Virus Definitions are not Updating and LiveUpdate Reports Error Message "HOST_SELECTION_ERROR: Error: 0x802A0027"

Products

• Mail Security for Microsoft Exchange

Issue/Introduction

Virus Definitions for Symantec Mail Security for Microsoft Exchange (SMSMSE) are out of date.

View the definitions date using these steps:

1. Open the SMSMSE console.
2. Click on the Home tab. 
3. The virus definitions date is displayed in Status|Virus Definitions date.

Conditions

• Running LiveUpdate from the SMSMSE console reports an error and the definitions are not updated.

Symptoms
 

 

• There are no error messages displayed in the Windows Application Event Log
• Symantec Endpoint Protection or Symantec AntiVirus is not installed.
  If either product is installed on the same computer as Symantec Mail Security for Microsoft Exchange, read the following document to ensure that LiveUpdate is configured correctly:
  
  Configuring LiveUpdate when Symantec Mail Security for Microsoft Exchange and Symantec AntiVirus Corporate Edition or Symantec Endpoint Protection are installed together
   
• The following entries are found in the Log.LiveUpdate. The default path for Log.LiveUpdate is C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate.
  
  MM/DD/YYYY, hh:mm:ss GMT ->Failed to load C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate.
  ....
  MM/DD/YYYY, hh:mm:ss GMT ->Account launching LiveUpdate is not a logged in user's account
  ....
  MM/DD/YYYY, hh:mm:ss GMT -> C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\liveupdate_3.2.0.53_english_livetri.zip was an HTML response file. LiveUpdate will ignore this file.
  MM/DD/YYYY, hh:mm:ss GMT -> C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\liveupdate_3.2.0.53_english_livetri.zip contains HTML/DOCTYPE. It is invalid MiniTri, and has been removed
  MM/DD/YYYY, hh:mm:ss GMT -> LiveUpdate will check for Mini-TRI file support on the server since the first Mini-TRI file was not available (liveupdate_3.2.0.53_english_livetri.zip).
  ....
  MM/DD/YYYY, hh:mm:ss GMT -> Progress Update: HOST_SELECTION_ERROR: Error: 0x802A0027
  MM/DD/YYYY, hh:mm:ss GMT -> LiveUpdate did not find any new updates for the given products.
  MM/DD/YYYY, hh:mm:ss GMT -> EVENT - SESSION END FAILED EVENT - The LiveUpdate session ran in Silent Mode. LiveUpdate found 0 updates available, of which 0 were installed and 0 failed to install. The LiveUpdate session exited with a return code of 1814, LiveUpdate could not retrieve the catalog file of available Symantec product and component updates.
  
   
• The HTTP and FTP settings for Symantec LiveUpdate in the Control Panel are set to use the Internet Explorer settings.
• The proxy settings for Internet Explorer are set to "Automatically detect settings."

 

Use the following steps to run Liveupdate:

1. Open the SMSMSE console.
2. Click on the Admin tab.
3. Click on Views|LiveUpdate/Rapid Release Status.
4. Click on Tasks|Run LiveUpdate Certified Definitions.

Resolution

• Make sure that the Product and Content License are not expired.
• The logon account for LiveUpdate in Services should be set to Local System account (Startup Type: Manual)

There are several potential ways of fixing this issue:

1. Open the Control Panel: (On 64-bit systems use Control Panel > View x86 Control Panel Icons)
   1. Double-click Symantec LiveUpdate.
   2. Open the tab HTTP.
   3. Select "I want to customize my HTTP settings for LiveUpdate".
   4. Enter the IP address and HTTP port of your Proxy or Firewall.Apply the changes and close Symantec LiveUpdate.

If your Firewall or Proxy does not require authenticaton, LiveUpdate should now run when scheduled as well.
 

The issue could also be related to Windows 2008 firewall:

1. Open Windows Firewall
2. Select the Exceptions tab within Windows Firewall.
3. Click add Exception.
4. Exclude LuCommServer3-3.exe: Located at:  C:\Program Files (x86)\Symantec\LiveUpdate\

Or it could be cache corruption:

1. Run Luconfig.exe
2. Empty Cache
3. Set both HTTP and FTP to use Internet Option for proxy and hit apply on each
4. Set both HTTP and FTP back to my system does not use a proxy and hit apply on each
   
   Technical Information
   For the time stamp in Log.LiveUpdate

MM = Month
DD = Day
YYYY = Year
hh = hours
mm = minutes
ss = seconds
GMT = Greenwich Mean Time

LiveUpdate has its own service. The Startup Type is: Manual. This is normal.