Zero-kilobyte files remain in the DSPIcapTempFiles/VSEIcapTempFiles directory after a file is submitted for scanning

Technical Articles ID: KB89789
Last Modified: 10/8/2021

Environment

McAfee Endpoint Security Storage Protection (ENSSP) 2.x
McAfee VirusScan Enterprise for Storage (VSES) 1.x

Problem

0 (zero) kilobyte files remain in the directory C:\Windows\Temp\DSPIcapTempFiles\ (ENSSP) or C:\Windows\Temp\VSEIcapTempFiles\ (VSES) for between 60 and 120 minutes.

The issue occurs after a file is submitted for scanning to the ENSSP/VSES server configured for ICAP scanning.

Cause

When Alternate Data Stream (ADS) content is sent to the scan server, the ADS content is scanned and removed. The results are then returned to the appliance that sent the request. What remains behind for some period, is the zero-kilobyte stub file that the ADS content was attached to.

Solution

This behavior is expected. Every 60 minutes, ENSSP/VSES checks for files older than 60 minutes in the directory DSPIcapTempFiles (ENSSP) or VSEIcapTempFiles (VSES) and removes them if they exist. As such, files can exist in the directory for up to 120 minutes before being removed.

Related Information

Affected Products

Endpoint Security Storage Protection 2.x
VirusScan Enterprise for Storage 1.3.x
VirusScan Enterprise for Storage 1.2.x

Languages:

This article is available in the following languages:

English United States
Spanish Spain
French
Italian
Portuguese Brasileiro

Knowledge Center

Zero-kilobyte files remain in the DSPIcapTempFiles/VSEIcapTempFiles directory after a file is submitted for scanning

Environment

Problem

Cause

Solution

Related Information

Affected Products

Languages:

Title

Title

Knowledge Center

Zero-kilobyte files remain in the DSPIcapTempFiles/VSEIcapTempFiles directory after a file is submitted for scanning

Environment

Problem

Cause

Solution

Related Information

Affected Products

Languages:

Choose your region

Title

Title