Hi All,
Please find the script to delete corrupt defs using batch ( Use at your own risk).
Tamper protection need to be turned off to delete defs or else you will receive Access Denied message
@echo off
cd "C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.*\Bin"
smc -stop
timeout 20
; rem NOTE: If you are unable to stop the Symantec Management Client
; rem you will need to temporarily disable Tamper Protection.
; rem Please see the Technical Information at the bottom of this document for instructions
ECHO
ECHO =======================
ECHO Delete definition files
ECHO =======================
ECHO
del /F /Q "C:\ProgramData\Symantec\Symantec Endpoint Protection\CurrentVersion\Data\Definitions\BashDefs\*.*"
Echo "Done"
del /F /Q "C:\ProgramData\Symantec\Symantec Endpoint Protection\CurrentVersion\Data\Definitions\ccSubSDK_SCD_Defs\*.*"
del /F /Q "C:\ProgramData\Symantec\Symantec Endpoint Protection\CurrentVersion\Data\Definitions\EfaVTDefs\*.*"
del /F /Q "C:\ProgramData\Symantec\Symantec Endpoint Protection\CurrentVersion\Data\Definitions\HIDefs\*.*"
del /F /Q "C:\ProgramData\Symantec\Symantec Endpoint Protection\CurrentVersion\Data\Definitions\IPSDefs\*.*"
del /F /Q "C:\ProgramData\Symantec\Symantec Endpoint Protection\CurrentVersion\Data\Definitions\IronRevocationDefs\*.*"
del /F /Q "C:\ProgramData\Symantec\Symantec Endpoint Protection\CurrentVersion\Data\Definitions\IronSettingsDefs\*.*"
del /F /Q "C:\ProgramData\Symantec\Symantec Endpoint Protection\CurrentVersion\Data\Definitions\IronWhitelistDefs\*.*"
del /F /Q "C:\ProgramData\Symantec\Symantec Endpoint Protection\CurrentVersion\Data\Definitions\SRTSPSettingsDefs\*.*"
del /F /Q "C:\ProgramData\Symantec\Symantec Endpoint Protection\CurrentVersion\Data\Definitions\VirusDefs\*.*"
ECHO
ECHO ===========================
ECHO Remove values from Registry
ECHO ===========================
ECHO
REG delete "HKLM\Software\Symantec\Symantec Endpoint Protection\CurrentVersion\SharedDefs\SDSDefs" /v DEFWATCH_10 /f
REG delete "HKLM\Software\Symantec\Symantec Endpoint Protection\CurrentVersion\SharedDefs\SDSDefs" /v NAVCORP_70 /f
REG delete "HKLM\Software\Symantec\Symantec Endpoint Protection\CurrentVersion\SharedDefs\SDSDefs" /v SRTSP /f
; rem Start Symantec Services
ECHO
ECHO ==========================
ECHO Starting Symantec services
ECHO ==========================
ECHO
smc -start
timeout 20
; rem Future addition of auto execute latest patch
; rem cd %homepath%\Desktop
ECHO Definitions removed. Upload new definition files.
pause