Hey,
We are having a couple of problems with some of our SQL Servers and the associated services failing, and have noticed that at roughly the same time we have them scheduled to restart we get the following message in application log regarding McAfee.
The scan of C:\ has taken too long to complete and is being canceled. Scan engine version used is 5400.1158 DAT version 5960.0000.
There is no schedule on the server for a full scan to take place and the "last run" field is empty.
Is this the On Access Scanner? If so, why is it trying to do a full scan of C:\?
Desperate for some help.
Usually, when I see that logged, it's just a particular file that took too long. It's a bit odd that it's only showing C:\. Maybe it's trying to scan a non-existent file or something that was locked?
If i were you I would make sure that you don't have a local ODS task scheduled locally on the system. C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Task. It will usually be a hexidecimal .INI file in this directory. I had some ODS scans running out of schedule and I couldn't figure out why until I looked locally on the system. If a user enabled the task locally the ePO server will not delete it. You have to do that manually.
These are just a guesses/suggestions - have you excluded SQL data and index file types in the OAS Server policy? Have you run chkdsk on the c: drive?
Jay
Message was edited by: jguenrdc on 4/29/10 5:29:43 PM CDT
Corporate Headquarters
6220 America Center Drive
San Jose, CA 95002 USA