\Windows\temp\ directory filled by “nsebin.def” files from norman scan engine updates of Forefront Protection 2010 for Exchange Server

May 11

Written by:
Saturday, May 11, 2013 1:45 PM  RssIcon

Today I had the same problem again and looked whre these “nsebin.def” files in the Windows\temp directory come from.

I found two useful links:

http://exchangekb.com/?s=nsebin.def

http://social.technet.microsoft.com/Forums/en-US/FSENext/thread/ca55530e-3850-49a0-9cd6-2ffd562301ce

The large files in the Windows\temp directory come from the Norman scan engine of  the “Forefront Protection 2010 for Exchange Server” product.

image

Today in the post (second link above) a MS member informed that they are aware of this widespread issue and customers have to wait for a fix.

At the moment the only solution is

1.) to disable the Norman Scan Engine update

image

or

2.) delete these large files by a scheduled task

Get-ChildItem $env:WINDIR\temp\*.* -Include nsebin* | foreach ($_) {remove-item $_.fullname}