Symantec Definitions Folder Eating My Hard Drive

Posted on 2009-12-18
Last Modified: 2013-12-09
Using Symantec System Center to centrally manage Symantec AntiVirus on clients.

There is a folder on the main server called "definitions" that keeps growing, with files with these extensions:  


... and more.

The folder just keeps growing and growing, completely filling my 2.5gb e-drive.  I could add a bigger hard drive, but how do I tell symantec to start using it and do I need to keep all these files.
Question by:gateguard
    LVL 20

    Expert Comment

    there might be corrupt definitions under that folder. but the files that you listed above i dont see them under my sav definitions. If you search for a couple of those files they point to autocad or other programs. im looking under \Program Files\Common Files\Symantec Shared\VirusDefs\ i dont see any of the files that you have listed.
    You can try the following
    stop the antivirus services from services.msc
    the delete the following files from Program Files\SAV any file with extension tmp, xdb .vdb, .wdb
    then delete everything under this folder \Program Files\SAV \I2_LDVP.VDB\
    also delete everything under \Documents and Settings\All Users\Application data\Symantec\LiveUpdate\ Downloads
    restart your antivirus.
    then when the new definitions are downloaded check the space and monitor your virus definitions and space.

    Author Comment

    This is symantec corporate system center, main console, not the client.  I'm pretty sure these files are related to the definitions download for the system center and it look like they download every day in a set of 6: .x86 .nlm .is4 .aix .lin .sol

    It also looks like the entire set generally gets bigger with each download, which makes me think that each download is complete and that I don't need to keep the older downloads.

    Does that sound logical?
    LVL 20

    Expert Comment

    Try this
    Open symantec antivirus where you are running ssc and to to live update then go to configure live update.
    Turn down the amount of space that live update is currently using also click on remove all files from catched. see attachment
    Now go back  to the symantec system console and check how the paret is set to retrive updates if you have set it to continues live update this will fill up your hard drive because everytime it finds an update it will download it. instead use a set schedule for weekly this will ensure that bandwidth is not over use and disk space is not over used.
    Test and post back


    Author Comment

    Thanks, Jimmy, I'm going to do as you suggest and I'll let you know how that worked.

    But can I ask you a quick question in advance:

    Each of those update-download-sets that it's saving is cumulative and complete, right?

    I can delete the old files (going back a couple of years), right?

    LVL 20

    Accepted Solution

    >>>>going back a couple of years?....
    You should have no more than 1 month old files under the virus def folder. delete everything older than 1 months test and post back

    Expert Comment

    gateguard - any update on how this worked?  I'm working on a similar situation.  Thx.
    LVL 20

    Expert Comment

    any updates?

    Author Comment

    Sorry about not getting back until now.

    Yes, it appears that each download is cumulative.  I've been moving the old ones off the server onto external storage with no adverse results.

    I'm going to just start deleting them now.

    Featured Post

    Free Trending Threat Insights Every Day

    Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

    Join & Write a Comment

    PREFACE The purpose of this guide is to provide information to successfully add specific IIS 7.0 role services for the Symantec Endpoint Protection Manager (SEPM) to function properly when installed on Windows 2008. AUDIENCE Information Technol…
    HOW TO REMOTELY CLEAN MEROND.O WITH ESET SILENTLY PROBLEM       If you have the fortunate luck to contract the Merond.O virus on your network, it can be quite troublesome to remove as it propagates to network shares on your network. In my case, the …
    Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…
    Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

    732 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now