Matt,
Something to add. I turned on LiveUpdate notificaton to do and when it runs it gets a failure updating
Intrusion Prevention Signatures/Defintions LU8125 error
I tried the PIUpdate tool no go. Is there a way to manually clear that file (without doing a removal). Maybe that is partly the issue
From log:
Query liveupdatedir location.
6/20/2008, 16:47:50 GMT -> Storing liveupdatedir into standard variable map with value: C:\Program Files\Symantec\LiveUpdate.
6/20/2008, 16:47:50 GMT -> Progress Update: PATCH_START: Patch File: "C:\Documents and Settings\All Users.WINXP08\Application Data\Symantec\LiveUpdate\Downloads\1213749515jtun_nis8enidcurd25.x86.full.zip", Script File: "C:\Documents and Settings\All Users.WINXP08\Application Data\Symantec\LiveUpdate\Downloads\Updt263\nisids.dis"
6/20/2008, 16:47:50 GMT -> Progress Update: SECURITY_PACKAGE_TRUSTED: "C:\Documents and Settings\All Users.WINXP08\Application Data\Symantec\LiveUpdate\Downloads\1213749515jtun_nis8enidcurd25.x86.full.zip"
6/20/2008, 16:47:50 GMT -> Signer: cn=Symantec Corporation,ou=Usage - SigningProd02Token,ou=Locality - Arizona,ou=Product Group - LiveUpdate,ou=SymSignature,o=Symantec Corporation
6/20/2008, 16:47:50 GMT -> Progress Update: UNZIP_FILE_START: Zip File: "C:\Documents and Settings\All Users.WINXP08\Application Data\Symantec\LiveUpdate\Downloads\1213749515jtun_nis8enidcurd25.x86.full.zip", Dest Folder: "C:\Documents and Settings\All Users.WINXP08\Application Data\Symantec\LiveUpdate\Downloads\Updt263"
6/20/2008, 16:47:50 GMT -> 1213749515jtun_nis8enidcurd25.x86.full.zip is in RAR format.
6/20/2008, 16:47:51 GMT -> Progress Update: UNZIP_FILE_FINISH: Zip File: "C:\Documents and Settings\All Users.WINXP08\Application Data\Symantec\LiveUpdate\Downloads\1213749515jtun_nis8enidcurd25.x86.full.zip", Dest Folder: "C:\Documents and Settings\All Users.WINXP08\Application Data\Symantec\LiveUpdate\Downloads\Updt263", HR: 0x0
6/20/2008, 16:47:51 GMT -> LiveUpdate couldn't expand replacement path [IPSDefsInstallDir].
6/20/2008, 16:47:51 GMT -> Progress Update: PATCH_ERROR: Patch File: "C:\Documents and Settings\All Users.WINXP08\Application Data\Symantec\LiveUpdate\Downloads\1213749515jtun_nis8enidcurd25.x86.full.zip", Script File: "C:\Documents and Settings\All Users.WINXP08\Application Data\Symantec\LiveUpdate\Downloads\Updt263\nisids.dis", HR: 0x802A0006
6/20/2008, 16:47:51 GMT -> HR 0x802A0006 DECODE: E_DIS_SCRIPT_SYNTAX_ERROR
6/20/2008, 16:47:51 GMT -> EVENT - PRODUCT UPDATE FAILED EVENT - Update available for Symantec Intrusion Prevention Signatures - MicroDefsB.CurDefs - SymAllLanguages. Update for CurDefs takes product from update 80613001 to 80617001. Server name - liveupdate.symantecliveupdate.com, Update file - 1213749515jtun_nis8enidcurd25.x86, Signer - cn=Symantec Corporation,ou=Usage - SigningProd02Token,ou=Locality - Arizona,ou=Product Group - LiveUpdate,ou=SymSignature,o=Symantec Corporation, package install code 0. The Update executed with a result code of 1825, => The install script for this product had a syntax error, so LiveUpdate could not install it.
6/20/2008, 16:47:51 GMT -> CSendHttpRequest::SendRequest() successfully impersonated the COM client (revert on destroy).
6/20/2008, 16:47:51 GMT -> CSendHttpRequest::SendRequest() successfully impersonated the COM client (revert on destroy).
6/20/2008, 16:47:51 GMT -> Progress Update: PATCH_FINISH: Patch File: "C:\Documents and Settings\All Users.WINXP08\Application Data\Symantec\LiveUpdate\Downloads\1213749515jtun_nis8enidcurd25.x86.full.zip", Script File: "C:\Documents and Settings\All Users.WINXP08\Application Data\Symantec\LiveUpdate\Downloads\Updt263\nisids.dis", HR: 0x802A0006
6/20/2008, 16:47:51 GMT -> HR 0x802A0006 DECODE: E_DIS_SCRIPT_SYNTAX_ERROR
[edit: reformated log for readability.]Message Edited by Allen_K on 06-20-2008 05:11 PM
