Number of files scanned dramatically reduced

NIS 2012
Vista home premium 32 bit

Ok I’m posting this separate from my other post about scans so as to not confuse things

A scheduled full system scan ran about 3:30am today as it was scheduled to do
It scanned about 700,000 files
I use my PC from a limited user account all the time.I have my NIS run scheduled full system scans several real times a week and this has been about the same amount of files scanned each time for months

So I had some concerns about the whole where should the full system scan be scheduled from the admin account or limited user account
So I went ahead and re configured the scheduled full system scan from the admin account using the NIS GUI
I changed the start time to 6:33 am today, to see if it would run
It did run as scheduled
However, the number of files scanned was only 270,000 or so. Well below the 700,000+ it scans every week
Well I reconfigured the full scheduled scan to run at 7:30 am to see how many files would show scanned
Again only 270,00 or so

So I’m wondering why this is, the reduced number today
Can it be due to the fact that a full scheduled scan was already run today?
And tomorrow u would be back up to 700,000+ scanned?

Calls,

The program 'knows' the files it has scanned and marks them. If the mark is still there when the next scan is run the program knows that it is unchanged and still clean. Running tests a second time not long after a scan should show a reduction in the number of files scanned.

Stay well and surf safe

Thanks DE
I thought that is what might have happened
I changed the scheduled full system scan to a time later today
I’ll see if that cause the number if scanned filed to increase

Anyone know the time frame before it starts to scan files again?


Calls wrote:
Anyone know the time frame before it starts to scan files again?

Hi,

Why should it scan files 'again' that it has already marked as clean? So far as I know the timeframe is never.

Stay well and surf safe

I say that because I have a daily scheduled full system scan that runs. Everyday the files scan shows about 700,000 plus

Again sorry I can’t edit using my phone
The reason why I asked that is you can see that even though a scan was run within 2 hours, the next scan still showed 200,000 files scanned. So it must have rescanned some of the same files then and will do so again

Hi Calls,

 

When you are using your phone, do you have a link at the bottom of the page to view the Full version?  If you click that you should have the same options as when using a computer, such as editing your posts.  :smileywink:

 

Just a thought.

 

Dave

Generally I've found that NIS scans less files when it's been under 24 hours between full system scans. If I let the time between scans reach 18 to 24 hours then NIS scans all files instead of half or whatever. Hope this helps.


Calls wrote:
[...]

However, the number of files scanned was only 270,000 or so. Well below the 700,000+ it scans every week
Well I reconfigured the full scheduled scan to run at 7:30 am to see how many files would show scanned
Again only 270,00 or so

So I'm wondering why this is, the reduced number today
Can it be due to the fact that a full scheduled scan was already run today?
And tomorrow u would be back up to 700,000+ scanned?

The reduced number of files was due to the fact that you had already performed a Full System Scan and a new Virus Definitions set had not yet been received via LiveUpdate when you preformed the second Full System Scan. The arrival of a new Virus Definition set forces Norton to clear the cache where it stores the information on what files have already been scanned. If you check the scan results for your second Full System Scan, you should see a large number of skipped files in the results

 

To illustrate under NIS 21.1.1.7 (note the date and time for each scan):

 

 

Date   & TimeActivityUser Account TypeScan Time (d:h:m:s)Total items scannedFiles & DirectoriesSkipped FilesTracking Cookies ResolvedVirus Resolved
27/02/2014 06:48Full System Scan resultsStandard User0:01:48:07961,231954,59184,58414
27/02/2014 07:13Full System Scan resultsAdministrator0:00:18:52462,050456,176278,1571 
27/02/2014 07:56Full System Scan resultsStandard User0:00:18:36462,643456,855279,970  
27/02/2014 10:36Quick Scan resultsAdministrator0:00:01:559,1743,2290  
27/02/2014 11:50Full System Scan resultsAdministrator0:01:09:24967,490961,65187,703  

 

  • The first Full System Scan above scanned 961,000 items.
  • The second Full System Scan only took around 19 minutes to execute, it scanned 462,000 items and skipped 278,000 files.
  • The third Full System Scan had similar results to the second scan above.
  • The fourth scan was an idle-time Quick Scan which indicated that a new Virus Definition set had arrived via LiveUpdate.
  • The fifth Full System Scan scanned 967,000 items, similar to the results of the first scan above.

Providing you have had a LiveUpdate that contained a Virus Definition set update (not Pulse Update) in the interim, then tomorrow you should see around 700,000 items in your Full System Scan results.