Symantec Scan Engine 5.x fails to delete tmp files if the quarantining of an infected file fails.
|Article:TECH167861|||||Created: 2011-08-23|||||Updated: 2012-02-14|||||Article URL http://www.symantec.com/docs/TECH167861|
Temp files are not deleted from the Symantec Scan Engine temp directory, potentially causing the drive to fill up and leading to low disk space issues.
Symantec Scan Engine (SSE) 5.x
When Symantec Scan Engine fails to quarantine an infected file, Scan Engine will continue to accept scan requests but fail to delete temp files that are generated in the Scan Engine temp folder. This issue could occur for various reason. The Quarantine server has either reached its file count limit or size limit, Scan Engine was unable to reach the quarantine server. Possible due to network issues, or the quarantine server could have been down.
Currently Engineering is working on a fix for this issue, a workaround to get Scan Engine back up and running normally would be to restart the Symantec Scan Engine process. This will also clear up all of the leftover temp files in the SSE temp directory. Steps that can be done to make sure the issue does not happens is to periodically confirm that the quarantine server is up and running and that Scan Engine has access, as well as configuring the quarantine server to purge infections or periodically check to make sure it is not full.
Article URL http://www.symantec.com/docs/TECH167861