Endpoint Protection

 View Only
Expand all | Collapse all

SAV10 Client does continous scans throughout the day (even though only one scan is scheduled).

  • 1.  SAV10 Client does continous scans throughout the day (even though only one scan is scheduled).

    Posted Jan 10, 2008 01:51 PM
    SPL-WK-IM-G4641 Scan Complete 1653416 0 Scheduled scan 1/8/2008 23:15 1/9/2008 1:25 SPL-WK-IM-G4641 Scan Complete 1653415 0 Scheduled scan 1/8/2008 21:04 1/8/2008 23:15 SPL-WK-IM-G4641 Scan Complete 1653414 0 Scheduled scan 1/8/2008 18:45 1/8/2008 21:04 SPL-WK-IM-G4641 Scan Complete 1653413 0 Scheduled scan 1/8/2008 16:33 1/8/2008 18:45 SPL-WK-IM-G4641 Scan Complete 1653412 0 Scheduled scan 1/8/2008 14:17 1/8/2008 16:33 SPL-WK-IM-G4641 Scan Complete 1653410 0 Scheduled scan 1/8/2008 12:00 1/8/2008 14:17 SPL-WK-IM-G4641 Scan Complete 861 0 Defwatch Scan 1/8/2008 6:46 1/8/2008 6:46 SPL-WK-IM-G4641 Scan Complete 878 0 Startup 1/8/2008 6:43 1/8/2008 6:46

    We've recently upgraded to the SAV10 client (from SAV9). I have some PC that is continously running the AV scan about 6-8 times a day. It runs in the background and takes up about 99% of the CPU resource. This affects a lot of the older/slower PC where the user can't get any work done.

    You can look at the Windows Task Manager and see 'Rtvscan.exe' taking 99% - 100% of the CPU process. Looking at the log timestamp, it seems that the one scan ends, and then another ones begins immediately right after (like a chain) even though the scan found no virus. Looking at the above example, a schedule scan ran 6 times and completed 6 times (from 12:00 PM to 1:25 AM) on 1/8/08. 

    I don't manage the SAV server, but the only scan scheduled is at 4:00 AM in the morning.

    I have done a uninstall of SAV10 and reinstall to no avail.

     Is this a known problem, builtin feature that I'm not aware of? Thanks in advance.



  • 2.  RE: SAV10 Client does continous scans throughout the day (even though only one scan is scheduled).

    Posted Jan 11, 2008 06:44 PM
    Hello,

    Please see if this KB doc addresses this.  It is possible that some scan setups are conflicting with new settings.

    By chance are you running roaming clients?  It may be possible that they are switching servers and picking up a new scan?  What release of SAV 10 are you running?