Very, very slow full system scan on Windows XP SP3

[apemyr]

On WIndows XP SP3 with AVG2014 (free)  and Rapport I've been regularly running MBAM (free) for several years. 

 

Recently (last couple of weeks' updates?) the full scan that I do overnight (usually takes about 3 hrs) has slowed right down. Last night it ran for 11 hrs, counting 170000 files (it normally reaches about 500000 when completed), before I stopped it. (I had previously ran ccleaner.)

 

After booting in safe mode it ran to completion in a little over 2 hrs reporting no errors.

 

Should I now always run MBAM in safe mode? Or switch off Rapport & AVG prior to doing a scan?

I've never previously had to do this.

 

Any help much appreciated.

 

Thanks,

Daf

 

 

 

 

 

 

[daledoc1]

Hi:

 

Welcome.
 
Scan times can vary widely, depending on the number of files on the system (data, temp files, etc), other scanned items (registry entries, etc), hardware, and software (especially conflicts with anti-virus), as well as file corruption, infection, etc.

Also, since version 1.75 was released last year, MBAM now scans archived files (e.g. zip, rar) -- unpacking and scanning them can lengthen scan times. If you have a lot of those types of files, you can try disabling that feature, to see if that changes the scan times.

 

Re: Safe Mode scanning -- NO, MBAM should always be run in Normal Windows mode, unless extenuating circumstances such as severe infection prevent it.

 

EDIT: I forgot to mention that routine FULL scans are neither necessary nor recommended.  Quick scans are sufficient under most conditions: What is the difference between the three scan types in Malwarebytes Anti-Malware?  A better strategy would be the small investment in MBAM PRO, which provides real-time protection alongside your anti-virus.  It's preferable to prevent infection, rather than trying to remove it from your system.  <just a thought>

 

Please follow the instructions below and post back with the following logs as attachments to your next reply:

• Checkresults.txt from mbam-check
• A couple of protection logs, if you have them
• DDS.txt from DDS
• Attach.txt from DDS

These will provide the MBAM staff with a bit of information that will help them to pinpoint the cause and the solution for you.

Thanks!

daledoc1

-----------------------------

Step 1 -- Create an mbam-check log:

Download mbam-check.exe from HERE and save it to your desktop.
Double-click on mbam-check.exe to run it, it should then open a log file.
Please attach to your next reply the CheckResults.txt file which should now be located on your desktop.

Then, if you can, please also upload your 3 most recent Protection module logs:

In Windows XP, these logs are located in: C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs
In Windows Vista/7/8, these logs are located in: C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\Logs



Step 2 -- Run DDS and create 2 logs:

Download DDS from one of the locations below and save it to your Desktop:
dds.scr
dds.com


Temporarily disable any script blocker if your Anti-Virus/Anti-Malware has it.
How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs

Once it is downloaded, you can disconnect from the Internet and disable your Ant-Virus temporarily if needed.
Then double click dds.scr or dds.com to run the tool.
Click the Run button if prompted with an Open File - Security Warning dialog box.
A black DOS console should open and run for a moment.

•  
• When done, DDS will open two (2) logs:
• • DDS.txt
  • Attach.txt

• Save both reports to your desktop
• Please attach both of the following logs to your next reply: DDS.txt and Attach.txt
  --->You can ignore the note about zipping the Attach.txt file in most cases.

[apemyr]

Hi daledoc1,

Thanks for your instant response!

 

I'm attaching 3 files as requested. 

 

There were no Protection module logs in the directory specified. The folder was empty.

 

Daf

 

CheckResults.txt

attach.txt

dds.txt

[daledoc1]

 

There were no Protection module logs in the directory specified. The folder was empty.

 

 

 

Thanks for the logs - one of the staff/experts will be along to review them and advise you.

(There won't be any "protection logs" if you are running MBAM Free, so that's OK.)

 

Thanks for your patience,

 

daledoc1

[AdvancedSetup]

Based on the Event Logs the computer appears to possibly be infected.

 

I would suggest following the advice from the topic here Available Assistance for Possibly Infected Computers and having one of the Experts assist you with looking into your issue.

Thanks

 

==== Event Viewer Messages From Past Week ========.17/01/2014 09:00:58, error: Service Control Manager [7026]  - The following boot-start or system-start driver(s) failed to load:  AFD Avgdiskx AVGIDSDriver AVGIDSShim Avgldx86 Avgtdix Fips intelppm IPSec MRxSmb NetBIOS NetBT RasAcd Rdbss Tcpip17/01/2014 09:00:58, error: Service Control Manager [7001]  - The TCP/IP NetBIOS Helper service depends on the AFD Networking Support Environment service which failed to start because of the following error:  A device attached to the system is not functioning.17/01/2014 09:00:58, error: Service Control Manager [7001]  - The IPSEC Services service depends on the IPSEC driver service which failed to start because of the following error:  A device attached to the system is not functioning.17/01/2014 09:00:58, error: Service Control Manager [7001]  - The DNS Client service depends on the TCP/IP Protocol Driver service which failed to start because of the following error:  A device attached to the system is not functioning.17/01/2014 09:00:58, error: Service Control Manager [7001]  - The DHCP Client service depends on the NetBios over Tcpip service which failed to start because of the following error:  A device attached to the system is not functioning.17/01/2014 09:00:58, error: Service Control Manager [7001]  - The AVGIDSAgent service depends on the AVGIDSDriver service which failed to start because of the following error:  A device attached to the system is not functioning.17/01/2014 09:00:37, error: DCOM [10005]  - DCOM got error "%1084" attempting to start the service netman with arguments "" in order to run the server: {BA126AE5-2166-11D1-B1D0-00805FC1270E}17/01/2014 09:00:27, error: DCOM [10005]  - DCOM got error "%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}13/01/2014 10:57:50, error: System Error [1003]  - Error code 00000050, parameter1 e33ed01c, parameter2 00000000, parameter3 bf84b3d0, parameter4 00000001.10/01/2014 09:26:11, error: Print [23]  - Printer Lexmark T420 PS3,0 failed to initialize because a suitable Lexmark T420 PS3 driver could not be found.10/01/2014 09:26:11, error: Print [23]  - Printer Lexmark Optra T616,1 failed to initialize because a suitable Lexmark Optra T616 driver could not be found.10/01/2014 09:26:11, error: Print [23]  - Printer \\dogmatix\grommit,2 failed to initialize because a suitable Lexmark T420 driver could not be found..==== End Of File ===========================