This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Reboot issue: SAVservice is causing 15-60 minute delay until CTRL+ALT+DEL becomes available

Sometime within the last 72-96 hours we began receiving calls from our network users that their PC's were displaying a "Please wait..." on the monitor.  After a few questions, we discovered that each user had either powered-on or restarted their computer.  It did not matter if the OS was WinXP Pro, Vista Bus., or Win7 the user's experience was the same.  Both 32-bit and 64-bit OS's were responding in the same fashion.

We have witnessed the "startup delay" to last between 15-60 minutes before the CTRL-ALT-DEL prompt will appear.  During this extended-delay period, the computer will not echo a ping.  There is hard drive activity during this 15-60 minute period (although the hard drive light is not steady, only blinking about once every second).

Disabling the "-NoStartupCheck" in the Sophos AutoUpdate registry key did not resolve the issue.

The PC's affected will boot into SAFE MODE normally.

We have been working with SOPHOS support since 2/5/2013.  On 2/5/2013, support determined that the issue involved the SAVservice.  They had us disable the SAVservice and the PC's rebooted normally.  As soon as we reabled the SAVservice the PC's delayed the appearance of the CTRL-ALT-DEL for 15-60 minutes.  We have transmitted them the logs that they have requested, for their review.

To say the least...our users are a little "put out" at this point (as are we).

If anyone has any ideas...we would certainly welcome them at this point.  Thank you.

:37457


This thread was automatically locked due to age.
Parents
  • HI,

    The SAVService performs many functions linked to the different features.  The best thing to do, would be to try and isolate exactly the cause.

    For example, if you disable on-access scanning in the policy does it help?  Does it have to be disabling the service as that disables alof of the functionality?

    Does disabling behaviour monitoring help?

    Maybe set-onaccess to on-read only.

    Does it help to exclude C:\ as a test?

    How about disabling web protection features?

    Not sure if Device or Data control is enabled but does disabling those help?

    If you could narrow it down a bit that would help the focus.

    Regards,

    Jak

    :37465
Reply
  • HI,

    The SAVService performs many functions linked to the different features.  The best thing to do, would be to try and isolate exactly the cause.

    For example, if you disable on-access scanning in the policy does it help?  Does it have to be disabling the service as that disables alof of the functionality?

    Does disabling behaviour monitoring help?

    Maybe set-onaccess to on-read only.

    Does it help to exclude C:\ as a test?

    How about disabling web protection features?

    Not sure if Device or Data control is enabled but does disabling those help?

    If you could narrow it down a bit that would help the focus.

    Regards,

    Jak

    :37465
Children
No Data