Endpoint Protection

Hi :

               my pc is protected using Symantec Endpoint sw (v 11) corporate edition. I recent run left 26 GB of .vbn files  and i want to delete them and reclaim the space. Is that ok?

                                                                                                                             Thanks - Fred

You can delete these files without any issues.

http://service1.symantec.com/SUPPORT/ent-security.nsf/pfdocs/2000060210325448?Open&dtype=corp

https://www-secure.symantec.com/connect/forums/simple-question-sav-1019


limit the size of the quarantine folder as per this discussion, so that the issue does not occur in future

https://www-secure.symantec.com/connect/forums/quarantine-folder-containing-3gb-vbn-file

let me know if you have any questions.

These are quarentine files which can be deleted without any problem.

Were exactly these files are located? 

Team:

       Thanks for the quick response. I'm enclosing outpur for the dos 'dir' command to make sue that I have the next action correct. So should i delete the 0E840000 directory and thereby all it;s contents (the .VBN file)? Or Should I delete the .VBN fiels individually? It make no difference to me. I just don;t want to leave dangling files i.e. files tha can;t be reached.

        Thanks for the help.

                                                                                               Cheers - Fred



Directory of C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\Quarantine

 

11/22/2009 03:06 AM <DIR> .

11/22/2009 03:06 AM <DIR> ..

12/12/2009 02:43 PM <DIR> 0E840000

10/23/2009 12:48 AM 6,512 0E840000.VBN

10/22/2009 10:05 PM 324,412,524 0E840001.VBN

10/22/2009 10:09 PM 417,852,237 0E840002.VBN

10/22/2009 10:09 PM 417,852,237 0E840003.VBN

10/22/2009 10:18 PM 541,208,910 0E840004.VBN

10/22/2009 10:18 PM 541,208,910 0E840005.VBN

10/22/2009 10:19 PM 541,208,910 0E840006.VBN

10/22/2009 10:19 PM 541,208,910 0E840007.VBN

10/22/2009 10:20 PM 541,208,910 0E840008.VBN

10/22/2009 10:20 PM 541,208,910 0E840009.VBN

10/22/2009 10:21 PM 541,208,910 0E84000A.VBN

10/22/2009 10:21 PM 541,208,910 0E84000B.VBN

10/22/2009 10:22 PM 541,208,910 0E84000C.VBN

10/22/2009 10:23 PM 541,208,910 0E84000D.VBN

10/22/2009 10:23 PM 541,208,910 0E84000E.VBN

10/22/2009 10:24 PM 541,208,910 0E84000F.VBN

10/22/2009 10:24 PM 541,208,910 0E840010.VBN

10/22/2009 10:25 PM 541,208,910 0E840011.VBN

10/22/2009 10:26 PM 541,208,910 0E840012.VBN

10/22/2009 10:26 PM 541,208,910 0E840013.VBN

10/22/2009 10:27 PM 541,208,910 0E840014.VBN

10/22/2009 10:28 PM 541,208,910 0E840015.VBN

10/22/2009 10:28 PM 541,208,910 0E840016.VBN

10/22/2009 10:29 PM 541,208,910 0E840017.VBN

10/22/2009 10:30 PM 541,208,910 0E840018.VBN

10/22/2009 10:30 PM 541,208,910 0E840019.VBN

10/22/2009 10:50 PM 324,412,524 0E84001A.VBN

10/22/2009 10:54 PM 417,852,237 0E84001B.VBN

10/22/2009 10:54 PM 417,852,237 0E84001C.VBN

10/22/2009 11:01 PM 541,208,910 0E84001D.VBN

10/22/2009 11:02 PM 541,208,910 0E84001E.VBN

10/22/2009 11:02 PM 541,208,910 0E84001F.VBN

10/22/2009 11:03 PM 541,208,910 0E840020.VBN

10/22/2009 11:04 PM 541,208,910 0E840021.VBN

10/22/2009 11:04 PM 541,208,910 0E840022.VBN

10/22/2009 11:05 PM 541,208,910 0E840023.VBN

10/22/2009 11:06 PM 541,208,910 0E840024.VBN

10/22/2009 11:06 PM 541,208,910 0E840025.VBN

10/22/2009 11:07 PM 541,208,910 0E840026.VBN

10/22/2009 11:08 PM 541,208,910 0E840027.VBN

10/22/2009 11:09 PM 541,208,910 0E840028.VBN

10/22/2009 11:09 PM 541,208,910 0E840029.VBN

10/22/2009 11:10 PM 541,208,910 0E84002A.VBN

10/22/2009 11:11 PM 541,208,910 0E84002B.VBN

10/22/2009 11:11 PM 541,208,910 0E84002C.VBN

10/22/2009 11:12 PM 541,208,910 0E84002D.VBN

10/22/2009 11:13 PM 541,208,910 0E84002E.VBN

10/22/2009 11:13 PM 541,208,910 0E84002F.VBN

10/22/2009 11:14 PM 541,208,910 0E840030.VBN

10/22/2009 11:15 PM 541,208,910 0E840031.VBN

10/22/2009 11:15 PM 541,208,910 0E840032.VBN

51 File(s) 26,133,432,548 bytes

you can delete what ever inside Qurantine folder without any problem.
your are deleting viruses which are put here for future analysis when new defs come.
you are not deleting good stuffs but rather bad ones, so go ahead and delete what ever inside qurantine. 

Hi Rafeeq

Fantastic thanks it'll be good to get that space back.

Something I;ve noticed since running the Endpoint protection. The first time the scanner ran a few months ago, the number of files that the virus scanner has been seeing was somewhere about 400,000 files. Now only a fewmonths later, the number has grown to 1.2 million files. I know that I haven't generated that many new files.  I generated a file listing but the text file is over 1 MB so it;s taking me some time to go through it. Any ideas on if those files came from the scanner?

Even though there are only 53 .vbn files, is it possible that there is a file count of hiddne files inside of those .vbns?

  Thanks for all your help.

                                                                                 CHeers - Fred

you pointed it out right.
files are put in qurantine for future analyis
when the new defs arrive it would first scan this folder ( quick scan)
the scan might have went recursive and scanned as many as possible to get the file cleared and get it out of quarantine.
when scan rans, it checks what kind of infection it is, a dat file, txt, ext, zip. so many other consideration,im' really not sure about all of them :)
delete those files and things should be fine. 

Great thanks, Rafeeq.

                                                                                           Cheers - Fred

Enable and specifiy a value in the folder size (Default = 50MB), for our environment I used 100MB - should stop you having this issue in future: