Threat scan gets stuck on file for X minutes

[Bren0101]

Hello. The issue I have is that my scan take a long time compare back a few years ago when I first got malwarebytes premium the scan was around avg of 5mins for a scheduled threat scan with rootkits and archives enabled and now has progressivly gotten worse.
The scan starts fine and goes through scanning for rootkits, memory, startup items fine and then it goes to scanning file system where is it jumps from 80,000 to around 180,000~ files scanned it goes extermly slow and then slowlys scans through then after waiting 20 or minutes of it scanning slow it picks up pace and around goes to around 240,000~ file and goes slow again and after 5-8minutes jumps to 318,000 files and finish the scan. And it slowly scan through the files, it often gets stuck on a file for period of time the amount changes and the suddenly jumps the amount of files for example from 180,000~ to 240,000~ and then gets stuck there again. And during the process malwarebytes service in task manager uses 0.2MB/s and disk shows usage at 50% process and 100% in performance for disk 1

Basically how do I improve the scan time of my computer, as I tried to a full scan and it took 5 hours to scan 854,000 files before I stopped it, same issue as mentioned above it starts off fast and then hits around 400,000 files scanned and slows down to a crawl scanning. I did a full scan with windows defender it did 2.1million files in 30minutes so am not sure why it just malwarebytes scans that take so long. 
I've used malwarebytes adwcleaner 8.4.2 and the same still happens with the scan was hoping it would help fix it.

Windows version is 22H2
malwarebytes is 5.1.5.116

[Bren0101]

Using the Malwarebytes support tool I have used clean install option to remove and reinstall malwarebytes and am having the same issue with the scan time. I have manual scan performance impact set to prioritize scans option for faster scans and during this time I have no program opens on my pc expect malwarebytes and are not activitly using during the scan period. Once the current scan is done after reinstalling malwarebytes, I will run a scan with manual scan performance to off and see if it improves the scan.

[1PW]

Hello @Bren0101 and :

Please run a MB5 threat scan and If no detections were found, click on the Save results drop-down, then the Export to TXT button.

Save the file as a Text file to your desktop or other location you can find and attach that log on your next reply.

Thank You.

 

[Bren0101]

hi @1PW, i did a new scheduler threat scan with rootkit and archive enabled scan took around 3 minutes to get from checking for updates to scanning file systems where it went from 80k~ to 178k~ and slowly scanning through to around 190k~ over 16 minutes (total time 19m) wheere it jumped to 248k~ scan and again slowly scanning up to 275k after 24m then shot to 314,930 and finished after. The scan found had no detections as wellMalwarebytes Scan Report 2024-06-21 095800.txt and here is the scan exported

[1PW]

Hello @Bren0101:

Malwarebytes staff recommends the Rootkits option setting remain at its default of disabled.

It is recommended you return all the -Scan Options- to their installed default. RTP will continue to protect your system and watch for Rootkits when malware is launched. Leave the Rootkit setting at disabled unless requested by Malwarebytes Staff.

Try the recommended settings and reply to this topic with the new scan time.

Thank you

Edited June 21 by 1PW

[Bren0101]

Hi again @1PW Between the reply I ran a second secheduler threat scan with rootkit and archive enabled with the manual scan performance impact set to priritize system and it took 20:25 to complete 4 minutes faster than scan with prioritize faster scans option which is odd. 

With your request I have also ran a new secheduler threat scan as you said with the options left as is (I ticked quarantine all threats on). And it took 2m 46s to complete with zero detections.

[1PW]

Hello @Bren0101:

I believe you will agree, that was a reasonable scan time.

Thank you.

[Bren0101]

hi @1PW that was a reason time and seems the problem was having rootkit option enabled in the scan. Those scans i did where using the scan scheduler and I just ran a scan by clicking clicking on scanner on the home page and hit scan and scan was doing fine then it got stuck on a file 186,998 after running for around 2 minutes then it got stuck on file number and i let it run until 8mins total scan time has passed then canceled the scan. Am currently doing the same scan again to see if it happens again. This was one of the problems I had with just using this option and why I do scans via the scheduler as I set the time for those scans to 2 minutes a head of my time to do and they dont get stuck

[Bren0101]

Same issue with the second scan, stuck on file 162,075 after roughly two minutes of scanning. I'm currently letting it run to see if anything happens

[Bren0101]

Hi again @1PW the second scan is still running at 12minutes and is still stuck on the same file. Would you be able to help fix this issue as well?

[Bren0101]

Speaking of the devil as I post that comment the scan has now passed that number and is scanning normally and has completed the scan within writing this message. Any idea on why it would get stuck and then go after x amount of timeSpeaking of the devil as I post that comment the scan has now passed that number and is scanning normally and has completed the scan within writing this message. Any idea on why it would get stuck and then go after x amount of time

[1PW]

Hello @Bren0101:

26 minutes ago, Bren0101 said:

Any idea on why it would get stuck and then go after x amount of time

Yes, although I will need to have your topic moved to the Windows Malware Removal Help & Support subforum.

Thank you.

[Bren0101]

How do I move to that section or do I just make a new topic in said section

[1PW]

Hello @Bren0101:

Your topic will be moved for you. Meanwhile, please do not try any solutions of your own. Please check back later.

Thank you.

[Bren0101]

Was told to make a new topic in this section from this topic. Basically malwarebytes get stuck on a file durign threat scan and it will stay there for around 10minutes and then proced to scan normally and finish the scan with zero threats detected

 

[Bren0101]

@1PW ah okay, I just made this before you posted that sorry

 

[Bren0101]

Not sure how long it will take to get help with this, but I am okay to use my computer as normal? This issue of scan getting stuck on a file has been happening for a while, well over a year. And in that time no accounts of my has been taken, my browsers works fine and nothing strange has happened/happening to my pc. Only issue I could point out is that a few months ago I noticed that my computer fans would kick in and increase rpm when my pc was idle and stay like that for a bit however once they did kick in and I noticed I would open task mananger and fans would go back to the idle rpm/speed and make little no noise. Any help would be appreciated

[JSntgRvr]

Disable-Fast-Startup <<<<< Important.
https://forums.malwarebytes.com/topic/299350-disable-fast-startup/

Then please restart the computer and then do the following. <<<<< Important.

WARNING: Do Not click the Repair option under Advanced unless requested by a Malwarebytes support agent or authorized helper

NOTE: The tools and the information obtained are safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

• Download the Malwarebytes Support Tool
• In your Downloads folder, open the mb-support-x.x.x.xxx.exe file
• In the User Account Control pop-up window, click Yes to continue the installation
• Run the MBST Support Tool. The tool also downloads and runs a file called FRSTEnglish. Please allow it to run.
• In the left navigation pane of the Malwarebytes Support Tool, click Advanced
• In the Advanced Options, click Gather Logs. A status diagram displays the tool is Getting logs from your machine 
• A zip file named mbst-grab-results.zip will be saved to the Desktop or on the hidden Public desktop (usually C:\Users\Public\Desktop), please upload that file on your next reply

 

Thank you

[Bren0101]

@JSntgRvr Hello and thanks for taking time to help me. I went to power options followed the guide you linked and I do not have an option to turn fast start on or off as seen in this screen shot. So I just downloaded and ran the support tool linked and here is the zip file attached. I hope this is okay.

mbst-grab-results.zip

[Bren0101]

@JSntgRvr Hi again, I didn't scroll down far enough to see the other methods to disable fast start up, I used method 3 and restarted the system and here are the new attached zip file.

mbst-grab-results.zip

[JSntgRvr]

Welcome 
 
I'll be helping you with your computer.
 
Please read this post completely before beginning. If there's anything that you do not understand, please don't hesitate to ask before proceeding.
 
Please take note of the guidelines for this fix:

• Please note that I am a volunteer. I do have a family, a career, and other endeavors that may prevent immediate responses that meet your schedule. Do note that the differences in time zones could present a problem as well. Your patience and understanding will be greatly appreciated.
• First of all, the procedures we are about to perform are specific to your problem and should only be used on this specific computer.
• Do not make any changes to your computer that include installing/uninstalling programs, deleting files, modifying the registry, nor running scanners or tools of any kind unless specifically requested by me.
• Please read ALL instructions carefully and perform the steps fully and in the order they are written.
• If things appear to be better, let me know. Just because the symptoms no longer exist as before, does not mean that you are clean.
• Continue to read and follow my instructions until I tell you that your machine is clean.
• If you have any questions at all, please do not hesitate to ask before performing the task that I ask of you, and please wait for my reply before you proceed.
• Scanning with programs and reading the logs do take a fair amount of time. Again, your patience will be necessary. 

Let's begin... 

This Fix will empty the following folders:

• Windows Temp
• Users Temp folders
• Edge, IE, FF, Chrome, and Opera caches, HTML5 storages, Cookies and History
• Recently opened files cache
• Discord cache
• Java cache
• Steam HTML cache
• Explorer thumbnail and icon cache
• BITS transfer queue (qmgr*.dat files)
• Recycle Bin

Important: items are permanently deleted. They are not moved to quarantine. If you have any questions or concerns, please ask before running this fix.

The system will be rebooted after the fix has run.

FRST64 was saves as C:\Users\Brendan\Downloads\FRSTEnglish.exe

• Download the enclosed file  Fixlist.txt
• Save it in the same location FRST64 is saved. FRSTEnglish.exe
• Start FRST (FRST64) with Administrator privileges
• This time around Press the Fix button and wait
• When finished, a log file (Fixlog.txt) will pop up and saved in the same location the tool was ran from.

Please attach this file in your next reply.

Dr.Web CureIt!

Please download the Dr.Web CureIt! anti-virus utility
https://free.drweb.com/

 

You will need to send them an email to obtain a link to download the scanner, please do so

• The downloaded file will normally have a unique name such as:  q7a9tr4p.exe
• Close all open applications and locate the downloaded file and double-click to run it
• The program will take a moment to launch and bring up the License and Update screen
• Place a check mark to agree to the terms and then click on the Continue button
• Click the underlined link Select objects for scanning
• On the top left click the Scanning objects that should automatically check all objects
• Click the small wrench and make sure there is a check on Automatically apply actions to threats
• Then click the large button on bottom right Start scanning
• Once the scan has completed there will be a link named Open report click that and a log named cureit.log should open in Notepad
• The log is saved in the folder named Doctor Web in the top of your user profile folders
• Please attach that log on your next reply

[Bren0101]

Hi @JSntgRvr Sorry for the delay, but I am currently running the farbar recoveryscan with the fix, how long does this normally take as it beens going almost 10minutes now and i have another is it safe my log files to still be posted here for anyone to see if we no longer need them?

[Bren0101]

Also @JSntgRvrDo youhave an alterative to use than dr.web as it is a russian based company and I dont feel safe using software because of it

[AdvancedSetup]

The FIX can take up to an hour. It has a one hour time out if it's not done by then. @Bren0101

You can run an ESET AV scan. Dr. Web is not a Russian company that I'm aware of.

 

 

Please run the following ESET Online Scanner and perform a Full Scan

 

Click the following link to save the installer for ESET Online Scanner

https://download.eset.com/com/eset/tools/online_scanner/latest/esetonlinescanner.exe

• It will start a download of "esetonlinescanner.exe"
• Save the file to your system, such as the Downloads folder, or else to the Desktop.
• Go to the saved file, and double click it to get started. 
• When presented with the initial ESET screen, click on "Get Started". Read and accept the Terms of use
• On the "Before we start..." screen chose if you want to send anonymous data and if you want to provide feedback or not, then click Continue
• When prompted for scan type, Click on the Full Scan button
• Enable  ( select )   the radio selection "Enable ESET to detect and quarantine potentially unwanted applications"   and click the Start scan button.
• Have patience.  The entire process may take a few hours or more.
• When the scan is completed, if something was found, it will show a screen with the number of detected items.  If so, click the button marked “View detected results”.
• Click The blue “Save scan log” to save the log and give it a name and location you remember.
• If something was removed and you know it is a false postive, you may click on the blue ”Restore cleaned files”  ( in blue, at the bottom).
• Press Continue when all done.  You should click to turn off the offer for “periodic scanning”.
• Enable "Delete application data on closing" - You do not need to submit feedback unless you want to. Simply ignore and close the program.

 

Note: If you do need to do a File Restore from ESET please follow the directions below

[KB2915] Restore files quarantined by the ESET Online Scanner version 3

https://support.eset.com/en/kb2915-restore-files-quarantined-by-the-eset-online-scanner

 

Please attach the ESET scan log you saved at the end to your next reply

 

[Bren0101]

@AdvancedSetup Hi, I downloaded eset from the link you provided and followed the steps to where it said full scan which I clicked and selected the option you said to take, It started to download a moudle update to ensure that it has the latest stuff to detect. Once it reached 100% it went back to the same screen and the bar reset to 0% and then sky rocketed up to 4000% because just closing it self and then a desktop icon appeared called eset online scanner. I ran that and selected full scan again from computer scan option and it just did what I said again and closed it self and no scan started, nothing in task manager with the eset running. So I do not know why it is not working