cancel
Showing results for 
Search instead for 
Did you mean: 

Managed VSE 8.8 on-demand scan

Is there a way to canceled a "managed" scan within the Virus Scan console to without having to restart the computer.

I have a scan job that is running for multiple days due to large amount of storage and would like to canceled it.

Stop button is grayed out and I have unlocked user interface.

The system is connected to an ePO server.

5 Replies
wwarren
Level 15
Report Inappropriate Content
Message 2 of 6

Re: Managed VSE 8.8 on-demand scan

This was possible in some previous patches and releases, but was a bug. It is not supposed to be possible for the "end user" to stop a task set by ePO Administrator.

William W. Warren | S.I.R.R. | Customer Success Group | McAfee

Re: Managed VSE 8.8 on-demand scan

Is it possible to canceled the job from the ePO server or a reboot is the only way?

wwarren
Level 15
Report Inappropriate Content
Message 4 of 6

Re: Managed VSE 8.8 on-demand scan


kealbo80 wrote:



Is it possible to canceled the job from the ePO server or a reboot is the only way?


No, not from the ePO server.

A reboot isn't the only way, as others have commented. You can also brutishly stop the scan and avoid rebooting .

A more elegant approach could be to use Process Monitor to capture what parameters the task was launched with. Or, just inspect the process while it's running (using Process Monitor or Process Explorer), looking specifically at the "Command line" for it, which tells you what command was used to initiate the task.

It may look something like:

     "C:\Program Files\McAfee\VirusScan Enterprise\SCAN32.EXE" /UINONE /VSEPLUGIN /TASK {GUID}

That being the case, you can cancel the task by initiating a similar command but include the /CANCEL switch. It might look something like:

     C:\Program Files\McAfee\VirusScan Enterprise\SCAN32.EXE" /UINONE /CANCEL /VSEPLUGIN /TASK {GUID}

This isn't a supported thing to do, but, it should work.

What you should do is submit a PER for us, so we have some awareness of customer demand for a feature allowing ePO admins to cancel a task-in-progress on remote clients... which, seems like a no brainer feature to have in the product.

William W. Warren | S.I.R.R. | Customer Success Group | McAfee

Re: Managed VSE 8.8 on-demand scan

I'm not sure this is the best method to do this, but I think it is possible to unlock the VSE interface, then disable Access Protection, then go into services, and stop the McShield service, then maybe re-start it.  Then turn Access protection back on.

c14us
Level 7
Report Inappropriate Content
Message 6 of 6

Re: Managed VSE 8.8 on-demand scan

Without being being 100% sure, you can not stop this task from ePO. Only server tasks can be stopped this way.

Do as robg3381 suggest. Unlock the AP and restart VSE service. it will stop all ODS.

\Claus

NB. And the start trim your ODS policy. Use McAfee profiler to see what's going on