Custom scan always shows "objectsScanned" : 78

[LuvKhephren]

For every custom scan performed the number of objects scanned/items scanned always equals 78. Is this normal and I've just never noticed it before?

[dcollins]

How are you performing your custom scan?

[LuvKhephren]

All of the custom scans that I referred to in my original post were initiated from the right click context menu in either File (Windows) Explorer or Multi Commander. The possible motive for your question made me initiate a scan from the Scan tab within Malwarebytes to see if it made a difference. It didn't. The files I tested on were rkill.exe, tdsskiller.exe , and AdwCleaner.exe as d/l'ed from a popular website and stored for each test in a folder by themselves. The right click method was performed on the folder itself to duplicate conditions with the Scan tab method (i.e. a single file in a folder). Also Scan Memory Objects and Scan Startup and Registry Settings were disabled for the same reason.

[LuvKhephren]

Addendum to above: However right clicking and scanning the file directly still obtains 78 as the number of objects/items scanned. Also in the above post the second, fifth and eighth images are the right click method and the third, sixth and ninth are from the Scan tab.

[dcollins]

Thanks for the extra clarification. I just tested that to try and see if I could replicate, but was unable to. Can you please do the following?

1. Download Procmon from https://live.sysinternals.com/procmon.exe
2. Launch ProcMon
3. Accept the EULA
   • If you've ran ProcMon before, you may get a box with some green and red checkmarks. Click reset and Ok on this box
4. There should be a lot of data showing up in the ProcMon screen now
   • If not, click the magnifying glass near the top which should make data show up
5. Leave ProcMon running, and run the same scan as before on one of your folders (please only run one scan)
6. Once the scan is done, open ProcMon and click the magnifying glass near the top to stop capturing data
7. Press the Save button and save the log file somewhere
8. Right click the log file from Step 7 and choose Send To -> Compressed (Zipped) folder
9. Attach the zip file to your reply
   • If the file is too large, please use wetransfer.com to send the file to dcollins@malwarebytes.com 

[LuvKhephren]

I am so sorry, I can't believe it's been ten days. I followed your instructions and attached the procmon file. Now the scan is showing 61 objects whenever a file is scanned. Thanks for your patience (at least you didn't close the thread).

Logfile.zip