I have done some Googling but I cannot get a definitive answer certainly not from the Symantec KB.

I have a Virtualised Win 2003R2 server 32bit. It has been provisioned to me with Symantec Endpoint Protection 11.0.62xxx CLIENT (not a definitions server)

the directory C:\Program Files\Common Files\Symantec Shared\VirusDefs is 750MB

IT doesn't contain .tmp directories so it is NOT a corrupt definitions server. IT does contain directories named with a date pattern YYYYMMDD.xxx

Some of these folders are 12 months old and I would like to recover the space. The sysmantect forums are full of this stuff but a lot of the postings contain links back to documents that are not specific to End Point Protection Client.

It appears that I should be able to delete the older folders and all will be OK. with a service restart however there is a warning about having Live Update Administrator Installed

Firstly I have no idea if I have this installed how to I check and secondly can I just ditch these old files and restart?

I have followed some instructions found on the Symantec site and assumed that the response from Nixphoe would resolve my issue. It appears that as I am on a provisioned VM from a central IT unit I cannot run the Symantec commands from the Run prompt as my admin creds to get me in. (smc -stop)
Basically I need to claw back some Diskspace from the c: drive which is being filed up with WSUS patches and Symantec files. I have managed to delete one symantec cache through the live update control panel and recovered 470Mb

I suppose my last question for those more experienced than myself is, can I simply remove say the two oldest virus definition folders without completely foobaring the End Point protection and the server?

2 Answers 2


Live update should show up in your add/remove programs, as well as under your Start > Programs.

Read over the Content Cache Directory. It should be safe to clean that up. It also has a link about how to use Client Cache Control

  • Thanks for your reply I have "Live Update" 3.3 in my add and remove programs. I assume that this is not the Live update Administrator, am I correct?
    – Gus Denton
    Jun 27, 2011 at 4:32
  • To follow up with your follow up question above. You should be able to delete any of the cache and it would just redownload it.
    – Nixphoe
    Jun 27, 2011 at 22:59

Usually defenitions are located in App Data folder in the root dirctory. ( folder is hidden by default ) the path to the folder should be: C:\ProgramData\Symantec\Symantec Endpoint Protection\CurrentVersion\Data\Definitions\VirusDefs Depending on your setting you should have only one folder with most current definitions.
Size of the folder varies but form my experience it averages at about 400-600mb

Answering your question about deleteing defections, I would say No. As far as I know you can't delete definitions. That one of t he problems that im facing right now

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.