Client stops and starts again.
Hi,
PFB below logs, the client starts and stops after updating. Can this be avoided?
20th Feb’13:
2B0114002903,3,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan started on all drives and all extensions.",1361248555,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,B467E5AFCF3246128D1C4EB7F71F367C,0,2B0114002903,
2B011400293A,65,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Suspended: Risks: 0 Scanned: 795 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 624",1361248555,,0,0:0:795:0:624,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,B467E5AFCF3246128D1C4EB7F71F367C,55,2B011400293A,
2B0114011203,66,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan resumed on all drives and all extensions.",1361248555,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,B467E5AFCF3246128D1C4EB7F71F367C,0,2B0114011203,
2B0114013208,2,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Complete: Risks: 0 Scanned: 158166 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 632",1361248555,,0,0:0:158166:0:632,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,B467E5AFCF3246128D1C4EB7F71F367C,1925,2B0114013208,
2B01140A052D,13,2,8,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Symantec Endpoint Protection services shutdown was successful.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B01140A052D,
2B01140A0623,14,2,8,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Symantec Endpoint Protection services startup was successful.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B01140A0623,
2B01140A0739,79,2,16,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Proactive Threat Protection has been enabled",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,999,,,,,,,,,,,,,,,,,,,,,,0,2B01140A0739,
2B01140A073A,93,2,16,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Symantec Endpoint Protection Tamper Protection Enabled",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,999,,,,,,,,,,,,,,,,,,,,,,0,2B01140A073A,
2B01140B110A,7,3,8,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"New virus definition file loaded. Version: 130219017.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B01140B110A,
2B01140B110A,3,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan started on selected drives and folders and all extensions.",1361334992,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,4AF550D5584445B7871585CA9A5660A5,0,2B01140B110A,
2B01140B111A,2,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Complete: Risks: 0 Scanned: 734 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 613",1361334992,,0,0:0:734:0:613,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,4AF550D5584445B7871585CA9A5660A5,16,2B01140B111A,
2B01140E0A27,7,3,8,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"New virus definition file loaded. Version: 130219024.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B01140E0A27,
2B01140E0A28,3,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan started on selected drives and folders and all extensions.",1361334993,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,D9ED11B7D5C64856B7BC8BEA6444753D,0,2B01140E0A28,
2B01140E0A35,2,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Complete: Risks: 0 Scanned: 757 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 636",1361334993,,0,0:0:757:0:636,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,D9ED11B7D5C64856B7BC8BEA6444753D,13,2B01140E0A35,
2B0114162022,7,3,8,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"New virus definition file loaded. Version: 130220003.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B0114162022,
2B0114162022,3,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan started on selected drives and folders and all extensions.",1361334994,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,7215758F64D0441C831BFDD3016B9BD2,0,2B0114162022,
2B0114162033,2,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Complete: Risks: 0 Scanned: 737 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 634",1361334994,,0,0:0:737:0:634,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,7215758F64D0441C831BFDD3016B9BD2,17,2B0114162033,
21st Feb’13
2B0115011501,3,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan started on all drives and all extensions.",1361334995,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,A7A7FC9BE3DE404BAE10B719B5453BEC,0,2B0115011501,
2B0115011539,65,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Suspended: Risks: 0 Scanned: 796 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 638",1361334995,,0,0:0:796:0:638,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,A7A7FC9BE3DE404BAE10B719B5453BEC,56,2B0115011539,
2B0115012701,66,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan resumed on all drives and all extensions.",1361334995,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,A7A7FC9BE3DE404BAE10B719B5453BEC,0,2B0115012701,
2B0115020A00,65,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Suspended: Risks: 0 Scanned: 148950 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 645",1361334995,,0,0:0:148950:0:645,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,A7A7FC9BE3DE404BAE10B719B5453BEC,1859,2B0115020A00,
2B011507091B,7,3,8,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"New virus definition file loaded. Version: 130220016.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B011507091B,
2B011507091B,3,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan started on selected drives and folders and all extensions.",1361334997,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,AD48E6F86F5144088DB3039EF0F0F9AB,0,2B011507091B,
2B011507092C,2,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Complete: Risks: 0 Scanned: 740 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 635",1361334997,,0,0:0:740:0:635,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,AD48E6F86F5144088DB3039EF0F0F9AB,17,2B011507092C,
2B01150A0E27,13,2,8,DESKTOP_TEST,User_ID,,,,,,,16777216,"Symantec Endpoint Protection services shutdown was successful.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B01150A0E27,
2B01150A0F23,14,2,8,DESKTOP_TEST,User_ID,,,,,,,16777216,"Symantec Endpoint Protection services startup was successful.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B01150A0F23,
2B01150A1038,79,2,16,DESKTOP_TEST,User_ID,,,,,,,16777216,"Proactive Threat Protection has been enabled",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,999,,,,,,,,,,,,,,,,,,,,,,0,2B01150A1038,
2B01150A1038,93,2,16,DESKTOP_TEST,User_ID,,,,,,,16777216,"Symantec Endpoint Protection Tamper Protection Enabled",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,999,,,,,,,,,,,,,,,,,,,,,,0,2B01150A1038,
Comments 21 Comments • Jump to latest comment
Hi,
This is happend on SEP client or SEPM server ?
Do you have shutdown system / server ?
Did you try to repair add/remove program.
Thanks In Advance
Ashish Sharma
SEPM Knowledgebase Documents
Its a Win XP client. Nothing was done, no reboot /log off
Actually the thing is, the client disconnect everyday at almost same time. For most of the systems in my enviorment.
was the system restarted at that time?
it seems like its running scan after new defs arrive
open sepm console, client (on the left hand side) ---policies tab-- antivirus and antispyware policy-- administrator defined scans-- click on advanced tab -- uncheck "run active scan when new definition arrives"
check if that re-occurs again
Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq
Does AV client always restart after scanning? Scanning after new def arrives.
System will ask you for a restart,
And let me clear one thing if you are doing scan on system or server after completing scan you should restart the system or server. So that can all viruses can clean mode.
Thank& Regards,
Ambesh
Please mark your thread as 'SOLVED' with the answer that helps you.
Here my system is not restarting. Here, only the SEP client Shutdown itself then again start in 1-2 sec. Can this be avoided using the steps above? I have Network access configured, once my AV client is down, everything is stopped.
How offen is the Host integrity check performed on your machines? If it is each couple of minutes - SEP client shutdown for couple of seconds should not fail the HI check.
Real Time scanning is done. Even if client goes down for a sec, the system is restricted.. Can I turn off this feature of scanning after downloading updates? And also restarting the client?
disable to scan when new defs arrive?
Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq
Yes, disable to scan and as well as re-starting of SEP client. As its happening in logs above
My main motive is to keep SEP client always in running state.
Hi
Please try to repair the client
Regards
Its not an issue with client. Check the above settings, not sure if shutdown / restart will stop after enabling settings on server.
Hi Arnav,
is it possible for you to upload the system Log? If yes please Collect it from client machine. View Logs -> ClientManagement Logs -> System log
Also the Scan Logs.
Regard's
Ajit Jha
Technical Consultant
ASC & STS
Hi Ajit,
Will share the logs tomorrow.
Can you please confirm if doing this will stop client from restarting after downloading new content and scanning there after
''open sepm console, client (on the left hand side) ---policies tab-- antivirus and antispyware policy-- administrator defined scans-- click on advanced tab -- uncheck "run active scan when new definition arrives"''
Attached a screenshot
If you dont know the SQL tool is install, You can verify this by ensuring that bcp.exe exists in the following directory:
C:\Program Files\Microsoft SQL Server\100\Tools\Binn\bcp.exe
If bcp.exe is not in this location, then you need to go back through the client tools installation and ensure you've checked the following:
Client Tool Connectivity
Client Tools Backward Compatibility
Client Backwards Compatibility
Why SQL is required here ?
hi Arnave
Please ignore above. Thanks
Hello,
Could you try disabling the Active Scan from the machines, when virus definitions arrive and check if that helps!!
Note: This is just to test and segregate the issue.
Hope that helps!!
Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | MCTS | STS | ITIL v3
Twitter: @mithun_sanghavi
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<&a
No, its still the same. Disconnecting @ around 10 AM everyday. Do i need to do something else or just this setting is okay?
Would you like to reply?
Login or Register to post your comment.