Endpoint Protection

 Hello,

 

I have  Symantec Endpoint Protection 11 client on my WinXP PC.  The Symantec client software is taking 4.4GB and growing.

 

The large files are in

 

        C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5

 

Can I safely delete anything in there? File names are "00000A3A", "00000A26", etc.

 

Thanks,
John

Hi,

       The files mentioned by you are the temporary files and need to be deleted. Please check the following link and let us know whether it helped.

http://service1.symantec.com/support/ent-security.nsf/docid/2009042217073548

 I saw that article actually, but I wasn't sure it applied because it specifically refers to files in the xfer and xfer_tmp folders, where mine are one level up from that, in the 7.5 folder.  I guess that doesn't make any difference?

Thanks,
John

I think those are temp files too and can be safely deleted.  ETA: I meant the ones with names like you mentioned in your original post.

What version of SEP is in use?  I would definitely recommend upgrading to the latest.  For example, one of the fixes for MR4 (11.0.4000.2295) is:

Temp files left over in the 7.5 folder after scans.
Fix ID: 1405018
Symptom: After a scan, Symantec Endpoint Protection does not clean up all temporary files from the "7.5" folder.
Solution: The heuristic scan engine was incorrectly holding on to the temporary files in the 7.5 folder during the scan. Modified the engine to prevent this issue from occurring.

Thanks,
sandra

 My current version is 11.0.2020.56, but I just ran LiveUpdate.  Do I need to talk to my IT department about upgrading that further?

Thanks,
John

 Ooops..you need to upgrade lot further ...currently SEP is on 11.0.4202.75 ...however by the end of the month it would be 11.0.5xxxx.xxxx

Unfortunately, the product version is not going to update via LiveUpdate.  I would definitely talk to your IT dept about upgrading; that's a pretty old build.  We've had 2 maintenance releases (MRs) and 3 maintenance patches (MPs that apply to the MRs) since this version, with many product improvements.  Also, security vulnerabilities have been identified in earlier builds of SEP that have also since been addressed (see http://www.symantec.com/business/security_response/securityupdates/list.jsp?fid=security_advisory -- see those from 4/28/2009).

The most current build available is 11.0.4202.75 (MR4 MP2); the system would have to go from MR2 MP2 (where you are now) to MR4 (11.0.4000.2295) to MR4 MP2.

However we are due for another major build release this month, which is being referred to now as RU5.  It might be best to wait for that release; you should be able to upgrade directly to it.

sandra