Endpoint Protection

 View Only
  • 1.  How to setup auto delete of DWH* quarantined file in SEP client ?

    Posted Feb 26, 2013 10:32 AM

    Hi,

    some of my Workstation with Endpoint 12.1.2 RU2 got issues with Virus more than 11 alerts per minutes ? so in total there are 4700 entries that must be manually deleted.

    can anyone here please let me know how to delete it quick way ? 



  • 2.  RE: How to setup auto delete of DWH* quarantined file in SEP client ?

    Posted Feb 26, 2013 10:37 AM

    Check this article by Mithun Sangavi:

    https://www-secure.symantec.com/connect/articles/issue-related-low-disk-space

    You can build a batch script using the instructions he provided to remove these.



  • 3.  RE: How to setup auto delete of DWH* quarantined file in SEP client ?
    Best Answer

    Posted Feb 26, 2013 10:48 AM

    check this

    tmp file (DWH*****.tmp) detected as Trojan.Gen or Trojan.Gen.2 by Corp products

    http://www.symantec.com/business/support/index?page=content&id=TECH102953

     



  • 4.  RE: How to setup auto delete of DWH* quarantined file in SEP client ?

    Posted Feb 26, 2013 10:54 AM

    These alerts are on sepm or on client you want to clear out.

    in sepm log retention period is 30 days by default, those will be cleared out.

     

    client logs are stored under logs folder c:\program data\symantec

    or

     

    C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5

    add whatever you want to the below batch file

     

    del c:\Windows\temp\SEP_INST.LOG.back
    del c:\Program Files\Symantec\Symantec Endpoint Protection Manager\db\sem5.log.back
    del c:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\logs\SesmLu.log.back
    del c:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\logs\SesmLu-1.log.back
    del c:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\logs\SesmLu-2.log.back

    ren c:\Windows\temp\SEP_INST.LOG c:\Windows\temp\SEP_INST.LOG.Back 
    ren c:\Program Files\Symantec\Symantec Endpoint Protection Manager\db\sem5.log c:\Program Files\Symantec\Symantec Endpoint Protection Manager\db\sem5.log.back
    ren c:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\logs\SesmLu.log c:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\logs\SesmLu.log.back
    ren c:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\logs\SesmLu-1.log c:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\logs\SesmLu-1.log.back
    ren c:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\logs\SesmLu-2.log c:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\logs\SesmLu-2.log.back



  • 5.  RE: How to setup auto delete of DWH* quarantined file in SEP client ?

    Posted Feb 26, 2013 11:28 AM


  • 6.  RE: How to setup auto delete of DWH* quarantined file in SEP client ?

    Posted Feb 26, 2013 06:39 PM

    Great, many thanks for the advice people !