spacer
Support - Platinum Support
tab end BCS Web Site divider MySupport divider Log Out navbar end
navbar end home symantec alerting service security center knowledge base navbar end
spacer
BCS Knowledge Base

spacer
spacer

Rate This Document
1x3 spacer
1x1 spacer

print this documentDocument ID:2008090208462854
Last Modified:06/09/2009

How to clear out corrupted definitions for a Symantec Endpoint Protection client with Mail Security for Microsoft Exchange installed

Situation:How to fix and rebuild corrupted definitions for a Symantec Endpoint Protection client when Mail Security for Microsoft Exchange is installed.

Solution:Stop the following services
    • Symantec Management Client
    • Symantec Endpoint Protection
    • Symantec Mail Security for Microsoft Exchange
  1. Navigate to the following location:
    C:\Program files\common files\Symantec Shared\Virus Defs
  2. Remove the newest numbered folders and any tmp folders.
  3. Navigate to following location:
    C:\Program files\common files\Symantec Shared\definitions\Antivirus
  4. Remove the virusdefs##### folders but leave the virusdefs folder.

    WARNING: In the next steps you will edit the Windows registry. Back up the registry before you make any changes to it, because incorrect changes to the registry can result in permanent data loss or corrupted files. Modify only the registry keys that are specified. For instructions, see How to back up the Windows registry.
  5. Delete the data from the registry:
    1. Click the Start button and then click Run
    2. Type regedit and click OK
    3. Navigate to:
      HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\SharedDefs
    4. Delete the following keys:
      1. SRTSP
      2. NAVCORP_70
      3. DEFWATCH_10
      4. SepCache3
      5. SepCache2
      6. SepCache1
  6. Start the Symantec Management Client and Symantec Endpoint Protection services.
  7. Allow time for the definitions to rebuild. (This can take up to 10 minutes to accomplish.) Verify the definitions are correct by inspecting "C:\Program Files\Common Files\Symantec Shared\VirusDefs"
  8. Start the Symantec Mail Security for Microsoft Exchange service.
  9. Log into the Symantec Mail Security for Microsoft Exchange Console and disable the download of virus definitions
    1. Open console
    2. Select Admin
    3. Select Liveupdate/Rapid Release Schedule
    4. Uncheck enable virus definition update
    5. Click Deploy changes


References:Document ID: 2007123111551948
Title: 'How to clear out corrupted definitions for a Symantec Endpoint Protection Client'
Web URL: http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007123111551948

print this documentDocument ID:2008090208462854
Last Modified:06/09/2009


rate this document
Does this document answer your question?
Yes
No
Maybe, need to test
None of the above
Is this document well written and easy to use?
Submit specific suggestions to improve the quality of this document.


Product(s): Symantec Mail Security 5.x for Microsoft Exchange, Symantec Mail Security 6.0 for Microsoft Exchange, Symantec Mail Security 6.5 for Microsoft Exchange
Operating Systems(s): Windows 2000 Server/Advanced Server/Data Center SP4, Windows Server 2003 Standard/Enterprise/Data Center (no SP required), Exchange 2000 Server SP3/Enterprise Server, Exchange Server 2003/Enterprise Server
Date Created: 09/02/2008

  © 1995-2014 Symantec Corporation. All rights reserved. feedback | legal notices | privacy policy