Endpoint Protection

The folders "Symantec AntiVirus Corporate Edition" & "Symantec Endpoint Protection"
in the path "C:\Documents and Settings\All Users\Application Data\Symantec" have consumed 5.3 Giga bytes of disc space.
There are some files named like "000006A7", "00000AC8" etc..
of size more than 250 MB in the folder "Symantec Endpoint Protection" and
"C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\I2_LDVP.TMP\dec"

I feel this is also related to another problem I have with the antivirus.

Rtvscan runs for a very long time and consumes a lot of CPU which makes the PC almost unusable for the whole day.

It would be of great help if some one suggests any solution to this.
Please let me know if any other information is needed.


Thanks,
Basavesh

This was yhe problem in SEP 11.0MR2 but resolved in MR4MP1. Which version of Symantec u r using???

U can delete those file. These files are nothing but temp file.

Hi,
please upgrade the SEPM and the client tp thelatest version. THis was the known issue, which is been fixed ( as i understand).

These are the fiiles get created during the scan.

Pete!

Thanks for the reply.

It says the version is 11.0.4000.2295.

I still experience the problem of full utilization of CPU.
Does the PC needs to be upgraded?

Configuration of my PC is :
Pentium 4 CPU, 2.80 GHz, 512 MB RAM

Basavesh

Hi,
Ummm.. this is the latest version.

What process is consuming the high CPU ? Check for memory usage as well. You may finetune the scanning of the files like archive depth to scan, the files etc.

Pete!

I think the latest version is 11.0.4014.26

Hi,

       Yes the latest SEPM version is 11.0.4014. In this case the hardwaare configuration is as follows

Pentium 4 CPU, 2.80 GHz, 512 MB RAM

The RAM needs to be upgraded to atleast 1GB. Please do remember that its the collective hardware speed of the machine that is responsible for the performance of the SEPM. You must be aware that endpoint is a bit heavy on resources and it also depends on the endpoint features that you have installed. If you have installed all features ...then with 512mb of RAM the system is bound to be slow.


Coming to the disk space issue you mentioned :-

"C:\Documents and Settings\All Users\Application Data\Symantec" have consumed 5.3 Giga bytes of disc space.
There are some files named like "000006A7", "00000AC8" etc..
of size more than 250 MB in the folder "Symantec Endpoint Protection" and
"C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\I2_LDVP.TMP\dec"

Upgrading to the latest version of MR4MP1a(11.0.4014) should resolve this issue. This happens due to the old files of SAV being stored. The new version of SEPM takes care of it.

Please check the following link and let us know whether it helped.

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008100216042048

The latest version does not fix the issue.

The problem is when the full scan is run, no one is logged in.
For some reason Symantec Service cannot scan some files. It has no "user" account or permissions are blocked, or in use by another account.
So Symantec copies the file into the C:\Documents and Settings\All Users\Application Data\Symantec\...\I2_LDVP.TMP folder (it gets copied there multiple times, thus the different file endings -1 -2 -3 etc.)
Symantec then locks these files with the rtvscan.exe and the folder will not get deleted.

Try giving the Symantec service log in an account rather than the local service account...