Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Symantec Endpoint unable stop scan.

Created: 26 Oct 2010 • Updated: 26 Oct 2010 | 14 comments

Hello,

 

I found some problem and need help from anyone. I click Full Scan on my computer and then I try to cancel it but it don't stop scan to me then I stop service symantec but when I open symantec again it show as below.

you can see Scanning... status 2 object. I can't stop it. Please suggest me for stop it. (I try to restart service already)

 

Thank you.

Comments 14 CommentsJump to latest comment

Rafeeq's picture

you might have enabled retry scan interval

open taskmanager

kill rtvscan.exe

pete_4u2002's picture

i believe 21st scan was stopped by killing rtvscan.exe.

no two scans run at a same time..

theseng99's picture

Hello,

 

I kill rtvscan.exe service already. but our Symantec endpoint is disabled. After I enable it then it will start full scan immediately.

Please help me to stop it.

If this Info helps to resolve the issue please Mark as Solution

Thanks you.

Andy.

P_K_'s picture

Take the backup of the registry

Navigate to  HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\AV\Custom Tasks

Under customt task you may see some numbered folders  ex.

C9FD1449-694F-40F1-99E5-1976D4279E0D

Delete them and reboot the machine

MCT MCSE-2012 Symantec Technical Specialist (SCTS)

Rafeeq's picture

as I mentioned earlier you have enabled the retry scan option; thats why its scanning though u kill it.

I think its better to uninstall/reinstall this client. Quick method :)

or else there is a tool with symantec remscan; this will remove all the scans assigned to the client you can call support and get this tool

 

theseng99's picture

So How can I disable retry scan option. I will do it first.

 

and symantec remscan. Is it really exist?

If this Info helps to resolve the issue please Mark as Solution

Thanks you.

Andy.

Rafeeq's picture

open policies

sepm

antivirus and antispyware

select admin defined scans

select schedule

at the bottom u will find retry interval.

yes tool to remove unnessary scan does exist...call support get the tool might come handy in future...

pete_4u2002's picture

i believe Rafeeq is talking aboiut the tool from Symantec. For that you need to contact Symantec Support

theseng99's picture

Hello,

 

I just reinstall symantec endpoint. after install it run full scan again. and I don't check retry interval on schedule.

If this Info helps to resolve the issue please Mark as Solution

Thanks you.

Andy.

Rafeeq's picture

You need to create a custom msi install package and set the values as per this document

http://www.symantec.com/business/support/index?page=content&id=TECH102668&locale=en_US

when you first install the software , it will always think that it has missed the scan and will start running the scan..

 

https://www-secure.symantec.com/connect/forums/disable-first-scan-after-install#comment-3153391

 

still in review.

theseng99's picture

I just call symantec support and waiting and waiting waiting 1 hour in line. I think symantec support can't help us.

 

I found strange thing that it show Scan in progress on top right in picture 'full scan'. and then I can run new scan 'Test' job some file as below picture.  What does that mean?

 

 

and I can stop scan test job above. you can see scan aborted. but 2 job that I mention before still processing.

 

If this Info helps to resolve the issue please Mark as Solution

Thanks you.

Andy.

P_K_'s picture

Prachand

 
2 hours 23 min ago

Take the backup of the

Take the backup of the registry

Navigate to  HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\AV\Custom Tasks

Under customt task you may see some numbered folders  ex.

C9FD1449-694F-40F1-99E5-1976D4279E0D

Delete them and reboot the machine

MCT MCSE-2012 Symantec Technical Specialist (SCTS)

Rafeeq's picture

 

Navigate to  HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\AV\Custom Tasks

 
delete all the numbered folders
I think test is the user defined scan; 
click on scan for threats and see if that shows any user defined scan.
theseng99's picture

Ok. I will try it the end of this week because I can't reboot server now.

If this Info helps to resolve the issue please Mark as Solution

Thanks you.

Andy.