Enabling resumable scans

Article:TECH101386  |  Created: 2005-01-28  |  Updated: 2013-05-16  |  Article URL http://www.symantec.com/docs/TECH101386
Article Type
Technical Solution

Product(s)

Environment

Issue



This document describes how to enable resumable scans in Symantec AntiVirus Corporate Edition 10.x.

 


Solution




About resumable scans
Resumable scans solve a problem that results from the increasing size of volumes: not having enough time in which to run a scheduled scan from start to finish without affecting productivity. It achieves this goal by allowing the scheduled scan to complete over several scan sessions.

The primary goal of the resumable scan feature is to split a single scan operation into sessions. Administrators can specify the period of time in which to run a full scan of a hard drive. When this period is over, the operation is suspended until the next period occurs. The scan resumes from the place where it stopped, and the process repeats until the entire volume is scanned. This feature is primarily recommended for use on servers.

If you suspect that a drive is infected, or if QuickScan reports an infection, you should perform a full scan of the entire drive(s) rather than a resumable scan.

Considerations regarding resumable scans

  • When you configure a resumable scan, choose the largest time frame that is practical so that the scan can cover the greatest amount of the disk. If a full scan can be completed inside the available time frame, do not use a resumable scan.
  • Depending on what the scan is doing when the time frame ends, the scan may continue to run. If a scan must finish by a certain time, then configure the time frame so that the scan finishes at least five minutes before the deadline.
  • The progress of the scan is stored on the computer that performs the scan. If a different computer scans a shared drive on that computer, it maintains its own scan progress information.
  • When scans resume, they start with the next file after the last file or folder that was scanned. Scans can also be suspended and resumed one level deep inside container files.
  • The resumable scan feature handles the deletion or the renaming of any files or paths, including the files or paths that were last scanned.
  • Any new or changed files or directories that are added to the drive may not be scanned until the next scan takes place. Whether new files get scanned when the scan resumes depends on the order in which the underlying file system enumerates and presents files and folders.
  • If a resumable scan finishes and time remains in the specified time frame, the scan stops. The scan does not start again until the next scheduled occurrence.
  • Multithreaded and resumable scans can be combined, but they can use only one thread per volume or drive.
    For information about multithreaded scans, read Enabling multithreaded scans.

Enabling resumable scans
To enable the resumable scan option, create the following DWORD value in the registry and set its value to 1:

Symantec AntiVirus Corporate Edition 10.x: HKEY_LOCAL_MACHINE\Software\Intel\LANDesk\VirusProtect6\CurrentVersion\ProductControl\EnableResumeableScanUI

If the value is set to 0 or does not exist, the option does not appear.

After the value has been set, you can configure resumable scheduled scans in the Symantec System Center for clients or servers, or locally for clients. The Scan Duration section appears in the following dialog box:




 



Legacy ID



2005062806252148


Article URL http://www.symantec.com/docs/TECH101386


Terms of use for this information are found in Legal Notices