Video Screencast Help
Search Video Help Close Back
to help

Scan are getting Stuck for days, neither it finish nor the new start

Created: 10 Sep 2012 | 5 comments
MarAlfaro's picture
0 0 Votes
Login to vote

Hello.

I have a few servers connected to a Symantec Endpoint Protection Small Business Edition Manager 12.1.671.4971

I installed all the client without any problem but for some reason, the scans are getting stuck and I'm not able to cancel it or delete it and the new scan are cancelled.

I have read a lot from the forum but I was not able to get the solution, the only think that works is uninstalling the client and installing it again but i demand two reboots and I can do this because all the servers are in production.

In some of the server with the issue, if I go to the Scan's Logs I can see it as running but in another there are not logs.

I tried the following solution with the followint results:

Kill the Rvscan service ---------> This service is not running in thist server

Stop SEP Service --------> Access Denied.

Stop SMC Service --------> Acces Denied.

Change some key on the register from 1 to 0 --------> Access Denied

Try with another admin user ---------------> Same result

Try to send a new scan from the console or from the Scan Log -------> Another scan is running, please wait

 

Thanks so much for your help.

Have an excellent day.

Comments 5 CommentsJump to latest comment

Mithun Sanghavi's picture

Hello,

You are runinng the RTM version of SEP 12.1 and it is recommeded to migrate to the Latest version of SEP 12.1 RU1 and later to SEP 12.1 RU1 MP1.

Secondly, check this Article:

How can I stop an unwanted scan on a Symantec Endpoint Protection (SEP) 12.1 client.

http://www.symantec.com/docs/TECH171788

and this Thread: 

https://www-secure.symantec.com/connect/forums/disabling-triggered-scans-sep-121

Hope that helps!!

Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | MCTS | STS | ITIL v3

Twitter: @mithun_sanghavi

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<&a

0
Login to vote
  • Actions
MarAlfaro's picture

Thanks.

First of all, what "RU1" is?

How can I migrate? Can I downloaded the upgrade or do I have to buy something?

What will happens with the clients installed.

 

Again, thanks so much

0
Login to vote
  • Actions
Mithun Sanghavi's picture

Hello,

To Explain in simple terms - 

RTM - Release To Manufacturing

MR - Maintenance Release (replaced by RU)

RU - Release Update

MP - Maintenance Patch

PP - Point Patch

Check this Article to understand What are the Symantec Endpoint Protection (SEP) versions released officially?

https://www-secure.symantec.com/connect/articles/what-are-symantec-endpoint-protection-sep-versions-released-officially

You do not have to buy anything, simply download the Latest version of SEP SBE 12.1 RU1 and SEP SBE 12.1 RU1 MP2 DVD from https://fileconnect.symantec.com/

 

For Migration check these Articles:

1) How to upgrade the Symantec Endpoint Protection Manager (SEPM) to Version 12.1 RU1

http://www.symantec.com/docs/TECH176260

2) a) Upgrading or migrating to Symantec Endpoint Protection 12.1.1000 (RU1)

http://www.symantec.com/business/support/index?page=content&id=TECH174545

b) Upgrading or migrating to Symantec Endpoint Protection 12.1.1101 (RU1 MP1)

http://www.symantec.com/business/support/index?page=content&id=TECH187753

Once, you follow the steps provided in the Articles the Client machine would be automatically migrated to  the Latest versions.

Hope that helps!!

Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | MCTS | STS | ITIL v3

Twitter: @mithun_sanghavi

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<&a

0
Login to vote
  • Actions
Mohan Babu's picture

 

SEP SBE 12.1.x

 Name

 Version

  Release date (English)

 RTM

 12.1.671.4971   

 July 2011

 RU1

 12.1.1000.157

 Nov 2011

 RU1 MP1  12.1.1101.401  May 2012

You  need to download the latest version from the symantec website.

 

Obtaining the latest version of Symantec Endpoint Protection

 http://www.symantec.com/docs/TECH103088

Upgrading or migrating to SEPM 12.1 RU1

http://www.symantec.com/docs/TECH174545

 
 
 
Hope this helps........

 

 

Mohan Babu

moglie20@gmail.com

+91 9884382160

Your satisfaction is very important to us.If you find above information helpful or it has resolved your issue...please mark it accordingly :)

0
Login to vote
  • Actions
Chetan Savade's picture

Hi,

There is a fix id in SEP 12.1 RU1.

Scheduled scan runs repeatedly in a multi-user environment
 
Fix ID: 2613428/2618423
 
Symptom: Multiple users have scans scheduled to run at or near the same time. As soon as one finishes, the next one starts.
 
Solution: This release introduces a new registry value which can be added by the administrator to disable all user scans:
HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint
Protection\AV\AdministratorOnly\General\EnableUserScans = 0
The administrator can add EnableUserScans as a DWORD. When the value is 0 all user scans are disabled. When the value does not exist or is non-zero, all user scans are enabled (default behavior). Administrator-defined scans are not affected by this registry value.
 
Reference: http://www.symantec.com/business/support/index?page=content&id=TECH187656

Upgrade to the SEP 12.1 RU1

Upgrade path is : SEP 12.1.671.4971(RTM) --> SEP 12.1.1000.157 RU1

Note: You can't directly upgrade to SEP 12.1 RU1 MP1.

Check till date SEP releases: http://bit.ly/m0vOJp

Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.&

0
Login to vote
  • Actions