Message: "Scan stopped by user" when launching a manual scan
Question/Issue:
You start a manual scan in Symantec AntiVirus (SAV) or in the Symantec System Center, and then you see the message "Scan stopped by user." Scans will not complete.
Cause:
Low disk space; low resources.
Solution:
Before you begin:
In early May, 2010, this error message has been reported on systems that are still running builds of Symantec Antivirus that are no longer supported (versions 8.x, 9.x). It is strongly recommended that users migrate up to a supported build to resolve this error message.
This problem can also happen when Symantec AntiVirus 10.x or Symantec Client Security 3.x is installed on the same computer as APC PowerChute 6.x or earlier.
For details, read the document Various problems occur with Symantec AntiVirus and APC PowerChute 6.x.
This problem has more than one cause, so more than one solution is provided. To fix the problem, try each of the following solutions in the order that they appear.
To correct the problem
- Delete all temporary files on the system.
- Verify that the computer has a valid directory specified for the TEMP variable.
- Open a Command Prompt.
- Type set and then press Enter.
- The TEMP= line indicates the path to the TEMP folder. Make sure that a folder exists at this path.
- Verify the amount of free space on the drive. A rule of thumb is to have at least 200 MB or 10% of the drive available as free space.
- After removing temporary files, defragment the drive.
- Create a permanent swap file to improve the performance.
- Restart the computer.
Some customers reported that disabling boot sector scanning eliminates the scan failure.
WARNING: In the following procedure you will modify the Windows registry. We strongly recommend that you back up the system registry before you make any changes. Incorrect changes to the registry could result in permanent data loss or corrupted files. Modify only the keys that are specified. See the document How to back up the Windows registry before proceeding.
To modify boot sector scan policy in the registry
- Open the Registry Editor, and then go to the following key:
HKEY_LOCAL_MACHINE\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion\LocalScans\ManualScan - Set the ScanBootSector value to 0
- For scheduled scans on Norton AntiVirus Corporate Edition servers or clients, configured using the local GUI, set the ScanBootSector value in the right pane to 0 for the following registry keys:
HKEY_USERS\.DEFAULT\Software\INTEL\LANDesk\VirusProtect6\CurrentVersion\Custom Tasks\Default\BootScan
HKEY_USERS\.DEFAULT\Software\INTEL\LANDesk\VirusProtect6\CurrentVersion\Custom Tasks\Default Scan Options
Note: An alternative on Norton AntiVirus Corporate Edition clients is to set the ScanBootSector value for the following keys to 0. The HKEY_USERS... will automatically update.
HKEY_CURRENT_USER\Software\INTEL\LANDesk\VirusProtect6\CurrentVersion\Custom Tasks\BootScan
HKEY_CURRENT_USER\Software\INTEL\LANDesk\VirusProtect6\CurrentVersion\Custom Tasks\Default Scan Options