Search

All of Symantec All of Symantec Support Viruses & Risks Home & Home Office Small Business Enterprise Partners VERITAS

Question/Issue:
You want to know how to update your virus definitions.


Solution:

---

Before you begin: If you are using an earlier version of Symantec AntiVirus Corporate Edition, read the following document:

"How to update virus definitions for Symantec AntiVirus Corporate Edition 8.x and 9.x." at:
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2002103012571948

---

There are four methods for updating virus definitions:

• The Virus Definition Transport Method (VDTM)
• LiveUpdate
• Copying an .xdb file
• Intelligent Updater

Read the following descriptions, and choose a method or combination of methods that works best for your environment.

The Virus Definitions Transport Method (VDTM)
The VDTM is a fully automated solution for virus definitions distribution, and is enabled by default between servers and their managed clients. With the VDTM, it is only necessary to update one server in order to update all computers in the network. The server gets definitions updates using LiveUpdate or an .xdb file, and then automatically distributes the definitions to each of its clients on the network. Read the following document for an overview and instructions:

"How to use the Virus Definitions Transport Method (VDTM) in Symantec AntiVirus Corporate Edition." at:
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2002111915202948


LiveUpdate
LiveUpdate is a program that connects to a server, downloads the latest definitions, and applies the definitions to the computer on which it is running. You can run LiveUpdate from the Symantec System Center, or within Symantec AntiVirus. LiveUpdate can retrieve definitions files either from the Symantec server (which it does by default) or from an internal Web, FTP, or file server created with the LiveUpdate Administration Utility.

To run LiveUpdate from the Symantec System Center Console
1. Right-click the Primary Server, point to All Tasks > Symantec AntiVirus, and then click Virus Definition Manager.
2. Click Configure.
3. Click Update Now.
4. LiveUpdate is now running silently in the background on the Primary Server. If the VDTM is enabled, it will distribute virus definitions to any secondary servers and clients when LiveUpdate completes.
   
To run LiveUpdate from the Symantec AntiVirus Corporate Edition interface
1. Open Symantec AntiVirus Corporate Edition.
2. Click LiveUpdate.
3. Follow the on-screen prompts to download the latest definitions. If the computer is a parent server and the VDTM is enabled, it will distribute virus definitions to any subordinate servers and clients when LiveUpdate completes.

Scheduling LiveUpdate
You can schedule LiveUpdate to run periodically, either from the Virus Definition Manager within the Symantec System Center, or by clicking File and then Schedule Updates from within Symantec AntiVirus.

The LiveUpdate Administration Utility 1.x and LiveUpdate Administrator 2.x
On very large or widely distributed networks, it may be desirable to create an internal server and have clients use LiveUpdate to retrieve updates from that server, rather than using the VDTM. Symantec offers two distinct products for downloading and distributing LiveUpdate content on an internal network.

For information on determining whether the legacy LiveUpdate Administration Utility 1.x (LUAU 1.x) is necessary, and instructions for its implementation, read How to configure the LiveUpdate Administration Utility

For information on the more recent release, LiveUpdate Administrator 2.x (LUA 2.x), please read Installing and configuring LiveUpdate Administrator 2.x



Copying an .xdb file
Note: This method does not apply for 64-bit versions of the client.
You can update any Symantec AntiVirus server or client by downloading the .xdb file from Symantec. You can also copy an .xdb file from the VPHOME share on any Symantec AntiVirus server. The modified date of the .xdb file matches the date of the virus definitions. When using this method, RTVSCAN.EXE checks for new .xdb files, and then initiates the update process. RTVSCAN.EXE checks for new .xdb files about every 10 minutes by default. Restarting (stopping and then starting) the Symantec AntiVirus Server process can be used to manually initiate the update process if you do not want to wait.

To download an .xdb file from Symantec
1. Go to the "xdb folder" at the following Symantec FTP site:
   ftp://ftp.symantec.com/AVDEFS/norton_antivirus/xdb/
   
   Note: You can also find the file from the following location:
   "Symantec Security Response Virus Definitions Download Page.." at:
   http://securityresponse.symantec.com/avcenter/defs.download.html
   
   
2. Click the .xdb file with the latest date, and select Save to disk from the dialog box.
3. If the .xdb file downloads with a .zip extension, remove the .zip extension by renaming the file.
   The file name should be similar to the following:
   vd12bc02.xdb
   
4. Copy the ".xdb" file to the correct location, depending on the type of installation:
   • For NetWare servers, the default location is SYS:SAV.
   • For Windows computers, the default location is C:\Program Files\SAV or C:\Program Files\SAV\Symantec AntiVirus.
     For help with this, read the "To find the Symantec AntiVirus program folder on a Symantec AntiVirus or Symantec Client Security server" section in the Technical Information section of this document.
     
     
   • For clients, the default location is C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\.
     The "Application Data" folder may be hidden. To show hidden and system folders, read the document:
     
     "How to make Windows show all files." at:
     http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2002092715262339
     
Note: This method does not apply for 64-bit versions of the client.
Automatically updating definitions using the .xdb file
Symantec provides a batch file that you can schedule to update the definitions with the latest .xdb file. This batch file automatically downloads and extracts the latest .xdb file from a statically named executable (Navup8.exe), and copies the .xdb file to the appropriate location. For more information, read the document:

"Updating Symantec AntiVirus Corporate Edition virus definitions without using LiveUpdate." at:
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2004061116024848


Intelligent Updater
The Intelligent Updater file is an executable file that you can use to update virus definitions on legacy (Norton AntiVirus Corporate Edition) servers.


---

WARNING: If you are updating a Symantec AntiVirus server, then you must download the .xdb file from Symantec, as described in the "Copying an .xdb file" section in this document. If you apply the x86.exe or .vdb definition update then you may experience problems updating secondary servers and clients. Read the following document for more information:

"Primary server does not update secondary servers or clients using the VDTM." at:
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2003082912294348


---



To download and apply the Intelligent Updater
1. Go to the "Symantec Security Response Virus Definitions Download Page." at:
   http://securityresponse.symantec.com/avcenter/defs.download.html
   
2. Select the appropriate Language and Product (Symantec AntiVirus Corporate Edition), and then click Download Updates.
3. Download and run the "yyyymmdd-version-x86.exe" file.
   Note: "yyyymmdd-version" indicates the date and version of the definition file.

Technical Information:
To find the Symantec AntiVirus program folder on a Symantec AntiVirus or Symantec Client Security server

1. On the Windows taskbar, click Start> Run.
2. In the Run dialog box, type cmd
3. Click OK.
4. At the command prompt, type net share
5. Under Share name, find the "VPHOME" listing.
   The folder listed in the Resource column is the Symantec AntiVirus program folder and contains the Grc.dat file.

References:
This document is available in the following languages:

• French: http://service1.symantec.com/SUPPORT/INTER/ent-securityintl.nsf/fr_docid/20050915114208935
• German: http://service1.symantec.com/SUPPORT/INTER/ent-securityintl.nsf/de_docid/20050919100404935
• Italian: http://service1.symantec.com/SUPPORT/INTER/ent-securityintl.nsf/it_docid/20050914140114935
• Spanish: http://service1.symantec.com/SUPPORT/INTER/ent-securityintl.nsf/la_docid/20050426181230935

 

Document ID: 2005040711404048
Last Modified: 10/09/2009
Date Created: 04/07/2005
Operating System(s): Windows 2000, Windows XP Home, Windows XP Professional Edition, Windows XP Tablet PC, NetWare 5.1, NetWare 6.0, NetWare 6.5, Windows XP 64-Bit Edition 2003, Windows Server 2003 32-bit Edition, Windows Server 2003 64-bit Edition, Windows XP Media Center Edition 2005
Product(s): Symantec AntiVirus Corporate Edition 10.0, Symantec Client Firewall 8.0, Symantec Client Security 3.0, Symantec AntiVirus 10.1, Symantec Client Firewall 8.7, Symantec Client Security 3.1
Release(s): SAV 10.0 [All Releases], Symantec Client Firewall 8.x [All versions], Symantec Client Security 3.x [All versions], Symantec AntiVirus 10.1, Symantec Client Firewall 8.7, Symantec Client Security 3.1

Site Index · Legal Notices · Privacy Policy · · Contact Us · Global Sites · License Agreements