Is this normal for Malwarebytes scanning time (additional question included)?

[FlagJackGuy]

Good day, everyone. I'll try to be as direct as possible. I have two questions. I ask that you answer them separately, as I have them written, because I don't want to accidentally mix any details I receive.  The first is related to the scan-time for Malwarebytes. The second is related to scan-types. I'm pretty new to Malwarebytes. I've only used it once before on another computer (which I still have, but am not currently using). 

 

Before I start, I'll give a few basics about my computer.

 

HP Compaq

Duo-Core Processor

2 GBs of RAM

Windows 7 Professional

Avast! Free Antivirus

 

Note: I recently had this computer wiped clean and the O.S. re-installed because of a suspected virus. When I got it back from the technicians, and re-connected it (about 6 days ago), I uninstalled Microsoft Security Essentials and downloaded Avast! Free Antivirus 2015 and the latest free version of Malwarebytes Anti-Malware. I have run daily scans with both since. They always give clean results. I try to practice good browsing habits, too. The only two non-default programs I use, that I know of besides Malwarebytes and Avast!, are Google Chrome and Skype. So, my point is that I don't have a ton of files on my computer, a ton of photos or a ton of programs. Since it was wiped clean recently, that's to be expected.

 

Question 1: The first time I ran a scan with Malwarebytes, it was a threat scan, and it took around 20+ minutes. I found that to be unusually short, but I'm not very familiar with Malwarebytes either. I have run one scan per day since downloading it (about 6 days ago). After the first time, the scans became gradually shorter, until now, it takes a little more than 7 minutes to complete a threat scan. Is this normal? It seems to be a very short scan-time. Is this a cause for concern?

 

Question 2: What is the most thorough and full scan available on the free version of Malwarebytes Anti-Malware? On the scan options, I see "Threat Scan", "Custom Scan" and "Hyper Scan" (the last only available on the premium version). My question here is: which scan, on the free version, is the most thorough and the fullest, and how often should I run that scan?

[daledoc1]

Hello and :

Question 1:
Short answer - Yes, it is normal, because of "disk caching".
Longer answer: It is normal for subsequent scans during the same Windows user session to take a bit less time than the first one, because of disk caching.
Long answer:  There are many, many factors that determine scan times:
 
Size of disk
Disk type
Disk speed
Disk caching
CPU speed
Controller type and speed
Operating System version
Number of files (including temp files!)
Number of folders
Number of archived files such as zip, rar, sfx, etc. (if this is enabled)
Rootkit scan or not (if this is enabled)
PUM/PUP scans
Other security programs running at the same time that may potentially be monitoring all file accesses by any other process.
Drive integrity - if a drive is failing it can take a long time to ignore and bypass sectors on a disk or simply fail period and hang the scan.
Other ongoing disk I/O processes
System infection
MBAM database size
 
Question 2:
The different types of scans are explained HERE

 

Hyper scan is available only to paid, PREMIUM (and Trial) users and is not routinely needed or recommended -- if anything is found, a subsequent Threat scan will be needed anyway.
THREAT scan is the most important and most useful scan -- it is the one that ought be run on a regular basis (daily is the default setting now in 2.0). The Threat scan is the most useful, recommended, default scan type, because it looks in the areas where live, active malware may hide.
Custom depends on what drives, folders and files are selected -- routine use of a "full" system scan is neither necessary nor recommended, as it's a task better suited to your antivirus, and routine use of such full system scans could cause unnecessary disk wear.  It's not unreasonable to run a full, custom scan of all mounted volumes and drives once, upon first installing MBAM, and perhaps rarely after that. 

More info about v2.1.8 HERE
Version 2.1.8 Release History HERE
User Guide ONLINE
User Guide PDF
FAQ: Common Questions, Issues, and their Solutions

 

Thank you,

[FlagJackGuy]

Thank you for your reply. I appreciate your thorough response. It was quite informative. I have a couple more questions.

 

Question 1: I should run the threat scan on a daily basis with the free version Malwarebytes, yes?

 

Question 2: Should I run a daily full scan with Avast!, too, or would that also place unnecessary wear on my disk?

[daledoc1]

Thank you for your reply. I appreciate your thorough response. It was quite informative. I have a couple more questions.

 

Question 1: I should run the threat scan on a daily basis with the free version Malwarebytes, yes?

That's up to you.

For the record, any scan -- whether with MBAM or your AV, and whether Free or Paid -- can only find and remove malware that has already made it past your real-time defenses onto the system.

A safer and more robust strategy might be to bolster the real-time protection to help PREVENT infection in the first place.

That could entail -- among other considerations -- adding the layered protection of MBAM Premium alongside your free AV, upgrading to a paid AV product (with better features, protection and/or support), and other strategies.

Here are some detailed resources:

The complexity of finding, preventing, and cleanup from malware

Answers to common security questions - Best Practices

So how did I get infected in the first place?

How did I get infected?

List of well known antivirus products

Six tips to help you stay safer online

 

 

Question 2: Should I run a daily full scan with Avast!, too, or would that also place unnecessary wear on my disk?

Again, that's up to you and the same considerations would apply.

If you have specific questions about Avast, then we would need to wait for a forum member more familiar with that product to weigh in, or you might want to consult with users/staff via Avast support, Avast user forum, or other resources.  In general, though, daily deep or full scans of the entire system would not be the norm.

 

Thanks again,

[DonJuane]

I haven't used MWB in about 6 months or so.   Today I downloaded the most recent version, updated the database and hit SCAN.   The scan compoleted in 10 minutes with 418,465 files scanned.  I tried it again and it ran in 9.5 minutes!  

 

The software has never scanned that fast.   On most computers it takes a couple of hours and on mine (very fast) it would take 45 minutes to an hour in the past.

 

What changed?    I don't see how it scans everything that fast.   All 3 detection options have been checked which were the only settings I saw I had control over.

 

This is a snipit from the log (free version):

 

datetime="2015-11-09T21:43:09.484247-06:00" LoggingEventType="1" severity="debug" toVersion="2015.11.8.2" name="Remediation Database" fromVersion="2015.9.16.1"/>

[daledoc1]

Hello and , @DonJuane:
 
As explained in Reply #2, many different variables impact scan times.
And it is very normal for a repeat scan performed during the same Windows user session to be a bit faster than the previous one, because of disk caching.
 
In order for us to better help you, if you need further assistance, I suggest the following, please:
 
1. First, please start your own, new, separate topic here in the forum topic using this clickable button.
 
2. When you do, it would help if you could please ATTACH to that new post the following logs:

A. The 3 diagnostic logs (FRST.txt, Addition.txt and CheckResults.txt) from this tutorial: Diagnostic Logs

AND

B. A SCAN log or two (directions for locating and exporting the logs for posting here are at the bottom of this reply).

 

Thanks!
---------------------


How to get SCAN logs or PROTECTION logs:
(Export log to save as a txt file for posting in the forum when requested)

• Open MBAM.
• Click on the HISTORY tab > APPLICATION LOGS.
• Double-click on the SCAN LOG which shows the date and time of the scan just performed (or the one you are asked to post), OR on the PROTECTION LOG showing the detection you are reporting (or the one that you are asked to post).
• Click EXPORT.
• Click TEXT FILE (*.txt)
• In the "Save File" dialog box which appears, click on DESKTOP.
• In the FILE NAME box, type a name for your saved scan or protection log.
• A message box named "File Saved" should appear, stating that "Your file has been successfully exported".
• Click OK.
• Please attach the saved log to your next reply here in this thread.

[FlagJackGuy]

Hello and good day, everyone. I'm currently using Malwarebytes Anti-Malware Home (Free) 2.2.0.1024. 

 

I've recently run a virus scan using both Malwarebytes and Avast Antivirus, both of which detected no infections. I run scans regularly, at least once a week, sometimes twice a week. They always come back clean. 

 

My concern was caused by a sudden change in the time it takes Malwarebytes to scan my computer.

 

Normally, a full threat scan takes around 21 minutes to complete on my computer. I have not made any recent changes to my computer, but today, the same scan, a threat scan, took around 8 minutes to complete. I found this alarming and confusing, and I want to know if anyone has a potential explanation or has had a similar experience. Is this a cause for alarm, and if so, what can I do about it?

 

Please, stay safe, and be well.

[daledoc1]

Hello and welcome back:
 
I think this was discussed at length in your other topic here ?

But, to refresh the explanation...
 
MANY, MANY factors contribute to scan times (some of which can be easily modified by the user, others not).

No two scans on the same computer, even a few minutes apart, will be exactly the same.
 
These many factors include:

Size of disk
Disk type
Disk speed
Disk caching
CPU speed
Controller type and speed
Operating System version
Number of files (including temp files!)
Number of folders
Number of archived files such as zip, rar, sfx, etc. (if this is enabled)
Rootkit scan or not (if this is enabled)
PUM/PUP scans
Other security programs running at the same time that may potentially be monitoring all file accesses by any other process.
Drive integrity - if a drive is failing it can take a long time to ignore and bypass sectors on a disk or simply fail period and hang the scan.
Other ongoing disk I/O processes
System infection
MBAM database size
 

 
>>If you are performing multiple scans during the same Windows user session (in other words without having shut down the computer), then it's normal for subsequent scans to take less time than the first.
>>If you have run any sort of "disk cleanup" or temporary file cleaner (such as CCleaner), that, too, might account for a faster scan.

>>There may be other factors from the list, as well.
 
 
If you need more help with this, we could better assist if we knew a bit more information about your system and about the scans.
So, if possible, please attach to your next reply the following items:

• The 3 logs from this pinned topic: Diagnostic Logs; AND
• An MBAM scan log or two -- please let us know if you need help attaching and uploading it.

Thanks,

[FlagJackGuy]

Good day, everyone. I'm using Malwarebytes Anti-Malware (Free) 2.2.0.1024. My computer is a duo-core HP with Windows 7 Professional and 2 GB of RAM.

 

I've been using Malwarebytes for at least 4.5 months now. It's performed very well, thus far. However, I have a concern. I only ask that you read fully and carefully to avoid misunderstanding.

 

Normally, I run threat scans with Malwarebytes. I used to run them twice a week. Now, I run them roughly once a week. The threat scan is the only type of scan I run. 

 

Normally, the threat scan takes around 28 minutes. This is what I've come to expect.

 

However, about 17 minutes ago, I updated Malwarebytes, and I ran a threat scan. The scan took about 6 minutes to complete. 

 

This is NOT normal. I have rebooted and re-started my computer multiple times since my last scan over a week ago, so I know it's not because of the fact that I haven't rebooted.

 

I know that multiple factors can contribute to how long a scan takes. So, please, don't misunderstand my question. I'm not asking why scan times take as long as they do. I am asking what could cause the scan-time to drop from 28 to 6 minutes. Keep in mind that I have re-booted my computer multiple times since the last scan (before tonight), which was over a week ago. So, it's not because of that.

Is there anything to be concerned about when scans take 28 minutes on a regular basis, and then, suddenly, take 6 minutes to complete? Again, I had re-booted my computer multiple times before my most recent scan, so it's not because of that.

 

Any helpful information would be appreciated.

[1PW]

Hello FlagJackGuy:
 
Before valuable records are possibly deleted, please attach the text (.txt) report files (do not Copy & Paste) of the Scan Logs that will document what you are stating:
 
Reference: Malwarebytes Anti-Malware Users Guide - Application Logs - Scan Log
 
MBAM GUI > History > Application Logs > Scan Log of date/time of interest > Export > Text file (*.txt)
 
Please make one of the Scan Log text report files of the one that took 6 minutes and one or two Scan Logs that immediately precedes the 6 minute one that documents previous Threat Scan times.
 
Then, staffers may wish to see the following diagnostic reports:

• Please read the topic Diagnostic Logs and then individually ATTACH the 3 requested logs in your next reply to this thread only.
• The 3 files, from Step 1, to be individually ATTACHED from your desktop are CheckResults.txt, FRST.txt and Addition.txt. Please do not Zip or Copy and Paste them into a reply. Please do not alter, any FRST categories as they are pre-configured for this forum.

Note: Please do not attach/send .xml files.

Thank you.

[FlagJackGuy]

Before I do this, I wish to know: I am require to download the Farbar Recovery Scan Tool? This is a safe program, and it's absolutely necessary? 

[AdvancedSetup]

The tool is very safe and does not make any changes to your computer unless told to by using a fix script. It will create backups of all of your registry hives and then do a system scan looking for issues. It has been downloaded and used now over a million times from the Web. Because the tool is made using AutoIT which does not allow antivirus software to decrypt and read it some will flag it as a threat but it is quite safe to download and use. If your antivirus cries then temporarily disable it. If your using IE and it's Smart Screen filter complains then temporarily disable it or ignore and tell it to download.

 

Just make sure you click on the right download link and not one of the advertisements.

 

Once the script has completed then upload the logs and make sure your antivirus is running again if needed.

 

Thank you

[1PW]

This is a safe program, and it's absolutely necessary?

Hello FlagJackGuy:

Your concern for applications you are not familiar with is indeed appreciated.

 

Yes - FRST/FRST64 is perfectly safe as are Farbar's other applications. FRST/FRST64 is constantly called upon in this forum to provide insight regarding your computer and its OS & applications.

 

Thank you for any cautious computer security practices.

[FlagJackGuy]

I apologize for my late reply. I am not completely comfortable, in honesty, downloading unfamiliar software onto my computer at the moment. I understand that I'm the one who came here for help and that no one is trying to mislead me. I just don't want to potentially further complicate whatever may be wrong with my computer or program. I do, however, have the scan logs which were requested.

 

These logs are from the dates of December 9th, then December 14th and then January 6th, in that order. They are attached in that order, and they confirm the time allotted in each.They show how the scan times normally took around 23 minutes, then suddenly started taking around 6 minutes.
 

You may also want to know that I have not made any major changes to my computer recently. The only change I have made was the uninstallation and re-installation of a 3-D chatting program called IMVU. It allows users to instant message each other in a 3-D virtual world. I always run this program inside of a program called Sandboxie. For those who don't know, Sandboxie is a sandboxing program which allows you to run programs in an environment isolated from the rest of your computer so the program can make no permanent changes to your computer. Running IMVU in Sandboxie allows me to delete IMVU's cache files each time I close it, to my knowledge. About a week and a half ago, I uninstalled and re-installed the IMVU program. I don't know if this somehow had an effect on scan times, however.

 

The logs are attached

Scan Log File 1 (December 9th).txt

Scan Log File 2 (December 14th).txt

Scan File Log 3 (January 6th).txt

[1PW]

Hello FlagJackGuy:

 

Almost 121,000 fewer objects were scanned on January 6th as opposed to December 14th.

 

The scan times expended will not be precisely proportional & linear.

 

Do you remember any scheduled/unscheduled clean-ups between December 14th and January 6th not documented above?