Legacy SEP virus definitions are left installed after migration from SEP 11.x to 12.1


Article ID: 156552


Updated On:


Endpoint Protection


After upgrading from Symantec Endpoint Protection (SEP) 11.x to 12.1 there are extra definitions folders consuming disk space.


This issue is resolved in Symantec Endpoint Protection 12.1 Release Update 2. For information on how to obtain the latest build of Symantec Endpoint Protection, read How to obtain an update or an upgrade for your Symantec corporate product.


The following are paths to the definition folders for the management console:

  • Windows 2003 – C:\Program Files\Common Files\Symantec Shared\SymcData\
  • Windows 2008 – C:\ProgramData\Symantec\Definitions\SymcData\

In both Operating systems, If the spcVirDef32 and spcVirDef64 folders are present and contain data, then you may safely delete the sesmVirDef32 and sesmVirDef64 folders.


The following are paths to the legacy definition folders for the client:

  • Windows XP, 2003 – C:\Program Files\Common Files\Symantec Shared\VirusDefs
  • Windows Vista, 7, 2008 – C:\ProgramData\Symantec\VirusDefs

The above folders can be deleted if there is an active set of virus definitions in the following folders for 12.1.

  • Windows XP, 2003 – C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\CurrentVersion\Data\Definitions\VirusDefs
  • Windows Vista, 7, 2008 – C:\ProgramData\Symantec\Symantec Endpoint Protection\CurrentVersion\Data\Definitions\VirusDefs


Applies To

Symantec Endpoint Protection 12.1