This is a symantec notification happens without necessarily scan the server.
I will try these:
To ensure that a client does not restart
1 On the client computer, open the registry editor.
2 Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec
Endpoint Protection\SMC.
3 Add the following line to the registry:
DisableRebootCommand REG_DWORD 1
Regards
I have to restart the server in safe mode