Endpoint Protection

 View Only
  • 1.  Manual scan completes instantly - doesn't do anything.

    Posted May 17, 2013 12:26 PM

    We have a Windows 7 Pro 64-bit desktop machine running a SEP 12.1.2 64-bit unmanaged client.   We have an intermittent problem where a manual scan - either an active scan or a full scan - initiated from the client UI - Scan for Threats - select either the Active Scan or Full Scan icon - completes immediately.

    The scan results dialog box reports "scan completed" and "files scanned 0".

    Most of the time the scans work fine - the active scan reports 1,000+ files scanned and the full scan reports 80,000+ files scanned.    But, when the issue occurs with the scan completing immediately - 0 files scanned - occurs, then manual scans are "stuck", they no longer work.   Any subsequent scans complete immediately with 0 files scanned. 

    We've had this happen 3 times in the last month.  

    We are getting around this by restoring the client from an image copy.

    It's not a rights issue, we are running under an admin account.  Also, 99% of the time the scans work so if it was something in policy or user rights the scans wouldn't work at all.    We've checked the Knowledge Base and haven't found anything that matches our issue. 

    Looks like a code defect to us.   Has anyone else experienced this?



  • 2.  RE: Manual scan completes instantly - doesn't do anything.

    Posted May 17, 2013 12:36 PM

    Have you tried uninstall /reinstalling the clinet?

     

    Symantec Endpoint Protection client manual or scheduled full scan shows 0 files scanned, scan ends after only a couple of minutes.

     

    http://www.symantec.com/business/support/index?page=content&id=TECH90803



  • 3.  RE: Manual scan completes instantly - doesn't do anything.

    Broadcom Employee
    Posted May 17, 2013 12:42 PM

    the article is applicable to SEP 11. however you can still try reinstalling client.

    i suggest to open a support ticket.



  • 4.  RE: Manual scan completes instantly - doesn't do anything.

    Posted May 17, 2013 02:55 PM

    We have a support ticket open.   Haven't made contact yet with support.   We'll probably upgrade the client to 12.1.2 MP1 - that will take care of the uninstall/reinstall scenario.

    The SEP 11 article looks close to the behaviour we are seeing.   



  • 5.  RE: Manual scan completes instantly - doesn't do anything.

    Posted May 17, 2013 02:59 PM

    This appears similar to what we are seeing even though it applies to SEP 11.   The machine has a quad core processor and solid state drive, so everything happens really fast.    If it were a spinning disk, the scan probably would run "a couple of minutes" before reporting 0 files scanned.



  • 6.  RE: Manual scan completes instantly - doesn't do anything.

    Posted May 17, 2013 03:02 PM

    It's good that you have open the support ticket and nice idea to upgrade the client in SEP 12.1.2 MP1. But not be update the sep client in XP/2003.

    It's know issue in SEP 12.1.2 MP1

    this is a known issue with XP/2003 clients and the SEP firewall. See the KBA here:

    Network performance slows on Windows XP with Symantec Endpoint Protection 12.1 Release Update 2 Maintenance Pack 1 installed

     

    Article:TECH205486  |  Created: 2013-04-24  |  Updated: 2013-05-03  |  Article URL http://www.symantec.com/docs/TECH205741