Definition updates add entries to "PendingFileRenameOperations" registry key on a frequent basis

TECH182556
Last Updated November 20, 2012
Copy Article Title/URL
Feedback
Subscribe

On a regular basis, virus definition files for Symantec Endpoint Protection are added to the "PendingFileRenameOperations" registry key.  Is this expected behavior?

Registry key: HKLM\SYSTEM\ControlSet001\Control\Session Manager\PendingFileRenameOperations

Key's value data: \??\C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Data\Definitions\IPSDefs\20120131.002\IDSxpx86.dll

Definition files are being replaced; old definition files are not removed until after reboot.

The issue has been fixed in SEP 12.1 RU2. 

You can obtain a copy of SEP 12.1 RU2 at the following location: 

https://fileconnect.symantec.com

The following are some helpful links to documentation regarding this new release:

 Obtaining the latest version of Endpoint Protection or Network Access Control

http://www.symantec.com/docs/TECH103088

 Upgrading or migrating to Symantec Endpoint Protection 12.1.2011 (RU2)

http://www.symantec.com/docs/TECH197426

 What's new in Symantec Endpoint Protection 12.1.2

http://www.symantec.com/docs/HOWTO81091

Release Notes and System Requirements for all versions of Symantec Endpoint Protection and Symantec Network Access Control

http://www.symantec.com/docs/TECH163829

New fixes and enhancements in Symantec Endpoint Protection 12.1 Release Update 2

http://www.symantec.com/TECH199676


Applies To

Windows 7

Windows XP
Windows Server 2008 R2
32- and 64-bit
Symantec Endpoint Protection 12.1 RU1
Source: ETrack
ID: 2692127
Imported Document ID: TECH182556

Thanks for your feedback. Let us know if you have additional comments below. (requires login)

    © 1995-2019 Broadcom. All Rights Reserved. The term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries.