Endpoint Protection

 View Only
  • 1.  SEP MR4 MP2 - Scan logs = Scanning...

    Posted Oct 02, 2009 09:12 AM
    I've upgraded all my machines (W2K and XP Pro mixture) to SEP MR4/MP2.  This is an unmanaged environment.  No domain.  It all seemed to go well.  Except...

    On two machines, something is puzzling me.  On both machines(one W2K and on XP Pro), looking at the scan logs, the daily autoscan on 9/24/2009 says "Scanning..." even though all the daily autoscans for proceeding and ensuing days are launched, run through and complete.   This may explain why these two machines seem sluggish - these scans (or the processes surrounding them) are continuing to run wild, consuming resources, etc.  I've rebooted these 2 multiple times.  But the 9/24/09 scans continue to indicate "Scanning..." and there's no way you can stop them.

    Any way to tell if these scans are actually still running?   Is there a way (taskmanager???) to stop them?  What process should I stop?

    Thanks.


  • 2.  RE: SEP MR4 MP2 - Scan logs = Scanning...

    Posted Oct 02, 2009 11:56 AM
    Hi,

             Please follow the instructions in this link. You can remove the scan and try setting it for a different scgedule and then check whether it made any difference.

    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008070711521548


  • 3.  RE: SEP MR4 MP2 - Scan logs = Scanning...

    Posted Oct 02, 2009 05:24 PM
    Sandip - I don't see the tool in that referral page in your post to download.  
    Is this tool something I have to call/contact a rep on the phone and then they send it to me???

    Herbo


  • 4.  RE: SEP MR4 MP2 - Scan logs = Scanning...
    Best Answer

    Posted Oct 02, 2009 06:56 PM
    The "SymRmvScan" utility is designed to remove ALL scans in existing Symantec Endpoint Protection client installations from ALL user profiles on the system it is ran on.

    I have sent you the tool on by the PM
    Note
    s:
    • The "SymRmvScan" utility is only for use in Symantec Endpoint Protection environments. To obtain "SymRmvScan", contact Symantec Technical support at
      http://www.symantec.com/business/support/index.jsp

       
    • The zip file is password protected. To unzip the file use the following password: symantec


    1. Extract the file to a convenient location, such as the Desktop, using the unzip password provided above.
    2. Double-click SymRmvScan.exe.


  • 5.  RE: SEP MR4 MP2 - Scan logs = Scanning...

    Posted Oct 03, 2009 04:40 AM

    set the scan option to scan without  scanning of memory,common load points etc.  and check the logs. scan may be hanging there.



  • 6.  RE: SEP MR4 MP2 - Scan logs = Scanning...

    Posted Oct 03, 2009 10:17 AM
    Prachand - I got your PM.  The tool is now in my posession.  Thanks.

    BiJay - are you saying that I should do your procedure FIRST and try to eliminate the hung scans before, or instead of, using the tool?  If I follow your instruction, would these settings result in an immediate cessation or would I have to wait for the next scan to trigger.  Or would I need a reboot?  Your guidance is appreciated.



  • 7.  RE: SEP MR4 MP2 - Scan logs = Scanning...

    Posted Oct 04, 2009 08:34 AM
    You have to wait till the next scan triggers. I have faced this type of problem in some machines where scan hangs while scanning memory and log in sepm shows scanning...... .