Endpoint Protection

Hi @ll,

I´ve an update-problem with a SAV-Server. (Version: 10.1.7.7000, OS: Windows 2000).

Although the machine fetches itself the *.xdb-File from his primary server - the signatures don´t get up-to-date.
When i try to restart the Symantec Antivirus-service, i got an error (1053) and the service gets the status "stopping". No helpful entries in the log-files.
After a reboot of the machine, everything is o.k. But it would be more beautiful without a restart of the server ....

Does anyone has similar problems ?

Thanks !

Hurra7

Did you check KB?

Error: "1053 The service did not respond to the start or control request in a timely fashion" or the Symantec AntiVirus service appears as starting or stopping

Error 1053: "The service did not respond to the start or control request in a timely fashion" when starting the Symantec System Center Discovery Service

Hi, yes i checked KB - but i want to avoid a re-installation, but if this the only way i will try the instructions from the KB-article.
Thank you!

You can use pskill to stop the process.

Have u tried repairing the pakage???

Thanks. I can kill the process RTVScan.exe twice, but at the third try i get "process RTVScan.exe - ´  ´ could not be killed.
Nevertheless, i try to stop the service. I get the message "The service could not be controlled in it´s present state". Do i still have a chance ?

Hello Ajitjha,
what do you mean exactly with "repairing the package" ?

Go to services.msc

Select symatnec services
right click properties
select disabled , click on okay, click on apply
Now go to task manager
and kill all the rtvscan.exe

wait for 2 mins
go to services and enable the service, ( automatic ) 
start the servcie

should be fine now.. :) 

Rafeeq

Have you try to repair the SSC? or reinstall Liveupdate?

Hello Rafeeq, thanks for your proposal, but i get the same error as the service stands on "automatic"
( ´  ´could not be killed) - Michael

Hellp Peterpan,
reparing no, but i´ve reinstalled the software some time ago - for a few days it was o.k..... It´s a really "problem-server"... (and the only one in our network). In the web i found another tip, that maybe old JAVA-drivers are responsible for this effect....indeed there is another software (Avocent DSView) installed which uses Java. I didnt try to update them yet.

This happened to me before, here are my suggestions;

1. Update SymEvent http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/1998092408260848

2. Update to version SAV 10.1.8

3. Make this server as stand-alone, configure this servers to get updates directly from the Symantec Liveupdate Server, <-- this worked for us.

Hi Paul,

ok, thanks - i will try these steps !
Michael

Is this a clustered environment?

I can't recall what we did, but I think we did install this as a primary server or use LiveUpdate.

Hi mon-raralio, no it´s not a clustered environment - it´s a "normal" Primary server (W2K), who became for his part his updates from another server.

If all the suggestions of the others failed, set it to get updates directly from the Internet.

Update to version SAV 10.1.8 would be best..
thanks...

I got the same error on 10.1.8 w2k3 R2, secondary SAV server - Symantec Antivirus stays on "stopping" - tried pskill remotely, set the service on disable, manual, back to automatic etc.

It's not about repaing any installation, because if you do reboot it comes back to normal and this does not happen often on just one machine -  I have seen it variuos times on many different environments.

So any ideas?