interrupt scan to remove malware?

[nekiuk]

My machine is infected with "Windows 7 Total Security". It is horribly slow, and MWB has been scanning for 24 hours and 19 minutes now, and found 6 infected objects so far. I'd like to interrupt the scan to get rid of these hoping it will speed up the machine, but I worry I won't get a report of what is infected if I abort the scan. Any advice?

It would help if I had an indication of how much longer this scan will take...

Thanks!

[Haleo]

Hello and welcome to the Malwarebytes forums.

You can abort the scan and it will still let you delete the malware that Malwarebytes has found by clicking on view results.

If you have been running the scan for 24 hours, I can assume you are running a full scan. Malwarebytes recommends using a quick scan to search for malware. Our quick scan is designed to find all the places malware loads in memory and hides from conventional scanners. I would suggest using the Quick scan to finish removing the malware and continue to use a Quick scan in the future.

Let me know if you have any more questions.

[joem]

> You can abort the scan and it will still let you delete the malware

> that Malwarebytes has found by clicking on view results.

Be sure to check the box in front of the malware that was found, and then click Apply.

> Malwarebytes does not recommend full scans to search for malware.

That's hard to believe. Then why would they offer _both_ a quick and a full scan option?

So what is a full scan for, then?

> Our quick scan is designed to find all the places malware loads in memory

> and hides from conventional scanners.

That's not true at all.

1) A quick scan by mbam and _full scans_ by 2) MS Malicious Software Removal Tool and 3) MS Security Essentials (which curiously gets good grades from those who test malware products) all failed to find pup.radmin.

Only a full scan by mbam did. It was in the restore partition.

[joem]

> and then click Apply.

Make that:

and then click Remove Selected.

-----

I am confounded by this forum.

After posting can the Poster not edit his own post?

I see no Edit button.

And yesterday when I posted, a Smiley appeared where I had originally written the letter "b" followed by a right parenthesis sign.

[Haleo]

> Our quick scan is designed to find all the places malware loads in memory

> and hides from conventional scanners.

That's not true at all.

1) A quick scan by mbam and _full scans_ by 2) MS Malicious Software Removal Tool and 3) MS Security Essentials (which curiously gets good grades from those who test malware products) all failed to find pup.radmin.

Only a full scan by mbam did. It was in the restore partition.

The user stated that he was infected and that it took him 24 hours to run a full scan. The quick scan will find any malware that's active on the system that MBAM is capable of detecting.

The full scan is used for detecting the occasional trace that get's missed by the quick scan, and even that's pretty rare. It is also used for scanning external storage devices. According to one of the developers the quick scan catches 99.9% of the malware that MBAM will detect. I have provided a link below for you to read through about this topic.

http://forums.malwarebytes.org/index.php?showtopic=10405

[nekiuk]

Wonderful! The aborted scan still kept hold of the problems, deleted them, and the computer appears to be back to its old self. I'll do a quick scan to make sure, and I'll go pay for the full version now. Thanks!

[joem]

Thank you for the information.

> According to one of the developers the quick scan catches

> 99.9% of the malware that MBAM will detect.

How odd that pup.radmin is in the 0.01% category.

How further odd that neither MS MSRT nor MS SE full scans found it.

Only an mbam full (not quick) scan.

Does an mbam quick scan check the system restore partition?

[DarkSnakeKobra]

Thank you for the information.

> According to one of the developers the quick scan catches

> 99.9% of the malware that MBAM will detect.

How odd that pup.radmin is in the 0.01% category.

How further odd that neither MS MSRT nor MS SE full scans found it.

Only an mbam full (not quick) scan.

Does an mbam quick scan check the system restore partition?

That is not necessarily an infection. Stands for Potentially Unwanted Modifications which is part of the heuristics mbam uses.

As far as I know no.