ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

SPE 8.2.2 downloads virus definitions but does not apply virus definitions

book

Article ID: 237249

calendar_today

Updated On:

Products

Protection for SharePoint Servers Protection Engine for Cloud Services

Issue/Introduction

After upgrade to Symantec Protection Engine (SPE) 8.2.2, SPE downloads but does not apply pattern files.  

In report.xml and on the local UI, the date of the Antivirus definitions does not change.

In lux.log, the return code 0x80011003 appears.

Environment

SPE 8.2.2

Resolution

 

Broadcom is investigating at this time.

Broadcom reproduced this behavior in a Support test lab environment with a customer provided license file.

 

To confirm the issue via Linux bash prompt

  1. To check the current date, type:
    date

  2. To check whether virus definitions updated in the last 24 hours, type:
    grep "AntiVirus DefinitonDateTime" /opt/SYMCScan/bin/report.xml

  3. To check whether LiveUpdate recorded result code 0x80011003, type:
    grep "0x80011003" /opt/SYMCScan/bin/definitions/Stargate/logs/lux.log

 

To confirm the issue via Windows cmd prompt

  1. To check the current date and time, type:
    date /T; time /T

  2. To check whether virus definitions updated in the last 24 hours, type:
    find "AntiVirus" "C:\Program Files\Symantec\Scan Engine\report.xml"

  3. To check whether LiveUpdate recorded result code 0x80011003, type:
    find "0x80011003" "C:\Program Files\Symantec\Scan Engine\Definitions\Stargate\logs"

 

 

To confirm the issue via Windows powershell

  1. To check the current date and time, type:
    date

  2. To check whether virus definitions updated in the last 24 hours, type:
    Select-String -Path "C:\Program Files\Symantec\Scan Engine\report.xml" -Pattern "AntiVirus"

  3. To check whether LiveUpdate recorded result code 0x80011003, type:
    Select-String -Path "C:\Program Files\Symantec\Scan Engine\Definitions\Stargate\logs" -Pattern "0x80011003"

 

To workaround

  1. Delete the Stargate\bin_back folder.
  2. Restart the Symantec Protection Engine service.

 

 

Additional Information

To investigate with Broadcom support

  1. Run symdiag on the machine where SPE is installed. Select all available Symantec products.
  2. Create a zip archive of the contents of the C:\ProgramData\Symantec Shared\Licenses folder
  3. Create a zip archive of C:\Program Files\Symantec\Scan Engine\Definitions\Stargate and all subfolders
  4. Create a support case, cite this KB, and attach the evidence files to the case.