IPB

Welcome Guest ( Log In | Register )

 
Reply to this topicStart new topic
> Virus Scan ends in "Task Stopped" [Solved], Scan ends in error after few hours
TheGreyWizzard
post 20.03.2017 18:38
Post #1


Newbie
*

Group: Members
Posts: 3
Joined: 8.03.2017




I have set a weekly virus scan for employee's computers. Every week I have few computers that the task ends in error and with "Task Stopped" description. Not always the same computers, although few of them are already with the "Virus Scan has not been performed for a long time".
How do I solve the issue? And is it something that should bother me at all?

Server: KSE 10 SP1MR2
Client: Windows10, NA: 10.2.434, AV: 10.2.4.674

Attached is one of those computers from the last scan.

Thank you in advance for your assistance.
Attached File(s)
Attached File  TaskStopped.JPG ( 47,92K ) Number of downloads: 7
 
Go to the top of the page
 
+Quote Post
Kirill Tsapovsky
post 20.03.2017 18:43
Post #2


Technical Support Specialist
**************

Group: KL Russia
Posts: 11953
Joined: 3.12.2013
From: Moscow




QUOTE(TheGreyWizzard @ 20.03.2017 17:38) *
I have set a weekly virus scan for employee's computers. Every week I have few computers that the task ends in error and with "Task Stopped" description. Not always the same computers, although few of them are already with the "Virus Scan has not been performed for a long time".
How do I solve the issue? And is it something that should bother me at all?

Server: KSE 10 SP1MR2
Client: Windows10, NA: 10.2.434, AV: 10.2.4.674

Attached is one of those computers from the last scan.

Thank you in advance for your assistance.


Hello.

The results export you provide indicate that protection components are being disabled.
If the users have admin privileges and are able to suspend the AV, they may be stopping it if they experience slowdowns caused by the scan task.
It is suggested to run full scans outside the working hours, and protect KES and its policy from being disabled by setting a password.

Thank you.


--------------------
In English: GSI report | AVZ report | KSC10 Traces | KES10 Traces | KSC9 Traces | KES8 Traces | klnagchk log
На русском: Отчет GSI | Лог AVZ | Трассировки KSC10 | Трассировки KES10 | Трассировки KSC9 |Трассировки KES8 | Отчет утилиты klnagchk

Пожалуйста, оцените оказанную помощь, используя опцию "Rating" в названии топика!
Please evaluate support help by using "Rating" option!
Go to the top of the page
 
+Quote Post
TheGreyWizzard
post 20.03.2017 18:58
Post #3


Newbie
*

Group: Members
Posts: 3
Joined: 8.03.2017




QUOTE(Kirill Tsapovsky @ 20.03.2017 16:43) *
Hello.

The results export you provide indicate that protection components are being disabled.
If the users have admin privileges and are able to suspend the AV, they may be stopping it if they experience slowdowns caused by the scan task.
It is suggested to run full scans outside the working hours, and protect KES and its policy from being disabled by setting a password.

Thank you.


Thank you for your prompt reply.
No, the user is not administrator on the computer and the policy doesn't allow the users to do anything on the client.
I foresee the issue. The scan starts at 4:30AM. The "protection components are disabled" event is at 07:03AM and the "Task stopped" at 07:09AM. Before people arrive.
Any ideas how can I check what components were disabled and how?

TIA.
Go to the top of the page
 
+Quote Post
Kirill Tsapovsky
post 20.03.2017 19:15
Post #4


Technical Support Specialist
**************

Group: KL Russia
Posts: 11953
Joined: 3.12.2013
From: Moscow




QUOTE(TheGreyWizzard @ 20.03.2017 17:58) *
Thank you for your prompt reply.
No, the user is not administrator on the computer and the policy doesn't allow the users to do anything on the client.
I foresee the issue. The scan starts at 4:30AM. The "protection components are disabled" event is at 07:03AM and the "Task stopped" at 07:09AM. Before people arrive.
Any ideas how can I check what components were disabled and how?

TIA.


Does that computer status also change in KSC when this happens?
If you temporarily disable the policy and run a similar task locally on one of the hosts, does the same issue occur?

Thank you.


--------------------
In English: GSI report | AVZ report | KSC10 Traces | KES10 Traces | KSC9 Traces | KES8 Traces | klnagchk log
На русском: Отчет GSI | Лог AVZ | Трассировки KSC10 | Трассировки KES10 | Трассировки KSC9 |Трассировки KES8 | Отчет утилиты klnagchk

Пожалуйста, оцените оказанную помощь, используя опцию "Rating" в названии топика!
Please evaluate support help by using "Rating" option!
Go to the top of the page
 
+Quote Post
TheGreyWizzard
post 3.04.2017 09:50
Post #5


Newbie
*

Group: Members
Posts: 3
Joined: 8.03.2017




QUOTE(Kirill Tsapovsky @ 20.03.2017 17:15) *
Does that computer status also change in KSC when this happens?
If you temporarily disable the policy and run a similar task locally on one of the hosts, does the same issue occur?

Thank you.


Sorry for the delay in the answer. Wanted to see the next weekly scan, to see if the issue repeats. It did not. On any of the stations (I had 3 of them that did the same earlier).
Looks like it was a momentary hiccup.
Regarding your questions, the computer status changes in KSC to yellow, with "Virus scan has not been performed for a long time" message. Didn't try the local task.
Thank you for your assistance.
Go to the top of the page
 
+Quote Post
Kirill Tsapovsky
post 3.04.2017 11:08
Post #6


Technical Support Specialist
**************

Group: KL Russia
Posts: 11953
Joined: 3.12.2013
From: Moscow




QUOTE(TheGreyWizzard @ 3.04.2017 08:50) *
Sorry for the delay in the answer. Wanted to see the next weekly scan, to see if the issue repeats. It did not. On any of the stations (I had 3 of them that did the same earlier).
Looks like it was a momentary hiccup.
Regarding your questions, the computer status changes in KSC to yellow, with "Virus scan has not been performed for a long time" message. Didn't try the local task.
Thank you for your assistance.


Thank you for your feedback. Please let us know if you encounter issues like this again so they can be investigated.


--------------------
In English: GSI report | AVZ report | KSC10 Traces | KES10 Traces | KSC9 Traces | KES8 Traces | klnagchk log
На русском: Отчет GSI | Лог AVZ | Трассировки KSC10 | Трассировки KES10 | Трассировки KSC9 |Трассировки KES8 | Отчет утилиты klnagchk

Пожалуйста, оцените оказанную помощь, используя опцию "Rating" в названии топика!
Please evaluate support help by using "Rating" option!
Go to the top of the page
 
+Quote Post

Reply to this topicStart new topic

 



Lo-Fi Version Time is now: 28.05.2017 08:41