tmp files issue in XFER folder
Created: 11 Jun 2008 • Updated: 02 Mar 2009 | 101 comments
I'm encountered two issues with the ProgramData\Symantec\SAVCorp\7.5\xfer folder. I've only seen this on two Vista SP1 machines, one Business, one Ultimate both 32-bit, both Domain members but unmanaged.
First, SEP repeatedly detects risks in the xfer folder. I thought this folder had to do with Quarantine, so why would SEP detect the obvious?
Second, and possibly related to the first, the folder grows beyond all belief. I noticed this on the Business client when a 25GB partition had less than 1GB of free space, when it should have only been half full. The xfer directory in this case had grown to roughly 9GB with over 300 thousand files. It was so large that it was a pain to empty. Trying to view Quarantine caused the program to hang. It took several minutes to even browse th folder, as the hundreds of thousands of files caused explorer to take nearly 10 minutes to enumerate the files.
The Ultimate client had even more issues, with over 600 thousand files and 20GB of space taken up! The only way to get back to some semblance of normalcy was to uninstall SEP (which cleared out the Quarentine files) and then reinstall.
Part of the reason is my fault, since I hadn't set the purge options for Quarantine. Strangely, on my managed clients, without even setting an option it defaulted to deleting items older than 30 days. The unmanaged clients didn't even have the 30 day option set. Both now have the 30 day and 50MB options set, which should prevent the issue going forward (other than detecting risks in the xfer folder).
Any thoughts as to what's going on, particularly with the first issue?