Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Will SEP 12.x. client reboot/restart after new defs or a scan is complete

Created: 24 Feb 2013 | 15 comments

Hi All,

Will SEP 12.x. client reboot/restart after new defs are patched to clients or a scan is complete after a defs' updates?

Also, please share any link or KB article where symantec has confirmed this.

Regards,

Arnav Sharma

Operating Systems:

Comments 15 CommentsJump to latest comment

Ashish-Sharma's picture

No,

If you have upgrade your sep client you can set reboot sep client but after scan and virus defination after system reboot it's not possible.

Do you have any problem restart system after virus defination and scan complete ?

Thanks In Advance

Ashish Sharma

Arnav's picture

what about these logs::

Symantec Endpoint Protection services shutdown was successful

Symantec Endpoint Protection services startup was successful

20th Feb’13:

2B0114002903,3,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan started on all drives and all extensions.",1361248555,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,B467E5AFCF3246128D1C4EB7F71F367C,0,2B0114002903,

2B011400293A,65,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Suspended: Risks: 0 Scanned: 795 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 624",1361248555,,0,0:0:795:0:624,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,B467E5AFCF3246128D1C4EB7F71F367C,55,2B011400293A,

2B0114011203,66,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan resumed on all drives and all extensions.",1361248555,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,B467E5AFCF3246128D1C4EB7F71F367C,0,2B0114011203,

2B0114013208,2,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Complete: Risks: 0 Scanned: 158166 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 632",1361248555,,0,0:0:158166:0:632,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,B467E5AFCF3246128D1C4EB7F71F367C,1925,2B0114013208,

2B01140A052D,13,2,8,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Symantec Endpoint Protection services shutdown was successful.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B01140A052D,

2B01140A0623,14,2,8,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Symantec Endpoint Protection services startup was successful.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B01140A0623,

2B01140A0739,79,2,16,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Proactive Threat Protection has been enabled",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,999,,,,,,,,,,,,,,,,,,,,,,0,2B01140A0739,

2B01140A073A,93,2,16,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Symantec Endpoint Protection Tamper Protection Enabled",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,999,,,,,,,,,,,,,,,,,,,,,,0,2B01140A073A,

2B01140B110A,7,3,8,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"New virus definition file loaded. Version: 130219017.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B01140B110A,

2B01140B110A,3,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan started on selected drives and folders and all extensions.",1361334992,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,4AF550D5584445B7871585CA9A5660A5,0,2B01140B110A,

2B01140B111A,2,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Complete: Risks: 0 Scanned: 734 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 613",1361334992,,0,0:0:734:0:613,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,4AF550D5584445B7871585CA9A5660A5,16,2B01140B111A,

2B01140E0A27,7,3,8,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"New virus definition file loaded. Version: 130219024.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B01140E0A27,

2B01140E0A28,3,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan started on selected drives and folders and all extensions.",1361334993,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,D9ED11B7D5C64856B7BC8BEA6444753D,0,2B01140E0A28,

2B01140E0A35,2,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Complete: Risks: 0 Scanned: 757 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 636",1361334993,,0,0:0:757:0:636,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,D9ED11B7D5C64856B7BC8BEA6444753D,13,2B01140E0A35,

2B0114162022,7,3,8,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"New virus definition file loaded. Version: 130220003.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B0114162022,

2B0114162022,3,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan started on selected drives and folders and all extensions.",1361334994,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,7215758F64D0441C831BFDD3016B9BD2,0,2B0114162022,

2B0114162033,2,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Complete: Risks: 0 Scanned: 737 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 634",1361334994,,0,0:0:737:0:634,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,7215758F64D0441C831BFDD3016B9BD2,17,2B0114162033,

21st Feb’13

2B0115011501,3,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan started on all drives and all extensions.",1361334995,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,A7A7FC9BE3DE404BAE10B719B5453BEC,0,2B0115011501,

2B0115011539,65,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Suspended: Risks: 0 Scanned: 796 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 638",1361334995,,0,0:0:796:0:638,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,A7A7FC9BE3DE404BAE10B719B5453BEC,56,2B0115011539,

2B0115012701,66,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan resumed on all drives and all extensions.",1361334995,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,A7A7FC9BE3DE404BAE10B719B5453BEC,0,2B0115012701,

2B0115020A00,65,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Suspended: Risks: 0 Scanned: 148950 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 645",1361334995,,0,0:0:148950:0:645,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,A7A7FC9BE3DE404BAE10B719B5453BEC,1859,2B0115020A00,

2B011507091B,7,3,8,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"New virus definition file loaded. Version: 130220016.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B011507091B,

2B011507091B,3,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan started on selected drives and folders and all extensions.",1361334997,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,AD48E6F86F5144088DB3039EF0F0F9AB,0,2B011507091B,

2B011507092C,2,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Complete: Risks: 0 Scanned: 740 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 635",1361334997,,0,0:0:740:0:635,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,AD48E6F86F5144088DB3039EF0F0F9AB,17,2B011507092C,

2B01150A0E27,13,2,8,DESKTOP_TEST,User_ID,,,,,,,16777216,"Symantec Endpoint Protection services shutdown was successful.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B01150A0E27,

2B01150A0F23,14,2,8,DESKTOP_TEST,User_ID,,,,,,,16777216,"Symantec Endpoint Protection services startup was successful.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B01150A0F23,

2B01150A1038,79,2,16,DESKTOP_TEST,User_ID,,,,,,,16777216,"Proactive Threat Protection has been enabled",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,999,,,,,,,,,,,,,,,,,,,,,,0,2B01150A1038,

2B01150A1038,93,2,16,DESKTOP_TEST,User_ID,,,,,,,16777216,"Symantec Endpoint Protection Tamper Protection Enabled",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,999,,,,,,,,,,,,,,,,,,,,,,0,2B01150A1038,

Arnav's picture

Thanks Robin, but in my case client was installed long back. The issue is, the client re-starts itself @ a specific time regularly (@ around 10 AM evenryday)

Is the article valid in my case as well?

Ashish-Sharma's picture

Hi,

Yes I think @ 10 AM your new virus defination are arived .

May be that's a process for stop the SEP client service and update virus defination. same i have check my SEP client it's happening (Sep service Client service are restart)

Thanks In Advance

Ashish Sharma

Arnav's picture

Thanks Ashish, Has Symantec documented this anywhere? SEP client will restart after an update?

I have network access protection enabled, once the SEP stops the systems are restricted from network access. :(

Ashish-Sharma's picture

Hi,

Till now i am not found any document .

I think symantec Empolyee will response this thread or you can contact to symantec support.

May be symantec support will be provide document.

How to create a new case in MySymantec (formerly MySupport)

Article:TECH58873  |  Created: 2009-01-26  |  Updated: 2012-08-08  |  Article URL http://www.symantec.com/docs/TECH58873

Regional Support Telephone Numbers:

United States: 800-342-0652 (407-357-7600 from outside the United States)

Australia: 1300 365510 (+61 2 8220 7111 from outside Australia)

United Kingdom: +44 (0) 870 606 6000

Additional contact numbers: http://www.symantec.com/business/support/contact_techsupp_static.jsp

Thanks In Advance

Ashish Sharma

Mithun Sanghavi's picture

Hello,

Duplicate Thread to : https://www-secure.symantec.com/connect/forums/client-stops-and-starts-again

Could you try disabling the Active Scan from the machines, when virus definitions arrive and check if that helps!!

Note: This is just to test and segregate the issue.

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Arnav's picture

No, its still the same. Disconnecting @ around 10 AM everyday. Do i need to do something else or just this setting is okay?

Rafeeq's picture

smc.exe is only for communicating with the manager, all the scan properties like autoprotect is taken care by ccsvhst.exe .if it just restarts after few millisecs . I wont mind as its working perfectly fine.

Arnav's picture

i have configured Network access protection, systems get restricted even if the SEP client is stopped for few milli sec. 

SebastianZ's picture

What is configuration set for the Host Integrity check frequency for your clients? By default it would be every few minutes - so during the smc service disconnection for few seconds you should not see that much of an issue.

Arnav's picture

I'm using Network Policy Server, the same checks the Health State (AV client) in real-time. Once AV and other checks are stopped. The System is moved to a restricted network. 

Once the SEP client starts, the system is given full access.