Symantec Antivirus Space Issues

From ZoneAlarm: The only free Antivirus that also includes a Firewall. Protect yourself with the ultimate free Internet security solution. The all-in-one security.

Bitdefender Antivirus Plus 2016 is officially the best antivirus software today. It builds on technology awarded PRODUCT OF THE YEAR and uses machine-learning to.

Fixes common PC problems and helps keep your computer running fast and trouble-free

Finds and fixes issues in Microsoft Windows to prevent PC freezes, crashes and slow downs.

Scans for potential problems that can cause your hard drive to crash.

Helps you rescue accidentally deleted or damaged files that may still be retrievable on your hard drive.

Boosts your PC s performance and helps it run like new again

Lets you turn off services and programs Windows automatically loads at startup, so your PC gets up and running faster.

Safely defragments, repairs and optimizes your Windows registry to help programs load faster and boost overall PC performance.

Frees up PC memory, so you can run more programs simultaneously, without slow downs or crashes.

Cleans up your hard drive to help it run faster and give you more room for your Stuff

Reorganizes optimizes files that are scattered across your hard drive, so your PC can find them faster.

Finds all the duplicate files, so you can remove them.

Removes the programs you don t use.

Keeps your online activity private and helps prevent your personal information from being stolen

Permanently erases all record of your Web activities, so others can t see what you do online.

Lets you completely and permanently erase old, unwanted and unneeded personal Stuff, so no one can access or retrieve it.

Technical Support Articles, videos and downloads that help solve technical issues related to your Veritas Products.

Norton Utilities™

Norton Utilities contains a registry and PC cleaner to boost your PC s performance and improve startup times by repairing other common PC issue.

Story of Low Disk Space: You have bought a new setup which is having 1 master and 100 more clients. All VERITAS and tape library configurations were done.

Question/Issue: Troubleshooting liveupdate issues. Symptoms: Virus Definitions not updating. Solution: This document will help you to understand in which direction.

Norton AntiVirus, developed and distributed by Symantec Corporation, was providing malware prevention and removal during a subscription period.

Symantec Corporation / s ɪ ˈ m æ n ˌ t ɛ k / commonly known as Symantec is an American technology company headquartered in Mountain View, California, United States.

Please note that this article is not intended as an all encompassing guide to every possible cause of Disk Space issues related to SEP or SEPM installations.  However it covers some of the most common causes and solutions. 

Before troubleshooting the issue, it is important to know which drive is running low on Disk Space and which folder is using the highest amount of Disk Space on the drive.  Note: There are a variety of free third party utilities to aid in the investigation of which specific folders and files are using the most Disk Space on a given drive.

Once the status i.e. Disk Space available is known for the system, troubleshooting can start.

For Windows systems:

1  Run Windows Disk Cleanup manually.

2 Uninstall any unwanted/unnecessary software from the system.

In the case of the Symantec Endpoint Protection SEP  client using large amounts of disk space:

 Stop the Symantec service

Symantec Endpoint Protection

Click Start, then Run

Type: smc -stop

Click OK

Deleting the files

NOTE: The following instructions are to be accomplished from the Command Prompt, as attempting to perform the deletions from Windows Explorer may result in delays and application hangs. Please note that these instructions will delete the files in the targeted directories/folders, not the directories/folders themselves. Do not remove the directories/folders themselves.

 NOTE: The following steps will delete files from the system and having a backup of the system in case of problems resulting from the the deletions is advised.

Open the Command Prompt

Deleting files from User Temp folder

Click Start, then Run

Type: cmd

1. Type the following command in Command Prompt. The following command will vary depending on the user name. Replace with the username of the desired Windows user you wish to empty the temp folder for:

For Windows 2000/XP/2003

 DEL /F /Q C: Documents and Settings Local Settings Temp

 For Windows Vista/7/2008

 DEL /F /Q C: Users AppData Local Temp

2. Deleting the contents of the temp folder at the root of C:

Type the following command in Command Prompt:

DEL /F /Q C: temp

3. Deleting the contents of the Windows Temp folder

DEL /F /Q C: WINDOWS Temp

4. Deleting the contents of the xfer and/or xfer_temp directories

Windows 2000/XP/2003

DEL /F /Q C: Documents and Settings All Users Application Data Symantec Symantec Endpoint Protection xfer_tmp

DEL /F /Q C: Documents and Settings All Users Application Data Symantec Symantec Endpoint Protection xfer

Windows Vista/7/2008

DEL /F /Q C: ProgramData Symantec Symantec Endpoint Protection xfer_tmp

DEL /F /Q C: ProgramData Symantec Symantec Endpoint Protection xfer

The Quarantine Folder

NOTE: The following instructions are to be done from the Command Prompt as attempting to open the Quarantine folder in the Windows user interface may result in delays and Windows Explorer application hangs due to the large amount of files that can reside there.

Delete the Quarantine Folder

Type the following commands in the Command Prompt:

Windows 2000/XP/2003

DEL /F /S /Q C: Documents and Settings All Users Application Data Symantec Symantec Endpoint Protection Quarantine

RD /S /Q C: Documents and Settings All Users Application Data Symantec Symantec Endpoint Protection Quarantine

DEL /F /S /Q C: ProgramData Symantec Symantec Endpoint Protection Quarantine

RD /S /Q C: ProgramData Symantec Symantec Endpoint Protection Quarantine

Recreate the Quarantine Folder

MD C: Documents and Settings All Users Application Data Symantec Symantec Endpoint Protection Quarantine

MD C: ProgramData Symantec Symantec Endpoint Protection Quarantine

Start the Symantec service

Type: smc -start

 In the case of the Symantec Endpoint Protection Manager SEPM  using large amounts of disk space:

The catalina.out file can grow quite large, possible to 1 GB or more in size

 The most typical cause is not disabling the debugging mode of the SEPM, which can lead to large log files building up, including Catalina.out.  This situation can be remedied as follows:

Stop the Symantec Endpoint Protection Manager service. Browse to C: ProgramFiles Symantec Symantec Endpoint Protection Manager tomcat etc

Open the conf.properties file and delete the line that says: scm.log.loglevel FINEST, FULL

Save and close the conf.properties file

While the SEPM service is stopped you can delete or archive all the log files located in Program Files Symantec Symantec Endpoint Protection Manager tomcat logs folder be sure to only move or delete the contents of the logs folder, not the logs folder itself

Start the SEPM service.

Retaining a large amount of definition content can lead to folder growth under Program Files Symantec Symantec Endpoint Protection Manager Inetpub Content

To adjust the amount of content retained by the SEPM go to the Admin page of the SEPM Console, Servers section, then select Local Site and click Edit Site Properties.  From here go to the LiveUpdate tab, then see the section labeled Disk Space Management for Downloads.  

 Please see the following article for additional information on managing the number of Content revisions retained by a SEPM, as well as other useful information:

content id TECH96214 locale en_US

NOTE: According to the product system requirements, the SEP client requires at least 600 MB of free hard disk space.

Note: the LiveUpdate component is always installed on the C: drive, regardless of any custom installation path selected for the SEP client. LiveUpdate requires at least 130 MB of free space on C.

Check to make sure enough disk space is available

It is recommended to utilize the following articles for additional information:

1 Disk Space Management procedures for the Symantec Endpoint Protection Manager

2  Symantec Endpoint Protection virus definition folder consumes a large amount of disk space

3 For information on monitoring Server Health from Symantec Endpoint Protection Manager and Receive Notification, view the article linked below:

Monitoring Server Health on Symantec Endpoint Protection Manager

Some Best Practice Articles:

1 Best Practices for configuring the number of content revisions to keep in Symantec Endpoint Protection Manager

2 Troubleshooting Content Delivery to the Symantec Endpoint Protection client.

Enterprise Support - Symantec Corp. - Low Disk Space issues encountered on systems running either the Symantec Endpoint Protection client or the Symantec Endpoint Protection Manager

Introduction. This paper looks at the evolution of firewall technology towards Deep Packet Inspection, and then discusses some of the security issues with this.