[SCCM] Anti-Vius Progress

[CHiLL]

We use SCEP for our AV solution and it's configured for both on-access scanning and also weekly full scans. However, I've noticed that when a scan is running, Security Center on the client/server doesn't show any signs that a scan is actually happening...yet I can see that the Antimalware Service Executible Service is hitting the CPU.

 

Does anyone know if it's possible to get the progress to show or show an ETA?

[CHiLL]

For anyone wondering, you can use ProcMon and filter for MsMpEng.exe, which will show you in real-time what it's accessing.

 

It's also confirmed what I suspected - the scan is taking at least several days, impacting server performance. I will have to consider changing how our scans are scheduled. Currently, it's a weekly scan with on-access scanning enabled...should that be changed to monthly with on-access enabled?