GreyWizzard

Virus Scan ends in "Task Stopped" [Solved]

6 posts in this topic

I have set a weekly virus scan for employee's computers. Every week I have few computers that the task ends in error and with "Task Stopped" description. Not always the same computers, although few of them are already with the "Virus Scan has not been performed for a long time".

How do I solve the issue? And is it something that should bother me at all?

 

Server: KSE 10 SP1MR2

Client: Windows10, NA: 10.2.434, AV: 10.2.4.674

 

Attached is one of those computers from the last scan.

 

Thank you in advance for your assistance.

post-621957-1490020644.jpg

Share this post


Link to post
Share on other sites
I have set a weekly virus scan for employee's computers. Every week I have few computers that the task ends in error and with "Task Stopped" description. Not always the same computers, although few of them are already with the "Virus Scan has not been performed for a long time".

How do I solve the issue? And is it something that should bother me at all?

 

Server: KSE 10 SP1MR2

Client: Windows10, NA: 10.2.434, AV: 10.2.4.674

 

Attached is one of those computers from the last scan.

 

Thank you in advance for your assistance.

 

Hello.

 

The results export you provide indicate that protection components are being disabled.

If the users have admin privileges and are able to suspend the AV, they may be stopping it if they experience slowdowns caused by the scan task.

It is suggested to run full scans outside the working hours, and protect KES and its policy from being disabled by setting a password.

 

Thank you.

Share this post


Link to post
Share on other sites
Hello.

 

The results export you provide indicate that protection components are being disabled.

If the users have admin privileges and are able to suspend the AV, they may be stopping it if they experience slowdowns caused by the scan task.

It is suggested to run full scans outside the working hours, and protect KES and its policy from being disabled by setting a password.

 

Thank you.

 

Thank you for your prompt reply.

No, the user is not administrator on the computer and the policy doesn't allow the users to do anything on the client.

I foresee the issue. The scan starts at 4:30AM. The "protection components are disabled" event is at 07:03AM and the "Task stopped" at 07:09AM. Before people arrive.

Any ideas how can I check what components were disabled and how?

 

TIA.

Share this post


Link to post
Share on other sites
Thank you for your prompt reply.

No, the user is not administrator on the computer and the policy doesn't allow the users to do anything on the client.

I foresee the issue. The scan starts at 4:30AM. The "protection components are disabled" event is at 07:03AM and the "Task stopped" at 07:09AM. Before people arrive.

Any ideas how can I check what components were disabled and how?

 

TIA.

 

Does that computer status also change in KSC when this happens?

If you temporarily disable the policy and run a similar task locally on one of the hosts, does the same issue occur?

 

Thank you.

Share this post


Link to post
Share on other sites
Does that computer status also change in KSC when this happens?

If you temporarily disable the policy and run a similar task locally on one of the hosts, does the same issue occur?

 

Thank you.

 

Sorry for the delay in the answer. Wanted to see the next weekly scan, to see if the issue repeats. It did not. On any of the stations (I had 3 of them that did the same earlier).

Looks like it was a momentary hiccup.

Regarding your questions, the computer status changes in KSC to yellow, with "Virus scan has not been performed for a long time" message. Didn't try the local task.

Thank you for your assistance.

Share this post


Link to post
Share on other sites
Sorry for the delay in the answer. Wanted to see the next weekly scan, to see if the issue repeats. It did not. On any of the stations (I had 3 of them that did the same earlier).

Looks like it was a momentary hiccup.

Regarding your questions, the computer status changes in KSC to yellow, with "Virus scan has not been performed for a long time" message. Didn't try the local task.

Thank you for your assistance.

 

Thank you for your feedback. Please let us know if you encounter issues like this again so they can be investigated.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now