Norton v25 Offline Virus Definition Update Fails – “All updates failed to install on the machine”

Norton 360 for Windows
1

Hello,

I am unable to perform an offline virus definition update for Norton v25.

What I did:

  • Downloaded the latest offline Intelligent Updater (x64) from the official Norton website

  • Ran the downloaded .exe file on the target machine.

  • The installation completed with the message:

“All updates failed to install on the machine.”

No definitions were updated.

Environment:

  • Norton version: v25

  • System: Windows 11 (x64)

  • Update method: Offline (Intelligent Updater .exe)

  • Internet connection: Not connected (offline machine)

Log message:

Wed Feb 25 22:21:45 2026 : ******************************************************************
Wed Feb 25 22:21:45 2026 : 		Starting Intelligent Updater - Version 5.1.8.36
Wed Feb 25 22:21:45 2026 : ******************************************************************
Wed Feb 25 22:21:45 2026 : AUTH SYMSIGNED BEGIN: Started.
Wed Feb 25 22:21:45 2026 : AUTH SYMSIGNED CLASS3 BEGIN: Entering CriticalSection Initialization .
Wed Feb 25 22:21:45 2026 : AUTH SYMSIGNED CLASS3: Finding code signing : TRUE.
Wed Feb 25 22:21:45 2026 : AUTH SYMSIGNED END: Finished processing. Returns TRUE
Wed Feb 25 22:21:45 2026 : IU RES SYMSIGNED SUCCESS: Successfully verified Symantec Signature for the iuResource DLL
Wed Feb 25 22:21:45 2026 : IU RES LOAD: Successfully loaded the resource file..
Wed Feb 25 22:21:45 2026 : CONFIG LOAD SUCCESS: Successfully loaded the configuration file: iuConfig.xml.
Wed Feb 25 22:21:45 2026 : 	IU INFO: File-name : 20260225-002-Core3SDSN64v5i64.EXE
Wed Feb 25 22:21:45 2026 : 	IU INFO: Creation-date : 20260225
Wed Feb 25 22:21:45 2026 : AUTH DLL LOCATION: IU will read the DLL SAVIUAuth location from registry.
Wed Feb 25 22:21:45 2026 : REG FAILURE: Failed while opening the key  from registry. Return code: 2
Wed Feb 25 22:21:45 2026 : REG FAILURE: Failed while opening the key  from registry. Return code: 2
Wed Feb 25 22:21:45 2026 : AUTH DLL LOCATION: IU will read the DLL ISAuthDLL location from registry.
Wed Feb 25 22:21:45 2026 : REG FAILURE: Failed while opening the key  from registry. Return code: 2
Wed Feb 25 22:21:45 2026 : REG FAILURE: Failed while opening the key  from registry. Return code: 2
Wed Feb 25 22:21:45 2026 : AUTH DLL LOCATION: IU will read the DLL Norton X64 AuthDLL location from registry.
Wed Feb 25 22:21:45 2026 : REG FAILURE: Failed while opening the key  from registry. Return code: 2
Wed Feb 25 22:21:45 2026 : REG FAILURE: Failed while opening the key  from registry. Return code: 2
Wed Feb 25 22:21:45 2026 : Identified as 32-bit product installation. Continuing...
Wed Feb 25 22:21:45 2026 : IU MODE: IU is running is FULL mode.
Wed Feb 25 22:21:46 2026 : CONFIG LOAD SUCCESS: Successfully loaded the configuration file: iuConfig.xml.
Wed Feb 25 22:21:46 2026 : 	IU INFO: File-name : 20260225-002-Core3SDSN64v5i64.EXE
Wed Feb 25 22:21:46 2026 : 	IU INFO: Creation-date : 20260225
Wed Feb 25 22:21:46 2026 : PROCESSING ENTRY: VIRSCAN.zip - Virus Definitions
Wed Feb 25 22:21:46 2026 : Entry details:
Wed Feb 25 22:21:46 2026 : 	Update-File: 			VIRSCAN.zip
Wed Feb 25 22:21:46 2026 : 	Update-Desc: 			Virus Definitions
Wed Feb 25 22:21:46 2026 : 	Auth DLL Name: 			SAVIUAuth
Wed Feb 25 22:21:46 2026 : 	Auth DLL Location: 		local
Wed Feb 25 22:21:46 2026 : 	Auth Content-Type: 		virus definitions core 3 sds x64
Wed Feb 25 22:21:46 2026 : 	Deploy Content-Type: 		virus definitions core 3 sds x64
Wed Feb 25 22:21:46 2026 : 	Deploy DLL Name: 		SAVIUDeploy
Wed Feb 25 22:21:46 2026 : 	Deploy DLL Location: 		local
Wed Feb 25 22:21:46 2026 : AUTH DLL LOCATION: IU will read the DLL location from registry - SAVIUAuth
Wed Feb 25 22:21:46 2026 : REG FAILURE: Failed while opening the key  from registry. Return code: 2
Wed Feb 25 22:21:46 2026 : DEPLOY DLL LOCATION: IU will read the DLL location from registry - SAVIUDeploy
Wed Feb 25 22:21:46 2026 : REG FAILURE: Failed while opening the key  from registry. Return code: 2
Wed Feb 25 22:21:46 2026 : IGNORE ENTRY: Ignoring entry for VIRSCAN.zip because of registry read failure. Error occurred while reading the path for the Authorization DLL from the registry.
Wed Feb 25 22:21:46 2026 : The product corresponding to this entry in iuconfig.xml is not installed on the system.
Wed Feb 25 22:21:46 2026 : PROCESSING ENTRY: VIRSCAN.zip - Virus Definitions
Wed Feb 25 22:21:46 2026 : Entry details:
Wed Feb 25 22:21:46 2026 : 	Update-File: 			VIRSCAN.zip
Wed Feb 25 22:21:46 2026 : 	Update-Desc: 			Virus Definitions
Wed Feb 25 22:21:46 2026 : 	Auth DLL Name: 			ISAuthDLL
Wed Feb 25 22:21:46 2026 : 	Auth DLL Location: 		local
Wed Feb 25 22:21:46 2026 : 	Auth Content-Type: 		virus definitions core 3 sds x64
Wed Feb 25 22:21:46 2026 : 	Deploy Content-Type: 		virus definitions core 3 sds x64
Wed Feb 25 22:21:46 2026 : 	Deploy DLL Name: 		ISDeployDLL
Wed Feb 25 22:21:46 2026 : 	Deploy DLL Location: 		local
Wed Feb 25 22:21:46 2026 : AUTH DLL LOCATION: IU will read the DLL location from registry - ISAuthDLL
Wed Feb 25 22:21:46 2026 : REG FAILURE: Failed while opening the key  from registry. Return code: 2
Wed Feb 25 22:21:46 2026 : DEPLOY DLL LOCATION: IU will read the DLL location from registry - ISDeployDLL
Wed Feb 25 22:21:46 2026 : REG FAILURE: Failed while opening the key  from registry. Return code: 2
Wed Feb 25 22:21:46 2026 : IGNORE ENTRY: Ignoring entry for VIRSCAN.zip because of registry read failure. Error occurred while reading the path for the Authorization DLL from the registry.
Wed Feb 25 22:21:46 2026 : The product corresponding to this entry in iuconfig.xml is not installed on the system.
Wed Feb 25 22:21:46 2026 : PROCESSING ENTRY: VIRSCAN.zip - Virus Definitions
Wed Feb 25 22:21:46 2026 : Entry details:
Wed Feb 25 22:21:46 2026 : 	Update-File: 			VIRSCAN.zip
Wed Feb 25 22:21:46 2026 : 	Update-Desc: 			Virus Definitions
Wed Feb 25 22:21:46 2026 : 	Auth DLL Name: 			Norton X64 AuthDLL
Wed Feb 25 22:21:46 2026 : 	Auth DLL Location: 		local
Wed Feb 25 22:21:46 2026 : 	Auth Content-Type: 		SDSDefs
Wed Feb 25 22:21:46 2026 : 	Deploy Content-Type: 		SDSDefs
Wed Feb 25 22:21:46 2026 : 	Deploy DLL Name: 		Norton X64 DeployDLL
Wed Feb 25 22:21:46 2026 : 	Deploy DLL Location: 		local
Wed Feb 25 22:21:46 2026 : AUTH DLL LOCATION: IU will read the DLL location from registry - Norton X64 AuthDLL
Wed Feb 25 22:21:46 2026 : REG FAILURE: Failed while opening the key  from registry. Return code: 2
Wed Feb 25 22:21:46 2026 : DEPLOY DLL LOCATION: IU will read the DLL location from registry - Norton X64 DeployDLL
Wed Feb 25 22:21:46 2026 : REG FAILURE: Failed while opening the key  from registry. Return code: 2
Wed Feb 25 22:21:46 2026 : IGNORE ENTRY: Ignoring entry for VIRSCAN.zip because of registry read failure. Error occurred while reading the path for the Authorization DLL from the registry.
Wed Feb 25 22:21:46 2026 : The product corresponding to this entry in iuconfig.xml is not installed on the system.
Wed Feb 25 22:22:04 2026 : Done with IU Operations
Wed Feb 25 22:26:14 2026 : ******************************************************************
Wed Feb 25 22:26:14 2026 : 		Starting Intelligent Updater - Version 5.1.8.36
Wed Feb 25 22:26:14 2026 : ******************************************************************
Wed Feb 25 22:26:14 2026 : AUTH SYMSIGNED BEGIN: Started.
Wed Feb 25 22:26:14 2026 : AUTH SYMSIGNED CLASS3 BEGIN: Entering CriticalSection Initialization .
Wed Feb 25 22:26:14 2026 : AUTH SYMSIGNED CLASS3: Finding code signing : TRUE.
Wed Feb 25 22:26:14 2026 : AUTH SYMSIGNED END: Finished processing. Returns TRUE
Wed Feb 25 22:26:14 2026 : IU RES SYMSIGNED SUCCESS: Successfully verified Symantec Signature for the iuResource DLL
Wed Feb 25 22:26:14 2026 : IU RES LOAD: Successfully loaded the resource file..
Wed Feb 25 22:26:14 2026 : CONFIG LOAD SUCCESS: Successfully loaded the configuration file: iuConfig.xml.
Wed Feb 25 22:26:14 2026 : 	IU INFO: File-name : 20260225-002-Core3SDSN64v5i64.EXE
Wed Feb 25 22:26:14 2026 : 	IU INFO: Creation-date : 20260225
Wed Feb 25 22:26:14 2026 : AUTH DLL LOCATION: IU will read the DLL SAVIUAuth location from registry.
Wed Feb 25 22:26:14 2026 : REG FAILURE: Failed while opening the key  from registry. Return code: 2
Wed Feb 25 22:26:14 2026 : REG FAILURE: Failed while opening the key  from registry. Return code: 2
Wed Feb 25 22:26:14 2026 : AUTH DLL LOCATION: IU will read the DLL ISAuthDLL location from registry.
Wed Feb 25 22:26:14 2026 : REG FAILURE: Failed while opening the key  from registry. Return code: 2
Wed Feb 25 22:26:14 2026 : REG FAILURE: Failed while opening the key  from registry. Return code: 2
Wed Feb 25 22:26:14 2026 : AUTH DLL LOCATION: IU will read the DLL Norton X64 AuthDLL location from registry.
Wed Feb 25 22:26:14 2026 : REG FAILURE: Failed while opening the key  from registry. Return code: 2
Wed Feb 25 22:26:14 2026 : REG FAILURE: Failed while opening the key  from registry. Return code: 2
Wed Feb 25 22:26:14 2026 : Identified as 32-bit product installation. Continuing...
Wed Feb 25 22:26:14 2026 : IU MODE: IU is running is FULL mode.
Wed Feb 25 22:26:27 2026 : CONFIG LOAD SUCCESS: Successfully loaded the configuration file: iuConfig.xml.
Wed Feb 25 22:26:27 2026 : 	IU INFO: File-name : 20260225-002-Core3SDSN64v5i64.EXE
Wed Feb 25 22:26:27 2026 : 	IU INFO: Creation-date : 20260225
Wed Feb 25 22:26:27 2026 : PROCESSING ENTRY: VIRSCAN.zip - Virus Definitions
Wed Feb 25 22:26:27 2026 : Entry details:
Wed Feb 25 22:26:27 2026 : 	Update-File: 			VIRSCAN.zip
Wed Feb 25 22:26:27 2026 : 	Update-Desc: 			Virus Definitions
Wed Feb 25 22:26:27 2026 : 	Auth DLL Name: 			SAVIUAuth
Wed Feb 25 22:26:27 2026 : 	Auth DLL Location: 		local
Wed Feb 25 22:26:27 2026 : 	Auth Content-Type: 		virus definitions core 3 sds x64
Wed Feb 25 22:26:27 2026 : 	Deploy Content-Type: 		virus definitions core 3 sds x64
Wed Feb 25 22:26:27 2026 : 	Deploy DLL Name: 		SAVIUDeploy
Wed Feb 25 22:26:27 2026 : 	Deploy DLL Location: 		local
Wed Feb 25 22:26:27 2026 : AUTH DLL LOCATION: IU will read the DLL location from registry - SAVIUAuth
Wed Feb 25 22:26:27 2026 : REG FAILURE: Failed while opening the key  from registry. Return code: 2
Wed Feb 25 22:26:27 2026 : DEPLOY DLL LOCATION: IU will read the DLL location from registry - SAVIUDeploy
Wed Feb 25 22:26:27 2026 : REG FAILURE: Failed while opening the key  from registry. Return code: 2
Wed Feb 25 22:26:27 2026 : IGNORE ENTRY: Ignoring entry for VIRSCAN.zip because of registry read failure. Error occurred while reading the path for the Authorization DLL from the registry.
Wed Feb 25 22:26:27 2026 : The product corresponding to this entry in iuconfig.xml is not installed on the system.
Wed Feb 25 22:26:27 2026 : PROCESSING ENTRY: VIRSCAN.zip - Virus Definitions
Wed Feb 25 22:26:27 2026 : Entry details:
Wed Feb 25 22:26:27 2026 : 	Update-File: 			VIRSCAN.zip
Wed Feb 25 22:26:27 2026 : 	Update-Desc: 			Virus Definitions
Wed Feb 25 22:26:27 2026 : 	Auth DLL Name: 			ISAuthDLL
Wed Feb 25 22:26:27 2026 : 	Auth DLL Location: 		local
Wed Feb 25 22:26:27 2026 : 	Auth Content-Type: 		virus definitions core 3 sds x64
Wed Feb 25 22:26:27 2026 : 	Deploy Content-Type: 		virus definitions core 3 sds x64
Wed Feb 25 22:26:27 2026 : 	Deploy DLL Name: 		ISDeployDLL
Wed Feb 25 22:26:27 2026 : 	Deploy DLL Location: 		local
Wed Feb 25 22:26:27 2026 : AUTH DLL LOCATION: IU will read the DLL location from registry - ISAuthDLL
Wed Feb 25 22:26:27 2026 : REG FAILURE: Failed while opening the key  from registry. Return code: 2
Wed Feb 25 22:26:27 2026 : DEPLOY DLL LOCATION: IU will read the DLL location from registry - ISDeployDLL
Wed Feb 25 22:26:27 2026 : REG FAILURE: Failed while opening the key  from registry. Return code: 2
Wed Feb 25 22:26:27 2026 : IGNORE ENTRY: Ignoring entry for VIRSCAN.zip because of registry read failure. Error occurred while reading the path for the Authorization DLL from the registry.
Wed Feb 25 22:26:27 2026 : The product corresponding to this entry in iuconfig.xml is not installed on the system.
Wed Feb 25 22:26:27 2026 : PROCESSING ENTRY: VIRSCAN.zip - Virus Definitions
Wed Feb 25 22:26:27 2026 : Entry details:
Wed Feb 25 22:26:27 2026 : 	Update-File: 			VIRSCAN.zip
Wed Feb 25 22:26:27 2026 : 	Update-Desc: 			Virus Definitions
Wed Feb 25 22:26:27 2026 : 	Auth DLL Name: 			Norton X64 AuthDLL
Wed Feb 25 22:26:27 2026 : 	Auth DLL Location: 		local
Wed Feb 25 22:26:27 2026 : 	Auth Content-Type: 		SDSDefs
Wed Feb 25 22:26:27 2026 : 	Deploy Content-Type: 		SDSDefs
Wed Feb 25 22:26:27 2026 : 	Deploy DLL Name: 		Norton X64 DeployDLL
Wed Feb 25 22:26:27 2026 : 	Deploy DLL Location: 		local
Wed Feb 25 22:26:27 2026 : AUTH DLL LOCATION: IU will read the DLL location from registry - Norton X64 AuthDLL
Wed Feb 25 22:26:27 2026 : REG FAILURE: Failed while opening the key  from registry. Return code: 2
Wed Feb 25 22:26:27 2026 : DEPLOY DLL LOCATION: IU will read the DLL location from registry - Norton X64 DeployDLL
Wed Feb 25 22:26:27 2026 : REG FAILURE: Failed while opening the key  from registry. Return code: 2
Wed Feb 25 22:26:27 2026 : IGNORE ENTRY: Ignoring entry for VIRSCAN.zip because of registry read failure. Error occurred while reading the path for the Authorization DLL from the registry.
Wed Feb 25 22:26:27 2026 : The product corresponding to this entry in iuconfig.xml is not installed on the system.
Wed Feb 25 22:27:52 2026 : Done with IU Operations

Questions:

  1. Is the Intelligent Updater still supported for Norton v25?

  2. Could this be related to registry permission issues?

  3. Is there a specific offline definition package required for v25?

  4. Are there any prerequisites before running the offline updater?

Please advise on how to resolve this issue.

Thank you.

2
  1. The Intelligent Updater is not supported for V25 and newer. From the download page for the update files, it lists the Norton products that it is compatible with. v22.8 is the latest security product version.

intelligent updater
intelligent updater1001×682 94.1 KB

  1. No.
  2. I would say no to this as well, or the downloads page would have a section for the newer versions.
  3. N/A

As this is an offline system, what hazards are you concerned with? Is it possible to connect just long enough to run LiveUpdate?

3

Thank you for the clarification.

However, on the download page there is another section that mentions:

“Norton 360 (version 22.9, 22.10 and later)”

image
image1269×355 34.4 KB

Based on that information, we understood that offline updates were still supported, which is one of the reasons we proceeded with the purchase.

This system is deployed in a government environment with very strict security policies. It is a completely isolated (air-gapped) environment with no network access allowed. All software, including antivirus solutions, must support offline updates as a mandatory requirement.

Also, an offline system does not mean it is 100% safe. Threats can still be introduced via removable media, so keeping virus definitions updated offline is critical for us.

Could you please confirm:

  • Is there any supported method to perform offline virus definition updates for Norton v25?

  • Is there an alternative offline update package for newer versions?

  • Or is offline updating completely unsupported for v25 and later?

We would appreciate clarification, as offline update capability is essential for our deployment scenario.

Thank you.

4

Norton products are aimed at home users sometimes at small businesses. If you need the strict policies required for a government environment, you would be better served with an enterprise anti malware solution.

The version limitations section at the end of this AI info points out that is for older versions, 22.xx.

AI Overview

As of early 2025, Norton has released

version 25.xx, which is being deployed in a phased manner to users. The Intelligent Updater is typically used for updating virus definitions, but for managing or reverting to specific program versions (like 25.x or downgrading to 22.x), users often rely on Norton’s specialized removal and installation tools.

[image]Norton Community +3

Key Information for Version 25

  • Availability: Version 25.9 and newer, such as 25.10–25.12, have been released throughout 2025.
  • How to Update: The update is primarily delivered via LiveUpdate in a phased manner.
  • Issues: Users have reported issues with the 25.x update, including white screens, spinning circles at launch, and firewall conflicts with screen casting.
  • Fixing Installation/Update Issues: If LiveUpdate fails or the 25.x version causes issues, users may need to use the Norton Removal Tool to clean the system and reinstall.

[image]Norton Community +3

Intelligent Updater

The Intelligent Updater is primarily designed to update virus definitions, not the application itself.

  • Virus Definitions: You can use the Intelligent Updater to keep your virus definitions current.
  • Version Limitation: The Intelligent Updater is often recommended for keeping older versions (e.g., 22.xx) running properly while avoiding forced upgrades to 24.xx or 25.xx.

[image]Norton Community +3

5

Hi. we have downgrades to norton v22, but can’t find which virus definition we are using, is it possible to find out?

6

If you have a version that is earlier than and up to version 22.6.xx.xx use the definitions below:

https://definitions.symantec.com/defs/20260226-002-core3v5i64.exe

SA