Endpoint Protection

Hello, I have an issue with vmware guests in an ESX 3.5 environment. Every time these windows machines receive a new virus definition the server stops responding. You can see a chart of the virtual machine in the vcenter and it looses any value when this event happens, I mean, a kind of network card disconnection.
The manager and clients have the SEP 11.4202.75 version.
Appreciate your help if someone has had a similar issue.

Thanks in advance.

Carlos Navarrete

 I would guess the DefWatcher scan is causing this . This scan runs after new definitions arrive.
In SEPM - Policies - Antivirus...pol - Admin Defined scan - advanced.

Navigate to C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\xfer_tmp and see if you have large number of  .tmp files, If yes delete them and observe