Endpoint Protection

Hello all,

I'm sure this topic has been discussed but I cannot seem to find it in the forums or the Internet anywhere. This is probably because I have no idea what's going on with my product.

I constantly get these pop-up scans and pop-up scan results thought the day at random times. They interrupt everything else I'm doing at the time, day and night, at random times. I've been in and out of every menu of SEP and have disabled ALL notifications, ALL auto scans, and ALL Endpoint Protection activities are disabled and yet these scans persist. The only information I get from these scans is from the top where it says "Started on..." then the date and time, with the word "complete" in the window. Please help me get rid of these annoying windows!

Is this for a managed or unmanaged client?

Is this the Auto-Protect box? Does it show an infected item being deleted or cleaned?

HI, 

Which version of SEP you are using on your Environment and is it all are managed / unmanaged ?

is it showing any virus infections ?

Regards

Ajin

Hmmmmm, assuming we're talking about a managed SEP12.1 client here, can you try out the below?

Open up the "Virus and Spyware Protection" policy assigned to your machine, and navigate to Administrator Defined Scans -> Advanced Tab, and near the bottom, change the "Scan Progress Option" to "Do not show scan progress".

Incidentally, the randomly timed nature of the scans, suggest these are Active Scans initiated when new definitions arrive.  You can disable these scans from the same area (just above the "Scan Progress Options" in fact).

This'll be different for unmanaged machines though.

May be it found it when you logged out, can you check this registry

HKLM\Software\Symantec\Symantec Endpoint Protection\AV\AdministratorOnly\General\NotificationWhenLoggedOff
(DWORD: 1=enabled, 0=disabled)

I am SEP 12.1.671. I can't find Admintrator Defined Scans under "Virus and Spyware Protection".

Under configration button, 5 tabs: Global Settings, Auto-Protect, Download Insight, Internet Email Auto-protect, Outlook Auto-Protect, Notes Auto-Proect. 

That sounds as if you're looking on the client itself rather than on the Virus and Spyware Protection Policy on the SEPM as I directed. 

Hi

Have you tried upgrading to SEP 12.1.3

Regards

Thanks for reply. We have 90 licenses from our headquater, no SEPM. Does that mean we can't get rid of this stupid daily frequently pop up windows and tell the staff to close them menually in patient? They kept asking if we can go to something else than that.

I deleted the daily scan schedule but it still scanning somehow. The realtime protection is more important than scan the historic files for most users and supposed to be setup and go with default settings. Most users are not pros to figure out how this software with thousands of setting options works. Even for a small company IT it's too  complicated. 

I hope you can help me to fix this up cause the solutions under this topic don't work for me.

Because you have no SEPM, you're going to be handcuffed. In regards to unmanaged clients, have you seen these KBAs:

http://www.symantec.com/docs/TECH177336

http://www.symantec.com/docs/TECH173305

They require editing the registry.