Antivirus: August 2008 Archives

Websense blogged about this a couple days ago and I just saw it in our email today.

Here's the info on the messages that our email scanner stopped heuristically.

Subject: Fedex Tracking N_
File WD6128922.exe

Late last week I began noticing an error in the Application event logs on some of my SEP11 systems

Event ID 13: "LiveUpdate returned a non-critical error. Available content updates may have failed to install."

Over at Symantec Forums people report receiving a couple different answers from tech support. Looks like the definitive answer is:

The Event ID 13 error is due to a defective patch that went out via LU on August 4, 2008. It was pulled from LU on the 7th, but machines that already downloaded the patch will display these symptoms.

Besides cluttering logs, these errors are not detrimental to system performance or security.

When the new patch to replace the defective one goes out sometime next week, the errors will stop happening.

I'm assuming the fix they are referring to is the Symantec Eraser update scheduled for Monday.

Symantec expects to post its quarterly update to the Eraser engine in the certified definitions of Monday, August 11th, US Pacific Time. This release includes internal enhancements and does not address any specific customer issues seen in the field. Eraser file versions will be 2008-2.0.125. This update will cause the size of the xdb file to temporarily increase.