Slow scans

Thanks for the replies. I did a complete uninstall including the WRdata file but my scan is still taking almost 20 mins. I have reuploaded the log files again and just had a prompt response to say they have been recieved and looked at. Just need to be patient for the outcome.

Hi,
Today performed performance trubleshooter, dskchk & SFC scan. I have reinstalled the older V9.0.24.49 and now my PC scan only takes 5m 31s.

When I update to the latest V9.0.26.61 the scan takes 19m.

Surely this must be an issue with the latest update!

If you can't see that Hidden Folder this is the easiest way to get there via the RUN Command.

%ProgramData%\WRData

My 2 windows 10 laptops scan in about 4 mins total . The problem of the long scan time of 19mins is just on my Windows 7 Home PC. When i do a scan it gets upto 40% in 2 mins than takes another 18 to complete. Towards the end it really slows and says performing system analasys which it does not appear to do on my other Windows 10 laptops.

Like Mako2900 and others I am experiencing the same issue with recent scans on my Toshiba Laptop running Windows 7 Home Premium.

I have used Webroot products for almost 2 decades. Within the last week scans on my laptop went from 2-4 minuets total to more than 10 minuets to complete a full scan (certainly not as bad as others experiencing more that 1 hour scans). I haven't made any changes to to my computer either. I'm running WR Secure Anywhere Complete V9.0.26.61 as well.

There has never been an infected file noted/identified.

Similarly as others have mentioned, it gets to 40% and then creeps till its finished at 100% during the last portion of the scanning. I'm not aware of the exact affect on performance during the time it runs as I have never checked.

I have read through all of the comments associated with the thread. I have to apologize as well - much of it doesn't mean much to me as a low tech user - just concerned that something has changed.

I'm not clear on if a fix is coming or if this is what we can expect going forward (or worse) because of the age of the system being used.

Is it necessary to open a support ticket at this time?

With a small number of exceptions in the past, a build once published is code complete and will not change. That is to say 9.0.24.49 will always be 9.0.24.49, 9.0.26.61 will remain the same. The next release will build on the code base established in 9.0.26.61 adding bug fixes that presented in that build, and adding any new features.
As for protections, the cloud determinations are universal between all versions. In the case between 24.49 and 26.61 not much was changed from a security perspective. There were some additions related to script shield. But this was just the groundwork for that shield, with more being implemented in later releases. Your logs indicated high CPU usage as well, which also informed my conclusion.

Thanks for the replies. I did a complete uninstall including the WRdata file but my scan is still taking almost 20 mins. I have reuploaded the log files again and just had a prompt response to say they have been recieved and looked at. Just need to be patient for the outcome.Your the second person that I know that has long scan issues. @Baldrick has the issue as well on one of his systems.
Third person @TripleHelix I have the same problem on my Toshiba laptop running Win 7. Scans use to be a few minutes, now it's 45+ minutes. Uninstall / Reinstall, Beta / Release Version all the same, no difference in scan time.

@creakndale would you say that the majority of the scan time is spent in this Central Analysis, how much time is spent actually scanning?

I'm looking at the logs now, and while I can see three scans, historically. All over 20 minutes, the first scan included three detection's as well. I'm not seeing a quarantine DB, which suggests that you manually overrode these files. This can have an impact on interrogations of files lengthening the scan since the system thinks it's still potentially infected. If these files were FP's please let us know, and we can correct the determinations.
System events provide the following messages as well:
Disk 7 Error None Stephen-PC The device \Device\Harddisk0\DR0 has a bad block.
further performance hits are likely due to this message:
Microsoft-Windows-Kernel-Processor-Power 6 - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware.

This suggests that the system isn't operating at peak performance. More information on this message can be found here:
https://social.technet.microsoft.com/wiki/contents/articles/3565.event-id-6-microsoft-windows-kernel-processor-power.aspx

While it's possible that any of these issues could cause longer than average scans, the fact that we see all three combined go some ways to explain the issues here. I'd consider looking into the disk and CPU settings, as well as the detection.

Thanks,
Lucas Moore
Webroot Sr. Global Escalation Manager

Is there any way to go back to V9.0.24.49 and hang out there w/o being updated to V9.0.26.61 whilst things get sorted out over the next week or so?

TechToc,
I've attempted to gather more information on the slow scan issue by watching the Webroot progress bar, CPU and Memory usage.

Prior to starting the scan, average CPU Usage is 0%. All 4 Cores are at 0%. Page File Usage History indicates 324MB.

As I start the scan, the "Files Scanned" is incrementing rapidly and the Progress bar is moving quickly. Webroot Processes = 31 (1,356 Modules). Looking at CPU Usage history, during this time 3 Cores are at ~1% and one Core is running ~90%. Average CPU Usage is 25% to 29%. Page File Usage History indicates 385MB.

At 1m 44s with 8143 Files scanned and the Progress bar at 41%, the scan slows dramatically. Files scanned increments very slowly. At this time, the 3 Cores that were at 1% jump to ~20% and the one Core that was running at 90% drops to ~50%. Average CPU Usage is the same at 25% to 29%.

At 7m 42s the Progress bar moves to 42% with 8382 Files scanned. Average CPU Usage is the same at 25% to 29%.

At 10m 5s the Progress bar moves to 43% with 9214 Files scanned. Average CPU Usage is the same at 25% to 29%.

At 12m 45s the Progress bar JUMPS to 99% with 9516 Files scanned and shows "Performing Central Analysis..." Average CPU Usage is the same at 25% to 29%. Page File Usage History indicates 402MB.

At 28m 30s average CPU Usage jumps to 55% and Files scanned is incrementing rapidly. Page File Usage History jumps to 550MB.

At 29m 20s the scan completes with 56,141 Files scanned. It had been in "Performing Central Analysis..." for 16m 35s.

With the scan complete, average CPU Usage drops to 0%. Page File Usage History drops to 350MB.

creakndale

TechToc,
With Windows XP, I don't have Resource Monitor but I did monitored the Networking tab from the Windows Task Manager which measures overall network activity in %. I can't look at WRSA.exe specific network activity but I can see there was very little network activity during the scan. I see some tiny blips (bursts) in Network activity during the 30 minute scan. My computer is connected to the network via ethernet cable (not Wi-Fi) and I have 15Mbps download and 0.8Mbps upload speeds.

0.1% blip when scan starts
0.15% blip when scan is at 42%
0.05% blip when scan starts Performing Central Analysis at 91%
0.1% blip when scan is at 95%
0.2% blip when scan completes (it's the largest amount of network activity but it is still just a tiny blip of activity).

It doesn't appear to be similar to the "Network" graph on your Resource Monitor picture. Mine seems like a lot less network activity.

creakndale

For some unknown reason, today's scan dropped from 30m to 11m 58s. Still slows way down once it reaches 41% but at 70% it speeds back up. At 11m 53s it entered Performing Central Analysis for only 5s completing the scan at 11m 58s. Checked the Software Version thinking I might have been pushed a new version but it's still reporting 9.0.26.61. Still reports Files Scanned >56,000 files.

creakndale