Jump to content
JustAnotherUserInUK

Slow to scan a file when multiple objects

Recommended Posts

Hi All,

We use Windows Server 2016 server edition of Kaspersky 10.3.0.6294. When scanning a file which contains multiple objects such as images in pdfs or fonts etc then the scanning takes several minutes. I have copied the results of a test pdf below which we scanned via command line. The CPU for the process is 0% during the delay. Of course if we scan again then iSwift means the file is 'scanned' quickly. My guess is possibly a a file folder being scanned/locked by the Kaspersky background process? How can I troubleshoot this? Thanks in advance.

2018-12-21 11:27:19	Scan_Objects$25141        starting   1%         
; --- Settings ---
; Action on detect: 	Ask user
; Scan objects:     	All objects
; Use iChecker:     	Yes
; Use iSwift:       	Yes
; Try disinfect:    	Yes
; Try delete:       	Yes
; Try delete container:	Yes
; Exclude by mask:  	No
; Include by mask:  	No
; Objects to scan:  	
; 	"C:\TestDir\SampleTest.pdf"	Enable=Yes	Recursive=No
; ------------------
2018-12-21 11:27:19	Scan_Objects$25141        running    1%         
2018-12-21 11:27:23	C:\TestDir\SampleTest.pdf	archive	PDF
2018-12-21 11:27:27	C:\TestDir\SampleTest.pdf//data0000	ok
2018-12-21 11:27:32	C:\TestDir\SampleTest.pdf//data0001	ok
2018-12-21 11:27:38	C:\TestDir\SampleTest.pdf//data0002	ok
2018-12-21 11:27:44	C:\TestDir\SampleTest.pdf//data0003	ok
2018-12-21 11:27:48	C:\TestDir\SampleTest.pdf//data0004	ok
2018-12-21 11:27:53	C:\TestDir\SampleTest.pdf//data0005	ok
2018-12-21 11:27:58	C:\TestDir\SampleTest.pdf//data0006	ok
2018-12-21 11:28:02	C:\TestDir\SampleTest.pdf//data0007	ok
2018-12-21 11:28:07	C:\TestDir\SampleTest.pdf//data0008	ok
2018-12-21 11:28:11	C:\TestDir\SampleTest.pdf//data0009	ok
2018-12-21 11:28:16	C:\TestDir\SampleTest.pdf//data0010	ok
2018-12-21 11:28:20	C:\TestDir\SampleTest.pdf//data0011	ok
2018-12-21 11:28:25	C:\TestDir\SampleTest.pdf//data0012	ok
2018-12-21 11:28:30	C:\TestDir\SampleTest.pdf//data0013	ok
2018-12-21 11:28:35	C:\TestDir\SampleTest.pdf//data0014	ok
2018-12-21 11:28:40	C:\TestDir\SampleTest.pdf//data0015	ok
2018-12-21 11:28:45	C:\TestDir\SampleTest.pdf//data0016	ok
2018-12-21 11:28:50	C:\TestDir\SampleTest.pdf//data0017	ok
2018-12-21 11:28:54	C:\TestDir\SampleTest.pdf//data0018	ok
2018-12-21 11:28:59	C:\TestDir\SampleTest.pdf//data0019	ok
2018-12-21 11:29:04	C:\TestDir\SampleTest.pdf//data0020	ok
2018-12-21 11:29:09	C:\TestDir\SampleTest.pdf//data0021	ok
2018-12-21 11:29:14	C:\TestDir\SampleTest.pdf//data0022	ok
2018-12-21 11:29:20	C:\TestDir\SampleTest.pdf//data0023	ok
2018-12-21 11:29:25	C:\TestDir\SampleTest.pdf//data0024	ok
2018-12-21 11:29:30	C:\TestDir\SampleTest.pdf//data0025	ok
2018-12-21 11:29:35	C:\TestDir\SampleTest.pdf//data0026	ok
2018-12-21 11:29:40	C:\TestDir\SampleTest.pdf//data0027	ok
2018-12-21 11:29:47	C:\TestDir\SampleTest.pdf//data0028	ok
2018-12-21 11:29:54	C:\TestDir\SampleTest.pdf//data0029	ok
2018-12-21 11:30:02	C:\TestDir\SampleTest.pdf//data0030	ok
2018-12-21 11:30:07	C:\TestDir\SampleTest.pdf//data0031	ok
2018-12-21 11:30:12	C:\TestDir\SampleTest.pdf//data0032	ok
2018-12-21 11:30:19	C:\TestDir\SampleTest.pdf//data0033	ok
2018-12-21 11:30:26	C:\TestDir\SampleTest.pdf//data0034	ok
2018-12-21 11:30:28	C:\TestDir\SampleTest.pdf	ok
2018-12-21 11:30:30	Scan_Objects$25141        completed             
;  --- Statistics ---
;  Current time:  	2018-12-21 11:30:30
; Time Start:       	2018-12-21 11:27:19
; Time Finish:      	2018-12-21 11:30:30
; Completion:       	100%
; Processed objects:	36
; Total detected:   	0
; Detected exact:   	0
; Suspicions:       	0
; Treats detected:  	0
; Untreated:        	0
; Disinfected:      	0
; Quarantined:      	0
; Deleted:          	0
; Skipped:          	0
; Archived:         	1
; Packed:           	0
; Password protected:	0
; Corrupted:        	0
; Errors:           	0
; Last object:      	

Share this post


Link to post

Hello. 

Have you tried installing latest Kaspersky Endpoint Security 10 version ? 

Have you considered using Kaspersky Security for Windows Server ?

Could you please describe your issue in more details ? 

What kind of storage this server uses ? 

What is a size of scanned file ?

Share this post


Link to post

@Evgeny_E thanks for the quick reply.

That is the latest version of Windows server 64 bit edition.
When we use a command line scan of a file it is very slow - several minutes for a small file in the order of 200KB. I don't have access to the computer at the moment but the command being used is something like:

avp.com SCAN /PathToFile/FileName /i4 /R:C:\report.txt


This is fast SSD storage using NTFS. The pause seems to occur when the file has embedded objects. For example if the file contains images in a PDF then Kaspersky AV seems to scan the objects separately (see report text in OP). If we scan a file several MB which does not have embedded objects then the file is scanned instantaneously.

A word document of only a few KB is also very slow as that contains embedded components such as fonts. If we scan say a jpg of several MB that is instantaneous as there are no embedded objects and the report states that 1 object scanned. Compare that with the above report which shows 36 processed objects, note the times for the scans of the individual objects, it is very slow.

Does this make sense?

Again help appreciated.

 

Share this post


Link to post
20 минут назад, JustAnotherUserInUK сказал:

@Evgeny_E thanks for the quick reply.

That is the latest version of Windows server 64 bit edition.
When we use a command line scan of a file it is very slow - several minutes for a small file in the order of 200KB. I don't have access to the computer at the moment but the command being used is something like:

avp.com SCAN /PathToFile/FileName /i4 /R:C:\report.txt


This is fast SSD storage using NTFS. The pause seems to occur when the file has embedded objects. For example if the file contains images in a PDF then Kaspersky AV seems to scan the objects separately (see report text in OP). If we scan a file several MB which does not have embedded objects then the file is scanned instantaneously.

A word document of only a few KB is also very slow as that contains embedded components such as fonts. If we scan say a jpg of several MB that is instantaneous as there are no embedded objects and the report states that 1 object scanned. Compare that with the above report which shows 36 processed objects, note the times for the scans of the individual objects, it is very slow.

Does this make sense?

Again help appreciated.

 

Hello!

Try updating application version to lates availabe here https://support.kaspersky.com/kes10#downloads

Could you experience this issue if you use a scan task on KSC ?

I am suggesting an update, because usually diagnosing this type of issues requires creating product and performance log

Thank you!

Share this post


Link to post

Hi All,

Could somebody run the scan command

 avp.com SCAN /PathToFile/FileName /i4 /R:C:\report.txt

with a pdf file that contains several images and post here so that I can compare please. The report should contain several objects as shown in my sample posted.

Help appreciated.

Share this post


Link to post
34 minutes ago, JustAnotherUserInUK said:

Hi All,

Could somebody run the scan command

 avp.com SCAN /PathToFile/FileName /i4 /R:C:\report.txt

with a pdf file that contains several images and post here so that I can compare please. The report should contain several objects as shown in my sample posted.

Help appreciated.

Actually that should be RA not just R

Share this post


Link to post

×
×
  • Create New...

Important Information

We use cookies to make your experience of our websites better. By using and further navigating this website you accept this. Detailed information about the use of cookies on this website is available by clicking on more information.