Late last week I began noticing an error in the Application event logs on some of my SEP11 systems
Event ID 13: “LiveUpdate returned a non-critical error. Available content updates may have failed to install.”
Over at Symantec Forums people report receiving a couple different answers from tech support. Looks like the definitive answer is:
The Event ID 13 error is due to a defective patch that went out via LU on August 4, 2008. It was pulled from LU on the 7th, but machines that already downloaded the patch will display these symptoms.
Besides cluttering logs, these errors are not detrimental to system performance or security.
When the new patch to replace the defective one goes out sometime next week, the errors will stop happening.
I’m assuming the fix they are referring to is the Symantec Eraser update scheduled for Monday.
Symantec expects to post its quarterly update to the Eraser engine in the
certified definitions of Monday, August 11th, US Pacific Time. This release
includes internal enhancements and does not address any specific customer
issues seen in the field. Eraser file versions will be 2008-2.0.125. This
update will cause the size of the xdb file to temporarily increase.