2 Replies Latest reply on Apr 4, 2012 3:02 AM by DeanBaker

    Poor On-Demand Scan Times for 8.8 and Citrix (64Bit)

    DeanBaker

      Hi All.

       

      I have a problem where the on-demand scan for VSE 8.8 is taking a long time to scan what seems like nothing.

       

      The setup only seems to occur on my Windows 2003 64 Bit servers that run Citrix Presentation Server 4.5. The scan logs show that run times for the scan are over 20 hours and the number of files scanned is around 20 (something wrong there). I have checked other 64 Bit servers (not citrix) and they are fine, 80,000+ files taking around 15 - 30 minutes. We also have 32 Bit servers running Citrix and they too are fine.

       

      I was hoping someone might have an idea what could be the cause?

       

      Looking through the logs I can see it has not aleways been like this. The first scan of one of the srevers took 10 minutes. The following week it took 22 hours (see logs below)

       

      1/7/2012    8:00:16 AM        Engine version                          =    5400.1158

      1/7/2012    8:00:16 AM        AntiVirus   DAT version                 =    6581.0

      1/7/2012    8:00:16 AM        Number of detection signatures in EXTRA.DAT =    None

      1/7/2012    8:00:16 AM        Names of detection signatures in EXTRA.DAT  =    None

      1/7/2012    8:00:16 AM    Scan Started    NCTHIN25\SYSTEM    (managed) VSE 8.8 - Server Scan

      1/7/2012    8:10:34 AM    Scan Summary    NCTHIN25\SYSTEM    Scan Summary

      1/7/2012    8:10:34 AM    Scan Summary    NCTHIN25\SYSTEM    Processes scanned    : 58

      1/7/2012    8:10:34 AM    Scan Summary    NCTHIN25\SYSTEM    Processes detected   : 0

      1/7/2012    8:10:34 AM    Scan Summary    NCTHIN25\SYSTEM    Processes cleaned    : 0

      1/7/2012    8:10:34 AM    Scan Summary    NCTHIN25\SYSTEM    Boot sectors scanned : 4

      1/7/2012    8:10:34 AM    Scan Summary    NCTHIN25\SYSTEM    Boot sectors detected: 0

      1/7/2012    8:10:34 AM    Scan Summary    NCTHIN25\SYSTEM    Boot sectors cleaned : 0

      1/7/2012    8:10:34 AM    Scan Summary    NCTHIN25\SYSTEM    Files scanned        : 65711

      1/7/2012    8:10:34 AM    Scan Summary    NCTHIN25\SYSTEM    Files with detections: 0

      1/7/2012    8:10:34 AM    Scan Summary    NCTHIN25\SYSTEM    File detections      : 0

      1/7/2012    8:10:34 AM    Scan Summary    NCTHIN25\SYSTEM    Files cleaned        : 0

      1/7/2012    8:10:34 AM    Scan Summary    NCTHIN25\SYSTEM    Files deleted        : 0

      1/7/2012    8:10:34 AM    Scan Summary    NCTHIN25\SYSTEM    Files not scanned    : 16

      1/7/2012    8:10:34 AM    Scan Summary    NCTHIN25\SYSTEM    Scan Summary (Registry Scanning)

      1/7/2012    8:10:34 AM    Scan Summary    NCTHIN25\SYSTEM    Keys scanned         : 62922

      1/7/2012    8:10:34 AM    Scan Summary    NCTHIN25\SYSTEM    Keys detected        : 0

      1/7/2012    8:10:34 AM    Scan Summary    NCTHIN25\SYSTEM    Keys cleaned         : 0

      1/7/2012    8:10:34 AM    Scan Summary    NCTHIN25\SYSTEM    Keys deleted         : 0

      1/7/2012    8:10:34 AM    Scan Summary    NCTHIN25\SYSTEM    Scan Summary (Cookie Scanning)

      1/7/2012    8:10:34 AM    Scan Summary    NCTHIN25\SYSTEM    Cookies scanned      : 29

      1/7/2012    8:10:34 AM    Scan Summary    NCTHIN25\SYSTEM    Cookies detected     : 0

      1/7/2012    8:10:34 AM    Scan Summary    NCTHIN25\SYSTEM    Cookies cleaned      : 0

      1/7/2012    8:10:34 AM    Scan Summary    NCTHIN25\SYSTEM    Cookies deleted      : 0

      1/7/2012    8:10:34 AM    Scan Summary    NCTHIN25\SYSTEM    Run time             : 0:10:19

      1/7/2012    8:10:34 AM    Scan Complete    NCTHIN25\SYSTEM    (managed) VSE 8.8 - Server Scan

       

       

      14/01/2012    08:00:17        Engine version                          =    5400.1158

      14/01/2012    08:00:17        AntiVirus   DAT version                 =    6588.0

      14/01/2012    08:00:17        Number of detection signatures in EXTRA.DAT =    None

      14/01/2012    08:00:17        Names of detection signatures in EXTRA.DAT  =    None

      14/01/2012    08:00:17    Scan Started    NCTHIN25\SYSTEM    (managed) VSE 8.8 - Server Scan

      14/01/2012    08:03:40    Not scanned (The file is encrypted)     d:\x64 Bit Certified Print Drivers\Xerox\Global Print Driver x64\X-GPDWin_PS_x64.exe   

      14/01/2012    08:11:51    Not scanned (The file is encrypted)     c:\Documents and Settings\cx\Cookies\0O355DX6.txt   

      14/01/2012    08:11:52    Not scanned (The file is encrypted)     c:\Documents and Settings\cx\Cookies\7T5F04S3.txt   

      15/01/2012    06:20:16    Scan Summary    NCTHIN25\SYSTEM    Scan Summary

      15/01/2012    06:20:16    Scan Summary    NCTHIN25\SYSTEM    Processes scanned    : 71

      15/01/2012    06:20:16    Scan Summary    NCTHIN25\SYSTEM    Processes detected   : 0

      15/01/2012    06:20:16    Scan Summary    NCTHIN25\SYSTEM    Processes cleaned    : 0

      15/01/2012    06:20:16    Scan Summary    NCTHIN25\SYSTEM    Boot sectors scanned : 4

      15/01/2012    06:20:16    Scan Summary    NCTHIN25\SYSTEM    Boot sectors detected: 0

      15/01/2012    06:20:16    Scan Summary    NCTHIN25\SYSTEM    Boot sectors cleaned : 0

      15/01/2012    06:20:16    Scan Summary    NCTHIN25\SYSTEM    Files scanned        : 83323

      15/01/2012    06:20:16    Scan Summary    NCTHIN25\SYSTEM    Files with detections: 0

      15/01/2012    06:20:16    Scan Summary    NCTHIN25\SYSTEM    File detections      : 0

      15/01/2012    06:20:16    Scan Summary    NCTHIN25\SYSTEM    Files cleaned        : 0

      15/01/2012    06:20:16    Scan Summary    NCTHIN25\SYSTEM    Files deleted        : 0

      15/01/2012    06:20:16    Scan Summary    NCTHIN25\SYSTEM    Files not scanned    : 20

      15/01/2012    06:20:16    Scan Summary    NCTHIN25\SYSTEM    Scan Summary (Registry Scanning)

      15/01/2012    06:20:16    Scan Summary    NCTHIN25\SYSTEM    Keys scanned         : 50438

      15/01/2012    06:20:16    Scan Summary    NCTHIN25\SYSTEM    Keys detected        : 0

      15/01/2012    06:20:16    Scan Summary    NCTHIN25\SYSTEM    Keys cleaned         : 0

      15/01/2012    06:20:16    Scan Summary    NCTHIN25\SYSTEM    Keys deleted         : 0

      15/01/2012    06:20:16    Scan Summary    NCTHIN25\SYSTEM    Scan Summary (Cookie Scanning)

      15/01/2012    06:20:16    Scan Summary    NCTHIN25\SYSTEM    Cookies scanned      : 15438

      15/01/2012    06:20:16    Scan Summary    NCTHIN25\SYSTEM    Cookies detected     : 2

      15/01/2012    06:20:16    Scan Summary    NCTHIN25\SYSTEM    Cookies cleaned      : 0

      15/01/2012    06:20:16    Scan Summary    NCTHIN25\SYSTEM    Cookies deleted      : 0

      15/01/2012    06:20:16    Scan Summary    NCTHIN25\SYSTEM    Run time             : 22:20:00

      15/01/2012    06:20:16    Scan Terminated    NCTHIN25\SYSTEM    (managed) VSE 8.8 - Server Scan

       

      The scans have been the same from the dates above to the current date.