How to apply Intelligent Updater virus definitions to Protection Engine deployments.


Article ID: 177410


Updated On:


Protection Engine for Cloud Services Protection Engine for NAS


There is a need to update virus definitions in Scan Engine on a system that does not have internet access.  Intelligent Updater provides a portable definition package that can be ran on a sever for manual definition deployment.



Document applies to the following versions and later:


  • Symantec Protection Engine (SPE) 7.0.4
  • Symantec Protection Engine (SPE) 7.5.2


  • Symantec Protection Engine (SPE) 7.8.x
  • Symantec Protection Engine (SPE) 7.9.x
  • Symantec Protection Engine (SPE) 8.0



Download Intelligent Updater package for the installed version of Symantec Protection Engine (SPE)

  1. Navigate to the Intelligent Updater download site.
  2. Locate and download the correct version from the table below:

(Note:  32-bit / 64-bit versions of Intelligent updater will only work with corresponding 32/64 bit versions of SPE)

SPE Version Intelligent Updater File Format Example
Windows 32-bit yyyymmdd-vvv-core15v5i32.exe 20180213-007-core15v5i32.exe
Windows 64-bit (SPE 7.x) yyyymmdd-vvv-v5i64.exe 20180213-007-v5i64.exe
Windows 64-bit (SPE 7.8 and newer) yyyymmdd-vvv-core15v5i64.exe 20180213-007-core15v5i64.exe
Linux/Solaris 32-bit
Linux/Solaris 64-bit


Note: Prior to performing the below steps ensure the Symantec Protection Engine (SPE) service/daemon is running.

  • symcscan - Linux/Solaris
  • symcscan.exe (Symantec Protection Engine) - Windows


Setup and deployment steps for the Intelligent updater packages:

Symantec Protection Engine (SPE) Default installation paths:


  • 32-bit: C:\Program Files (x86)\Symantec\Scan Engine\Definitions\Antivirus\
  • 64-bit: C:\Program Files\Symantec\Scan Engine\Definitions\Antivirus\


  • /opt/SYMCScan/bin/definitions/AntiVirus


For Windows based deployments:

  1. Open a command prompt (cmd.exe)
  2. Navigate to the following location:  <SPE_INSTALL_DIR>\Definitions\AntiVirus\  (Where <SPE_INSTALL_DIR> is the literal install path)
  3. Type:  setup-iu.bat enable
  4. Type:  "dir" <enter> and confirm shadow.iu has been created
  5. Locate and execute the Intelligent updater package previously downloaded.
  6. Restart the Symantec Protection Engine service.

Once the steps have been completed, allow 10-15 minutes for the definitions to be fully processed and loaded within SPE.

For Linux/Solaris based deployments:

  1. From the bash prompt navigate to:  /<SPE_INSTALL_DIR>/bin/definitions/AntiVirus/  (Where <SPE_INSTALL_DIR> is the literal install path)
  2. Type:  ./setup-iu.bat enable
  3. Confirm shadow.iu was created in the path
  4. Use chmod to change permissions for the Intelligent updater package to 755
  5. Execute the Intelligent updater package.
  6. Restart the Protection Engine daemon  ( /<SPE_Install_DIR>/bin/ restart )

Once the steps have been completed, allow 10-15 minutes for the definitions to be fully processed and loaded within SPE.


Additional info:

To disable the capability to install Intelligent updater packages run the setup-iu.bat with disable instead of enable.  The shadow.iu file will be removed if successful.

Example:  ./setup-iu.bat disable