Install the unmanaged Symantec Endpoint Protection (SEP) client on a system and multiple scans occur during the day without being scanned.
During the installation, scans are created for all the users that access the system.
Open the registry and back up to allow recovery if necessary.
Go to HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\AV\Scheduler and open each SID. Then open Custom Tasks under each SID and delete any GUID listed under the Custom Task.
Note: In 64 bit environments the 64bit version of regedit can be accessed in the SysWOW64 folder within the Windows folder of the drive root. Example: C:\WINDOWS\SysWOW64
This will remove any custom scanning for the system.
Once all the GUIDs have been removed, it will be necessary to create a new scheduled scan for any full scans on the system.
Symantec Endpoint Protection 12.1
Subscribing will provide email updates when this Article is updated. Login is required to Subscribe
Thanks for your feedback. Let us know if you have additional comments below. (requires login)
This will clear the history and restart the chat.