MalwareBytes 2.0.1 taking forever to scan

A complete full scan including rootkit scan took just over 28 minutes with a little less than half a million files scanned.

Malwarebytes Anti-Malware
Malwarebytes | Free Anti-Malware & Internet Security Software

Scan Date: 4/19/2014
Scan Time: 11:15:40 PM
Logfile:
Administrator: Yes

Version: 2.00.2.1005
Malware Database: v2014.04.20.02
Rootkit Database: v2014.03.27.01
License: Premium
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: AS

Scan Type: Custom Scan
Result: Completed
Objects Scanned: 453542
Time Elapsed: 28 min, 2 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)


Physical Sectors: 0
(No malicious items detected)


(end)

Hi AdvancedSetup; Happy Easter.

Some information that might be helpful.
**Full scan including rootkit.
Total time 30:54
Objects Scanned: 331160
Objects infected: 0
---------------------
The scan goes very quick until 70259 file, time 10:40
C:\Windows\Web\Walpaper\Scenes\img27.jpg
Then is does nothing until time 24:13. Stays on file 70259.
Then it goes very fast again until done at time 30:54.
When the scan is working fast about 60% CPU and when sitting on file 70259 CPU is 3 to 5 %.
The .jpg is a OEM Windows 7 built in picture.
If I remove a picture then the system just sit on the next Windows 7 picture in line and does nothing for about half the scan time.
It does not stop for any of my own installed pictures only Windows 7 OEM pictures.
As you can see almost half of the scan time is sitting on OEM pictures doing nothing monitoring Task Manager Performance.
This may or may not be normal but it does it on both of my computers.

When a scan is started you can not stop the scan until it is complete. I think this is probably normal.
Malwarebytes doesn't know whether I'm stopping the scan or a infection is trying to stop the scan. So it just keeps scanning.
I really don't have a problem with that because if I ask for a scan that is what I want done.

**Could you reply so I at least know you read my posts.
Thanks Layback Bear.

Jack there have been others also reporting MBAM hanging on a wallpaper image too.

I wouldn't take any Softpedia review as serious, they are far from independent.

We should look at the time it takes to do a full scan based on the specs...


Hard Drives 1 x Mushkin Chronos 120 GB SSD 1 x WD Silicon Edge 64GB SSD 1 x WD 160GB SATA 1 x WD 500GB SATA 1 X WD 1TB SATA

Jacee said:

We should look at the time it takes to do a full scan based on the specs...


Hard Drives 1 x Mushkin Chronos 120 GB SSD 1 x WD Silicon Edge 64GB SSD 1 x WD 160GB SATA 1 x WD 500GB SATA 1 X WD 1TB SATA

Ah. Those look like the specs from my machine. With MBAM 1.75, the same full scan on all drives took only 4 1/2 hours, give or take a few minutes. That's quite a lot less than 23+ hours and it still not being finished. Also, all but the 160 GB drive are around 50% full. I would say at most, there is less than 1TB of data.



Overall, the performance of MBAM 2.0.1.1004 is significantly worse that its predecessor with the rootkit option enabled. I haven't had the opportunity to run the full scan without the rootkit option enabled yet, but I am doing so as I write this. I'll report on the length of time it takes tomorrow.

Happy Easter to all.

Yes I read your post Layback Bear and yes there have been some reports of certain files that can cause a slowdown or freeze. Data corruption can also do this - the updated version is hopefully a little better but not sure we'll be able to completely eliminate or not but we're trying.

@Mellon Head
Agreed that the Anti-Rootkit scanner you're using is slow. The updated one I'm using is faster, but see below in that it will never be a fast scan like a Threat / Quick Scan is.

Yes, I am using an updated build that is not currently available to the public but should be soon (it is available to our Experts group) and yes there are improvements in the new Anti-Malware scan times. Most hopefully should see faster scan times with it once it is made available to the public. In fact there was another version released internally since I scanned with my version that is supposed to improve some other items in the program.

As for the Softpedia review as with most it is very lacking in detail and what was really scanned and used was not fully detailed. We do not hide the fact that we do not detect older infections, never have and probably never will. Once we stop seeing infections in the wild they are usually pulled from our database and left up to your antivirus to deal with.

I know some of you may not agree and that is certainly your prerogative however I see no technical reason for doing Anti-Rootkit scans on a routine basis and certainly not daily. I've been doing Enterprise level computer support now for well over 20 years and I play with infections and to date have only gotten infected once by accident. I've been a lead support engineer for the security of over 130,000 desktops as well as thousands of servers and in my time as a lead we never had a single break out.

Probably no harm in doing daily extensive scans for a mechanical drive as none of them seem to last the 10+ years that they used to but doing extensive daily work on most SSD drives can potentially greatly reduce their life span.

One of our Experts did post a log of multiple mechanical drives and Terabytes of data and the scan time for an Anti-Rootkit scan was nearly cut in half. It was still a long time of over 10 hours but I'm not sure what else to compare it to. I've done full scans with terabytes of data using both Symantec and Kaspersky antivirus and both products took almost 48 hours to complete the scans. I have not tried to compare similar scan time of antivirus vs Malwarebytes but again we're not the same product type and don't claim to be and I've always said that antivirus is better at flat file scanning than we are. With no load points and an old infection we certainly can miss something that your antivirus would probably pick up. We operate at our best on a live infection in Normal Windows mode. If you use Safe Mode that too is not an optimal method for our program to do it's job.

Does Malwarebytes put its products through a rigorous QAQC process prior to releasing new versions to the public?

I recall a similar fiasco a while back, also related to an update if Im not mistaken?

Software developers really need to keep an eye on the quality of their software if they wish to retain their customers.