NIS 2009 much longer scan times

I have just replaced my copy of "NIS2008" with NIS 2009 and I am quite surprise to find that the time needed for a full scan of both my internal hard drive and external hard drive is now over 6 hours instead of the 1 hour and 15 mins with NIS 2008.

 

Is there any particular reason for this as it means I have to run my scan on a Sunday morning from 7am ?

 

Thx in advance for any suggestions or advice

Nigel

 

[edit: Changed subject to reflect issue.]

Message Edited by shannons on 06-15-2009 06:02 AM

Hi nigelwillis,

 

Successive scans should be faster as NIS 2009 will identify files that do not require future scanning. You can speed this process by opening the main Norton interface and selecting Norton Insight.

 

09-Main-Insight.png

 

When this window opens it should query the Norton server to determine which files are trusted and build a list. You can click on Refresh to get an updated listing.

 

09-Insight.png

 

If this does not help speed up your scan time, we may want to ask more questions about your installation and some specific settings in NIS 2009.

After my first scan was before noticing the insight feature , I did using insight and the refresh feature and that was when I got my first time for a complete scan. This weekend I used insight again as well as he refresh feature. The value I got was 85% . last night I ran a scan again starting at 10pm. This morning at 4:30 am it was still scanning my C partition and at 6pm it had started my F partition. However tonight I will create a custom scan for just my C drive and run it overnight. Currently I would expect it to take between 6.5 to 8 hours. I will of course use the insight feature and refresh again before scanning and report back tomorrow what my results are. If you need any details of my setup then please let me know.

 

 

Thx in advance

nigel

nigelwillis,

 

NIS 2009 should not take longer to scan your system than NIS 2008.  Something is amiss.  How did you do the upgrade?  If your current scans continue to take an eternity to complete you would probably be wise to download the Norton Removal Tool and run it a couple of times (rebooting after each pass) to uninstall NIS 2009 and whatever remnants of NIS 2008 may still be residing on your hard drive.  Then reinstall NIS 2009.  It sounds as if the current installation may not have been completely successful.

 


SendOfJive wrote:

nigelwillis,

 

NIS 2009 should not take longer to scan your system than NIS 2008.  Something is amiss.  How did you do the upgrade?  If your current scans continue to take an eternity to complete you would probably be wise to download the Norton Removal Tool and run it a couple of times (rebooting after each pass) to uninstall NIS 2009 and whatever remnants of NIS 2008 may still be residing on your hard drive.  Then reinstall NIS 2009.  It sounds as if the current installation may not have been completely successful.

 


This is a very important one.If you installed on top of NIS2008 there might be an error on installation.

Many thanks for all the feedback.

First of all a little history. I got NIS2009 Premier edition and with it came Systemworks 12 Basic Edition (SW12BE to keep it short). The SW12BE failed to install. So I chatted with an engineer and he uninstalled my NIS2009, NG9 (Norton Ghost 9) and then ran the NRT (Norton Removal Tool) and rebooted. He then reinstalled SW12BE ran its liveupadate and it worked in a satisfactory manner. I then reinstalled NIS2009 and NG9. Currently I am going through the long and tortuous process of testing all 3. I should point out that my o/s was reinstalled recently and so there is no crap at all on my machine. To answer a question which may be in the back of someone's mind.... I use NG9 because I was never able to get NG14 to work, even with technical support. It does not work with my internal CD drive no my external DVD drive. Recently when starting up my machine, I got a system error ( a couple of weeks ago at least). I have tracked this down to systemworks because it is the only thing I have yet to completely start and since my machine was recently rebuilt from scratch I would consider it to be in reasonable condition.

 

So in answer to the chaps regarding using the nrt , I believe I have already done this sufficiently.

Last night I checked Norton insight and did a refresh. The current score is 88% . Last night I ran the scan on just my C (o/s) partition and it took 9 hours and 10 mins. At the same time my log seems to indicate that an idle time scan ran simultaneously and took 9 hours and 13 mins.

 

despite the issues I have outlined above I only have NG9 and NIS2009 in my start up with the systemworks service running.

 

I'm off out tonight so do please let me know if there are any settings you would like me to check and review with you.

 

Thanks in advance.

 

Nigel

Uninstall NG9 and run an Quick Scan.  This should only take about 2 minutes maximum.  If it takes longer, then turn off the NSW12BE service and unload the interface for NSW12BE.  Try the Quick scan once more.  If less than 2 minutes then install NG9 and try this again.

 

I don't run NSW12BE but if this has a realtime memory monitor then this is the cause of the problem as everything is being scanned multiple times instead of once.

Hi,

 

 I think the scan may be looping in compressed files. I suggest you to uncheck the compressed files scan from the NIS 2009 interface and then run a full system scan.

 

Open NIS 2009

In the Computer Pane, click Settings.

In the Settings window, under Computer Scans, move the slider to turn off Compressed Files Scan.

 

Also set Scan Performance profile to High Trust.

 

Then run a full system scan and see the results.

 

Vineeth--

 

{Edit: added info about Scan performance Profile}

Message Edited by Vineeth on 06-16-2009 09:11 AM

Hi Vineeth.

 

What you is very interesting.

I seem to remember this option when I first had problems with NIS2007 and your suggestion seems the best of the bunch.

So I will give this ago tonight and over night if necessary and report back to the forum.

 

Thanks to everyone for all their feedback.

When might it be advisable to run the Scan Performance Profile as 'Standard Trust', rather than High Trust? I like the faster scan time for my daily scheduled scans and haven't had any problems with infections, but am I giving up too much in the way of security?

Vineeth wrote:

Hi,

 

 I think the scan may be looping in compressed files. I suggest you to uncheck the compressed files scan from the NIS 2009 interface and then run a full system scan.

 

Open NIS 2009

In the Computer Pane, click Settings.

In the Settings window, under Computer Scans, move the slider to turn off Compressed Files Scan.

 

Also set Scan Performance profile to High Trust.

 

Then run a full system scan and see the results.

 

Vineeth--

 

{Edit: added info about Scan performance Profile}

Message Edited by Vineeth on 06-16-2009 09:11 AM

 

For a regular scans, you should be using the Standard Trust (the default setting) as this will check all files that are not Norton or Community Trusted.  In the case here, we are trying to find files quickly (that are causing the scan variances) and are excluding the additional Level 3 Digitally Signed files also.  It is very doubtful that malware files will have a Level 3 Signature (some details on this are found here http://www.microsoft.com/windows/windowsmedia/licensing/digitalcert.aspx and more by searching for "class 3 digital signature" on the web).

 

Does this help your understanding any?

Thank you for the additional clarification.

dbrisendine wrote:

For a regular scans, you should be using the Standard Trust (the default setting) as this will check all files that are not Norton or Community Trusted.  In the case here, we are trying to find files quickly (that are causing the scan variances) and are excluding the additional Level 3 Digitally Signed files also.

<snip...>

 

Anytime, EastBayGrease.  You’re welcome.

I managed to find out where to uncheck the box so I do not scan compressed files , but I could not find out how to change the "Scan Performance Profile". I looked it up on the help and it told me all about it but not where it was. Can you advise this sad thicko please.

In anticipation that this would be brilliant I started a scan at about 5:30 but was forced to abort it at 9:00 still unfinished. With the above information to hand I will try again this week. I'm also going to scan the rest of my drive to see if that is any quicker. I'm thinking it may only be an issue with my C Drive.

 

Thanks for all.

N

Scan Performance Profiles is found under Computer Settings in the Settings Menu.  Scroll down and you will see it between Exclusions / Low Risks and Real Time Protection.

 

Just as a side note, how many files do you estimate on your drive and what type?  Do you have many large video files stored on there, say several GB each file?

Thanks for the additional information.

Out of interest , last night:

I scanned all of my drives except C and it took 1 hour 39 min and 7 sec. (650,095 files)

I also scanned my C drive except the windows folder and all below and that took 7 min and 20 secs. (22052 files scanned).

Incidentally my scan of both my interal and external drive took 9 hours 9 mins and 53 secs and scanned 303,605 files.

 

I'm sure this must mean something , but not quiet sure what yet !

 

When I've found that other setting based on your advice I will indeed scan again starting tonight with a full scan of my C drive.

 

I have no large video files at all. Just shot clips no more than 10 mins for my own amusement.

 

Thanks again.

N

Message Edited by nigelwillis on 06-19-2009 07:45 AM

Just curious. How large are your partitions?

nigelwillis -

 

How large is your C: drive / partition?  How much is free space on it?  How large is your Page File and at what percentage is it being used at (Windows will report this to you)?  Thanks for the information.

nigelwillis -

 

Is NG9 doing backups at night during your scans?

 

To answer the question about my partitions. Internal disk   C=30GB with 19.6 GB Free

                              F=30GB with 13.2 Gb Free)

External disk   H = 16GB with 8.2 Gb free

                               I = 64 GB with 40.2 Gb Free

for the moment.

 

Also. I do not use any automation with NG. When I run a backup I do so manually.

 

I found that High trust setting and set it so. 

I also decided to uninstall system works and something else called Belarc Advisor since I do not use that  any more.

 

On Friday night, a scan of my C drive looked promising so on Sunday Morning I carried out a full system scan.

That took 5 hours 14 mins and 34 secs. Still over the top but much improved.

A scan of all of my drives except C took 4 mins and 10 secs.

A scan of my C drive took 4 mins and 12 secs.

That means a custom scan of all my drives should take 8 mins and 22 secs.

So something else took 5 hours 6 mins and 12 secs !

Not sure yet what that could be although there is that funny business that goes on at the start.