4 Replies Latest reply on Nov 6, 2009 11:27 AM by wwarren

    Scanning gets very slow after seconds of being super fast. I'm going 58 hours of scanning and still going!!!

      Hello Everyone,

       

      I haven't had this problem before,but I'm 58 hours, no lie, check the picture and my antivirus scanning is still running, not even half done.

       

      http://i603.photobucket.com/albums/tt113/timberland7/VirusScanning.jpg

       

      My HDD is not very big, only 250 GB, and I will say that is 85% full, but I ran this before even when only 1GB was left and didn't have any problems.

       

      I haven't install any new program, I haven't changed the configuration, everything is pretty much the same since last time I scanned my computer.

       

      So I was thinking to run the antivirus and leave it overnight, but next morming it was still running, I left the computer at home, go to work, come back still running, and so on, and I don't know what to do.

       

      Mistakenly I close the window when it was 26 hours of scanning, and started over again immediately. From that point to now it’s been 58 hours.

       

      For some reason, I decided to “pause” the scanning to see what it’s scanning, what files are the possible problematic ones, and I paused, and look for the file, and to see if it was something weird, but nothing, then I pressed “continue”, and then magically the scanning became super fast, as it was usually, but started to slow down, after 10 seconds of going fast, until the point where it was scanning at a velocity of 1 file per second (these files are only 146kb).

       

      So I don’t know what to do, I was thinking that is the folder that is scanning right now that is making this go super slow (this folder, it’s on my “ProgramData” folder and belongs to a software which has a lot of folders in different folders and some files on each folder, so it's like one folder with 50 folders, and each of them have 50 more, and each of them with 10 files of only 146kb aprox.

       

      Again, I scanned my system before with those folders on my HDD, and I haven’t touch the program in a while, so the number of folders and files are basically the same since my last scan.

       

      So, please, I need help.

       

      PS. I'm using VirusScan Enterprise 8.5.0i, updated automatically on November 05, 2009 5:27:04 PM

       

        • 1. Re: Scanning gets very slow after seconds of being super fast. I'm going 58 hours of scanning and still going!!!
          tonyb99

          A few things to check first..

           

          What vse version, patch level and hotfix are you running

          What DAT and engine

           

          Whats the system utilization set to?

          (scan properties/performance tab/system utilization)

           

          What do you have open and running while the scan is in process?

           

          What are the settings for scan locations and also those for scan settings

           

          Do you have some partial entries in the ondemandscan.log for this scan

          (C:\Documents and Settings\All Users\Application Data\McAfee\DesktopProtection)

          Can you post the log, are their timeouts?

           

          Thanks

          • 2. Re: Scanning gets very slow after seconds of being super fast. I'm going 58 hours of scanning and still going!!!

            I couldn't wait anymore! i just stopped the scan!

             

            What vse version, patch level and hotfix are you running

            What DAT and engine

            Ok, I hope this helps!

            Version.jpg

             

            Whats the system utilization set to?

            (scan properties/performance tab/system utilization)

            I don't know what are you refering to when you ask "System Utilization", but I found this and it says it 100%

            system.jpg

            What do you have open and running while the scan is in process?

            Well.... Usually nothing, but this time, since it's taking so long, I just open a few (5) windows of Google Chrome, and MS Word, nothing else.

             

            What are the settings for scan locations and also those for scan settings

            I don't know what do you mean with this, but here is a picture I hope it helps!

            locationsettings.jpg

            Do you have some partial entries in the ondemandscan.log for this scan

            (C:\Documents and Settings\All Users\Application Data\McAfee\DesktopProtection)

            Can you post the log, are their timeouts?

            Here are some

             

             

            9/1/2009 3:51:55 AM Engine version =5301.4018

            9/1/2009 3:51:55 AM AntiVirus   DAT version =5726.0000

            9/1/2009 3:51:55 AM Number of detection signatures in EXTRA.DAT =None

            9/1/2009 3:51:55 AM Names of detection signatures in EXTRA.DAT  =None

            9/1/2009 3:51:27 AM Scan Started PAULERLAND-PC\Paul Erland On-Demand Scan

            9/1/2009 3:52:18 AM Scan Summary PAULERLAND-PC\Paul Erland Scan Summary

            9/1/2009 3:52:18 AM Scan Summary PAULERLAND-PC\Paul Erland Processes scanned    : 0

            9/1/2009 3:52:18 AM Scan Summary PAULERLAND-PC\Paul Erland Processes detected   : 0

            9/1/2009 3:52:18 AM Scan Summary PAULERLAND-PC\Paul Erland Processes cleaned    : 0

            9/1/2009 3:52:18 AM Scan Summary PAULERLAND-PC\Paul Erland Boot sectors scanned : 1

            9/1/2009 3:52:18 AM Scan Summary PAULERLAND-PC\Paul Erland Boot sectors detected: 0

            9/1/2009 3:52:18 AM Scan Summary PAULERLAND-PC\Paul Erland Boot sectors cleaned : 0

            9/1/2009 3:52:18 AM Scan Summary PAULERLAND-PC\Paul Erland Files scanned        : 425

            9/1/2009 3:52:18 AM Scan Summary PAULERLAND-PC\Paul Erland Files with detections: 0

            9/1/2009 3:52:18 AM Scan Summary PAULERLAND-PC\Paul Erland File detections      : 0

            9/1/2009 3:52:18 AM Scan Summary PAULERLAND-PC\Paul Erland Files cleaned        : 0

            9/1/2009 3:52:18 AM Scan Summary PAULERLAND-PC\Paul Erland Files deleted        : 0

            9/1/2009 3:52:18 AM Scan Summary PAULERLAND-PC\Paul Erland Files not scanned    : 0

            9/1/2009 3:52:18 AM Scan Summary PAULERLAND-PC\Paul Erland Run time             : 0:00:51

            9/1/2009 3:52:18 AM Scan Complete PAULERLAND-PC\Paul Erland On-Demand Scan

             

            9/12/2009 5:33:10 PM Engine version =5301.4018

            9/12/2009 5:33:10 PM AntiVirus   DAT version =5739.0000

            9/12/2009 5:33:10 PM Number of detection signatures in EXTRA.DAT =None

            9/12/2009 5:33:10 PM Names of detection signatures in EXTRA.DAT  =None

            9/12/2009 5:33:02 PM Scan Started PAULERLAND-PC\Paul Erland On-Demand Scan

            9/12/2009 5:33:54 PM Scan Summary PAULERLAND-PC\Paul Erland Scan Summary

            9/12/2009 5:33:54 PM Scan Summary PAULERLAND-PC\Paul Erland Processes scanned    : 0

            9/12/2009 5:33:54 PM Scan Summary PAULERLAND-PC\Paul Erland Processes detected   : 0

            9/12/2009 5:33:54 PM Scan Summary PAULERLAND-PC\Paul Erland Processes cleaned    : 0

            9/12/2009 5:33:54 PM Scan Summary PAULERLAND-PC\Paul Erland Boot sectors scanned : 0

            9/12/2009 5:33:54 PM Scan Summary PAULERLAND-PC\Paul Erland Boot sectors detected: 0

            9/12/2009 5:33:54 PM Scan Summary PAULERLAND-PC\Paul Erland Boot sectors cleaned : 0

            9/12/2009 5:33:54 PM Scan Summary PAULERLAND-PC\Paul Erland Files scanned        : 246

            9/12/2009 5:33:54 PM Scan Summary PAULERLAND-PC\Paul Erland Files with detections: 1

            9/12/2009 5:33:54 PM Scan Summary PAULERLAND-PC\Paul Erland File detections      : 0

            9/12/2009 5:33:54 PM Scan Summary PAULERLAND-PC\Paul Erland Files cleaned        : 0

            9/12/2009 5:33:54 PM Scan Summary PAULERLAND-PC\Paul Erland Files deleted        : 0

            9/12/2009 5:33:54 PM Scan Summary PAULERLAND-PC\Paul Erland Files not scanned    : 0

            9/12/2009 5:33:54 PM Scan Summary PAULERLAND-PC\Paul Erland Run time             : 0:00:52

            9/12/2009 5:33:54 PM Scan Complete PAULERLAND-PC\Paul Erland On-Demand Scan

             

            11/2/2009 9:03:33 PM Engine version =5301.4018

            11/2/2009 9:03:33 PM AntiVirus   DAT version =5790.0000

            11/2/2009 9:03:33 PM Number of detection signatures in EXTRA.DAT =None

            11/2/2009 9:03:33 PM Names of detection signatures in EXTRA.DAT  =None

            11/2/2009 9:03:26 PM Scan Started PAULERLAND-PC\Paul Erland Full Scan

            11/3/2009 6:40:06 AM Scan Summary PAULERLAND-PC\Paul Erland Scan Summary

            11/3/2009 6:40:06 AM Scan Summary PAULERLAND-PC\Paul Erland Processes scanned    : 122

            11/3/2009 6:40:06 AM Scan Summary PAULERLAND-PC\Paul Erland Processes detected   : 0

            11/3/2009 6:40:06 AM Scan Summary PAULERLAND-PC\Paul Erland Processes cleaned    : 0

            11/3/2009 6:40:06 AM Scan Summary PAULERLAND-PC\Paul Erland Boot sectors scanned : 3

            11/3/2009 6:40:06 AM Scan Summary PAULERLAND-PC\Paul Erland Boot sectors detected: 0

            11/3/2009 6:40:06 AM Scan Summary PAULERLAND-PC\Paul Erland Boot sectors cleaned : 0

            11/3/2009 6:40:06 AM Scan Summary PAULERLAND-PC\Paul Erland Files scanned        : 943339

            11/3/2009 6:40:06 AM Scan Summary PAULERLAND-PC\Paul Erland Files with detections: 0

            11/3/2009 6:40:06 AM Scan Summary PAULERLAND-PC\Paul Erland File detections      : 0

            11/3/2009 6:40:06 AM Scan Summary PAULERLAND-PC\Paul Erland Files cleaned        : 0

            11/3/2009 6:40:06 AM Scan Summary PAULERLAND-PC\Paul Erland Files deleted        : 0

            11/3/2009 6:40:06 AM Scan Summary PAULERLAND-PC\Paul Erland Files not scanned    : 61

            11/3/2009 6:40:06 AM Scan Summary PAULERLAND-PC\Paul Erland Run time             : 9:36:40

            11/3/2009 6:40:06 AM Scan Terminated PAULERLAND-PC\Paul Erland Full Scan

             

            11/3/2009 6:41:34 AM Engine version =5301.4018

            11/3/2009 6:41:34 AM AntiVirus   DAT version =5790.0000

            11/3/2009 6:41:34 AM Number of detection signatures in EXTRA.DAT =None

            11/3/2009 6:41:34 AM Names of detection signatures in EXTRA.DAT  =None

            11/3/2009 6:41:24 AM Scan Started PAULERLAND-PC\Paul Erland Full Scan

            11/3/2009 5:54:08 PM Engine version =5301.4018

            11/3/2009 5:54:08 PM AntiVirus   DAT version =5791.0000

            11/3/2009 5:54:08 PM Number of detection signatures in EXTRA.DAT =None

            11/3/2009 5:54:08 PM Names of detection signatures in EXTRA.DAT  =None

            11/4/2009 5:16:24 PM Engine version =5301.4018

            11/4/2009 5:16:24 PM AntiVirus   DAT version =5792.0000

            11/4/2009 5:16:24 PM Number of detection signatures in EXTRA.DAT =None

            11/4/2009 5:16:24 PM Names of detection signatures in EXTRA.DAT  =None

            11/5/2009 5:42:14 PM Engine version =5301.4018

            11/5/2009 5:42:14 PM AntiVirus   DAT version =5793.0000

            11/5/2009 5:42:14 PM Number of detection signatures in EXTRA.DAT =None

            11/5/2009 5:42:14 PM Names of detection signatures in EXTRA.DAT  =None

            11/5/2009 10:21:35 PM Scan Summary PAULERLAND-PC\Paul Erland Scan Summary

            11/5/2009 10:21:35 PM Scan Summary PAULERLAND-PC\Paul Erland Processes scanned    : 120

            11/5/2009 10:21:35 PM Scan Summary PAULERLAND-PC\Paul Erland Processes detected   : 0

            11/5/2009 10:21:35 PM Scan Summary PAULERLAND-PC\Paul Erland Processes cleaned    : 0

            11/5/2009 10:21:35 PM Scan Summary PAULERLAND-PC\Paul Erland Boot sectors scanned : 3

            11/5/2009 10:21:35 PM Scan Summary PAULERLAND-PC\Paul Erland Boot sectors detected: 0

            11/5/2009 10:21:35 PM Scan Summary PAULERLAND-PC\Paul Erland Boot sectors cleaned : 0

            11/5/2009 10:21:35 PM Scan Summary PAULERLAND-PC\Paul Erland Files scanned        : 413538

            11/5/2009 10:21:35 PM Scan Summary PAULERLAND-PC\Paul Erland Files with detections: 0

            11/5/2009 10:21:35 PM Scan Summary PAULERLAND-PC\Paul Erland File detections      : 0

            11/5/2009 10:21:35 PM Scan Summary PAULERLAND-PC\Paul Erland Files cleaned        : 0

            11/5/2009 10:21:35 PM Scan Summary PAULERLAND-PC\Paul Erland Files deleted        : 0

            11/5/2009 10:21:35 PM Scan Summary PAULERLAND-PC\Paul Erland Files not scanned    : 29

            11/5/2009 10:21:35 PM Scan Summary PAULERLAND-PC\Paul Erland Run time             : 62:13:24

            11/5/2009 10:21:35 PM Scan Terminated PAULERLAND-PC\Paul Erland Full Scan

             

             

            Thank you in advance for your help.

            Please, let me know what else do you want to know.

             

            Regards,

             

            Paul Erland

            • 3. Re: Scanning gets very slow after seconds of being super fast. I'm going 58 hours of scanning and still going!!!
              tonyb99

              I would update the engine for a start, the rest of it looks ok ( bear in mind your AV sys admin may not want you to be running the 5400 engine yet so tal;k to them but it is recommended, also you are 2 patch es out of date on vse itself you should be on patch 8 pref. engine available from http://download.nai.com/products/licensed/superdat/engine/intel/5400/5400eng.exe)

              Your scan times are really really long for the number of files, do you have lots of small files or scripts, or maybe lots of archives like zips and have the scan archives option selected [detection tab]  lots of installer files with files within them will also slow down lots.

              • 4. Re: Scanning gets very slow after seconds of being super fast. I'm going 58 hours of scanning and still going!!!
                wwarren

                It would be good to know how VSE 8.7i Patch 1 ODS performs, with system utilization throttle set to less than 50%.

                In the comparitive testing I've seen with 8.5i and 8.7i, 8.7i is amazing (due to the changes in how throttling is controlled).

                 

                In 8.5i, the product itself calculates the throttle, and this method is laborious and tedious (but it was necessary because the product supports NT 4.0, where using thread-priority was found to not be reliable)

                In 8.7i Patch 1 and later, the product uses thread-priority. The patch 1 readme explains how the percentages map to varying thread priority levels. This allows a scan to run with very little or no noticeable impact to the typical user while still completing the scan faster than 8.5i ever could.