Endpoint Protection

Hi,

I was suggested by the Symantec Tech support to enable the Network Threat Protection to minimize the Rogue Antivirus problems. Which I did, but now am having this big problem at some of my remote sites, when users open a file from a network share number of tmp files are created there and their names are random numbers.tmp files. These tmp files wont delete themself after closing the original file. Users can not modify the files etc etc. I uninstalled Network threat protection but the problem persists. Any help on this issue will be appreciated.

Thanks,

What version of Symantec endpoint protection are you using on the problematic  clients and SEPM ?

Which is the version you are using?
If it is an older version I recommend you to upgrade to RU5 since it is having a lot of fixes related to temp files.
For more info refer below docs

Release notes for Symantec Endpoint Protection 11.0.x and Symantec Network Access Control 11.0.x

Migrating to Symantec Endpoint Protection 11.0 RU5

 

Could you please tell me what is the location of these .tmp files and what is the version of SEP installed?

Upgrade to the latest version of endpoint i.e. RU 5.

You can download it from  https://fileconnect.symantec.com/licenselogin.jsp?localeStr=en_US

These tmp files could also be related to the following issue which is fixed in RU 5.

TMP folders in virus definitions folder eventually consume all available drive space

Fix ID: 1177176

Symptom: Symantec Endpoint Protection clients create tmp folders in the C:\Program Files\Common Files\Symantec Shared\VirusDefs folder. When new definitions arrive, the problem stops, but starts again at random times on some computers. TMP folders are created in 5 and 10 minute intervals, eventually consuming all available space on the drive.

Solution: LiveUpdate code modified to clean up temporary folders and registry values in the case of failures during the update process.