110307.jar;../lib/jar/jetty/jetty-xml-7.3.1.v20110307.jar;../lib/jar/jetty/servlet-api-2.5.jar;../lib/jar/metro/webservices-rt.jar;../lib/jar/jetty/jetty-ajp-7.3.1.v20110307.jar;../lib/jar/jetty/jetty-annotations-7.3.1.v20110307.jar;../lib/jar/jetty/jetty-client-7.3.1.v20110307.jar;../lib/jar/jetty/jetty-continuation-7.3.1.v20110307.jar;../lib/jar/jetty/jetty-deploy-7.3.1.v20110307.jar;../lib/jar/jetty/jetty-http-7.3.1.v20110307.jar;../lib/jar/jetty/jetty-io-7.3.1.v20110307.jar;../lib/jar/jetty/jetty-websocket-7.3.1.v20110307.jar" -Dwrapper.key="ln3eJOW-rxDWCdp82N9iiW_vXlFRZ25g" -Dwrapper.port=32000 -Dwrapper.jvm.port.min=31000 -Dwrapper.jvm.port.max=31999 -Dwrapper.pid=628 -Dwrapper.timer_slow_threshold="2" -Dwrapper.version="3.3.9-st" -Dwrapper.native_library="wrapper" -Dwrapper.service="TRUE" -Dwrapper.cpu.timeout="10" -Dwrapper.jvmid=1 org.tanukisoftware.wrapper.WrapperSimpleApp com.vontu.boxmonitor.BoxMonitor
ADVICE | wrapper  | 2012/06/27 16:31:45 |
ADVICE | wrapper  | 2012/06/27 16:31:45 | ------------------------------------------------------------------------
ADVICE | wrapper  | 2012/06/27 16:31:45 | Advice:
ADVICE | wrapper  | 2012/06/27 16:31:45 | Usually when the Wrapper fails to start the JVM process, it is because
ADVICE | wrapper  | 2012/06/27 16:31:45 | of a problem with the value of the configured Java command.  Currently:
ADVICE | wrapper  | 2012/06/27 16:31:45 | wrapper.java.command=..\..\jre\bin\java
ADVICE | wrapper  | 2012/06/27 16:31:45 | Please make sure that the PATH or any other referenced environment
ADVICE | wrapper  | 2012/06/27 16:31:45 | variables are correctly defined for the current environment.
ADVICE | wrapper  | 2012/06/27 16:31:45 | ------------------------------------------------------------------------
ADVICE | wrapper  | 2012/06/27 16:31:45 |
FATAL  | wrapper  | 2012/06/27 16:31:45 | Critical error: wait for JVM process failed

Cause : could be an issue with the extraction of the jar files.

Copy all the files from Vontu\jre\ from the working detection server and paste it in the same directory of detection server where services are not getting started.

Now you will be able to start the VontuUpdate and VontuMonitor services.

Root cause of the issue : This issue occurs on the windows 2008 server with UAC on. Disable the UAC and then perform the extraction and upgrade of DLP.