Symantec Endpoint Protection virus definition folder consumes a large amount of disk space

Article:TECH102927  |  Created: 2007-01-15  |  Updated: 2013-12-04  |  Article URL
Article Type
Technical Solution



Virus definitions consume a large amount of disk space.

The virus definition folder that is located in C:\Program Files\Common Files\Symantec Shared\VirusDefs fills with temporary folders. The temporary folders are called tmpXXXX.tmp, where XXXX are hexadecimal characters. The temporary folders take up large amounts of disk space.



Virus definitions may be corrupted.


Note: To check if the virus definitions are corrupted, download and run a "scan for common issues" with SymHelp. 

WARNING: Do not clear the VirusDefs folder if LiveUpdate Administrator (LUA) 2.1 is installed. This will cause LUA to report that engine updates are corrupt until the next set of engine updates is released.

    To solve this issue, follow these steps:
    1. Stop the Symantec Management Client service by following these directions:
      1. Go to Start > Run
      2. Type smc –stop
      3. Click OK.

    2. Stop the Symantec Endpoint Protection service in services by following these directions:
      1. Go to Start > Run
      2. Type services.msc
      3. Right-click on Symantec Endpoint Protection service and select Stop.

    3. Navigate to <local drive>:\Program Files\Common Files\Symantec Shared\Virusdefs
      1. Delete any numbered folders
      2. Delete all files and folders with a ".tmp" extension
    4. Install a new set of definitions manually using the Intelligent Updater (as explained in How to update definitions for Symantec Endpoint Protection 11.0 using the Intelligent Updater)
    5. Restart the Symantec Endpoint Protection Service in services
    6. Restart the Symantec Management Client service
      1. Go to Start > Run
      2. Type smc –start
      3. Click OK

This document is available in the following languages:

Technical Information
A utility has been created to accomplish the above described procedure automatically. The SymDelTmps utility will search and delete

temporary files and zero byte.dax files that are the result of a corrupt database or definition set. To obtain the utility, contact Symantec Technical support at:


Legacy ID


Article URL

Terms of use for this information are found in Legal Notices