IPB

Welcome Guest ( Log In | Register )

 
Reply to this topicStart new topic
> Virus Scan ends in "Task Stopped" [In progress], Scan ends in error after few hours
TheGreyWizzard
post 20.03.2017 18:38
Post #1


Newbie
*

Group: Members
Posts: 2
Joined: 8.03.2017




I have set a weekly virus scan for employee's computers. Every week I have few computers that the task ends in error and with "Task Stopped" description. Not always the same computers, although few of them are already with the "Virus Scan has not been performed for a long time".
How do I solve the issue? And is it something that should bother me at all?

Server: KSE 10 SP1MR2
Client: Windows10, NA: 10.2.434, AV: 10.2.4.674

Attached is one of those computers from the last scan.

Thank you in advance for your assistance.
Attached File(s)
Attached File  TaskStopped.JPG ( 47,92K ) Number of downloads: 4
 
Go to the top of the page
 
+Quote Post
Kirill Tsapovsky
post 20.03.2017 18:43
Post #2


Technical Support Specialist
**************

Group: KL Russia
Posts: 11362
Joined: 3.12.2013
From: Moscow




QUOTE(TheGreyWizzard @ 20.03.2017 17:38) *
I have set a weekly virus scan for employee's computers. Every week I have few computers that the task ends in error and with "Task Stopped" description. Not always the same computers, although few of them are already with the "Virus Scan has not been performed for a long time".
How do I solve the issue? And is it something that should bother me at all?

Server: KSE 10 SP1MR2
Client: Windows10, NA: 10.2.434, AV: 10.2.4.674

Attached is one of those computers from the last scan.

Thank you in advance for your assistance.


Hello.

The results export you provide indicate that protection components are being disabled.
If the users have admin privileges and are able to suspend the AV, they may be stopping it if they experience slowdowns caused by the scan task.
It is suggested to run full scans outside the working hours, and protect KES and its policy from being disabled by setting a password.

Thank you.


--------------------
In English: GSI report | AVZ report | KSC10 Traces | KES10 Traces | KSC9 Traces | KES8 Traces | klnagchk log
На русском: Отчет GSI | Лог AVZ | Трассировки KSC10 | Трассировки KES10 | Трассировки KSC9 |Трассировки KES8 | Отчет утилиты klnagchk

Пожалуйста, оцените оказанную помощь, используя опцию "Rating" в названии топика!
Please evaluate support help by using "Rating" option!
Go to the top of the page
 
+Quote Post
TheGreyWizzard
post 20.03.2017 18:58
Post #3


Newbie
*

Group: Members
Posts: 2
Joined: 8.03.2017




QUOTE(Kirill Tsapovsky @ 20.03.2017 16:43) *
Hello.

The results export you provide indicate that protection components are being disabled.
If the users have admin privileges and are able to suspend the AV, they may be stopping it if they experience slowdowns caused by the scan task.
It is suggested to run full scans outside the working hours, and protect KES and its policy from being disabled by setting a password.

Thank you.


Thank you for your prompt reply.
No, the user is not administrator on the computer and the policy doesn't allow the users to do anything on the client.
I foresee the issue. The scan starts at 4:30AM. The "protection components are disabled" event is at 07:03AM and the "Task stopped" at 07:09AM. Before people arrive.
Any ideas how can I check what components were disabled and how?

TIA.
Go to the top of the page
 
+Quote Post
Kirill Tsapovsky
post 20.03.2017 19:15
Post #4


Technical Support Specialist
**************

Group: KL Russia
Posts: 11362
Joined: 3.12.2013
From: Moscow




QUOTE(TheGreyWizzard @ 20.03.2017 17:58) *
Thank you for your prompt reply.
No, the user is not administrator on the computer and the policy doesn't allow the users to do anything on the client.
I foresee the issue. The scan starts at 4:30AM. The "protection components are disabled" event is at 07:03AM and the "Task stopped" at 07:09AM. Before people arrive.
Any ideas how can I check what components were disabled and how?

TIA.


Does that computer status also change in KSC when this happens?
If you temporarily disable the policy and run a similar task locally on one of the hosts, does the same issue occur?

Thank you.


--------------------
In English: GSI report | AVZ report | KSC10 Traces | KES10 Traces | KSC9 Traces | KES8 Traces | klnagchk log
На русском: Отчет GSI | Лог AVZ | Трассировки KSC10 | Трассировки KES10 | Трассировки KSC9 |Трассировки KES8 | Отчет утилиты klnagchk

Пожалуйста, оцените оказанную помощь, используя опцию "Rating" в названии топика!
Please evaluate support help by using "Rating" option!
Go to the top of the page
 
+Quote Post

Reply to this topicStart new topic

 



Lo-Fi Version Time is now: 26.03.2017 15:16