Directories with SEP files
/root/
/etc/init.d/
/etc/rc*.d/
/opt/Symantec/
/var/symantec/
/etc/
/etc/symantec/
/etc/sysconfig/
Installation Logs
/root/sep-install.log
/root/sepap-install.log
/root/sepap-legacy-install.log
/root/sepfl-install.log
/root/sepfl-kbuild.log
/root/sepjlu-install.log
/root/sepui-install.log
*** Not all of these logs may be present, depending on version, components installed, etc.
System startup files
/etc/init.d/autoprotect
/etc/init.d/rtvscand
/etc/init.d/smcd
/etc/init.d/symcfgd
/etc/rc*.d/ with the four files list in init.d
Main SEP directory
/opt/Symantec/
/opt/Symantec/autoprotect/
/opt/Symantec/autoprotect/symap*.ko
/opt/Symantec/autoprotect/symev*.ko
/opt/Symantec/bin/
/opt/Symantec/bin/navdefutil
/opt/Symantec/LiveUpdate/
/opt/Symantec/LiveUpdate/bcprov-jdk15on-148.jar
/opt/Symantec/LiveUpdate/jlu-3.10.0.26.jar
/opt/Symantec/LiveUpdate/jlu.jar
/opt/Symantec/LiveUpdate/jluold.jar
/opt/Symantec/LiveUpdate/liveupdt.log
/opt/Symantec/LiveUpdate/tmp
/opt/Symantec/LiveUpdate/uninstall-3.10.0.26.sh
/opt/Symantec/LiveUpdate/uninstall.sh
/opt/Symantec/symantec_antivirus/
/opt/Symantec/symantec_antivirus/libecomlodrlin.so
/opt/Symantec/symantec_antivirus/libpatchapp.so
/opt/Symantec/symantec_antivirus/libsep-cve.so
/opt/Symantec/symantec_antivirus/libsep-cve.so.1 -> libsep-cve.so
/opt/Symantec/symantec_antivirus/libsep-util.so
/opt/Symantec/symantec_antivirus/libsep-util.so.1 -> libsep-util.so
/opt/Symantec/symantec_antivirus/libsepcommon.so
/opt/Symantec/symantec_antivirus/libsepcommon.so.1 -> libsepcommon.so
/opt/Symantec/symantec_antivirus/libSlicMan.so
/opt/Symantec/symantec_antivirus/libSlicMan.so.1 -> libSlicMan.so
/opt/Symantec/symantec_antivirus/libSyLog.so
/opt/Symantec/symantec_antivirus/libSyLog.so.1 -> libSyLog.so
/opt/Symantec/symantec_antivirus/plugins/
/opt/Symantec/symantec_antivirus/plugins/AVMan.plg
/opt/Symantec/symantec_antivirus/plugins/LuMan.plg
/opt/Symantec/symantec_antivirus/rtvscand
/opt/Symantec/symantec_antivirus/sadiag.sh
/opt/Symantec/symantec_antivirus/sav
/opt/Symantec/symantec_antivirus/savluwrap
/opt/Symantec/symantec_antivirus/savtray
/opt/Symantec/symantec_antivirus/smcd
/opt/Symantec/symantec_antivirus/symcfg
/opt/Symantec/symantec_antivirus/symcfgd
/opt/Symantec/symantec_antivirus/symcfgdata.inf
/opt/Symantec/symantec_antivirus/symcfgpop
/opt/Symantec/symantec_antivirus/tools/
/opt/Symantec/symantec_antivirus/tools/libgcc_s.so.1
/opt/Symantec/symantec_antivirus/tools/liblog4cpp.so.4
/opt/Symantec/symantec_antivirus/tools/libstdc++.so.6
/opt/Symantec/symantec_antivirus/uninstall.sh
/opt/Symantec/symantec_antivirus/unsupported/
/opt/Symantec/symantec_antivirus/unsupported/xsymcfg
/opt/Symantec/symantec_antivirus/update_java_home.sh
/opt/Symantec/symantec_antivirus/upgrade.sh
/opt/Symantec/symantec_antivirus/vpdebug.log
/opt/Symantec/virusdefs/
/opt/Symantec/virusdefs/20160210.052/
/opt/Symantec/virusdefs/20160210.052/*dat, *sig, *txt, *so, *grd, *inf files (35 files total)
/opt/Symantec/virusdefs/20160211.002/
/opt/Symantec/virusdefs/20160211.002/*dat, *sig, *txt, *so, *grd, *inf files (35 files total)
/opt/Symantec/virusdefs/binhub/
/opt/Symantec/virusdefs/binhub/*dat, *sig, *txt, *so, *grd, *inf files (35 files total)
/opt/Symantec/virusdefs/definfo.dat
/opt/Symantec/virusdefs/defutil.log
/opt/Symantec/virusdefs/incoming
/opt/Symantec/virusdefs/temp
/opt/Symantec/virusdefs/texthub
/opt/Symantec/virusdefs/usage.dat
Main SEP Configuration & Log directory
/var/symantec/
/var/symantec/auto/
/var/symantec/commandStatus.xml
/var/symantec/communicationData.xml
/var/symantec/heartbeatStatus.txt
/var/symantec/index2.xml
/var/symantec/licenseInfo.xml
/var/symantec/Logs/
/var/symantec/Logs/02092016.log
/var/symantec/Logs/02102016.log
/var/symantec/Logs/02112016.log
/var/symantec/Logs/AVMan.log
/var/symantec/Logs/debug.log
/var/symantec/Logs/LUMan.log
/var/symantec/Logs/seclog.log
/var/symantec/Logs/serialize.dat
/var/symantec/Logs/syslog.log
/var/symantec/pending/
/var/symantec/pending/AVManOpstateInfo.xml
/var/symantec/pending/LUManOpstateInfo.xml
/var/symantec/pending/sepOpstateInfo.xml
/var/symantec/Quarantine
/var/symantec/registration.xml
/var/symantec/registrationInfo.xml
/var/symantec/sent/
/var/symantec/sent/AVManOpstateInfo.xml
/var/symantec/sent/LUManOpstateInfo.xml
/var/symantec/sent/sepOpstateInfo.xml
/var/symantec/serdef.dat
Other Configuration Files
/etc/liveupdate.conf
/etc/Symantec.conf
/etc/symc-defutils.conf
/etc/symantec/
/etc/symantec/dec3.cfg
/etc/symantec/log4j.properties
/etc/symantec/NLS
/etc/symantec/NLS/15/rtvscan.msg
/etc/symantec/sep.slf
/etc/symantec/setAid.ini
/etc/symantec/setup.ini
/etc/symantec/sylink.xml
/etc/symantec/VPREGDB.BAK
/etc/symantec/VPREGDB.DAT
/etc/symantec/VPREGDB.SAV
Process Related Files
/etc/sysconfig/smcd
/etc/sysconfig/rtvscand
/etc/sysconfig/symcfgd
Hint: Try running this command to see the smcd, rtvscand and symcfgd processes:
systemctl -a | grep -i symantec.
Note that the ‘autoprotect’ service may also be running, depending on configuration settings.