Virus Sweep scan begins immediately after installing a new client

Article:TECH98723  |  Created: 2000-01-29  |  Updated: 2007-01-09  |  Article URL
Article Type
Technical Solution



You installed Symantec or Norton AntiVirus Corporate Edition client. After the installation completes, a scan called a "virus sweep" automatically starts. You ran a virus sweep prior to these installations, and you have not selected to do a scan on the new clients.


client is running a virus sweep


This behavior is as-designed. A virus sweep is designed to run on all computers. If a client is off-line when the virus sweep is started, then that client will run the virus sweep scan the next time it connects to the network. When a new client is added, the virus sweep automatically begins on that client.

To disable a virus sweep, delete the virus sweep from the Symantec or Norton AntiVirus parent server's registry.

To remove the virus sweep from the registry
  1. Click Start > Run.
  2. In the Run dialog box, type:

  3. Click OK.
    The Registry Editor Opens.
  4. Go to the following key:

  5. In the right pane, delete the VirusSweep value.
  6. If you are using client groups, go to the following key:

    where [GroupName] is the name of a client group to which the new client belongs.
  7. In the right pane, delete the VirusSweep value.
  8. Delete the following key:

  9. If you are using client groups, delete the following key:

    where [GroupName] is the name of a client group to which the new client belongs.
  10. Exit the Registry Editor.

After you delete the VirusSweep keys and values from the parent server, no new Virus Sweeps will begin on that server's managed clients. Computers that have already started the Virus Sweep will continue with the Virus Sweep until it completes.

If you start a new Virus Sweep, all VirusSweep registry information will be recreated on the parent server, and the VirusSweep value will be set to 1. The VirusSweep value on managed clients will be reset with the same value as the parent server.

If the problem persists, read the document Client scans run randomly and continuously.

Legacy ID


Article URL

Terms of use for this information are found in Legal Notices