mbam scanning problem?

[GrahamK]

I've been scanning every night with mbam.

And One night, It took nearly 4 hours to scan my whole system.

I did a disk cleanup, And it took 30 minutes afterwards.

But after I scanned, It took 30 minutes to scan about 130k items.

Then the next second it would be done, Scanning 300k items total.

Why does it scan 200k items in a second?

This worries me, Is something bad in my system?

Please help

[exile360]

Greetings

This is quite normal and there are a few factors involved here:

1. The registry: when scanning registry items (which Malwarebytes' Anti-Malware does very early in the scan, just before filesystem objects), it goes really fast, taking an average of about 2-6 seconds, in which time it is able to check many registry items
   
2. Heuristics: at the end of a scan, once the scanning of filesystem objects is completed, Malwarebytes' Anti-Malware does a rapid check for unknown/new infections, which typically goes by fairly rapidly and scans a lot of items
   
3. Disk caching: when you've previously scanned with Malwarebytes' Anti-Malware, but have not yet rebooted your system, the scanner will take advantage of disk caching, which makes checking files on your system much much faster than normal, restarting the system will return scan times to their normal, slower state
   

Hopefully that clears things up. Also make certain that the only items listed in the Ignore List tab are items that you have added. Also note that exclusions in that tab are recursive, so if you have a folder listed in the Ignore List, any files and folders located within that folder will not be checked by Malwarebytes' Anti-Malware.

[GrahamK]

One more question, I've tried using the full trial of malware bytes. When i look in my log, This appears several times

07:53:55 Jeff-Home MESSAGE Protection started successfully

07:54:02 Jeff-Home MESSAGE IP Protection started successfully

17:34:49 Jeff-Home IP-BLOCK 208.73.210.125 (Type: outgoing, Port: 50857, Process: firefox.exe)

19:01:27 Jeff-Home MESSAGE Scheduled update executed successfully

19:04:29 Jeff-Home MESSAGE IP Protection stopped

19:04:32 Jeff-Home MESSAGE Database updated successfully

19:04:34 Jeff-Home MESSAGE IP Protection started successfully

It says this maybe 50 times?

What's the reason? :\

[exile360]

07:53:55 Jeff-Home MESSAGE Protection started successfully

This indicates that the execution (memory/resident) protection has been started.

07:54:02 Jeff-Home MESSAGE IP Protection started successfully

This indicates that the website blocking (IP protection) has been started.

17:34:49 Jeff-Home IP-BLOCK 208.73.210.125 (Type: outgoing, Port: 50857, Process: firefox.exe)

This indicates that the process firefox.exe was blocked from connecting to the ip 208.73.210.125, which is in our list of blocked/malicious IP addresses (since firefox is your internet browser, it is likely that this occurred when you either browsed to a website hosted on this IP address, or an ad on a webpage you were viewing was hosted on that IP address).

19:01:27 Jeff-Home MESSAGE Scheduled update executed successfully

This indicates that a scheduled (automatic) update to the Malwarebytes' Anti-Malware database has occurred.

19:04:29 Jeff-Home MESSAGE IP Protection stopped

This indicates that the malicious website blocking component (IP blocker) has been stopped from running. In this case, it happened so that it could load the new database of blocked websites, which happens after every database update.

19:04:32 Jeff-Home MESSAGE Database updated successfully

This indicates that the database update process has completed, and was successful.

19:04:34 Jeff-Home MESSAGE IP Protection started successfully

This indicates that the malicious website blocking component (IP blocker) has started once more (in this case, it enabled itself after the database update process completed).

[GrahamK]

Why does it appear so many times?

What site could it be? I only visit facebook, Youtube, and google. o_O

[exile360]

I'm really not sure why that particular IP address would be blocked so frequently, but there should be a pop up in the tray near your clock from the Malwarebytes' Anti-Malware tray icon when it occurs so you can figure out exactly what website you're viewing when the IP block occurs, otherwise it could be the result of an add-on that you have in firefox if it comes up every time firefox is opened, even when you aren't viewing any websites.