Error received during an AVScan operation on a linux client. "<error> [AMDSefScanner::ProcessScanResults]:*80020020"

Products

• Endpoint Protection
• Endpoint Security

Issue/Introduction

When running a scheduled or manual scan you may see an error appear during the scan. The logs indicate the scan completes, however the error may shed doubt on if the scan actually completed.  

2024-06-03 12:37:05: <info> [AMDTraversalThread::run]:520 AntiMalware scan started 
2024-06-03 12:37:05: <error> [AMDTraversalThread::traverseTree]:398 Directory [/media/System Volume Information] traversal failed error: Operation not permitted
2024-06-03 12:37:05: <info> [AMDTraversalThread::run]:710 Total number of files to be scanned: 157
2024-06-03 12:37:05: <info> [AMDUpdateStatus::updateStatus]:91 Message sent : AMD_START SAVConfigTool 3 Scan completion percentage 10
2024-06-03 12:37:05: <info> [AMDUpdateStatus::updateStatus]:91 Message sent : AMD_START SAVConfigTool 3 Scan completion percentage 20
2024-06-03 12:37:06: <error> [AMDSefScanner::ProcessScanResults]:27780020020
2024-06-03 12:37:07: <info> [AMDUpdateStatus::updateStatus]:91 Message sent : AMD_START SAVConfigTool 3 Scan completion percentage 30
2024-06-03 12:37:07: <info> [AMDUpdateStatus::updateStatus]:91 Message sent : AMD_START SAVConfigTool 3 Scan completion percentage 40
2024-06-03 12:37:16: <info> [AMDUpdateStatus::updateStatus]:91 Message sent : AMD_START SAVConfigTool 3 Scan completion percentage 50
2024-06-03 12:37:27: <info> [AMDUpdateStatus::updateStatus]:91 Message sent : AMD_START SAVConfigTool 3 Scan completion percentage 60
2024-06-03 12:37:27: <error> [AMDSefScanner::ProcessScanResults]:27780020020
2024-06-03 12:37:53: <info> [AMDUpdateStatus::updateStatus]:91 Message sent : AMD_START SAVConfigTool 3 Scan completion percentage 70
2024-06-03 12:37:55: <info> [AMDUpdateStatus::updateStatus]:91 Message sent : AMD_START SAVConfigTool 3 Scan completion percentage 80
2024-06-03 12:37:59: <info> [AMDUpdateStatus::updateStatus]:91 Message sent : AMD_START SAVConfigTool 3 Scan completion percentage 90
2024-06-03 12:38:09: <info> [AMDTraversalThread::run]:826 Total Bytes scanned : 28737161376 in 63.5775 s.
2024-06-03 12:38:09: <info> [AMDTraversalThread::run]:857 AntiMalware scan finished

Environment

Symantec Endpoint Protection (SEP) or Symantec Endpoint Security (SES) on a Linux Client. 

Cause

The error code is retrieved from the Symplatfrom (SEF) component, which presents the error code "0x80020020" which signals that the file may have gone missing during scanning.The result is logged as an error due to the failure.

The error code received is "27780020020", which contains "80020020" at the end and the line number, in this case "277", at the beginning.

Resolution

The error is indicating an expected file to scan went missing, either moved or deleted, since the start of the scan. It is not a critical error and can be ignored.