Hello! If you have sent info with "in product feedback" system, there is no need to duplicate here. Colleagues will investigate issue with the help of your sent reports
<p>@timur-born, hello!</p>
<p>It's by design. Scan has 4 running processes so 4 logical threads is enough. We don't plan to use all PC's resources for tasks,</p>
Hello! Traces are needed because I cannot reproduce your issue in test lab, so developers cannot analyze problem with only pictures.
Please, try new 21.5.5.199 build, is problem is still there, add traces and I will create a bug
Sorry for long reaction time. I had contacted with colleagues, and they said there is no need for second report. KES and Kaspersky use one code "core", so problem will be fixed once for all apps.
<p>I reproduced this using Windows Defender. It seems that saving the AV cache files in ProgramData is mostly responsible for the increase of used up System Restore space. So the first scan sees the largest increase and consecutive scans show less increase and less SYSTEM write operations.</p>
<p>Test using DisableLastAccess seem to indicate that growth and writes are higher when last access times are enabled. It also seems that not only are some folder access times not updates, but also some file access times. This needs more testing, though.</p>
<p>And then there is still the case where I saw AVP.exe write to scanned folders directly. This does not happen every time and I have to catch it again.</p>
<p>Apart from all that highest drive utilization seem to happen when AVP writes its tempio files. It would be interesting to see what happens if AVP would write all its temp files and preliminary cache files to appdata/local/temp or Windows/temp and only copy finished cache files over to ProgramData.</p>
<p>@timur-born said in <a href="/post/14581" target="_blank" rel="noopener">"Groupy" software causes trace file being spammed by IsExcluded</a>:</p>
<blockquote>PS: When I share my trace-file here, can every user see the link and thus access it unless I make the report "private"?</blockquote>
<p>yes. it's shown for every one.</p>
<p>You can zip your traces and protect it wit password (which can be sent to me in private messages) </p>
<p>or use likns with password protection. (<a href="https://cloud.qainfo.ru/" target="_blank" rel="noopener">https://cloud.qainfo.ru/</a> - is our cloud, you can ask for login @ILYA.ZADONSKY in private messages</p>
<p>Still a bit strange, because from my last installations I remember being asked about the license during the installation process. So I wonder how I could have started KES without activating the license?</p>
<p>The original issue of KES scanning slower than KIS was solved by disabling the trace files. So there is nothing more to analyze or is there?</p>
<p>KES/KIS only using a limited number of CPU threads/cores seems to be a deliberate choice by your developers. You would have to ask your developers if this is by design or maybe a bug. Additional threads are used for real-time scans so overall KES is capable of using more, it just does not do so for on-demand scans.</p>