Video Screencast Help

Option to DELETE all files in Quarantine

Created: 04 Jan 2011 • Updated: 04 Jan 2011 | 2 comments
Sonihal's picture
5 Agree
0 Disagree
+5 5 Votes
Login to vote

In SEP 11 version 6, I have a client with nearly 20,000+ items in Quarantine. So, I go to the Quarantine folder

C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\Quarantine

 
 
 
 
 
 
to delete these. However, has been taking nearly half hour.
 
The SEP Client "View Quarantine" should have the option of "Delete All" the files in quarantine.

Comments 2 CommentsJump to latest comment

Mordac the Preventer's picture

I believe there is a utility you can get from support to delete the quarantine, but I agree it would be better if it were built into sepm rather than being an isolated tool you need to contact support to receive.

0
Login to vote
FbacchinZF's picture

I couldn't find such utilitty to delete all the files in quarantine so I built myself one.

Basically we have to stop CQ services and clean the SUBMISSIONS folder (But keep the folder!)
Instead of deleting files, Id rather rename the folder, so I keep it as historical data.

Here's the code: (save as a Batch file) :

NET STOP "Symantec Quarantine Agent"
NET STOP "Symantec Quarantine Scanner"

D:
cd\Program Files (x86)\Symantec\Quarantine\Server
REN Submissions Submissions.%DATE%
MKDIR Submissions

NET START "Symantec Quarantine Scanner"
NET START "Symantec Quarantine Agent"
+1
Login to vote