Jump to content

Custom scan always shows "objectsScanned" : 78

Recommended Posts

All of the custom scans that I referred to in my original post were initiated from the right click context menu in either File (Windows) Explorer or Multi Commander. The possible motive for your question made me initiate a scan from the Scan tab within Malwarebytes to see if it made a difference. It didn't. The files I tested on were rkill.exe, tdsskiller.exe , and AdwCleaner.exe as d/l'ed from a popular website and stored for each test in a folder by themselves. The right click method was performed on the folder itself to duplicate conditions with the Scan tab method (i.e. a single file in a folder). Also Scan Memory Objects and Scan Startup and Registry Settings were disabled for the same reason.

AdwCleaner folder.JPG

AdwCleaner.exe right click.JPG

AdwCleaner.exe. scan tab.JPG

rkill folder.JPG

rkill.exe right click.JPG

rkill.exe. scan tab.JPG

tdsskiller folder.JPG

tdsskiller.exe right click.JPG

tdsskiller.exe. scan tab.JPG

Link to post
Share on other sites

Thanks for the extra clarification. I just tested that to try and see if I could replicate, but was unable to. Can you please do the following?

  1. Download Procmon from https://live.sysinternals.com/procmon.exe
  2. Launch ProcMon
  3. Accept the EULA
    • If you've ran ProcMon before, you may get a box with some green and red checkmarks. Click reset and Ok on this box
  4. There should be a lot of data showing up in the ProcMon screen now
    • If not, click the magnifying glass near the top which should make data show up
  5. Leave ProcMon running, and run the same scan as before on one of your folders (please only run one scan)
  6. Once the scan is done, open ProcMon and click the magnifying glass near the top to stop capturing data
  7. Press the Save button and save the log file somewhere
  8. Right click the log file from Step 7 and choose Send To -> Compressed (Zipped) folder
  9. Attach the zip file to your reply
    • If the file is too large, please use wetransfer.com to send the file to dcollins@malwarebytes.com 
Link to post
Share on other sites

  • 2 weeks later...

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.