NIS 09 Scheduled Full System Scan

Norton Security | Norton Internet Security
1

The issue is the following:

 

Had scheduled Full System Scans (FSS), to run every two days from 27/11.  Last successful FSS, was on 1/12. On 3/12, it did not run due to the fact that just before the scheduled time, I had been running one manually.

 

The sheduled FSS for the 5/12, did not execute and when I looked into it I found the following info(Task Schd.):

 

 

+ System
    - Provider
      [ Name] Microsoft-Windows-TaskScheduler       [ Guid] {de7b24ea-73c8-4a09-985d-5bdadcfa9017}
      EventID 203       Version 0       Level 2       Task 203       Opcode 101       Keywords 0x8000000000000000     - TimeCreated
      [ SystemTime] 2008-12-06T01:29:59.991Z
      EventRecordID 223646     - Correlation
      [ ActivityID] {9A90C4E7-67B2-4E75-8079-8FD150F47328}
    - Execution
      [ ProcessID] 484       [ ThreadID] 7236
      Channel Microsoft-Windows-TaskScheduler/Operational       Computer turbo-x-PC     - Security
      [ UserID] S-1-5-21-1747036127-461363671-2915502085-1000

 

- EventData
    TaskName \Norton Internet Security - User - Full System Scan     TaskInstanceId {9A90C4E7-67B2-4E75-8079-8FD150F47328}     ActionName C:\Program Files\Norton Internet Security\Norton Internet Security\Engine\16.1.0.33\Navw32.exe     ResultCode 2147942403

 

 

Before I launch this thead, I tried these things:

 

3 times I changed the time intervals from 16:00 (Original time Scheduled-1st Failure to launch) to 03:00 (2nd Failure to launch) to 03:15(3rd Failure to launch) to 03:30 (4th Failure to launch).

 

 

During the above time interval changes the following settings were changed:

 

Disabled the Idle Scans and Started the Sheduling Procedure again, by deleting the current Sheduled FSS, and submitting new date and time.  Scheduled FSS did not launch.

 

Please note that between the last successful run Scheduled FSS at 1/12/08 and the first failure to launch at 5/12/08, I did not add or subtract anything from my pc.

 

I would appreciate your views and help.

 

TrDo.

Message Edited by TrDo on 12-06-2008 04:25 AM
2

P.S. Due to the limitation of characters I continue here. 

 

 

The XML report is as follows:

 

 

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event>

- <System>
  <Provider Name="Microsoft-Windows-TaskScheduler" Guid="{de7b24ea-73c8-4a09-985d-5bdadcfa9017}" />
  <EventID>203</EventID>
  <Version>0</Version>
  <Level>2</Level>
  <Task>203</Task>
  <Opcode>101</Opcode>
  <Keywords>0x8000000000000000</Keywords>
  <TimeCreated SystemTime="2008-12-06T01:29:59.991Z" />
  <EventRecordID>223646</EventRecordID>
  <Correlation ActivityID="{9A90C4E7-67B2-4E75-8079-8FD150F47328}" />
  <Execution ProcessID="484" ThreadID="7236" />
  <Channel>Microsoft-Windows-TaskScheduler/Operational</Channel>
  <Computer>turbo-x-PC</Computer>
  <Security UserID="S-1-5-21-1747036127-461363671-2915502085-1000" />
  </System>
- <EventData Name="ActionLaunchFailure">
  <Data Name="TaskName">\Norton Internet Security - User - Full System Scan</Data>
  <Data Name="TaskInstanceId">{9A90C4E7-67B2-4E75-8079-8FD150F47328}</Data>
  <Data Name="ActionName">C:\Program Files\Norton Internet Security\Norton Internet Security\Engine\16.1.0.33\Navw32.exe</Data>
  <Data Name="ResultCode">2147942403</Data>
  </EventData>
  </Event>
 
 
TrDo.
3

Hi ,

 

I was wondering why SYMANTEC EMPLOYEES never appear in my posts.  Is there something PERSONAL? Well if it is, I hope that PROFESSIONALISM will prevail and eventually will turn-up.

 

Have been asking about Norton Insight: Silence

Have been asking about Norton Insight Scans: Silence

Have been asking about Norton Insight Submission: Silence

Have been asking about Norton Idle Scans: Silence

Have been asking about Norton Scheduled Scans: Silence

Have been asking about the Norton Scan Results: Silence

 

It looks as though, as days go by, NIS09, is eradicating piece by piece.  Well I still have 300 days of subscription, which I'm not willing to spend asking questions about basic functionality.

 

I will revert back to NIS08...This is very DISAPPOINTING GUYS....

 

Thanks.

 

TrDo.

 

P.S. The CAPS, are not yelling it's emphasizing.

4

Did you tried to run the Auto-Fix Tool: click on Help & Support > One Click Support > Start Support Session.

Maybe something just went worng...

5

Sorry to hear you have troubles. I will ask one of the employees to help you out

6

Hey Stu, PapauZ,

 

Stu, we have communicated and cooperated before and you're always on the cool side of things...working silently and effectively...Allow me to thank you for your intervention. I very much appreciate it.

 

PapauZ,

 

I think its the first time we make contact, and I also want to thank you for your suggestion.  Allow me to say, that I tried to avoid the One Click support, thats why I posted my issue here.  Nonetheless, I again thank you.

 

 

As you can see, from above, my problem is two folded: My current issue+The issue that Sym.Empl. do not appear on my posts.  In any case, thank you both for making me feel that I'm not invisible.

 

Thanks again.

 

TrDo.

7
TrDo wrote:

PapauZ,

 

I think its the first time we make contact, and I also want to thank you for your suggestion.  Allow me to say, that I tried to avoid the One Click support, thats why I posted my issue here.  Nonetheless, I again thank you.

 

 

As you can see, from above, my problem is two folded: My current issue+The issue that Sym.Empl. do not appear on my posts.  In any case, thank you both for making me feel that I'm not invisible.

 

Thanks again.

 

TrDo.

Hi TrDo!

 

I think you should give it a try. You don't have to connect the support center by doing this. When you click on the Start Support Session button, first of all it is scanning you product and the try to resolve some known issues. When it's done you can just close the window. It can solve your issue if it is something this Auto-Fix tool knows, and than you will have again the scheduled scans.

 

If that can't do the trick, maybe a reinstall will do it (with NRT of course), but that could be only the latest thing you do....

 

PapauZ

8

Hi TrDo,

 

First let me assure you that you are not invisible here. You comments in an earlier post about an issue with Flash Player 10 has enlightened me and for that I thank you.

 

These are user to user Forums where individuals gather to share problems, advice and solutions. Not every post can be responded to by someone from Symantec as that is not the purpose of the Community. If that were the case, then this area would no longer be a user to user platform. So please do not feel left out in that regard. There are a great number of folks here with a lot of knowledge in various areas and we are all here to help each other.

 

Some of the most valuable suggestions in the Forums have been provided by the users, many of whom have experienced the same issue first hand and may have a better understanding of what you are going through than a Symantec Employee would.

 

I would definitely take the advice of PapauZ and try the One Click Support. On many occasions it has resulted in providing valuable information which can lead to a fix. Perhaps the fact that you have listed numerous issues may on the surface appear to be overwhelming. However, if you are willing to let us try to address them one at a time, solutions may be forthcoming.

 

I trust that you will not take my comments as being critical as that is far from my intent. I value your participation in the Forums. We are all here to help each other and in that light I hope you will try PapauZ's suggestion and report back with the results.

 

Last but not least, I can confirm that Stu has flagged you post for a Symantec Employee, but in the mean time, give us a chance to help.

 

Best Wishes.

9

TrDo;

 

Ah, so you've moved to this thread. Maybe we'll find an answer without the flame war. I have the same problem as you. I've turned off idle time scan and want to used scheduled instead. I bit the bullet and set up a Vista user account with a password since NIS2009 uses Task Scheduler and Task Scheduler requires a user account with a password. I used this new account to set the scheduled scan and in Task Scheduler I set it to run even though the user isn't logged on (long story but I use the another account for everyday computing).

 

 

Still doesn't run as scheduled.

 

 

 

 

10

You also might want to try the customer support as well. They are rather helpfull

11

Hi rlw,

 

I understand how you have set up the scheduled scan to run even if the user account that scheduled the scan is not logged on.

 

Would you be willing to try setting the scheduled scan for a convenient time when you can remain logged on as the user account that did the scheduling and see if the scan runs?

 

That may help to narrow down the issue.

 

Thanks.

12

TrDo

 

<< I was wondering why SYMANTEC EMPLOYEES never appear in my posts.  Is there something PERSONAL?  >>

 

Since you are not the first person to ask this I can assure you it is not your aftershave .....

 

Phil_D has given a very complete and correct explanation of how the forums are intended to operate.

 

This scheduling problem is infuriating since it seems, especially from your details, to involve both Norton and the Windows Scheduler.

 

You refer to changing settings -- have you tried deleting all settings, whether they appear in Norton setup or in Windows Scheduler and then remaking them? Just a thought based on troubleshooting experience rather than knowledge of the workings.

13

Phil_D; I’ll give that a try to help us trouble shoot. You may be right that the problem is with Vista’s Task Scheduler used by NIS. I changed the user account name that was initially installed on the computer, but Vista refuses to recognize the name change for some tasks, such as the Scheduler. That is one of the reasons I had to set up a second user account to use the use Scheduler for the scans.

14

Thanks for your willingness to give it a try.

 

We'll be looking forward to the results.

15

Hello everyone,

 

Phil_D,

Sorry for the delay, in answering you back, but I was running an MBAM scan and I wanted to finish it, so I can concentrate here.  There is no way that I could take your comments as being critical, because they are not. On top of that, I would like to thank you for your time and kind words.  I also value you input and participation in the forums.  You're a serious guy and always polite.

 

As far as the "listed numerous issues " are concerned, I admit that I have been looking for answers for certain things regarding NIS 09.  I noticed a certain kind of avoidance from people who might know the answers, and that is what I stated.  Which, I will not hide from you, it is rather annoyning.  Because I thought they were easy to answer, especially for people who have access in the Knowledge Data Base (KDB).  It's different, for me, knowing and not helping than not helping because you (I don't mean you Phil_D) don't know.

 

Thank you again for taking the time to participate in the problem I face, and for confirming Stu's course of action.

 

Now, the options I had were: 1. Waiting Symantc's Responce, 2.Following PapaZ suggestion (which I also value), and 3.Try on my own again to see why my NIS09 got disorganized.

 

Respectively: 1.Don't believe they will turn-up (I think Stu's last statement may well underline that--of course has nothing to do with Stu).  2.PapaZ's, suggestion, meant "tickering" (phrase borrowed from mijcar) NIS09, since we all face the well-known issue with One Click support (an issue which a work-around was provided by Tomi_Red, and for which recently I received in my mail  a debugging Norton tool from TLopez, in order to help Symantec debug the specific issue).  So, before I was to try One Click, I  decided to find a solution my self, and therefore this brings me to No.3 option.

 

So here it is, asnwering at the same time to rlw, on a possible workaround:

 

1. Reboot as things currently stand.

2. Disable all other security suites.

3. NIS09 main Window---Settings

4. Disable Idle Scan (from drop down) before Deleting the current "already in there" Scheduled Scan.

5. Deleted Current Scheduled Scan, as indicated from the Help menu.

6. NIS09 prompted me to enter a Password in order to Delete the Current Scheduled Scan.  I entered the same pass(Windows log-in pass, for me) I used when trying to Schedule the Scan in the first place.

7. Reboot

8. NIS09 main Window---Settings

9. Schedule a New Scan as indicated from the Help menu.  NIS09, again prompted me to enter a Password in order to Schedule a new Scan. I did as above.  Now,  a pop-window appeared, informing me that Scheduling a Scan, will disable the Idle Scans--Entered Yes(this is the key point, as I did not get this pop-up window, in my previous "failed to launch" FSS attempts, but as soon as I saw it, I remembered seeing it before when I succeeded with my Scheduled FSS...see my first post)

10. Enable Idle Scans from drop down.  I take it, that it will perform only the Quick Idle Scans.

11.Close settings.

12. Enable MBAM and TF.

13. After 15 minutes, the Scheduled FSS started, as Scheduled.

 

Note, that during the "failed to launch" FSS attempts, although the NIS09 Scheduled scans were visible in the TaskSch, as I had required them to...they would not launch...for some reason (after looking into it), I saw that NIS09, could not locate the route path to the disc.  With the above procedure, it obviously did.  And before, someone says it was due to the other Security Suites, I would like to say, that when I had successfuly launched the Scheduled FSS (in my first attempts), the Suites were up and running, and NIS09 could locate the route path to the disc.

 

Thank you all for you guidance and support.

 

TrDo.

 

 

 

 

16

Hi TrDo :smileyhappy:

 

You Said...

10. Enable Idle Scans from drop down.  I take it, that it will perform only the Quick Idle Scans.

 

Do You Mean...

After you had Schedualed your Full System Scan

You turned Idle Scans back ON again?

 

If So.. That's Your Problem!

 

You're Not Supposed To :smileysurprised:

 

All Other NIS 09 Stuff... Will Still Run!

 

Turning Idle Scan - OFF

Only turnes the Idle Full System Scan - OFF

Nothing Else! :smileywink:

Message Edited by Zana on 12-06-2008 06:14 PM
17

Hi Zana, :smileyhappy:

 

Yes, I mean after scheduling the FSS.

 

But it did run...

 

Are yours still running? I thought you deleted them... Did you rescheduled again? If so, do they run with Idle Scan Option to Off...Well, mine now run with the Idle Scan option to Weekly. 

 

I did that, cause Symantec recommends to.

 

TrDo.

18

Hi TrDo,

 

Thanks for the detailed instructions you provided.

 

Just a few quick comments after a brief reading of your post.

 

Zana is correct that Idle Time Scan Should be left turned off which is the default when you schedule a custom scan. I have worked with a similar problem previously in this post. The problem with having Idle Time Scan set for "Weekly" or whatever you choose is that if an Idle Time Scan decides to initiate during one of your Scheduled Scans, a conflict may arise.

 

If a user does not have any Custom Scheduled Scans, then the Idle Time Scan should be ON and set for "Weekly" (default) or the interval chosen by the user.

 

As far as the path to the scheduled scan, did you have the previous version of NIS 2009 installed before updating to the new version of 16.1.0.33?  If so, then that was part of the issue as the scheduled scan was following the old path. See this post. My apologies for not picking up on that earlier.

 

Let us know how things progress.

Message Edited by Phil_D on 12-06-2008 01:50 PM
19

<< The problem with having Idle Time Scan set for "Weekly" or whatever you choose is that if an Idle Time Scan decides to initiate during one of your Scheduled Scans, a conflict may arise. >>

 

It seems to me that any attempt to tell "Idle Time Scan" when to scan is to distort the system!

 

I just don't understand this objection to leaving Idle Scan alone; when my machine is not being used by me, I'm delighted if this Idle Time is used by Norton productively and that it stops if I come back and even move my mouse.

 

If I want to do a scan at a specific time, then that's fine but then that's not going to be idle time unless I deliberately walk away in which case I might as well let it be an Idle Time Scan in the normal way.

 

It seems to me a bit like complaining that my automatic gear box doesn't change gear when I want it to ......

 

Or even complaining that a CPU is not at 20% when something on the system is running -- I did not pay good money for my CPU to sit around doing nothing! I want it working its *** off. <s>

20

Hey Phil_D,

 

OK then. I just set it back to "OFF". (But then how did I get a Scheduled FSS run with Idle set to weekly, after I scheduled the scan? A bit strange..) 

 

 When you say "Time Scan Should be left turned off which is the default when you schedule  a Full scan", you mean default because we set it to "Off" before we can schedule. Otherwise, we cannot Schedule.

 

By setting it to "Off", will Idle Quick scans still run?...I guess they will. Can you confirn please?

 

No other version existed before the .33.

 

Thanks a lot.

 

TrDo.