Protection Suite Enterprise Edition

 View Only

 SMSMSE 7.9.2.62 and 7.10 fail to update virus definition.

JACOB LEE's profile image
JACOB LEE posted Jul 18, 2022 11:26 PM
Dear all,

  Greeting. In fact I have created a case in my support portal but also would like to ask for other communities' members advice. And if possible, draw Symantec Staff attention, on the case that we are encountering. Thanks.

Environment:
2 x Windows 2012R2 Standard with latest patches, with Exchange 2016 CU21 and SMSMSE 7.9.2.62 / 7.10(one node was upgraded to this latest version per support request)


On late 2022 March, we found that all SMSMSE 7.9.2.62 virus definition date hold on the 28/3/2022 R7, we tried restarting services and restarting server, no help.

Per checking on the "lux.log", the definition could be downloaded from liveupdate.symantec.com.

However, when the package was extracted and installed, it failed with below error message.

10:51:16.012830 [Package Install - START]
10:51:16.012830  Component: {BAE8FC84-53DC-11E1-8A6B-005056A9534A}
10:51:16.012830  File: 1649278430jtun_dssx64en220328007.m35
10:51:16.012830  Action Item: CSWin80.dis
10:51:16.340979  Result Code: 0x80010A02
10:51:16.340979  Result Message: FAIL - install failed during script execution
10:51:16.340979 [Package Install - END]
10:51:16.340979 [Finalize Package Installs - START]
10:51:23.419384  Result Code: 0x00010000
10:51:23.419384  Result Message: OK
10:51:23.419384  Component Status Changes:
10:51:23.419384   None
10:51:23.419384 [Finalize Package Installs - END]
10:51:23.419384 [Finalize Session - START]
10:51:23.419384  Result Code: 0x00010000
10:51:23.419384  Result Message: OK
10:51:23.419384  Component Status Changes:
10:51:23.419384   None
10:51:23.419384 [Finalize Session - END]
10:51:23.450625 [Session Results - START]
10:51:23.450625  Session Result Code: 0x00010000
10:51:23.450625  Session Result Message: OK
10:51:23.450625  [Component Result - START]
10:51:23.450625   Component ID: {BAE8FC84-53DC-11E1-8A6B-005056A9534A}
10:51:23.466261   Display Name: SMSMSE 7.9 AV Definitions for x86_64-windows
10:51:23.466261   PVL: SMSMSE 7.9 AV Definitions for x86_64-windows_MicroDefsB.CurDefs_SymAllLanguages
10:51:23.466261   Result Code: 0x00010000
10:51:23.466261   Result Message: OK
10:51:23.466261   [Package Result - START]
10:51:23.466261    File: 1649278430jtun_dssx64en220328007.m35
10:51:23.466261    Result Code: 0x80010A02
10:51:23.466261    Result Message: FAIL - install failed during script execution
10:51:23.466261   [Package Result - END]
10:51:23.466261  [Component Result - END]

The SMSMSE go through proxy to internet to get update for nearly 2 years, and it just failed suddenly like that.

We now manually use the intelligent update package (yes, the virus def update exe in 64bit) to update the AV definition for 7.9.2.62.

Per support info, we upgrade one of the testing node SMSMSE from 7.9.2.62 to 7.10. Same problem occured, and 7.10 could not use manual update method to update the definition.

We setup a LUA for the SMSMSE 7.10 node to download definition. We checked the LUX log and similar error result was observed, it showed that the definition file was downloaded to the SMSMSE 7.10 but fail to install.

May I have your comments or advice on the above issue? The problem has been last for 3 months already.

Thanks a lot.

Regards,