Video Screencast Help
Search Video Help Close Back
to help
Not able to make it to Vision this year? Get a sampling in the Best of Vision on Demand group.

Symantec Endpoint Protection client interface shows that a scan is in progress, but the logs indicate that dual scans are running on two different dates 11.06.6005

Updated: 19 Jan 2011 | 4 comments
EyeofHorus's picture
0 0 Votes
Login to vote
This issue has been solved. See solution.

Symantec Endpoint Protection client interface shows that a scan is in progress, but the logs indicate that dual scans are running on two different dates . 

 

OS on client XP

SEP Client 11.06.6005

Scan log indicates two different dates both show "Scanning". The scan is still running for today. One never completed. The machine was not powered on the day and time  that entry occured.

 

Another client Windows 7 64bit

Indicates Scanning in the scan log for prior scheduled scan however the current weekly task indicates it completed successfully.

Comments

Chris Bulovic's picture
05
Jan
2011
0 Votes 0
Login to vote

I would run the net stop

I would run the net stop "Symantec Endpoint Protection" command. This should refresh the status as well as stop any active scans...I think :)

Do you have more than one schedule defined?

Regards,

Chris Bulovic

Rafeeq's picture
05
Jan
2011
0 Votes 0
Login to vote

hi

on the machine, kill rtvscan.exe

completed scan could be user defined scan, while u r scheduled scan log is stuck

Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq

EyeofHorus's picture
06
Jan
2011
0 Votes 0
Login to vote

That worked however this

That worked however this seems like a bug because it should not show a scanning status when it is not "scanning". Why do I have to manually kill that process?

Rafeeq's picture
06
Jan
2011
1 Vote +1
Login to vote

hi

When scan is started the files are scanned , if machines are turned off or scan is interrupted during a scan.

the registry keys are set for missed event so that this scan be carried out  once machines are back. However sometimes the interface gets stuck with current status and never gets updated like Cancelled, Paused etc.

If scan was running as per the interface then you cannot run another scan, it would say , its queued as current a scan is active.

Killing rtvscan.exe restarts the symantec endpoint service and it fixes everything , so :)

Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq