I was researching (another) eTrust issue today, and found this (defunct) blog post by Brad Benner.  Thought I’d save it from the memory hole.


The virus definitions for one of our internal servers running Computer Associates eTrust ITM v8.0 hadn’t been updated since the last time we rebooted the server (about 45 days ago). I tried updating the definitions manually by right-clicking the eTrust ITM tray icon and clicking Download Updates Now and also restarting the eTrust ITM services – both to no avail.

In looking at the eTrust Distribution Events log, I noticed that the following message had been logged several times a day since the last server reboot:

An instance of the distribution program is running!

Rather than rebooting the server (and causing a disruption to everybody in the office), I found that manually launching ITMDist.exe (located at C:\Program Files\CA\SharedComponents\ScanEngine) did the trick. From the Task Manager, I can see this EXE ran for approximately 10 seconds and then terminated. The following message was then logged:

Time Type Code Description
11/5/2007 10:49:21 AM Information 0 The distribution program started incoming redistribution update.
11/5/2007 10:49:21 AM Information 0
11/5/2007 10:49:21 AM Warning   -1 Finished download process unsuccessfully.
11/5/2007 10:49:21 AM Information 0 Host enumeration complete
11/5/2007 10:49:21 AM Critical   0 Local update unsuccessful
11/5/2007 10:49:21 AM Information   0 Update completed
11/5/2007 10:49:21 AM Information   0 No updates found for “eTrust Vet Engine”
11/5/2007 10:49:21 AM Information 0 No updates found for “eTrust PestPatrol Signatures”

Still not 100% satisfied, I ran another manual update, and presto:

Time Type Code Description
11/5/2007 10:56:51 AM Information 0 Host enumeration complete
11/5/2007 10:56:49 AM Information 0 Downloading from “etrustdownloads.ca.com:80?
11/5/2007 10:56:49 AM Critical 0 Local update unsuccessful
11/5/2007 10:56:49 AM Information 0 Update completed
11/5/2007 10:56:49 AM Information 0 No updates found for “eTrust Vet Engine”
11/5/2007 10:56:49 AM Information 0 No updates found for “eTrust PestPatrol Signatures”
11/5/2007 10:56:49 AM Information 0 No updates found for “eTrust PestPatrol Engine”

Looks like local updating isn’t working as it should, which I’ll need to investigate, but at least the server is now getting the latest virus definitions.