cancel
Showing results for 
Search instead for 
Did you mean: 
sriga
Level 7
Report Inappropriate Content
Message 1 of 11

Av On demand scan run time :

Hi,

Recently I have created the OnDemand scan to the machines in my company on weekly basis. All machines are running as per the schedule. But the problem is I found a lot of time difference in runtime.

For example, I created a scan schedule for one machine every Monday. In the 1st-week machine took 2 hrs to complete the scan run time, in the 2nd-week same machine has taken 5 min to complete the scan, in 3rd week 2hrs and in 4th week 5min. this is how the runtime cycle is running. so could you please explain me the AV scan run time functionality and please provide the solution for my problem. If anyone had this kind of problem kindly help me.

10 Replies
McAfee Employee Hawkmoon
McAfee Employee
Report Inappropriate Content
Message 2 of 11

Re: Av On demand scan run time :

Hi sriga,

This is a question for the ENS/VSE guys I'm afraid, as they deal with the ENS/VSE product that actually performs the scan activity. (ODS)

Was my reply helpful?

If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

sriga
Level 7
Report Inappropriate Content
Message 3 of 11

Re: Av On demand scan run time :

sorry, I want for VSE.

McAfee Employee jess_arman
McAfee Employee
Report Inappropriate Content
Message 4 of 11

Re: Av On demand scan run time :

@sriga Do you have a copy of one of the ODS logs from the system in order for us to review if there is a difference in the number of files being scanned or the type of scan, etc? This would help us be able to accurately address your concerns.

 

Was my reply helpful?

If this information was helpful in any way, or answered your question, will you please select "Accept as Solution" in my reply, or give kudos as appropriate, so together we can help other members?

sriga
Level 7
Report Inappropriate Content
Message 5 of 11

Re: Av On demand scan run time :

Please find the logs of December month for your reference.

12/3/2018 1:59:55 PM Engine version = 5900.7806
12/3/2018 1:59:55 PM AntiVirus DAT version = 9019.0
12/3/2018 1:59:55 PM Number of detection signatures in EXTRA.DAT = None
12/3/2018 1:59:55 PM Names of detection signatures in EXTRA.DAT = None
12/3/2018 1:59:55 PM Scan Started Forest\Machin1$ (managed) VSE_Scan_Schedule
12/3/2018 2:03:07 PM Scan Summary Forest\Machin1$ Scan Summary
12/3/2018 2:03:07 PM Scan Summary Forest\Machin1$ Processes scanned : 112
12/3/2018 2:03:07 PM Scan Summary Forest\Machin1$ Processes detected : 0
12/3/2018 2:03:07 PM Scan Summary Forest\Machin1$ Processes cleaned : 0
12/3/2018 2:03:07 PM Scan Summary Forest\Machin1$ Boot sectors scanned : 2
12/3/2018 2:03:07 PM Scan Summary Forest\Machin1$ Boot sectors detected: 0
12/3/2018 2:03:07 PM Scan Summary Forest\Machin1$ Boot sectors cleaned : 0
12/3/2018 2:03:07 PM Scan Summary Forest\Machin1$ Files scanned : 116763
12/3/2018 2:03:07 PM Scan Summary Forest\Machin1$ Files with detections: 0
12/3/2018 2:03:07 PM Scan Summary Forest\Machin1$ File detections : 0
12/3/2018 2:03:07 PM Scan Summary Forest\Machin1$ Files cleaned : 0
12/3/2018 2:03:07 PM Scan Summary Forest\Machin1$ Files deleted : 0
12/3/2018 2:03:07 PM Scan Summary Forest\Machin1$ Files not scanned : 111
12/3/2018 2:03:07 PM Scan Summary Forest\Machin1$ Scan Summary (Registry Scanning)
12/3/2018 2:03:07 PM Scan Summary Forest\Machin1$ Keys scanned : 133306
12/3/2018 2:03:07 PM Scan Summary Forest\Machin1$ Keys detected : 0
12/3/2018 2:03:07 PM Scan Summary Forest\Machin1$ Keys cleaned : 0
12/3/2018 2:03:07 PM Scan Summary Forest\Machin1$ Keys deleted : 0
12/3/2018 2:03:07 PM Scan Summary Forest\Machin1$ Run time : 0:03:12
12/3/2018 2:03:07 PM Scan Complete Forest\Machin1$ (managed) VSE_Scan_Schedule


12/10/2018 1:59:55 PM Engine version = 5900.7806
12/10/2018 1:59:55 PM AntiVirus DAT version = 9019.0
12/10/2018 1:59:55 PM Number of detection signatures in EXTRA.DAT = None
12/10/2018 1:59:55 PM Names of detection signatures in EXTRA.DAT = None
12/10/2018 1:59:55 PM Scan Started Forest\Machin1$ (managed) VSE_Scan_Schedule
12/10/2018 3:43:54 PM Scan Summary Forest\Machin1$ Scan Summary
12/10/2018 3:43:54 PM Scan Summary Forest\Machin1$ Processes scanned : 112
12/10/2018 3:43:54 PM Scan Summary Forest\Machin1$ Processes detected : 0
12/10/2018 3:43:54 PM Scan Summary Forest\Machin1$ Processes cleaned : 0
12/10/2018 3:43:54 PM Scan Summary Forest\Machin1$ Boot sectors scanned : 2
12/10/2018 3:43:54 PM Scan Summary Forest\Machin1$ Boot sectors detected: 0
12/10/2018 3:43:54 PM Scan Summary Forest\Machin1$ Boot sectors cleaned : 0
12/10/2018 3:43:54 PM Scan Summary Forest\Machin1$ Files scanned : 116794
12/10/2018 3:43:54 PM Scan Summary Forest\Machin1$ Files with detections: 0
12/10/2018 3:43:54 PM Scan Summary Forest\Machin1$ File detections : 0
12/10/2018 3:43:54 PM Scan Summary Forest\Machin1$ Files cleaned : 0
12/10/2018 3:43:54 PM Scan Summary Forest\Machin1$ Files deleted : 0
12/10/2018 3:43:54 PM Scan Summary Forest\Machin1$ Files not scanned : 111
12/10/2018 3:43:54 PM Scan Summary Forest\Machin1$ Scan Summary (Registry Scanning)
12/10/2018 3:43:54 PM Scan Summary Forest\Machin1$ Keys scanned : 133306
12/10/2018 3:43:54 PM Scan Summary Forest\Machin1$ Keys detected : 0
12/10/2018 3:43:54 PM Scan Summary Forest\Machin1$ Keys cleaned : 0
12/10/2018 3:43:54 PM Scan Summary Forest\Machin1$ Keys deleted : 0
12/10/2018 3:43:54 PM Scan Summary Forest\Machin1$ Run time : 1:44:00
12/10/2018 3:43:54 PM Scan Complete Forest\Machin1$ (managed) VSE_Scan_Schedule


12/17/2018 1:59:55 PM Engine version = 5900.7806
12/17/2018 1:59:55 PM AntiVirus DAT version = 9019.0
12/17/2018 1:59:55 PM Number of detection signatures in EXTRA.DAT = None
12/17/2018 1:59:55 PM Names of detection signatures in EXTRA.DAT = None
12/17/2018 1:59:55 PM Scan Started Forest\Machin1$ (managed) VSE_Scan_Schedule
12/17/2018 2:03:15 PM Scan Summary Forest\Machin1$ Scan Summary
12/17/2018 2:03:15 PM Scan Summary Forest\Machin1$ Processes scanned : 112
12/17/2018 2:03:15 PM Scan Summary Forest\Machin1$ Processes detected : 0
12/17/2018 2:03:15 PM Scan Summary Forest\Machin1$ Processes cleaned : 0
12/17/2018 2:03:15 PM Scan Summary Forest\Machin1$ Boot sectors scanned : 2
12/17/2018 2:03:15 PM Scan Summary Forest\Machin1$ Boot sectors detected: 0
12/17/2018 2:03:15 PM Scan Summary Forest\Machin1$ Boot sectors cleaned : 0
12/17/2018 2:03:15 PM Scan Summary Forest\Machin1$ Files scanned : 117067
12/17/2018 2:03:15 PM Scan Summary Forest\Machin1$ Files with detections: 0
12/17/2018 2:03:15 PM Scan Summary Forest\Machin1$ File detections : 0
12/17/2018 2:03:15 PM Scan Summary Forest\Machin1$ Files cleaned : 0
12/17/2018 2:03:15 PM Scan Summary Forest\Machin1$ Files deleted : 0
12/17/2018 2:03:15 PM Scan Summary Forest\Machin1$ Files not scanned : 111
12/17/2018 2:03:15 PM Scan Summary Forest\Machin1$ Scan Summary (Registry Scanning)
12/17/2018 2:03:15 PM Scan Summary Forest\Machin1$ Keys scanned : 133700
12/17/2018 2:03:15 PM Scan Summary Forest\Machin1$ Keys detected : 0
12/17/2018 2:03:15 PM Scan Summary Forest\Machin1$ Keys cleaned : 0
12/17/2018 2:03:15 PM Scan Summary Forest\Machin1$ Keys deleted : 0
12/17/2018 2:03:15 PM Scan Summary Forest\Machin1$ Run time : 0:03:21
12/17/2018 2:03:15 PM Scan Complete Forest\Machin1$ (managed) VSE_Scan_Schedule


12/24/2018 1:59:55 PM Engine version = 5900.7806
12/24/2018 1:59:55 PM AntiVirus DAT version = 9019.0
12/24/2018 1:59:55 PM Number of detection signatures in EXTRA.DAT = None
12/24/2018 1:59:55 PM Names of detection signatures in EXTRA.DAT = None
12/24/2018 1:59:55 PM Scan Started Forest\Machin1$ (managed) VSE_Scan_Schedule
12/24/2018 3:45:22 PM Scan Summary Forest\Machin1$ Scan Summary
12/24/2018 3:45:22 PM Scan Summary Forest\Machin1$ Processes scanned : 112
12/24/2018 3:45:22 PM Scan Summary Forest\Machin1$ Processes detected : 0
12/24/2018 3:45:22 PM Scan Summary Forest\Machin1$ Processes cleaned : 0
12/24/2018 3:45:22 PM Scan Summary Forest\Machin1$ Boot sectors scanned : 2
12/24/2018 3:45:22 PM Scan Summary Forest\Machin1$ Boot sectors detected: 0
12/24/2018 3:45:22 PM Scan Summary Forest\Machin1$ Boot sectors cleaned : 0
12/24/2018 3:45:22 PM Scan Summary Forest\Machin1$ Files scanned : 117095
12/24/2018 3:45:22 PM Scan Summary Forest\Machin1$ Files with detections: 0
12/24/2018 3:45:22 PM Scan Summary Forest\Machin1$ File detections : 0
12/24/2018 3:45:22 PM Scan Summary Forest\Machin1$ Files cleaned : 0
12/24/2018 3:45:22 PM Scan Summary Forest\Machin1$ Files deleted : 0
12/24/2018 3:45:22 PM Scan Summary Forest\Machin1$ Files not scanned : 112
12/24/2018 3:45:22 PM Scan Summary Forest\Machin1$ Scan Summary (Registry Scanning)
12/24/2018 3:45:22 PM Scan Summary Forest\Machin1$ Keys scanned : 133700
12/24/2018 3:45:22 PM Scan Summary Forest\Machin1$ Keys detected : 0
12/24/2018 3:45:22 PM Scan Summary Forest\Machin1$ Keys cleaned : 0
12/24/2018 3:45:22 PM Scan Summary Forest\Machin1$ Keys deleted : 0
12/24/2018 3:45:22 PM Scan Summary Forest\Machin1$ Run time : 1:45:28
12/24/2018 3:45:22 PM Scan Complete Forest\Machin1$ (managed) VSE_Scan_Schedule


12/31/2018 1:59:55 PM Engine version = 5900.7806
12/31/2018 1:59:55 PM AntiVirus DAT version = 9019.0
12/31/2018 1:59:55 PM Number of detection signatures in EXTRA.DAT = None
12/31/2018 1:59:55 PM Names of detection signatures in EXTRA.DAT = None
12/31/2018 1:59:55 PM Scan Started Forest\Machin1$ (managed) VSE_Scan_Schedule
12/31/2018 2:03:15 PM Scan Summary Forest\Machin1$ Scan Summary
12/31/2018 2:03:15 PM Scan Summary Forest\Machin1$ Processes scanned : 104
12/31/2018 2:03:15 PM Scan Summary Forest\Machin1$ Processes detected : 0
12/31/2018 2:03:15 PM Scan Summary Forest\Machin1$ Processes cleaned : 0
12/31/2018 2:03:15 PM Scan Summary Forest\Machin1$ Boot sectors scanned : 2
12/31/2018 2:03:15 PM Scan Summary Forest\Machin1$ Boot sectors detected: 0
12/31/2018 2:03:15 PM Scan Summary Forest\Machin1$ Boot sectors cleaned : 0
12/31/2018 2:03:15 PM Scan Summary Forest\Machin1$ Files scanned : 117111
12/31/2018 2:03:15 PM Scan Summary Forest\Machin1$ Files with detections: 0
12/31/2018 2:03:15 PM Scan Summary Forest\Machin1$ File detections : 0
12/31/2018 2:03:15 PM Scan Summary Forest\Machin1$ Files cleaned : 0
12/31/2018 2:03:15 PM Scan Summary Forest\Machin1$ Files deleted : 0
12/31/2018 2:03:15 PM Scan Summary Forest\Machin1$ Files not scanned : 111
12/31/2018 2:03:15 PM Scan Summary Forest\Machin1$ Scan Summary (Registry Scanning)
12/31/2018 2:03:15 PM Scan Summary Forest\Machin1$ Keys scanned : 133714
12/31/2018 2:03:15 PM Scan Summary Forest\Machin1$ Keys detected : 0
12/31/2018 2:03:15 PM Scan Summary Forest\Machin1$ Keys cleaned : 0
12/31/2018 2:03:15 PM Scan Summary Forest\Machin1$ Keys deleted : 0
12/31/2018 2:03:15 PM Scan Summary Forest\Machin1$ Run time : 0:03:21
12/31/2018 2:03:15 PM Scan Complete Forest\Machin1$ (managed) VSE_Scan_Schedule

sriga
Level 7
Report Inappropriate Content
Message 6 of 11

Re: Av On demand scan run time :

@jess_arman there is no difference in the files that are scanned. below are the details for your reference

1st week: 12/3/2018 2:03:07 PM Scan Summary Forest\Machin1$ Files scanned: 116763; 12/3/2018 2:03:07 PM Scan Summary Forest\Machin1$ Run time : 0:03:12.

2nd week: 12/10/2018 3:43:54 PM Scan Summary Forest\Machin1$ Files scanned : 116794; 12/10/2018 3:43:54 PM Scan Summary Forest\Machin1$ Run time : 1:44:00

3rd week: 12/17/2018 2:03:15 PM Scan Summary Forest\Machin1$ Files scanned: 117067; 12/17/2018 2:03:15 PM Scan Summary Forest\Machin1$ Run time : 0:03:21.

4th Week: 12/24/2018 3:45:22 PM Scan Summary Forest\Machin1$ Files scanned: 117095; 12/24/2018 3:45:22 PM Scan Summary Forest\Machin1$ Run time : 1:45:28

 

 

McAfee Employee chealey
McAfee Employee
Report Inappropriate Content
Message 7 of 11

Re: Av On demand scan run time :

The best thing to look at would be the ENS debug logs. Any ODS errors would be listed here.

I would also take into consideration what @tao said in regards to the cache however the repeatitve behaviour seems strange. A MER with ENS debug logging enabled would help support investigate this issue further.

Was my reply helpful?
If this information was helpful in any way, or answered your question, will you please select "Accept as Solution" in my reply, or give kudos as appropriate, so together we can help other members?
sriga
Level 7
Report Inappropriate Content
Message 8 of 11

Re: Av On demand scan run time :

@chealeyI am using Mcafee EPO 5.3 and the issue with VSE guide me for VSE.

Highlighted
McAfee Employee chealey
McAfee Employee
Report Inappropriate Content
Message 9 of 11

Re: Av On demand scan run time :

My apologies....! In that case, please raise a case with support and they can advise you on how to set debug logging.
Was my reply helpful?
If this information was helpful in any way, or answered your question, will you please select "Accept as Solution" in my reply, or give kudos as appropriate, so together we can help other members?
Reliable Contributor tao
Reliable Contributor
Report Inappropriate Content
Message 10 of 11

Re: Av On demand scan run time :

Wondering if it's the scan cache that's reduing the scan time.

VSE General Options Policies <> Global Scan Settings: Configure global options and settings - Scan Cache:


Best practices for on-demand scans in Endpoint Security and VirusScan Enterprise - Enable the scan cache
https://kc.mcafee.com/corporate/index?page=content&id=KB74059

If this information was helpful or has answered your question, please select Accept as Solution. This will assist other memebers
McAfee ePO Support Center Plug-in
Check out the new McAfee ePO Support Center. Simply access the ePO Software Manager and follow the instructions in the Product Guide for the most commonly used utilities, top known issues announcements, search the knowledgebase for product documentation, and server status and statistics – all from within ePO.