Endpoint Protection

Hello,

I have Symantec Endpoint Protection 11.0.5002.333 and have a client with a Scan log showing several scans "In Progress" from up to two weeks ago.

I cannot figure out how to remove these entries or get them tagged as Aborted or Complete (or even if these scans are still running in the background). Other scans have run and completed since then.

Any ideas or suggestions would be greatly appreciated.

Thank you,

 - Alan Rosenthal

you can cancel scans from Sep Manager. go to Monitor tab > Logs > click advanced settings and write your computer name or IP address and click view log.
than your computer will show. choice command " cancell all scans" and click start.
all scans will be stop.
than you see result in client logs.

Thanks
Fatih

Check this key,

The Symantec Endpoint Protection client interface shows that a scan is in progress, but the logs indicate that all scans have completed.

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008011516012448?Open&seg=ent

if its just one client you can try unistall/reinstall should populate with new logs

Hi,

You can check for the scans settings from registry as well:

HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\AV\LocalScans

Every alphaneumaric folder you see there is a scan setting.

You can check if there are any unwanted scans saved in registry and remove them if needed.

Aniket

has this scan been stopped while it was in progress? If yes you are going to see the same.

Hi alanro,
 You can check for scan setting from registry