Mailing List Archive

[clamav-users] Radically Different Scan Times
MacOS 10.14.4 - 2017 iMac
ClamAV 0.101.1 (Updated today: ClamAV 0.101.2/25410/Fri Apr 5 14:58:26 2019)

Yesterday’s results:

----------- SCAN SUMMARY -----------
Known viruses: 6101439
Engine version: 0.101.1
Scanned directories: 227591
Scanned files: 594694
Infected files: 1
Total errors: 35
Data scanned: 63016.47 MB
Data read: 92969.95 MB (ratio 0.68:1)
Time: 12755.457 sec (212 m 35 s)

Today’s results:

----------- SCAN SUMMARY -----------
Known viruses: 6110476
Engine version: 0.101.1
Scanned directories: 227492
Scanned files: 592573
Infected files: 1
Total errors: 35
Data scanned: 63134.07 MB
Data read: 93149.45 MB (ratio 0.68:1)
Time: 36218.816 sec (603 m 38 s)

(Note that the "infected file" is the Eicar-Test-Signature.)

Even though the number of files and amount of data scanned is about the same, the scan took almost three times as long. I’ve never seen this before. Normally the scan results are there when I wake up in the morning. But, not today.

I have no idea what to look for here. I’ve not changed anything about the scan nor were other IO intensive jobs running overnight.

Any suggestions?
Re: [clamav-users] Radically Different Scan Times [ In reply to ]
Addressed earlier today:

<https://lists.clamav.net/pipermail/clamav-users/2019-April/007878.html <https://lists.clamav.net/pipermail/clamav-users/2019-April/007878.html>>

-Al-

> On Apr 5, 2019, at 20:18, Michael Newman via clamav-users <clamav-users@lists.clamav.net> wrote:
>
> MacOS 10.14.4 - 2017 iMac
> ClamAV 0.101.1 (Updated today: ClamAV 0.101.2/25410/Fri Apr 5 14:58:26 2019)
>
> Yesterday’s results:
>
> ----------- SCAN SUMMARY -----------
> Known viruses: 6101439
> Engine version: 0.101.1
> Scanned directories: 227591
> Scanned files: 594694
> Infected files: 1
> Total errors: 35
> Data scanned: 63016.47 MB
> Data read: 92969.95 MB (ratio 0.68:1)
> Time: 12755.457 sec (212 m 35 s)
>
> Today’s results:
>
> ----------- SCAN SUMMARY -----------
> Known viruses: 6110476
> Engine version: 0.101.1
> Scanned directories: 227492
> Scanned files: 592573
> Infected files: 1
> Total errors: 35
> Data scanned: 63134.07 MB
> Data read: 93149.45 MB (ratio 0.68:1)
> Time: 36218.816 sec (603 m 38 s)
>
> (Note that the "infected file" is the Eicar-Test-Signature.)
>
> Even though the number of files and amount of data scanned is about the same, the scan took almost three times as long. I’ve never seen this before. Normally the scan results are there when I wake up in the morning. But, not today.
>
> I have no idea what to look for here. I’ve not changed anything about the scan nor were other IO intensive jobs running overnight.
>
> Any suggestions?