I have dealt with this problem in the following way (not by any documented process mind you):
1. Connect to: <\\%COMPUTERNAME%\c$\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5>
- Delete all files in the main directory here (NOT folders!) except the Fwdstat.log.
- Delete folders inside the folder "I2_LDVP.VDB".
2. Connect to: <\\%COMPUTERNAME%\c$\Program Files\Common Files\Symantec Shared\VirusDefs>
- Delete all *.tmp folders here.
3. Connect to an unaffected Computer and copy the 2 most recent Def folders (YYYYMMDD.###) found in
<\\%COMPUTERNAME%\c$\Program Files\Common Files\Symantec Shared\VirusDefs>
Also copy the "definfo.dat" and "usage.dat" files from the good computer and overwrite the one's on the target (problem) computer.
4. Watch the problem Computer you are working on in the SSC (refresh the console). After 5-10 minutes it should refresh and display the scan engine value and the most recent defitions. If you want to speed up the process you may want to try to restart the SAV service on the target computer.
5. Connect to (original computer): <\\%COMPUTERNAME%\c$\Program Files\Common Files\Symantec Shared\VirusDefs>. Delete old YYYYMMDD.### folders.
6. Check SSC for client status (Scan engine version and Definitions version updated?).
Note: I have read that this problem was resolved in the 10.1.6.6010 release of SAV:
Symantec AntiVirus Client unable to recover from corrupted definitions and accumulation of .vdb files in 7.5 folder
Fix ID: 838436
Symptom: A large number of corrupted .vdb files are accumulated, and the client is unable to download or install any further definitions.
Solution: Added a definition check to ensure the definitions are downloaded correctly, and if corruption is located, the file is removed and remediation occurs.
Message Edited by bellboy on 10-13-2008 10:23 PM
Message Edited by bellboy on 10-13-2008 10:23 PM