Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

COH_Mon events every hour

Updated: 21 May 2010 | 5 comments
Jack Wilson's picture
0 0 Votes
Login to vote

We get a lot of the Service Control Manager's EventID 7035: "The COH_Mon service was successfully sent a start control" events in the System event log. About once every hour.
Is this normal?  If so, is there any way to reduce this "noise"?

Thanks,
-jack

Comments

Aniket Amdekar's picture
02
Nov
2009
0 Votes 0
Login to vote

Hi Jack, What is the OS on

Hi Jack,

What is the OS on your machine? What all components have you installed for the SEP client? What is the version of SEP client installed? Did you have an earlier version of SAV on this machine?

Aniket

Rafeeq's picture
02
Nov
2009
0 Votes 0
Login to vote

Hi

Did you had nortan installed before ?

COH_Mon is the TRUSCAN driver, otherwise called SONAR in the consumer product and previously Confidence Online Heavy from the WholeSecurity product line

if you had please remove that and do a fresh install. Refer this for more info

https://www-secure.symantec.com/connect/forums/scan-causing-desktop-login-problems

Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq

Jack Wilson's picture
02
Nov
2009
0 Votes 0
Login to vote

These are all (30+) WinXP

These are all (30+) WinXP machines, with all features of SEP 11 RU5 installed. Overtime, they have been upgraded from SAV -> SCS -> SEP.  Norton was never installed. Some of these machines have had Cleanwipe used before reinstalling SEP.

Rafeeq's picture
02
Nov
2009
0 Votes 0
Login to vote

Hi

on one machine can you remote SEP MU5
Remote all the symantec folders
delete
c:\program files
symantec \symantec shared folders\reboot the box
and isntall SEP MU5
let me know if you see any symptoms as mentioned in this doc

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008013109171848

Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq

Jack Wilson's picture
03
Nov
2009
0 Votes 0
Login to vote

Hi

Previously on some of these machines, I've uninstalled SEP, ran CleanWipe and deleted various folders and reinstalled SEP. This was done for other reasons. But, these machines and the others currently have the issue with COH_Mon.

Is this different from what you suggest?

-jack