SEP hanging while scanning its own Quarantine file?
Running SEP 11.0 on WinXP.
A recent Full Scan detected Fakeavalert which was quarantined. Subsequent scans have not behaved normally. Scans reach the folder: Documents and Settings\All Users\Application Data\Symantec\SRTSP\Quarantine and slow to a crawl. Fakeavalert is detected multiple times in the folder, in temp files with random names like APQ8B.tmp. Scanner takes more than half an hour to look at each .tmp file. Full scan of 40GB of data takes 7 or more hours when it used to take one.
We've deleted the contents of Quarantine via SEP interface, and Windows Explorer indicates that the folder is empty, but scans still indicate that the files are there. Running scans repeatedly yields the same results- Trojans in the Quarantine folder are indentified (slowly) and quarantined again.
Suggestions?
Comments
Have you guys tried running
Have you guys tried running the full scan in safe mode (with system restore off)? You said that you deleted the contents of your Quarantine folder and that the size, according to WE, is 0, but what are the contents of that folder if any? What is the current version of SEP that is running on this machine and did you previously have a version of SAV on this machine? My suggestion is do the full scan in safe mode if you havn't already and post back some more information about the machine. The more information we have the easier it is for us to find a solution to your problem. Thanks
Grant-
Please don't forget to mark your thread solved with whatever answer helped you : )
Not sure what happened, but
Not sure what happened, but this issue seems to be fixed. After running mutiple scans with the above results, I ran another scan and it worked normally. No issues with quarantine folder, and scan time was normal. No settings had been changed, so I'm not sure what caused the difference. For reference, our SEP is 11.0.4014.26 and no Symantec products had previously been installed. SEP had been working for several months on this PC without incident. If it happens again I'll re-post. Thanks for the help.
Glad to hear it worked out
Glad to hear it worked out for you Dogma. I am going to mark your last post as the "solution" but if you end up having more problems come back and post and I will remove the "solution" mark so we can get the thread going again.
Grant
Please don't forget to mark your thread solved with whatever answer helped you : )
Would you like to reply?
Login or Register to post your comment.