Hi, I have the SMSMSE in 4 Exchange servers. Since July 21 all of them stopped updating the Virus Definition: The last definition is 7/21/2015, Rev 1, after that the 4 servers are presenting some errors every time they tries to download the definition
Running the LiveUpdate manually:
Downloading SMSMSE Virus Definitions WOW64 (1 of 1), failed.
LU6013: LiveUpdate is unable to continue, because a file needed on the server may be corrupt. Please run LiveUpdate again later.
At the Liveupdate log I found this:
7/28/2015, 23:55:01 GMT -> ERROR - The requested file, 1438098396jtun_ennlu2.x86, is too large (738742546 bytes) for LiveUpdate to start to download.
7/28/2015, 23:55:01 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "1438098396jtun_ennlu2.x86", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\1438098396jtun_ennlu2.x86" HR: 0x802A0048
Does the definitions are corrupt?
This is the log
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
// Start LuComServer
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
7/28/2015, 23:54:56 GMT -> LuComServer version: 3.3.0.78
7/28/2015, 23:54:56 GMT -> LiveUpdate Language: English
7/28/2015, 23:54:56 GMT -> LuComServer Sequence Number: 20081210
7/28/2015, 23:54:56 GMT -> OS: Windows NT, Service Pack: 1, Major: 6, Minor: 1, Build: 7601 (64-bit)
7/28/2015, 23:54:56 GMT -> System Language:[0x0409], User Language:[0x0409]
7/28/2015, 23:54:56 GMT -> IE 7 Support
7/28/2015, 23:54:56 GMT -> ComCtl32 version: 6.16
7/28/2015, 23:54:56 GMT -> IP Addresses: ::1, 10.2.1.55, 10.0.0.8, 10.2.1.164
7/28/2015, 23:54:56 GMT -> Loading C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
7/28/2015, 23:54:56 GMT -> Opened the product inventory at "C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
7/28/2015, 23:54:56 GMT -> Account launching LiveUpdate is not a logged in user's account
7/28/2015, 23:54:56 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
7/28/2015, 23:54:56 GMT -> LiveUpdate flag value for this run is 0
7/28/2015, 23:54:56 GMT -> **** Starting a Silent LiveUpdate Session ****
7/28/2015, 23:54:56 GMT -> *********************** Start of New LU Session ***********************
7/28/2015, 23:54:56 GMT -> The command line is -s
7/28/2015, 23:54:56 GMT -> EVENT - SESSION START EVENT - The LiveUpdate session is running in Silent Mode.
7/28/2015, 23:54:56 GMT -> Check for updates to: Product: LiveUpdate, Version: 3.3.0.78, Language: English. Mini-TRI file name: liveupdate_3.3.0.78_english_livetri.zip
7/28/2015, 23:54:56 GMT -> LiveUpdate is about to launch a new callback proxy process for product SMSMSE Virus Definitions WOW64 with moniker {F92F8A7B-F111-4db7-B145-6C41E7D6AE94}.
7/28/2015, 23:54:56 GMT -> Starting Callback Proxy Worker thread.
7/28/2015, 23:54:56 GMT -> The callback proxy for moniker {F92F8A7B-F111-4db7-B145-6C41E7D6AE94} was successfully registered with LiveUpdate.
7/28/2015, 23:54:56 GMT -> LiveUpdate successfully launched a new callback proxy process for product SMSMSE Virus Definitions WOW64.
7/28/2015, 23:54:56 GMT -> LiveUpdate is about to execute a PreSession callback for product SMSMSE Virus Definitions WOW64.
7/28/2015, 23:54:56 GMT -> The callback proxy finished executing the callback with a result code of 0x0
7/28/2015, 23:54:56 GMT -> The PreSession callback for product SMSMSE Virus Definitions WOW64 completed with a result of 0x0
7/28/2015, 23:54:56 GMT -> Progress Update: TRYING_HOST: HostName: "liveupdate.symantecliveupdate.com" URL: "http://liveupdate.symantecliveupdate.com" HostNumber: 0
7/28/2015, 23:54:56 GMT -> Progress Update: TRIFILE_DOWNLOAD_START: Number of TRI files: 0 Downloading LiveUpdate catalog file
7/28/2015, 23:54:56 GMT -> LiveUpdate will download the first Mini-TRI file, liveupdate_3.3.0.78_english_livetri.zip
7/28/2015, 23:54:56 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
7/28/2015, 23:54:57 GMT -> Progress Update: PRE_CONNECT: Proxy: "(not-available)" Agent: "Symantec LiveUpdate" AccessType: 0x0
7/28/2015, 23:54:57 GMT -> Progress Update: CONNECTED: Proxy: "(not-available)" Agent: "uI+a48ZhFv22yR7mPWj4LuySWq0UBa4VQAAAAA" AccessType: 0x0
7/28/2015, 23:54:57 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantecliveupdate.com/liveupdate_3.3.0.78_english_livetri.zip", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
7/28/2015, 23:55:00 GMT -> HttpSendRequest (status 404): Request failed - File does not exist on the server.
7/28/2015, 23:55:00 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://liveupdate.symantecliveupdate.com/liveupdate_3.3.0.78_english_livetri.zip", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\liveupdate_3.3.0.78_english_livetri.zip" HR: 0x802A0026
7/28/2015, 23:55:00 GMT -> HR 0x802A0026 DECODE: E_HTTP_NOT_FOUND
7/28/2015, 23:55:00 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0 , Num Successful: 0
7/28/2015, 23:55:00 GMT -> LiveUpdate will check for Mini-TRI file support on the server since the first Mini-TRI file was not available (liveupdate_3.3.0.78_english_livetri.zip).
7/28/2015, 23:55:00 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
7/28/2015, 23:55:00 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantecliveupdate.com/minitri.flg", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
7/28/2015, 23:55:00 GMT -> HttpSendRequest (status 304): Request succeeded - File up to date so download is not required
7/28/2015, 23:55:00 GMT -> Progress Update: DOWNLOAD_FILE_NOT_MODIFIED: URL: "http://liveupdate.symantecliveupdate.com/minitri.flg", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\minitri.flg"
7/28/2015, 23:55:00 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: URL: "http://liveupdate.symantecliveupdate.com/minitri.flg", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\minitri.flg" HR: 0x0
7/28/2015, 23:55:00 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0 , Num Successful: 1
7/28/2015, 23:55:00 GMT -> Progress Update: HOST_SELECTED: Host IP: "148.243.245.235" URL: "http://liveupdate.symantecliveupdate.com" HostNumber: 0
7/28/2015, 23:55:00 GMT -> Attempting to load SymCrypt...
7/28/2015, 23:55:00 GMT -> SymCrypt.dll does not exist.
7/28/2015, 23:55:00 GMT -> EVENT - SERVER SELECTION SUCCESSFUL EVENT - LiveUpdate connected to server liveupdate.symantecliveupdate.com at path via a HTTP connection. The server connection connected with a return code of 200, Successfully download TRI file
7/28/2015, 23:55:00 GMT -> LiveUpdate is connected to a server with Mini-TRI file support. LiveUpdate will download and process the remaining Mini-TRI files.
7/28/2015, 23:55:00 GMT -> Check for updates to: Product: Automatic LiveUpdate, Version: 3.3.0.78, Language: English. Mini-TRI file name: automatic$20liveupdate_3.3.0.78_english_livetri.zip
7/28/2015, 23:55:00 GMT -> Check for updates to: Product: SMSMSE Virus Definitions WOW64, Version: 5.0, Language: SymAllLanguages. Mini-TRI file name: smsmse$20virus$20definitions$20wow64_5.0_symalllanguages_livetri.zip
7/28/2015, 23:55:00 GMT -> Check for updates to: Product: Symantec Mail Security For Microsoft Exchange, Version: 1.0, Language: English. Mini-TRI file name: symantec$20mail$20security$20for$20microsoft$20exchange_1.0_english_livetri.zip
7/28/2015, 23:55:00 GMT -> Progress Update: TRIFILE_DOWNLOAD_END: Number of TRI files: "0"
7/28/2015, 23:55:00 GMT -> Progress Update: TRIFILE_DOWNLOAD_START: Number of TRI files: 3 Downloading Mini-TRI files
7/28/2015, 23:55:00 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
7/28/2015, 23:55:00 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantecliveupdate.com/automatic$20liveupdate_3.3.0.78_english_livetri.zip", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
7/28/2015, 23:55:00 GMT -> HttpSendRequest (status 404): Request failed - File does not exist on the server.
7/28/2015, 23:55:00 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://liveupdate.symantecliveupdate.com/automatic$20liveupdate_3.3.0.78_english_livetri.zip", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\automatic$20liveupdate_3.3.0.78_english_livetri.zip" HR: 0x802A0026
7/28/2015, 23:55:00 GMT -> HR 0x802A0026 DECODE: E_HTTP_NOT_FOUND
7/28/2015, 23:55:00 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0 , Num Successful: 0
7/28/2015, 23:55:00 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
7/28/2015, 23:55:00 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantecliveupdate.com/smsmse$20virus$20definitions$20wow64_5.0_symalllanguages_livetri.zip", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
7/28/2015, 23:55:01 GMT -> HttpSendRequest (status 304): Request succeeded - File up to date so download is not required
7/28/2015, 23:55:01 GMT -> Progress Update: DOWNLOAD_FILE_NOT_MODIFIED: URL: "http://liveupdate.symantecliveupdate.com/smsmse$20virus$20definitions$20wow64_5.0_symalllanguages_livetri.zip", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\smsmse$20virus$20definitions$20wow64_5.0_symalllanguages_livetri.zip"
7/28/2015, 23:55:01 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: URL: "http://liveupdate.symantecliveupdate.com/smsmse$20virus$20definitions$20wow64_5.0_symalllanguages_livetri.zip", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\smsmse$20virus$20definitions$20wow64_5.0_symalllanguages_livetri.zip" HR: 0x0
7/28/2015, 23:55:01 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0 , Num Successful: 1
7/28/2015, 23:55:01 GMT -> LiveUpdate copied the Mini-TRI file from C:\ProgramData\Symantec\LiveUpdate\Downloads\smsmse$20virus$20definitions$20wow64_5.0_symalllanguages_livetri.zip to C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri217\smsmse$20virus$20definitions$20wow64_5.0_symalllanguages_livetri.zip
7/28/2015, 23:55:01 GMT -> Progress Update: UNZIP_FILE_START: Zip File: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri217\smsmse$20virus$20definitions$20wow64_5.0_symalllanguages_livetri.zip", Dest Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri217"
7/28/2015, 23:55:01 GMT -> Progress Update: UNZIP_FILE_PROGRESS: Extracting file: "liveupdt.grd"
7/28/2015, 23:55:01 GMT -> Progress Update: UNZIP_FILE_PROGRESS: Extracting file: "liveupdt.sig"
7/28/2015, 23:55:01 GMT -> Progress Update: SECURITY_SIGNATURE_MATCHED: GuardFile: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri217\liveupdt.grd"
7/28/2015, 23:55:01 GMT -> Progress Update: UNZIP_FILE_FINISH: Zip File: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri217\smsmse$20virus$20definitions$20wow64_5.0_symalllanguages_livetri.zip", Dest Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri217", HR: 0x0
7/28/2015, 23:55:01 GMT -> Progress Update: UNZIP_FILE_START: Zip File: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri217\smsmse$20virus$20definitions$20wow64_5.0_symalllanguages_livetri.zip", Dest Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri217"
7/28/2015, 23:55:01 GMT -> Progress Update: UNZIP_FILE_PROGRESS: Extracting file: "liveupdt.tri"
7/28/2015, 23:55:01 GMT -> Progress Update: UNZIP_FILE_FINISH: Zip File: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri217\smsmse$20virus$20definitions$20wow64_5.0_symalllanguages_livetri.zip", Dest Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri217", HR: 0x0
7/28/2015, 23:55:01 GMT -> Progress Update: SECURITY_PACKAGE_TRUSTED: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri217\liveupdt.tri"
7/28/2015, 23:55:01 GMT -> Available Update for Product: SMSMSE Virus Definitions WOW64, Version: 5.0, Language: SymAllLanguages, ItemSeqName: VirusDef. Current Sequence Number: 2015072101, New Sequence Number 2015072803, Update filename 1438098396jtun_ennlu2.x86
7/28/2015, 23:55:01 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
7/28/2015, 23:55:01 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantecliveupdate.com/symantec$20mail$20security$20for$20microsoft$20exchange_1.0_english_livetri.zip", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
7/28/2015, 23:55:01 GMT -> HttpSendRequest (status 304): Request succeeded - File up to date so download is not required
7/28/2015, 23:55:01 GMT -> Progress Update: DOWNLOAD_FILE_NOT_MODIFIED: URL: "http://liveupdate.symantecliveupdate.com/symantec$20mail$20security$20for$20microsoft$20exchange_1.0_english_livetri.zip", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\symantec$20mail$20security$20for$20microsoft$20exchange_1.0_english_livetri.zip"
7/28/2015, 23:55:01 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: URL: "http://liveupdate.symantecliveupdate.com/symantec$20mail$20security$20for$20microsoft$20exchange_1.0_english_livetri.zip", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\symantec$20mail$20security$20for$20microsoft$20exchange_1.0_english_livetri.zip" HR: 0x0
7/28/2015, 23:55:01 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0 , Num Successful: 1
7/28/2015, 23:55:01 GMT -> LiveUpdate copied the Mini-TRI file from C:\ProgramData\Symantec\LiveUpdate\Downloads\symantec$20mail$20security$20for$20microsoft$20exchange_1.0_english_livetri.zip to C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri219\symantec$20mail$20security$20for$20microsoft$20exchange_1.0_english_livetri.zip
7/28/2015, 23:55:01 GMT -> Progress Update: UNZIP_FILE_START: Zip File: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri219\symantec$20mail$20security$20for$20microsoft$20exchange_1.0_english_livetri.zip", Dest Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri219"
7/28/2015, 23:55:01 GMT -> Progress Update: UNZIP_FILE_PROGRESS: Extracting file: "liveupdt.grd"
7/28/2015, 23:55:01 GMT -> Progress Update: UNZIP_FILE_PROGRESS: Extracting file: "liveupdt.sig"
7/28/2015, 23:55:01 GMT -> Progress Update: SECURITY_SIGNATURE_MATCHED: GuardFile: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri219\liveupdt.grd"
7/28/2015, 23:55:01 GMT -> Progress Update: UNZIP_FILE_FINISH: Zip File: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri219\symantec$20mail$20security$20for$20microsoft$20exchange_1.0_english_livetri.zip", Dest Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri219", HR: 0x0
7/28/2015, 23:55:01 GMT -> Progress Update: UNZIP_FILE_START: Zip File: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri219\symantec$20mail$20security$20for$20microsoft$20exchange_1.0_english_livetri.zip", Dest Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri219"
7/28/2015, 23:55:01 GMT -> Progress Update: UNZIP_FILE_PROGRESS: Extracting file: "liveupdt.tri"
7/28/2015, 23:55:01 GMT -> Progress Update: UNZIP_FILE_FINISH: Zip File: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri219\symantec$20mail$20security$20for$20microsoft$20exchange_1.0_english_livetri.zip", Dest Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri219", HR: 0x0
7/28/2015, 23:55:01 GMT -> Progress Update: SECURITY_PACKAGE_TRUSTED: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Tri219\liveupdt.tri"
7/28/2015, 23:55:01 GMT -> Progress Update: TRIFILE_DOWNLOAD_END: Number of TRI files: "2"
7/28/2015, 23:55:01 GMT -> ********* Finished Finding Available Updates *********
7/28/2015, 23:55:01 GMT -> Progress Update: PATCH_DOWNLOADING_START: Number of patches: 1
7/28/2015, 23:55:01 GMT -> GetUpdates: SMSMSE Virus Definitions WOW64, 5.0, SymAllLanguages ==> 1438098396jtun_ennlu2.x86
7/28/2015, 23:55:01 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 738742546
7/28/2015, 23:55:01 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "1438098396jtun_ennlu2.x86", Estimated Size: 738742546, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
7/28/2015, 23:55:01 GMT -> HttpSendRequest (status 200): Request succeeded
7/28/2015, 23:55:01 GMT -> ERROR - The requested file, 1438098396jtun_ennlu2.x86, is too large (738742546 bytes) for LiveUpdate to start to download.
7/28/2015, 23:55:01 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "1438098396jtun_ennlu2.x86", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\1438098396jtun_ennlu2.x86" HR: 0x802A0048
7/28/2015, 23:55:01 GMT -> HR 0x802A0048 DECODE: E_FILE_NOT_TRUSTED
7/28/2015, 23:55:01 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x802A0048, Num Successful: 0
7/28/2015, 23:55:01 GMT -> HR 0x802A0048 DECODE: E_FILE_NOT_TRUSTED
7/28/2015, 23:55:01 GMT -> EVENT - SESSION END FAILED EVENT - The LiveUpdate session ran in Silent Mode. LiveUpdate found 1 updates available, of which 0 were installed and 1 failed to install. The LiveUpdate session exited with a return code of 6013, LiveUpdate is unable to continue, because a file needed on the server may be corrupt. Please run LiveUpdate again later.
7/28/2015, 23:55:02 GMT -> LiveUpdate is about to execute a PostSession callback for product SMSMSE Virus Definitions WOW64.
7/28/2015, 23:55:02 GMT -> ProductRegCom/luProductReg(PID=2836/TID=12080): Successfully created an instance of an luProductReg object!
7/28/2015, 23:55:02 GMT -> ProductRegCom/luProductReg(PID=2836/TID=12080): Path for calling process executable is C:\Program Files (x86)\Symantec\LiveUpdate\LuCallbackProxy.exe.
7/28/2015, 23:55:02 GMT -> ProductRegCom/luProductReg(PID=2836/TID=12080): Destroyed luProductReg object.
7/28/2015, 23:55:02 GMT -> The callback proxy finished executing the callback with a result code of 0x0
7/28/2015, 23:55:02 GMT -> The PostSession callback for product SMSMSE Virus Definitions WOW64 completed with a result of 0x0
7/28/2015, 23:55:02 GMT -> Successfully released callback {0D7E9ED3-A063-4BB1-B3E6-E826F5D68306}
7/28/2015, 23:55:02 GMT -> LiveUpdate has called the last callback for product SMSMSE Virus Definitions WOW64, so LiveUpdate is informing the callback proxy that it can exit.
7/28/2015, 23:55:02 GMT -> The callback proxy executable for product {F92F8A7B-F111-4db7-B145-6C41E7D6AE94} is exiting with no errors
7/28/2015, 23:55:02 GMT -> *********************** End of LU Session ***********************
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
// End LuComServer
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
Thnaks!