Hello,
Since 6 days our SMS for MSE 6.5.8 is not updating the virus definitions.
The log.liveupdate file says:
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
// Start LuComServer
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
7/27/2015, 15:10:49 GMT -> LuComServer version: 3.3.0.85
7/27/2015, 15:10:49 GMT -> LiveUpdate Language: English
7/27/2015, 15:10:49 GMT -> LuComServer Sequence Number: 20090320
7/27/2015, 15:10:49 GMT -> OS: Windows Vista[Product:0x00000007], Service Pack: 2, Major: 6, Minor: 0, Build: 6002 (64-bit)
7/27/2015, 15:10:49 GMT -> System Language:[0x0409], User Language:[0x0409]
7/27/2015, 15:10:49 GMT -> IE 7 Support
7/27/2015, 15:10:49 GMT -> ComCtl32 version: 6.16
7/27/2015, 15:10:49 GMT -> IP Addresses: 192.168.221.21
7/27/2015, 15:10:49 GMT -> Loading C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
7/27/2015, 15:10:49 GMT -> Opened the product inventory at "C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
7/27/2015, 15:10:49 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
7/27/2015, 15:10:49 GMT -> LiveUpdate flag value for this run is 0
7/27/2015, 15:10:49 GMT -> **** Starting a Silent LiveUpdate Session ****
7/27/2015, 15:10:49 GMT -> *********************** Start of New LU Session ***********************
7/27/2015, 15:10:49 GMT -> The command line is -s
7/27/2015, 15:10:50 GMT -> EVENT - SESSION START EVENT - The LiveUpdate session is running in Silent Mode.
7/27/2015, 15:10:50 GMT -> Check for updates to: Product: LiveUpdate, Version: 3.3.0.85, Language: English. Mini-TRI file name: liveupdate_3.3.0.85_english_livetri.zip
7/27/2015, 15:10:50 GMT -> LiveUpdate is about to launch a new callback proxy process for product SMSMSE Virus Definitions WOW64 with moniker {F92F8A7B-F111-4db7-B145-6C41E7D6AE94}.
7/27/2015, 15:10:50 GMT -> Starting Callback Proxy Worker thread.
7/27/2015, 15:10:50 GMT -> The callback proxy for moniker {F92F8A7B-F111-4db7-B145-6C41E7D6AE94} was successfully registered with LiveUpdate.
7/27/2015, 15:10:50 GMT -> LiveUpdate successfully launched a new callback proxy process for product SMSMSE Virus Definitions WOW64.
7/27/2015, 15:10:50 GMT -> LiveUpdate is about to execute a PreSession callback for product SMSMSE Virus Definitions WOW64.
7/27/2015, 15:10:50 GMT -> The callback proxy finished executing the callback with a result code of 0x0
7/27/2015, 15:10:50 GMT -> The PreSession callback for product SMSMSE Virus Definitions WOW64 completed with a result of 0x0
7/27/2015, 15:10:50 GMT -> Progress Update: TRYING_HOST: HostName: "liveupdate.symantecliveupdate.com" URL: "http://liveupdate.symantecliveupdate.com" HostNumber: 0
7/27/2015, 15:10:50 GMT -> Progress Update: TRIFILE_DOWNLOAD_START: Number of TRI files: 0 Downloading LiveUpdate catalog file
7/27/2015, 15:10:50 GMT -> LiveUpdate will download the first Mini-TRI file, liveupdate_3.3.0.85_english_livetri.zip
7/27/2015, 15:10:50 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
7/27/2015, 15:10:50 GMT -> Progress Update: PRE_CONNECT: Proxy: "http=192.168.3.10:8080" Agent: "Symantec LiveUpdate" AccessType: 0x3
7/27/2015, 15:10:51 GMT -> Progress Update: CONNECTED: Proxy: "http=192.168.3.10:8080" Agent: "pVh51bE52Y8MtfPYLHMzGFiXabE+Um2VQAAAAA" AccessType: 0x3
7/27/2015, 15:10:51 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantecliveupdate.com/liveupdate_3.3.0.85_english_livetri.zip", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
7/27/2015, 15:10:51 GMT -> HttpSendRequest (status 404): Request failed - File does not exist on the server.
7/27/2015, 15:10:51 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://liveupdate.symantecliveupdate.com/liveupdate_3.3.0.85_english_livetri.zip", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\liveupdate_3.3.0.85_english_livetri.zip" HR: 0x802A0026
7/27/2015, 15:10:51 GMT -> HR 0x802A0026 DECODE: E_HTTP_NOT_FOUND
7/27/2015, 15:10:51 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0 , Num Successful: 0
7/27/2015, 15:10:51 GMT -> LiveUpdate will check for Mini-TRI file support on the server since the first Mini-TRI file was not available (liveupdate_3.3.0.85_english_livetri.zip).
7/27/2015, 15:10:51 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
7/27/2015, 15:10:51 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantecliveupdate.com/minitri.flg", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
7/27/2015, 15:10:51 GMT -> HttpSendRequest (status 304): Request succeeded - File up to date so download is not required
7/27/2015, 15:10:51 GMT -> Progress Update: DOWNLOAD_FILE_NOT_MODIFIED: URL: "http://liveupdate.symantecliveupdate.com/minitri.flg", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\minitri.flg"
7/27/2015, 15:10:51 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: URL: "http://liveupdate.symantecliveupdate.com/minitri.flg", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\minitri.flg" HR: 0x0
7/27/2015, 15:10:51 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0 , Num Successful: 1
7/27/2015, 15:10:52 GMT -> Progress Update: HOST_SELECTED: Host IP: "200.123.201.144" URL: "http://liveupdate.symantecliveupdate.com" HostNumber: 0
7/27/2015, 15:10:52 GMT -> Attempting to load SymCrypt...
7/27/2015, 15:10:52 GMT -> SymCrypt.dll does not exist.
7/27/2015, 15:10:52 GMT -> EVENT - SERVER SELECTION SUCCESSFUL EVENT - LiveUpdate connected to server liveupdate.symantecliveupdate.com at path via a HTTP connection. The server connection connected with a return code of 200, Successfully download TRI file
7/27/2015, 15:10:52 GMT -> LiveUpdate is connected to a server with Mini-TRI file support. LiveUpdate will download and process the remaining Mini-TRI files.
7/27/2015, 15:10:52 GMT -> Check for updates to: Product: Automatic LiveUpdate, Version: 3.3.0.85, Language: English. Mini-TRI file name: automatic$20liveupdate_3.3.0.85_english_livetri.zip
7/27/2015, 15:10:52 GMT -> Check for updates to: Product: SMSMSE Virus Definitions WOW64, Version: 5.0, Language: SymAllLanguages. Mini-TRI file name: smsmse$20virus$20definitions$20wow64_5.0_symalllanguages_livetri.zip
7/27/2015, 15:10:52 GMT -> Check for updates to: Product: Symantec Mail Security For Microsoft Exchange, Version: 1.0, Language: English. Mini-TRI file name: symantec$20mail$20security$20for$20microsoft$20exchange_1.0_english_livetri.zip
7/27/2015, 15:10:52 GMT -> Progress Update: TRIFILE_DOWNLOAD_END: Number of TRI files: "0"
7/27/2015, 15:10:52 GMT -> Progress Update: TRIFILE_DOWNLOAD_START: Number of TRI files: 3 Downloading Mini-TRI files
7/27/2015, 15:10:52 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
7/27/2015, 15:10:52 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantecliveupdate.com/automatic$20liveupdate_3.3.0.85_english_livetri.zip", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
7/27/2015, 15:10:52 GMT -> HttpSendRequest (status 404): Request failed - File does not exist on the server.
7/27/2015, 15:10:52 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://liveupdate.symantecliveupdate.com/automatic$20liveupdate_3.3.0.85_english_livetri.zip", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\automatic$20liveupdate_3.3.0.85_english_livetri.zip" HR: 0x802A0026
7/27/2015, 15:10:52 GMT -> HR 0x802A0026 DECODE: E_HTTP_NOT_FOUND
7/27/2015, 15:10:52 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0 , Num Successful: 0
7/27/2015, 15:10:52 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
7/27/2015, 15:10:52 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantecliveupdate.com/smsmse$20virus$20definitions$20wow64_5.0_symalllanguages_livetri.zip", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
7/27/2015, 15:10:52 GMT -> HttpSendRequest (status 304): Request succeeded - File up to date so download is not required
7/27/2015, 15:10:53 GMT -> Progress Update: DOWNLOAD_FILE_NOT_MODIFIED: URL: "http://liveupdate.symantecliveupdate.com/smsmse$20virus$20definitions$20wow64_5.0_symalllanguages_livetri.zip", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\smsmse$20virus$20definitions$20wow64_5.0_symalllanguages_livetri.zip"
7/27/2015, 15:10:53 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: URL: "http://liveupdate.symantecliveupdate.com/smsmse$20virus$20definitions$20wow64_5.0_symalllanguages_livetri.zip", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\smsmse$20virus$20definitions$20wow64_5.0_symalllanguages_livetri.zip" HR: 0x0
7/27/2015, 15:10:53 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0 , Num Successful: 1
7/27/2015, 15:10:53 GMT -> LiveUpdate copied the Mini-TRI file from C:\ProgramData\Symantec\LiveUpdate\Downloads\smsmse$20virus$20definitions$20wow64_5.0_symalllanguages_livetri.zip to C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri591\smsmse$20virus$20definitions$20wow64_5.0_symalllanguages_livetri.zip
7/27/2015, 15:10:53 GMT -> Progress Update: UNZIP_FILE_START: Zip File: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri591\smsmse$20virus$20definitions$20wow64_5.0_symalllanguages_livetri.zip", Dest Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri591"
7/27/2015, 15:10:53 GMT -> Progress Update: UNZIP_FILE_PROGRESS: Extracting file: "liveupdt.grd"
7/27/2015, 15:10:53 GMT -> Progress Update: UNZIP_FILE_PROGRESS: Extracting file: "liveupdt.sig"
7/27/2015, 15:10:53 GMT -> Progress Update: SECURITY_SIGNATURE_MATCHED: GuardFile: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri591\liveupdt.grd"
7/27/2015, 15:10:53 GMT -> Progress Update: UNZIP_FILE_FINISH: Zip File: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri591\smsmse$20virus$20definitions$20wow64_5.0_symalllanguages_livetri.zip", Dest Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri591", HR: 0x0
7/27/2015, 15:10:53 GMT -> Progress Update: UNZIP_FILE_START: Zip File: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri591\smsmse$20virus$20definitions$20wow64_5.0_symalllanguages_livetri.zip", Dest Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri591"
7/27/2015, 15:10:53 GMT -> Progress Update: UNZIP_FILE_PROGRESS: Extracting file: "liveupdt.tri"
7/27/2015, 15:10:53 GMT -> Progress Update: UNZIP_FILE_FINISH: Zip File: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri591\smsmse$20virus$20definitions$20wow64_5.0_symalllanguages_livetri.zip", Dest Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri591", HR: 0x0
7/27/2015, 15:10:53 GMT -> Progress Update: SECURITY_PACKAGE_TRUSTED: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri591\liveupdt.tri"
7/27/2015, 15:10:53 GMT -> Available Update for Product: SMSMSE Virus Definitions WOW64, Version: 5.0, Language: SymAllLanguages, ItemSeqName: VirusDef. Current Sequence Number: 2015072101, New Sequence Number 2015072601, Update filename 1437913750jtun_ennlu2.x86
7/27/2015, 15:10:53 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
7/27/2015, 15:10:53 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantecliveupdate.com/symantec$20mail$20security$20for$20microsoft$20exchange_1.0_english_livetri.zip", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
7/27/2015, 15:10:53 GMT -> HttpSendRequest (status 304): Request succeeded - File up to date so download is not required
7/27/2015, 15:10:53 GMT -> Progress Update: DOWNLOAD_FILE_NOT_MODIFIED: URL: "http://liveupdate.symantecliveupdate.com/symantec$20mail$20security$20for$20microsoft$20exchange_1.0_english_livetri.zip", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\symantec$20mail$20security$20for$20microsoft$20exchange_1.0_english_livetri.zip"
7/27/2015, 15:10:53 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: URL: "http://liveupdate.symantecliveupdate.com/symantec$20mail$20security$20for$20microsoft$20exchange_1.0_english_livetri.zip", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\symantec$20mail$20security$20for$20microsoft$20exchange_1.0_english_livetri.zip" HR: 0x0
7/27/2015, 15:10:53 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0 , Num Successful: 1
7/27/2015, 15:10:53 GMT -> LiveUpdate copied the Mini-TRI file from C:\ProgramData\Symantec\LiveUpdate\Downloads\symantec$20mail$20security$20for$20microsoft$20exchange_1.0_english_livetri.zip to C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri593\symantec$20mail$20security$20for$20microsoft$20exchange_1.0_english_livetri.zip
7/27/2015, 15:10:53 GMT -> Progress Update: UNZIP_FILE_START: Zip File: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri593\symantec$20mail$20security$20for$20microsoft$20exchange_1.0_english_livetri.zip", Dest Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri593"
7/27/2015, 15:10:53 GMT -> Progress Update: UNZIP_FILE_PROGRESS: Extracting file: "liveupdt.grd"
7/27/2015, 15:10:53 GMT -> Progress Update: UNZIP_FILE_PROGRESS: Extracting file: "liveupdt.sig"
7/27/2015, 15:10:53 GMT -> Progress Update: SECURITY_SIGNATURE_MATCHED: GuardFile: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri593\liveupdt.grd"
7/27/2015, 15:10:53 GMT -> Progress Update: UNZIP_FILE_FINISH: Zip File: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri593\symantec$20mail$20security$20for$20microsoft$20exchange_1.0_english_livetri.zip", Dest Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri593", HR: 0x0
7/27/2015, 15:10:53 GMT -> Progress Update: UNZIP_FILE_START: Zip File: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri593\symantec$20mail$20security$20for$20microsoft$20exchange_1.0_english_livetri.zip", Dest Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri593"
7/27/2015, 15:10:53 GMT -> Progress Update: UNZIP_FILE_PROGRESS: Extracting file: "liveupdt.tri"
7/27/2015, 15:10:53 GMT -> Progress Update: UNZIP_FILE_FINISH: Zip File: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri593\symantec$20mail$20security$20for$20microsoft$20exchange_1.0_english_livetri.zip", Dest Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri593", HR: 0x0
7/27/2015, 15:10:53 GMT -> Progress Update: SECURITY_PACKAGE_TRUSTED: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri593\liveupdt.tri"
7/27/2015, 15:10:53 GMT -> Progress Update: TRIFILE_DOWNLOAD_END: Number of TRI files: "2"
7/27/2015, 15:10:53 GMT -> ********* Finished Finding Available Updates *********
7/27/2015, 15:10:53 GMT -> Progress Update: PATCH_DOWNLOADING_START: Number of patches: 1
7/27/2015, 15:10:53 GMT -> GetUpdates: SMSMSE Virus Definitions WOW64, 5.0, SymAllLanguages ==> 1437913750jtun_ennlu2.x86
7/27/2015, 15:10:53 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 736866870
7/27/2015, 15:10:53 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "1437913750jtun_ennlu2.x86", Estimated Size: 736866870, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
7/27/2015, 15:10:54 GMT -> HttpSendRequest (status 200): Request succeeded
7/27/2015, 15:10:54 GMT -> ERROR - The requested file, 1437913750jtun_ennlu2.x86, is too large (736866870 bytes) for LiveUpdate to start to download.
7/27/2015, 15:10:54 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "1437913750jtun_ennlu2.x86", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\1437913750jtun_ennlu2.x86" HR: 0x802A0048
7/27/2015, 15:10:54 GMT -> HR 0x802A0048 DECODE: E_FILE_NOT_TRUSTED
7/27/2015, 15:10:54 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x802A0048, Num Successful: 0
7/27/2015, 15:10:54 GMT -> HR 0x802A0048 DECODE: E_FILE_NOT_TRUSTED
7/27/2015, 15:10:54 GMT -> EVENT - SESSION END FAILED EVENT - The LiveUpdate session ran in Silent Mode. LiveUpdate found 1 updates available, of which 0 were installed and 1 failed to install. The LiveUpdate session exited with a return code of 6013, LiveUpdate is unable to continue, because a file needed on the server may be corrupt. Please run LiveUpdate again later.
7/27/2015, 15:10:54 GMT -> LiveUpdate is about to execute a PostSession callback for product SMSMSE Virus Definitions WOW64.
7/27/2015, 15:10:54 GMT -> ProductRegCom/luProductReg(PID=9248/TID=41688): Successfully created an instance of an luProductReg object!
7/27/2015, 15:10:54 GMT -> ProductRegCom/luProductReg(PID=9248/TID=41688): Path for calling process executable is C:\Program Files (x86)\Symantec\LiveUpdate\LuCallbackProxy.exe.
7/27/2015, 15:10:54 GMT -> ProductRegCom/luProductReg(PID=9248/TID=41688): Destroyed luProductReg object.
7/27/2015, 15:10:54 GMT -> The callback proxy finished executing the callback with a result code of 0x0
7/27/2015, 15:10:54 GMT -> The PostSession callback for product SMSMSE Virus Definitions WOW64 completed with a result of 0x0
7/27/2015, 15:10:54 GMT -> Successfully released callback {0D7E9ED3-A063-4BB1-B3E6-E826F5D68306}
7/27/2015, 15:10:54 GMT -> LiveUpdate has called the last callback for product SMSMSE Virus Definitions WOW64, so LiveUpdate is informing the callback proxy that it can exit.
7/27/2015, 15:10:54 GMT -> The callback proxy executable for product {F92F8A7B-F111-4db7-B145-6C41E7D6AE94} is exiting with no errors
7/27/2015, 15:10:54 GMT -> *********************** End of LU Session ***********************
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
// End LuComServer
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
I already restarted Symantec Mails Security services and have used "Run liveUpdate Certified Definitions" which ends soon after less than a minute.
Server is Windows 2008 SP2 64 bits
Exchange is Exchage Server 2010
This server has SEP 12.1.3001.165 installed and this is up to date.
Definitions of SMS for MSE has been updating well for months without a problem until now.
Can you help me?
Thank you,
RaulB