Endpoint Protection

 View Only
Expand all | Collapse all

Client stops and starts again.

Rafeeq

RafeeqFeb 21, 2013 04:13 AM

Migration User

Migration UserFeb 21, 2013 05:38 AM

Migration User

Migration UserFeb 21, 2013 09:47 AM

Migration User

Migration UserFeb 24, 2013 11:53 PM

kaman

kamanFeb 25, 2013 01:37 AM

  • 1.  Client stops and starts again.

    Posted Feb 21, 2013 02:31 AM

    Hi,

     

    PFB below logs, the client starts and stops after updating. Can this be avoided?

     

    20th Feb’13:

     

    2B0114002903,3,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan started on all drives and all extensions.",1361248555,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,B467E5AFCF3246128D1C4EB7F71F367C,0,2B0114002903,

    2B011400293A,65,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Suspended: Risks: 0 Scanned: 795 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 624",1361248555,,0,0:0:795:0:624,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,B467E5AFCF3246128D1C4EB7F71F367C,55,2B011400293A,

    2B0114011203,66,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan resumed on all drives and all extensions.",1361248555,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,B467E5AFCF3246128D1C4EB7F71F367C,0,2B0114011203,

    2B0114013208,2,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Complete: Risks: 0 Scanned: 158166 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 632",1361248555,,0,0:0:158166:0:632,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,B467E5AFCF3246128D1C4EB7F71F367C,1925,2B0114013208,

    2B01140A052D,13,2,8,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Symantec Endpoint Protection services shutdown was successful.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B01140A052D,

    2B01140A0623,14,2,8,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Symantec Endpoint Protection services startup was successful.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B01140A0623,

    2B01140A0739,79,2,16,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Proactive Threat Protection has been enabled",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,999,,,,,,,,,,,,,,,,,,,,,,0,2B01140A0739,

    2B01140A073A,93,2,16,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Symantec Endpoint Protection Tamper Protection Enabled",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,999,,,,,,,,,,,,,,,,,,,,,,0,2B01140A073A,

    2B01140B110A,7,3,8,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"New virus definition file loaded. Version: 130219017.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B01140B110A,

    2B01140B110A,3,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan started on selected drives and folders and all extensions.",1361334992,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,4AF550D5584445B7871585CA9A5660A5,0,2B01140B110A,

    2B01140B111A,2,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Complete: Risks: 0 Scanned: 734 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 613",1361334992,,0,0:0:734:0:613,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,4AF550D5584445B7871585CA9A5660A5,16,2B01140B111A,

    2B01140E0A27,7,3,8,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"New virus definition file loaded. Version: 130219024.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B01140E0A27,

    2B01140E0A28,3,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan started on selected drives and folders and all extensions.",1361334993,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,D9ED11B7D5C64856B7BC8BEA6444753D,0,2B01140E0A28,

    2B01140E0A35,2,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Complete: Risks: 0 Scanned: 757 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 636",1361334993,,0,0:0:757:0:636,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,D9ED11B7D5C64856B7BC8BEA6444753D,13,2B01140E0A35,

    2B0114162022,7,3,8,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"New virus definition file loaded. Version: 130220003.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B0114162022,

    2B0114162022,3,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan started on selected drives and folders and all extensions.",1361334994,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,7215758F64D0441C831BFDD3016B9BD2,0,2B0114162022,

    2B0114162033,2,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Complete: Risks: 0 Scanned: 737 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 634",1361334994,,0,0:0:737:0:634,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,7215758F64D0441C831BFDD3016B9BD2,17,2B0114162033,

     

    21st Feb’13

     

    2B0115011501,3,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan started on all drives and all extensions.",1361334995,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,A7A7FC9BE3DE404BAE10B719B5453BEC,0,2B0115011501,

    2B0115011539,65,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Suspended: Risks: 0 Scanned: 796 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 638",1361334995,,0,0:0:796:0:638,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,A7A7FC9BE3DE404BAE10B719B5453BEC,56,2B0115011539,

    2B0115012701,66,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan resumed on all drives and all extensions.",1361334995,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,A7A7FC9BE3DE404BAE10B719B5453BEC,0,2B0115012701,

    2B0115020A00,65,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Suspended: Risks: 0 Scanned: 148950 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 645",1361334995,,0,0:0:148950:0:645,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,A7A7FC9BE3DE404BAE10B719B5453BEC,1859,2B0115020A00,

    2B011507091B,7,3,8,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"New virus definition file loaded. Version: 130220016.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B011507091B,

    2B011507091B,3,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan started on selected drives and folders and all extensions.",1361334997,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,AD48E6F86F5144088DB3039EF0F0F9AB,0,2B011507091B,

    2B011507092C,2,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Complete: Risks: 0 Scanned: 740 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 635",1361334997,,0,0:0:740:0:635,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,AD48E6F86F5144088DB3039EF0F0F9AB,17,2B011507092C,

    2B01150A0E27,13,2,8,DESKTOP_TEST,User_ID,,,,,,,16777216,"Symantec Endpoint Protection services shutdown was successful.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B01150A0E27,

    2B01150A0F23,14,2,8,DESKTOP_TEST,User_ID,,,,,,,16777216,"Symantec Endpoint Protection services startup was successful.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B01150A0F23,

    2B01150A1038,79,2,16,DESKTOP_TEST,User_ID,,,,,,,16777216,"Proactive Threat Protection has been enabled",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,999,,,,,,,,,,,,,,,,,,,,,,0,2B01150A1038,

    2B01150A1038,93,2,16,DESKTOP_TEST,User_ID,,,,,,,16777216,"Symantec Endpoint Protection Tamper Protection Enabled",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,999,,,,,,,,,,,,,,,,,,,,,,0,2B01150A1038,

     



  • 2.  RE: Client stops and starts again.

    Posted Feb 21, 2013 02:36 AM

    Hi,

    This is happend on SEP client or SEPM server ?

    Do you have shutdown system / server ?

    Did you try to repair add/remove program.



  • 3.  RE: Client stops and starts again.

    Posted Feb 21, 2013 02:50 AM

    was the system restarted at that time?

    it seems like its running scan after new defs arrive

    open sepm console, client (on the left hand side) ---policies tab-- antivirus and antispyware policy-- administrator defined scans-- click on advanced tab -- uncheck "run active scan when new definition arrives"

    check if that re-occurs again



  • 4.  RE: Client stops and starts again.

    Posted Feb 21, 2013 03:51 AM

    Its a Win XP client. Nothing was done, no reboot /log off

    Actually the thing is, the client disconnect everyday at almost same time. For most of the systems in my enviorment.



  • 5.  RE: Client stops and starts again.

    Posted Feb 21, 2013 03:53 AM

    Does AV client always restart after scanning? Scanning after new def arrives.



  • 6.  RE: Client stops and starts again.

    Posted Feb 21, 2013 03:57 AM

    System will ask you for a restart,

    And let me clear one thing if you are doing scan on system or server after completing scan you should restart the system or server. So that can all viruses can clean mode.



  • 7.  RE: Client stops and starts again.

    Posted Feb 21, 2013 04:06 AM

    Here my system is not restarting. Here, only the SEP client Shutdown itself then again start in 1-2 sec. Can this be avoided using the steps above? I have Network access configured, once my AV client is down, everything is stopped.  



  • 8.  RE: Client stops and starts again.

    Posted Feb 21, 2013 04:13 AM

    disable to scan when new defs arrive?



  • 9.  RE: Client stops and starts again.

    Posted Feb 21, 2013 04:14 AM

    Yes, disable to scan and as well as re-starting of SEP client. As its happening in logs above



  • 10.  RE: Client stops and starts again.

    Posted Feb 21, 2013 04:18 AM

    My main motive is to keep SEP client always in running state.



  • 11.  RE: Client stops and starts again.

    Posted Feb 21, 2013 05:38 AM

    Hi

    Please try to repair the client

    Regards

     



  • 12.  RE: Client stops and starts again.

    Posted Feb 21, 2013 06:30 AM

    Its not an issue with client. Check the above settings, not sure if shutdown / restart will stop after enabling settings on server.



  • 13.  RE: Client stops and starts again.

    Posted Feb 21, 2013 06:34 AM

    How offen is the Host integrity check performed on your machines? If it is each couple of minutes - SEP client shutdown for couple of seconds should not fail the HI check.



  • 14.  RE: Client stops and starts again.

    Posted Feb 21, 2013 07:45 AM
    Real Time scanning is done. Even if client goes down for a sec, the system is restricted.. Can I turn off this feature of scanning after downloading updates? And also restarting the client?


  • 15.  RE: Client stops and starts again.

    Posted Feb 21, 2013 08:28 AM

    If you dont know the SQL tool is install, You can verify this by ensuring that bcp.exe exists in the following directory:

    C:\Program Files\Microsoft SQL Server\100\Tools\Binn\bcp.exe

    If bcp.exe is not in this location, then you need to go back through the client tools installation and ensure you've checked the following:

    Client Tool Connectivity
    Client Tools Backward Compatibility
    Client Backwards Compatibility

     



  • 16.  RE: Client stops and starts again.

    Posted Feb 21, 2013 08:30 AM

    Hi Arnav,

    is it possible for you to upload the system Log? If yes please Collect it from client machine. View Logs -> ClientManagement Logs -> System log

    Also the Scan Logs.

     

     



  • 17.  RE: Client stops and starts again.

    Posted Feb 21, 2013 09:47 AM

    Why SQL is required here ?



  • 18.  RE: Client stops and starts again.

    Posted Feb 21, 2013 09:49 AM

    Hi Ajit,

    Will share the logs tomorrow.

    Can you please confirm if doing this will stop client from restarting after downloading new content and scanning there after

    ''open sepm console, client (on the left hand side) ---policies tab-- antivirus and antispyware policy-- administrator defined scans-- click on advanced tab -- uncheck "run active scan when new definition arrives"''



  • 19.  RE: Client stops and starts again.

    Posted Feb 24, 2013 11:53 PM
      |   view attached

    Attached a screenshot



  • 20.  RE: Client stops and starts again.

    Posted Feb 25, 2013 01:37 AM

    hi Arnave

     

    Please ignore above. Thanks



  • 21.  RE: Client stops and starts again.

    Trusted Advisor
    Posted Feb 25, 2013 08:56 AM

     

    Hello,

    Could you try disabling the Active Scan from the machines, when virus definitions arrive and check if that helps!!

    Note: This is just to test and segregate the issue.

    Hope that helps!!



  • 22.  RE: Client stops and starts again.

    Posted Feb 28, 2013 01:32 AM

    No, its still the same. Disconnecting @ around 10 AM everyday. Do i need to do something else or just this setting is okay?