The other day I noticed poor performance on a file server. When I checked the server I noticed the scheduled scan was still running from the night prior. After looking at the logs I discovered it was scanning a large folder with hundreds of thousands of files. I excluded this folder for the time being to stop scans from running into production hours. I ran a report to check the rest of our servers. We have a scheduled scan that runs on all machines at 8PM after production hours. What I am seeing in the Logs>Scan on SEPM is that many servers are running scans from 8PM to mid afternoon the next day. The duration times are over 16 hours. When I open the SEP gui on the server, I don't see the visual indicator showing a scan. When I view the scan logs however, I see a scan in progress. When the file server was running a scan, the rtvscand.exe process was running and consuming large amounts of resources. These other servers show no signs of scanning or heavy resource use. Is this a bug with SEP, or is there some piece of the scan still running that is not processor or disk intensive?
I need a solution
0