5 Replies Latest reply on May 4, 2015 1:08 PM by wwarren

    Managed VSE 8.8 on-demand scan

    kealbo80

      Is there a way to canceled a "managed" scan within the Virus Scan console to without having to restart the computer.

       

      I have a scan job that is running for multiple days due to large amount of storage and would like to canceled it.

      Stop button is grayed out and I have unlocked user interface.

       

      The system is connected to an ePO server.

        • 1. Re: Managed VSE 8.8 on-demand scan
          wwarren

          This was possible in some previous patches and releases, but was a bug. It is not supposed to be possible for the "end user" to stop a task set by ePO Administrator.

          • 2. Re: Managed VSE 8.8 on-demand scan
            kealbo80

            Is it possible to canceled the job from the ePO server or a reboot is the only way?

            • 3. Re: Managed VSE 8.8 on-demand scan
              robg3381

              I'm not sure this is the best method to do this, but I think it is possible to unlock the VSE interface, then disable Access Protection, then go into services, and stop the McShield service, then maybe re-start it.  Then turn Access protection back on.

              • 4. Re: Managed VSE 8.8 on-demand scan
                c14us

                Without being being 100% sure, you can not stop this task from ePO. Only server tasks can be stopped this way.

                Do as robg3381 suggest. Unlock the AP and restart VSE service. it will stop all ODS.

                 

                \Claus

                 

                NB. And the start trim your ODS policy. Use McAfee profiler to see what's going on

                • 5. Re: Managed VSE 8.8 on-demand scan
                  wwarren

                  kealbo80 wrote:

                   

                  Is it possible to canceled the job from the ePO server or a reboot is the only way?

                  No, not from the ePO server.

                   

                  A reboot isn't the only way, as others have commented. You can also brutishly stop the scan and avoid rebooting .

                  A more elegant approach could be to use Process Monitor to capture what parameters the task was launched with. Or, just inspect the process while it's running (using Process Monitor or Process Explorer), looking specifically at the "Command line" for it, which tells you what command was used to initiate the task.

                   

                  It may look something like:

                       "C:\Program Files\McAfee\VirusScan Enterprise\SCAN32.EXE" /UINONE /VSEPLUGIN /TASK {GUID}

                   

                  That being the case, you can cancel the task by initiating a similar command but include the /CANCEL switch. It might look something like:

                       C:\Program Files\McAfee\VirusScan Enterprise\SCAN32.EXE" /UINONE /CANCEL /VSEPLUGIN /TASK {GUID}

                   

                  This isn't a supported thing to do, but, it should work.

                  What you should do is submit a PER for us, so we have some awareness of customer demand for a feature allowing ePO admins to cancel a task-in-progress on remote clients... which, seems like a no brainer feature to have in the product.