Symantec Mail Security for Microsoft Exchange 6.5.0 experiences virus definition loading failure due to rollback failure resulting in the Exchange server beeping and Windows Events: 110, 168, 68, and 167
Last Updated May 26, 2015
Symantec Mail Security for Microsoft Exchange (SMSMSE) has trouble loading new virus definitions. Issues may include mail flow slowdowns or stopping and event ID 110, 167, 168 and 68 being written to the application event log.
If an upgrade has occurred you notice an increase in the number of times virus definitions become corrupted, resulting in stoppages of mail flow, and event ID 110, 167, 168 and 68 being written to the application event log.
You may also see a virus definition date in the SMSMSE console of 1/1/1601
SMSMSE build number is 6.5.x.
To verify build number perform the following steps:
1. Open the SMSMSE Administration Console. 2. Click Help -> About.
An excessive number of folders with names similar to VirusDefs0000000XXX located in the SMSMSE virus definitions directory.
1. Open Windows explorer on the SMSMSE computer. 2. Open the following folder:
3. If this directory contains more than 3 folders with this naming convention then this condition is met.
When SMSMSE receives a new virus definition set it tries to load them. If SMSMSE is unable to use the new virus definition set then it attempts to roll back to a previous version of the virus definitions. SMSMSE is unable to roll back and this issue occurs. The roll back functionality is not functioning as expected.
For example, copy all files from C:\Program Files\Common Files\Symantec Shared\VirusDefs\2010XXXX.XXX to C:\Program Files\Common Files\Symantec Shared\definitions\Antivirus\incoming.
Start the SMSMSE service
Click Start > Run.
Type: net start smsmse
When the service starts up, SMSMSE will read the definition files from the incoming folder and create a new virus definition folder under the Antivirus folder. For example, a folder, A VirusDefs00000001 is created in C:\Program Files\Common Files\Symantec Shared\definitions\Antivirus.
ID: 2036758 2015143
Imported Document ID: TECH132624
Subscribing will provide email updates when this Article is updated. Login is required to Subscribe