Video Screencast Help

Duplicate virscanXX.dat files on Windows 7. Can duplicates be deleted?

Created: 19 Jan 2013 • Updated: 19 Jan 2013 | 7 comments

We have over 500 Windows 7 laptops/desktops (64 bit) with SEP 12.1.1101.401. When looking for files to clean up I see duplicate file names I see the virscan7.dat, located in  different folders on the c: drive. I have many other virscanX.dat's (e.g. virscan9.dat, virscan5.dat, etc.) that have duplicates as well.

Can I delete them manually, or does Symantec have a system cleanup utility?

Comments 7 CommentsJump to latest comment

ᗺrian's picture

Those are all different files. Can you post a screen shot of an example

On a side note, SEP 12.1 only keeps 1 content revisions for AV defs:

Configuring the number of content revisions kept by the Symantec Endpoint Protection client

Article:TECH103956  |  Created: 2008-01-15  |  Updated: 2012-10-08  |  Article URL

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

petergladden's picture

I've attached a pdf with the screen shot of just 5 of the virscan dat's. There are others.

Thanks for the side note, I'll read it.

virscan dat files.pdf 113.05 KB
pete_4u2002's picture

which all location do you see. why do you want to delete these files?

if corrupted defiition then there is tool called rx4def to run.

petergladden's picture

I uploaded a pdf with the screen shot. I included 3 virscan numbers dat files. But there are more.

if they are truly duplicate I'd like to keep my computer clean. I don't know if they are corrupt.

virscan dat files.pdf 113.05 KB
Ashish-Sharma's picture


Try to this,,,

How to clear out definitions for a Symantec Endpoint Protection 12.1 client manually
Article:HOWTO59193  |  Created: 2011-09-08  |  Updated: 2012-09-25  |  Article URL

Thanks In Advance

Ashish Sharma

SebastianZ's picture

Default setting value for keeping virus defs on SEP 12.1 client would be = 1 revision.

What folders are all those duplicates contained in?

The is a known defect regarding amount of AV deinitions kept on SEP client in 12.1 - all versions of 12.1 below RU2 are affected:

..this is monstly seen on servers OS but you can go ahead and try the steps recommended here as well.

markbun's picture

Another alternative tool is "DuplicateFilesDeleter" an guaranteed fix for duplicates.