Endpoint Protection

 View Only
Expand all | Collapse all

Symantec Endpoint unable stop scan.

  • 1.  Symantec Endpoint unable stop scan.

    Posted Oct 26, 2010 10:57 AM

    Hello,

     

    I found some problem and need help from anyone. I click Full Scan on my computer and then I try to cancel it but it don't stop scan to me then I stop service symantec but when I open symantec again it show as below.

    you can see Scanning... status 2 object. I can't stop it. Please suggest me for stop it. (I try to restart service already)

     

    Thank you.



  • 2.  RE: Symantec Endpoint unable stop scan.

    Posted Oct 26, 2010 11:01 AM

    you might have enabled retry scan interval

    open taskmanager

    kill rtvscan.exe



  • 3.  RE: Symantec Endpoint unable stop scan.

    Broadcom Employee
    Posted Oct 26, 2010 11:06 AM

    i believe 21st scan was stopped by killing rtvscan.exe.

    no two scans run at a same time..



  • 4.  RE: Symantec Endpoint unable stop scan.

    Posted Oct 27, 2010 03:44 AM

    Hello,

     

    I kill rtvscan.exe service already. but our Symantec endpoint is disabled. After I enable it then it will start full scan immediately.

    Please help me to stop it.



  • 5.  RE: Symantec Endpoint unable stop scan.

    Posted Oct 27, 2010 03:52 AM

    Take the backup of the registry

    Navigate to  HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\AV\Custom Tasks

    Under customt task you may see some numbered folders  ex.

    C9FD1449-694F-40F1-99E5-1976D4279E0D

    Delete them and reboot the machine



  • 6.  RE: Symantec Endpoint unable stop scan.

    Posted Oct 27, 2010 04:13 AM

    as I mentioned earlier you have enabled the retry scan option; thats why its scanning though u kill it.

    I think its better to uninstall/reinstall this client. Quick method :)

    or else there is a tool with symantec remscan; this will remove all the scans assigned to the client you can call support and get this tool

     



  • 7.  RE: Symantec Endpoint unable stop scan.

    Posted Oct 27, 2010 04:25 AM

    So How can I disable retry scan option. I will do it first.

     

    and symantec remscan. Is it really exist?



  • 8.  RE: Symantec Endpoint unable stop scan.

    Posted Oct 27, 2010 04:44 AM

    open policies

    sepm

    antivirus and antispyware

    select admin defined scans

    select schedule

    at the bottom u will find retry interval.

    yes tool to remove unnessary scan does exist...call support get the tool might come handy in future...



  • 9.  RE: Symantec Endpoint unable stop scan.

    Broadcom Employee
    Posted Oct 27, 2010 04:47 AM

    i believe Rafeeq is talking aboiut the tool from Symantec. For that you need to contact Symantec Support



  • 10.  RE: Symantec Endpoint unable stop scan.

    Posted Oct 27, 2010 04:53 AM

    Hello,

     

    I just reinstall symantec endpoint. after install it run full scan again. and I don't check retry interval on schedule.



  • 11.  RE: Symantec Endpoint unable stop scan.

    Posted Oct 27, 2010 05:08 AM

    You need to create a custom msi install package and set the values as per this document

    http://www.symantec.com/business/support/index?page=content&id=TECH102668&locale=en_US

    when you first install the software , it will always think that it has missed the scan and will start running the scan..

     

    https://www-secure.symantec.com/connect/forums/disable-first-scan-after-install#comment-3153391

     

    still in review.



  • 12.  RE: Symantec Endpoint unable stop scan.

    Posted Oct 27, 2010 06:07 AM

    I just call symantec support and waiting and waiting waiting 1 hour in line. I think symantec support can't help us.

     

    I found strange thing that it show Scan in progress on top right in picture 'full scan'. and then I can run new scan 'Test' job some file as below picture.  What does that mean?

     

     

    and I can stop scan test job above. you can see scan aborted. but 2 job that I mention before still processing.

     



  • 13.  RE: Symantec Endpoint unable stop scan.

    Posted Oct 27, 2010 06:13 AM

     

    Navigate to  HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\AV\Custom Tasks

     
    delete all the numbered folders
    I think test is the user defined scan; 
    click on scan for threats and see if that shows any user defined scan.


  • 14.  RE: Symantec Endpoint unable stop scan.

    Posted Oct 27, 2010 06:16 AM

    Prachand

     
    2 hours 23 min ago

    Take the backup of the

    Take the backup of the registry

    Navigate to  HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\AV\Custom Tasks

    Under customt task you may see some numbered folders  ex.

    C9FD1449-694F-40F1-99E5-1976D4279E0D

    Delete them and reboot the machine



  • 15.  RE: Symantec Endpoint unable stop scan.

    Posted Oct 27, 2010 08:54 AM

    Ok. I will try it the end of this week because I can't reboot server now.