Sean,
It's been a while. Good to see you're still out here helping people out. I have an interesting one for you. We're finding machines that are taking upwards of 10 minutes to shut down in order to reboot. During investigation we found multiple instances of cscript.exe running that when closed, would allow the machine to reboot.
I also found that the instances of cscript were owned by the ZPM agent. The machine I'm looking at right now takes anywhere from 45min to almost 3 hours to complete a DAU. During the DAU process when it gets to a certain point where it's scanning the registry and calls UpdateAgentScriptFingerprint.vbs, it spawns an instance of cscript.exe. After a while it spawns another one....and another....and none of them seem to close out properly.
The ZPM agent is 6.4.2.420
Computer is XP SP3
Native scan content update has been deployed (Detection Agent 7.0.2.534)
I realize this is likely not enough information for you to form any kind of conclusion. I'm hoping you or Lumension can provide some direction from here though.
Thanks
It's been a while. Good to see you're still out here helping people out. I have an interesting one for you. We're finding machines that are taking upwards of 10 minutes to shut down in order to reboot. During investigation we found multiple instances of cscript.exe running that when closed, would allow the machine to reboot.
I also found that the instances of cscript were owned by the ZPM agent. The machine I'm looking at right now takes anywhere from 45min to almost 3 hours to complete a DAU. During the DAU process when it gets to a certain point where it's scanning the registry and calls UpdateAgentScriptFingerprint.vbs, it spawns an instance of cscript.exe. After a while it spawns another one....and another....and none of them seem to close out properly.
The ZPM agent is 6.4.2.420
Computer is XP SP3
Native scan content update has been deployed (Detection Agent 7.0.2.534)
I realize this is likely not enough information for you to form any kind of conclusion. I'm hoping you or Lumension can provide some direction from here though.
Thanks