Protection Engine stops immediately after starting.
search cancel

Protection Engine stops immediately after starting.

book

Article ID: 164338

calendar_today

Updated On:

Products

Protection Engine for Cloud Services Protection Engine for NAS

Issue/Introduction

Symantec Protection Engine (SPE) 7.5 or 7.8 service stops within seconds of the service starting. 

The SymantecProtectionEngineAbortLog.txt contains:

2017/02/01-10:24:44 301 XML path not found : report.xml:/report/SinceInstall/VirusFound/@value.
2017/02/01-10:24:44 0 Symantec Protection Engine is shutting down; logs may contain more information.

 

The default locations for the SymantecProtectionEngineAbortLog.txt are

Windows:

  • SPE 7.5 is C:\Program Files (x86)\Symantec\Scan Engine
  • SPE 7.8 is C:\Program Files\Symantec\Scan Engine

Linux:

  • SPE 7.5 and SPE 7.8 /opt/SYMCScan/bin

Cause

There was a problem with the report.xml.   The file had been externally edited using a non standard editor (such as wordpad).  When saved the file was corrupted and encoded with blocks of binary data that could not be parsed by the service.

Resolution

This issue has been resolved in SPE 7.8.1 and later.

Workarounds for older versions:

  • remove and install SPE. SPE will need to be reconfigured for your environment
  • replace the damaged file with a copy from another install of the same version.
  • The file "report.xml" contains information that will be rebuilt by the service as it starts. If a backup copy of the file does not exist then delete the file and start the service. It will rebuild the file when loading.

Additional Information

Wrong version? For SPE 7.9 and later, see:

Title: 198647 - Protection Engine service stops unexpectedly during service start
URL: https://knowledge.broadcom.com/external/article?articleId=198647