Jump to content
LuvKhephren

Custom scan always shows "objectsScanned" : 78

Recommended Posts

For every custom scan performed the number of objects scanned/items scanned always equals 78. Is this normal and I've just never noticed it before?

Share this post


Link to post
Share on other sites

All of the custom scans that I referred to in my original post were initiated from the right click context menu in either File (Windows) Explorer or Multi Commander. The possible motive for your question made me initiate a scan from the Scan tab within Malwarebytes to see if it made a difference. It didn't. The files I tested on were rkill.exe, tdsskiller.exe , and AdwCleaner.exe as d/l'ed from a popular website and stored for each test in a folder by themselves. The right click method was performed on the folder itself to duplicate conditions with the Scan tab method (i.e. a single file in a folder). Also Scan Memory Objects and Scan Startup and Registry Settings were disabled for the same reason.

AdwCleaner folder.JPG

AdwCleaner.exe right click.JPG

AdwCleaner.exe. scan tab.JPG

rkill folder.JPG

rkill.exe right click.JPG

rkill.exe. scan tab.JPG

tdsskiller folder.JPG

tdsskiller.exe right click.JPG

tdsskiller.exe. scan tab.JPG

Share this post


Link to post
Share on other sites

Addendum to above: However right clicking and scanning the file directly still obtains 78 as the number of objects/items scanned. Also in the above post the second, fifth and eighth images are the right click method and the third, sixth and ninth are from the Scan tab.

Share this post


Link to post
Share on other sites

Thanks for the extra clarification. I just tested that to try and see if I could replicate, but was unable to. Can you please do the following?

  1. Download Procmon from https://live.sysinternals.com/procmon.exe
  2. Launch ProcMon
  3. Accept the EULA
    • If you've ran ProcMon before, you may get a box with some green and red checkmarks. Click reset and Ok on this box
  4. There should be a lot of data showing up in the ProcMon screen now
    • If not, click the magnifying glass near the top which should make data show up
  5. Leave ProcMon running, and run the same scan as before on one of your folders (please only run one scan)
  6. Once the scan is done, open ProcMon and click the magnifying glass near the top to stop capturing data
  7. Press the Save button and save the log file somewhere
  8. Right click the log file from Step 7 and choose Send To -> Compressed (Zipped) folder
  9. Attach the zip file to your reply
    • If the file is too large, please use wetransfer.com to send the file to dcollins@malwarebytes.com 

Share this post


Link to post
Share on other sites

I am so sorry, I can't believe it's been ten days. I followed your instructions and attached the procmon file. Now the scan is showing 61 objects whenever a file is scanned. Thanks for your patience (at least you didn't close the thread).

Logfile.zip

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.