Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Client stops and starts again.

Created: 21 Feb 2013 | 21 comments

Hi,

 

PFB below logs, the client starts and stops after updating. Can this be avoided?

 

20th Feb’13:

 

2B0114002903,3,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan started on all drives and all extensions.",1361248555,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,B467E5AFCF3246128D1C4EB7F71F367C,0,2B0114002903,

2B011400293A,65,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Suspended: Risks: 0 Scanned: 795 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 624",1361248555,,0,0:0:795:0:624,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,B467E5AFCF3246128D1C4EB7F71F367C,55,2B011400293A,

2B0114011203,66,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan resumed on all drives and all extensions.",1361248555,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,B467E5AFCF3246128D1C4EB7F71F367C,0,2B0114011203,

2B0114013208,2,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Complete: Risks: 0 Scanned: 158166 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 632",1361248555,,0,0:0:158166:0:632,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,B467E5AFCF3246128D1C4EB7F71F367C,1925,2B0114013208,

2B01140A052D,13,2,8,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Symantec Endpoint Protection services shutdown was successful.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B01140A052D,

2B01140A0623,14,2,8,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Symantec Endpoint Protection services startup was successful.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B01140A0623,

2B01140A0739,79,2,16,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Proactive Threat Protection has been enabled",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,999,,,,,,,,,,,,,,,,,,,,,,0,2B01140A0739,

2B01140A073A,93,2,16,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Symantec Endpoint Protection Tamper Protection Enabled",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,999,,,,,,,,,,,,,,,,,,,,,,0,2B01140A073A,

2B01140B110A,7,3,8,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"New virus definition file loaded. Version: 130219017.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B01140B110A,

2B01140B110A,3,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan started on selected drives and folders and all extensions.",1361334992,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,4AF550D5584445B7871585CA9A5660A5,0,2B01140B110A,

2B01140B111A,2,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Complete: Risks: 0 Scanned: 734 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 613",1361334992,,0,0:0:734:0:613,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,4AF550D5584445B7871585CA9A5660A5,16,2B01140B111A,

2B01140E0A27,7,3,8,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"New virus definition file loaded. Version: 130219024.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B01140E0A27,

2B01140E0A28,3,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan started on selected drives and folders and all extensions.",1361334993,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,D9ED11B7D5C64856B7BC8BEA6444753D,0,2B01140E0A28,

2B01140E0A35,2,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Complete: Risks: 0 Scanned: 757 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 636",1361334993,,0,0:0:757:0:636,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,D9ED11B7D5C64856B7BC8BEA6444753D,13,2B01140E0A35,

2B0114162022,7,3,8,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"New virus definition file loaded. Version: 130220003.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B0114162022,

2B0114162022,3,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan started on selected drives and folders and all extensions.",1361334994,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,7215758F64D0441C831BFDD3016B9BD2,0,2B0114162022,

2B0114162033,2,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Complete: Risks: 0 Scanned: 737 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 634",1361334994,,0,0:0:737:0:634,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,7215758F64D0441C831BFDD3016B9BD2,17,2B0114162033,

 

21st Feb’13

 

2B0115011501,3,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan started on all drives and all extensions.",1361334995,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,A7A7FC9BE3DE404BAE10B719B5453BEC,0,2B0115011501,

2B0115011539,65,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Suspended: Risks: 0 Scanned: 796 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 638",1361334995,,0,0:0:796:0:638,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,A7A7FC9BE3DE404BAE10B719B5453BEC,56,2B0115011539,

2B0115012701,66,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan resumed on all drives and all extensions.",1361334995,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,A7A7FC9BE3DE404BAE10B719B5453BEC,0,2B0115012701,

2B0115020A00,65,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Suspended: Risks: 0 Scanned: 148950 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 645",1361334995,,0,0:0:148950:0:645,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,A7A7FC9BE3DE404BAE10B719B5453BEC,1859,2B0115020A00,

2B011507091B,7,3,8,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"New virus definition file loaded. Version: 130220016.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B011507091B,

2B011507091B,3,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan started on selected drives and folders and all extensions.",1361334997,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,AD48E6F86F5144088DB3039EF0F0F9AB,0,2B011507091B,

2B011507092C,2,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Complete: Risks: 0 Scanned: 740 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 635",1361334997,,0,0:0:740:0:635,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,AD48E6F86F5144088DB3039EF0F0F9AB,17,2B011507092C,

2B01150A0E27,13,2,8,DESKTOP_TEST,User_ID,,,,,,,16777216,"Symantec Endpoint Protection services shutdown was successful.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B01150A0E27,

2B01150A0F23,14,2,8,DESKTOP_TEST,User_ID,,,,,,,16777216,"Symantec Endpoint Protection services startup was successful.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B01150A0F23,

2B01150A1038,79,2,16,DESKTOP_TEST,User_ID,,,,,,,16777216,"Proactive Threat Protection has been enabled",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,999,,,,,,,,,,,,,,,,,,,,,,0,2B01150A1038,

2B01150A1038,93,2,16,DESKTOP_TEST,User_ID,,,,,,,16777216,"Symantec Endpoint Protection Tamper Protection Enabled",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,999,,,,,,,,,,,,,,,,,,,,,,0,2B01150A1038,

 

Operating Systems:

Comments 21 CommentsJump to latest comment

Ashish-Sharma's picture

Hi,

This is happend on SEP client or SEPM server ?

Do you have shutdown system / server ?

Did you try to repair add/remove program.

Thanks In Advance

Ashish Sharma

 

 

Arnav's picture

Its a Win XP client. Nothing was done, no reboot /log off

Actually the thing is, the client disconnect everyday at almost same time. For most of the systems in my enviorment.

Rafeeq's picture

was the system restarted at that time?

it seems like its running scan after new defs arrive

open sepm console, client (on the left hand side) ---policies tab-- antivirus and antispyware policy-- administrator defined scans-- click on advanced tab -- uncheck "run active scan when new definition arrives"

check if that re-occurs again

Arnav's picture

Does AV client always restart after scanning? Scanning after new def arrives.

Ambesh_444's picture

System will ask you for a restart,

And let me clear one thing if you are doing scan on system or server after completing scan you should restart the system or server. So that can all viruses can clean mode.

 

Thank& Regards,

Ambesh

"Your satisfaction is very important to us. If you find above information helpful or it has resolved your issue. Please don't forget to mark the thread as solved."

Arnav's picture

Here my system is not restarting. Here, only the SEP client Shutdown itself then again start in 1-2 sec. Can this be avoided using the steps above? I have Network access configured, once my AV client is down, everything is stopped.  

SebastianZ's picture

How offen is the Host integrity check performed on your machines? If it is each couple of minutes - SEP client shutdown for couple of seconds should not fail the HI check.

Arnav's picture

Real Time scanning is done. Even if client goes down for a sec, the system is restricted.. Can I turn off this feature of scanning after downloading updates? And also restarting the client?

Arnav's picture

Yes, disable to scan and as well as re-starting of SEP client. As its happening in logs above

Arnav's picture

My main motive is to keep SEP client always in running state.

SameerU's picture

Hi

Please try to repair the client

Regards

 

Arnav's picture

Its not an issue with client. Check the above settings, not sure if shutdown / restart will stop after enabling settings on server.

Ajit Jha's picture

Hi Arnav,

is it possible for you to upload the system Log? If yes please Collect it from client machine. View Logs -> ClientManagement Logs -> System log

Also the Scan Logs.

 

 

Regard's

Ajit Jha

Technical Consultant

ASC & STS

Arnav's picture

Hi Ajit,

Will share the logs tomorrow.

Can you please confirm if doing this will stop client from restarting after downloading new content and scanning there after

''open sepm console, client (on the left hand side) ---policies tab-- antivirus and antispyware policy-- administrator defined scans-- click on advanced tab -- uncheck "run active scan when new definition arrives"''

kaman's picture

If you dont know the SQL tool is install, You can verify this by ensuring that bcp.exe exists in the following directory:

C:\Program Files\Microsoft SQL Server\100\Tools\Binn\bcp.exe

If bcp.exe is not in this location, then you need to go back through the client tools installation and ensure you've checked the following:

Client Tool Connectivity
Client Tools Backward Compatibility
Client Backwards Compatibility

 

kaman's picture

hi Arnave

 

Please ignore above. Thanks

Mithun Sanghavi's picture

 

Hello,

Could you try disabling the Active Scan from the machines, when virus definitions arrive and check if that helps!!

Note: This is just to test and segregate the issue.

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Arnav's picture

No, its still the same. Disconnecting @ around 10 AM everyday. Do i need to do something else or just this setting is okay?