Slow Threat Scan Pre-Scan Operations (Ver 2)

[unbob]

Running MBAM Threat Scan from the Windows Explorer context menu to scan a single file is always extremely slow on my PC. For example, a 151kb text file scan takes 4min 45sec. The actual file scan takes only 2 seconds while the Pre-Scan Operations runs for 4min 43sec.

This problem has persisted for at least several months and apparently began after I installed MBAM version 2.

I am running Win7 x64 with MBAM Home Premium v2.1.8.1057.

Is this a known problem? Is there a fix? Thx, Rob

[1PW]

Hello unbob:
 

Is this a known problem?

 
This is not a problem at all.

 

The Explorer Context Menu based scan is much like any MBAM Scan in that the system's present processes and memory integrity must first be favorably established before the file in question can be scanned and an accurate declaration provided.

 

Cheers

[dprout69]

Same here... I don't know what changed between 1.75 and 2 but it's painfully slow

[Firefox]

As already mentioned by 1PW above, this is by design and there is no issue with the time it takes to scan a file when your right click on it.  This is by design.

 

That being said, single file scanning (although it can be done with Malwarebytes) is really the job for your antivirus program.

[dprout69]

As already mentioned by 1PW above, this is by design and there is no issue with the time it takes to scan a file when your right click on it.  This is by design.

 

That being said, single file scanning (although it can be done with Malwarebytes) is really the job for your antivirus program.

 

Why is single file scanning really a job for your antivirus? 

[Firefox]

Because your antivirus is your first level of defense. If the file is malicious it will detect it as soon as you access the file. Malwarebytes detects on execution of the file.

You can scan with both if you like, you just need to be aware that Malwarebytes will have to load its database first so it will take a little longer to scan one single file.

[unbob]

Hello unbob:

 

 

This is not a problem at all.

 

The Explorer Context Menu based scan is much like any MBAM Scan in that the system's present processes and memory integrity must first be favorably established before the file in question can be scanned and an accurate declaration provided.

 

Cheers

So, if I understand correctly, when I scan an individual file I'm actually running a "system" scan (all processes and memory) prior to the actual file scan? If true, is this process documented and explained somewhere?

 

What I'm really trying to do is scan a file immediately after downloading to ensure it's "clean". Is there a better way to accomplish this?

[Porthos]

What I'm really trying to do is scan a file immediately after downloading to ensure it's "clean". Is there a better way to accomplish this?

 

I have posted this several times to people like you and get crucified each time but it is what I use and recommend to others even if they dont like my opinion.

 

https://www.virustotal.com/en/documentation/desktop-applications/

[daledoc1]

Hi:
 

So, if I understand correctly, when I scan an individual file I'm actually running a "system" scan (all processes and memory) prior to the actual file scan?

No, as previously explained, AFAIK it is not conducting a complete "system scan".  It is loading and verifying the database and conducting other necessary pre-scan tasks.
I presume the exact details of the programming for that are proprietary, so they are not published.
 

What I'm really trying to do is scan a file immediately after downloading to ensure it's "clean". Is there a better way to accomplish this?

Yes, as previously explained, you might use your AV for the task to which it is better suited.
It's fine to use MBAM for a second opinion, bearing in mind that there are many file types that MBAM does not target.  But, yes, one needs to wait for MBAM to complete its pre-scan operations before it will scan the file.
 
If you need further assistance with this, then it would help to know a bit more about the system.
Please read the following and attach to your next reply the 3 requested logs - Diagnostic Logs (the 3 logs are: FRST.txt, Addition.txt and CheckResults.txt)

 

Thanks,

[unbob]

I have posted this several times to people like you and get crucified each time but it is what I use and recommend to others even if they dont like my opinion.

 

https://www.virustotal.com/en/documentation/desktop-applications/

Agreed - VirusTotal is a service I've used and trust. However, I only use it for analyzing URLs since I connect to the 'net solely via a cellular mobile network and downloading/uploading files can be cost prohibitive.

[unbob]

Hi:

 

No, as previously explained, AFAIK it is not conducting a complete "system scan".  It is loading and verifying the database and conducting other necessary pre-scan tasks.

I presume the exact details of the programming for that are proprietary, so they are not published.

 

Yes, as previously explained, you might use your AV for the task to which it is better suited.

It's fine to use MBAM for a second opinion, bearing in mind that there are many file types that MBAM does not target.  But, yes, one needs to wait for MBAM to complete its pre-scan operations before it will scan the file.

Whatever. But thanks for your reply nonetheless. Now that I know MBAM is functioning "as designed", I will cease using it to scan files due to it's extremely long run time.

FWIW, I use Avira AV and it will scan mbam-check-2.1.1.1001.exe (1.6mb) in less than 2 seconds while the MBAM scan runs over 5 minutes! How can that be?

I'll leave MBAM installed on my PC on the assumption that it must be doing something good and the fact that I paid for it. But given how long MBAM requires to scan a single file - I do wonder if it's a resource hog on my system