Symantec Scan Engine 5.x fails to delete tmp files if the quarantining of an infected file fails.
|Article:TECH167861|||||Created: 2011-08-23|||||Updated: 2014-07-21|||||Article URL http://www.symantec.com/docs/TECH167861|
Temp files are not deleted from the Symantec Scan Engine temp directory, potentially causing the drive to fill up and lead to low disk space issues.
Symantec Scan Engine (SSE) 5.x
When Symantec Scan Engine fails to quarantine an infected file, Scan Engine will continue to accept scan requests but fail to delete temp files that are generated in the Scan Engine temp folder. This issue could occur for various reasons. The Quarantine server has either reached its file count limit or size limit, Scan Engine is unable to reach the quarantine server, there could be possible network issues, or the quarantine server could be down.
Engineering is currently working on a fix for this issue. A workaround to get Scan Engine back up and running normally would be to restart the Symantec Scan Engine process. This will also clear up all leftover temp files in the SSE temp directory. To ensure this issue does not happen again, periodically confirm that the quarantine server is up and running and that Scan Engine has access. The Quarantine Server can also be configured to purge infections or can be periodically checked to make sure it is not full.
Article URL http://www.symantec.com/docs/TECH167861