Norton Auto Protect (disabled)

[dprivette]

I'm working with a 2000+ user network and have been seeing an increase of clients displaying that Norton Auto Protect is disabled. The usual fix has been to uninstall and reinstall the Symantect client. My question is there a way to narrow down the cause of this problem?

Thanks,
Dave

 

[oggywan]

What version of the software are you running?

 

[dprivette]

Symantec Antivirus 9.0.1.1000

 

[oggywan]

I would bet it on virus definition corruption. Before your uninstall/reinstall a client make sure you rebuild the definitions. You should be able to just run the latest i32.exe file from the Symantec site, and see whether auto-protect then runs successfully.

You may also want to take a look at the following article which has some more in depth troubleshooting steps:

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2004041306575548

I'd also like to add that you can see these hidden device drivers in Computer Management:

- Open Computer Management
- Proceed to Device Manager
- Click on View in your Menu and select "Show hidden devices"
- Proceed to the "Non-Plug and Play Drivers"

At this point I would check whether any of the Symantec drivers have exclamation marks next to them:

SAVRT
SAVRTPEL
SymEvent

(ignore the other SYM entries for now)

If that turns out to resolve the issue, you will have the dreadful task to find out why your virus definitions are corrupting. Ask yourself whether there is something in your network that may contribute to this.

Since you are dealing with a 2000+ node network, and you probably have a valued Gold support entitlement, I would definitely bring it up and demand a different solution/recommendation other then reinstall from Symantec support.

I hope that gives you something to start.

Ogg