Microsoft Security Essentials Scheduled Scans

[fullgrownnut]

I recently posted a Thread where we discussed in depth the use of Malwarebytes Anti-Malware along with other Anti-virus Software such as Nortons Security Suite or Microsoft Security Essentials... I started the discussion because I bought my 15 year-old son his very first computer which is a Dell Netbook with Windows 7 installed (32-bit), and I was setting it up for him with the proper Anti-virus/Anti-Malware protection... I decided to install MSE along with MBAM, and we went through just about EVERY setting possible on each in the discussion... the discussion was extremely helpful...

I'm posting this discussion now because I noticed that the Scheduled Scan for MSE did not perform when set... Under the Settings Tab > Scheduled scan here are the settings:

Run a scheduled scan on my computer (Option checked), Scan type: Full Scan, When: Sunday, Around: 1:00 PM, Check for the latest virus and spyware definitions before running a scheduled scan (Option checked), Start the Scheduled scan only when my computer is on but not in use (Option unchecked), Limit CPU usage during scan to: 50% (Option checked).

In my last thread discussion, we EVEN went through the proper Windows 7 Settings in the Tasks Manger which will wake a sleeping computer, since this is not a default setting in Windows... the exact process to do this is located in an online article Here... I'm mentioning this here to eliminate any question whether or not a sleeping computer might be the issue...

The computer was never even turned on at any time on Sunday (yesterday) when the scheduled scan was to take place at 1:00pm, but I did turn the computer on this morning about an hour ago (10:15am EST)... once the computer booted up, was connected to the Internet, and new definition updates were installed, I expected MSE to perform the scheduled full system scan since the scheduled time was never performed the day prior, because the computer was never even booted up yesterday... Just like other software I have used, I expected the scan would just be delayed to the next time the computer was in use... this never happened, and I have no reason why it did not...

If anyone could shed some light on why they think the scan did not perform, it would be greatly appreciated... thank you.

 

[Corrine]

Hi, fullgrownnut.

First point, before I forget, with a 15 year-old, I strongly recommend that the scheduled scan be set for daily. I am a very "safe surfer", yet still have MSE set for a daily scan. I suggest that you set the time for the scan when the computer is most likely to be running.

The computer cannot turn itself on so, as you know, if shut down at the time something is scheduled to run, it won't happen. I recall reading somewhere (but cannot find the link) that MSE will do the missed scheduled scan at after the next automatic update.

 

[richc46]

That is correct Corrine. I had a similar question in the Vista forum. The computer owner complained that MSE was not making the scheduled scan. Research indicated that it will not scan when off or when in sleep mode. It will perform the scan at the next scheduled time.

 

[Corrine]

Thanks for the confirmation, richc46. I hope fullgrownnut changes the scan schedule to daily for his son's computer. A quick scan should be fine since it is a new computer.

 

[Layback Bear]

Just an idea. Would this not be a fine time to teach the young user things about security. How to do manual updates and scans in the background. Why one should do them and the do's and don'ts when on line. Why things like memory sticks and C/D should be scanned when a friend gives you one. What a torrent can do to your computer, ect.

 

[fullgrownnut]

Hi, fullgrownnut.

First point, before I forget, with a 15 year-old, I strongly recommend that the scheduled scan be set for daily. I am a very "safe surfer", yet still have MSE set for a daily scan. I suggest that you set the time for the scan when the computer is most likely to be running.

Thanks Corrine, I was thinking about scheduling a daily scan, but since you can only do one type of scheduled scan at a time, when it performs one, I prefer it to do a full system scan... I think a full system scan every single day would be a little extreme, and especially the load on the resources while he's using the computer, even though I have it set at 50% CPU usage...

I would prefer to schedule a Quick scan if it's every day... I think what I might do is just that, and then set a reminder in my own computer's calendar once per month to give him a call and walk him through doing a manual full system scan (he doesn't live here with me, so that's why I really would prefer things running by themselves)... come to think of it, I have G-bridge installed in his pc, so once I get him on the phone, and his computer online, I'll be able to access his desktop from mine and do it... then eventually, I'll just have him do it after he watches me do it remotely a couple of times...

The computer cannot turn itself on so, as you know, if shut down at the time something is scheduled to run, it won't happen. I recall reading somewhere (but cannot find the link) that MSE will do the missed scheduled scan at after the next automatic update.

Yes, I totally understand that, but MOST programs that have some kind of a scheduled task, usually perform it the next time the computer is turned on if it wasn't on when it was scheduled to perform it, so I just assumed MSE did the same thing...

And maybe you're right about MSE performing after the next automatic update... I'll try to do some research on that to confirm it... I hope that's true, then that would solve this mystery.... Lol... I'll definitely let you know if I do find that information... thanks for your input, it was helpful

 

[fullgrownnut]

That is correct Corrine. I had a similar question in the Vista forum. The computer owner complained that MSE was not making the scheduled scan. Research indicated that it will not scan when off or when in sleep mode. It will perform the scan at the next scheduled time.

Hi again Rich... so you're saying that if the computer is not on AT the time that the scan is scheduled for, it will just not perform it UNTIL next time??... so if you have a full system scan scheduled once per week, it will have to wait an entire week to perform it again??... that just doesn't make any sense because what happens if the computer isn't on again at the scheduled time; you'll miss an entire week again??... Lol... wow, I just don't think that Microsoft would overlook something like this, but maybe I'm wrong since it's a free program, and they figure that since it's free, someone can just do it manually if the scheduled scan is missed... but don't you think that they would integrate an informational disclaimer to pop up or whatever, to let users know about missed scheduled scans, instead of a big guessing game??...

You know, while I was in the middle of replying to you here, I stopped and did some more research, and I found A LOT of threads in other discussion boards about this same issue, and several people have recommended people who are concerned about this problem to install AVAST instead... I've never used that program myself (I've been a Nortons user for years), but I figured what could be better for a free program to protect his Windows 7 computer than a Microsoft product that has gotten some pretty good reviews... from what I'm reading by other Windows users, it's the best free anti-virus out there (also better than AVG)... do you recommend using AVAST over MSE?...

Keep in mind that he's got the Malwarebytes Pro version in there too, so that's pretty good protection all in itself... I'm NOT saying that MSE is not good protection, I'm just a little concerned about the way it handles missed scheduled scans... that's my ONLY beef at this point about it... and again, from what I'm reading, AVAST doesn't have an issue with scheduled scans if your computer is off, and will perform them the next time the computer is turned on... well, thanks for your help once again

 

[fullgrownnut]

Just an idea. Would this not be a fine time to teach the young user things about security. How to do manual updates and scans in the background. Why one should do them and the do's and don'ts when on line. Why things like memory sticks and C/D should be scanned when a friend gives you one. What a torrent can do to your computer, ect.

Thanks Layback... that's a good point, but just because I want the program to perform a scheduled scan when it's supposed to does NOT mean that I'm STILL not going to teach him the importance of Internet security with his own computer...

I've filled him on this subject already many times with my own computer, and have also taught him about the threats of downloading Torrents and using sites such as Limewire to download music...

Limewire is probably the biggest No-No out there if you want to mess up a computer... unfortunately, it's very popular with a lot of young teenagers online to get free music... I've heard countless horror stories about how kids have ruined their parents' computers by downloading music on that site... So, I PLAN on telling him straight-out that if I EVER catch him going on that site even once, the computer is being taken away from him for a good amount of time...

But YES, I agree with you 100% on teaching kids ALL of these important concepts of taking care of a computer... thanks for your input

 

[richc46]

If you go to change my scan schedule, is the box checked that says Start scan only when on but not in use?
The only thing I can tell you is that how it works for me and for the member that I was helping in Vista. Research indicated that it will not run if in sleep mode.

 

[fullgrownnut]

If you go to change my scan schedule, is the box checked that says Start scan only when on but not in use?
The only thing I can tell you is that how it works for me and for the member that I was helping in Vista. Research indicated that it will not run if in sleep mode.

Hello Rich... no, that box is unchecked, which means that the scan is supposed to run whether the computer is in use or not (that's why I have the CPU usage set to 50%)...

And regarding the Sleep Mode issue, someone in my other thread posted this Link which addresses how to go into your Windows Task scheduling settings to make sure the scan will work for MSE even during Sleep mode (the answer is toward the bottom of that page for Vista and Windows 7)... I followed those directions step by step, and have my son's settings set like that also, so even if it's in Sleep mode now, the computer should wake up to perform the scheduled scan.

 

[richc46]

Your article confirms what Corrine and I have said about not scanning when in sleep mode. I have never tried to make changes to that default action. My understading of Task Schedule, however, indicates that the given procedure may work. All I can do is wish you luck.

 

[fullgrownnut]

Your article confirms what Corrine and I have said about not scanning when in sleep mode. I have never tried to make changes to that default action. My understading of Task Schedule, however, indicates that the given procedure may work. All I can do is wish you luck.

Thanks Rich... just to let you know, I did some research online on other message boards regarding MSE vs. Avast, and hands down, everyone says Avast is just a MUCH better free anti-virus program... I took their advice, uninstalled MSE and installed Avast... so then an hour and a half later, I finally have all the setting the way I want them... Lol...

I must say that there are SOOO many detailed options and settings in that program, that it literally blew me away... I thought Nortons Security Suite had a lot of different options/settings, but Avast FREE version has it beat by a mile when it comes to that... AND, what I like about it too is that you can contour ANY type of scan you want, and have several (NOT just one type of scan like MSE)... The way they have this set up is very similar to Malwarebytes Pro Version that I also have for myself and in my son's computer... but to have this in a FREE program blows me away once more...

So you can have a Quick Scan scheduled whenever you want, a Full System scan whenver, and even a Scan on Boot-up of your computer if you desire (either quick or full system)... you can have all these set simultaneously at different times, of course... AND, in addition to Quick and Full System scans, you can actually create a custom scan of your choice, using all the detailed variables that they lay out for you...

As far as program and definition updates, you can schedule it to check in the time intervals that you want, all the way down to every 15 minutes if you like... with MSE you have NO control over how often it does those updates, and sometimes if you rely on the program to do automatic updates, I've noticed that you might even have to wait an entire day or more before it updates the definitions (this is a common beef that I've read on other message boards too when doing research about it)...

I don't know if you ever used Avast, but if you never have, please look into it if you're using MSE because there really is no comparison... to me, It's like comparing the instrumentation that's in a commercial airline aircraft to what's in an old car... Lol... anyway, I feel MUCH better now that I made that change

 

[richc46]

The fact that you are happy with your security is all that matters. I am very happy with what I have. I was using Nortons before switching to MSE. When I went with MSE, the first scan picked up 2 virus that Nortons had missed.
I, also, know that I have fixed many BSODs for other members that were caused by the Anti Virus. The only one that I know that has never caused a BSOD is MSE.
I will look at some comparisons, as far as being able to detect virus' and if I find one that is better than MSE, I would indeed switch.
Make sure that you use Malwarebytes in conjunction for once a week scan and you are, also, invited to use WinPatrol, which is highy recommened by Corrine and myself. It is used in conjunction with any AV and it is awesome.
Take care, until we meet, again, hopefully not because of a problem that you are having, but because you are contibutting what you know to another.

 

[fullgrownnut]

The fact that you are happy with your security is all that matters. I am very happy with what I have. I was using Nortons before switching to MSE. When I went with MSE, the first scan picked up 2 virus that Nortons had missed.
I, also, know that I have fixed many BSODs for other members that were caused by the Anti Virus. The only one that I know that has never caused a BSOD is MSE.
I will look at some comparisons, as far as being able to detect virus' and if I find one that is better than MSE, I would indeed switch.
Make sure that you use Malwarebytes in conjunction for once a week scan and you are, also, invited to use WinPatrol, which is highy recommened by Corrine and myself. It is used in conjunction with any AV and it is awesome.
Take care, until we meet, again, hopefully not because of a problem that you are having, but because you are contibutting what you know to another.

Thanks Rich... yes, I'm very happy with it... one thing that I forgot to mention in my last reply was that Avast (the company) has been developing antivirus since 1988... that is a LOOOOOONG time for a company to be in existence to be developing anything related to the Internet (especially antivirus)... if you're in existence THAT long, you GOTTA be doing something really right by NOW in my book... Lol...

Wow, that's amazing that you had a couple of Viruses that Nortons missed... maybe that was a couple-three years ago when Nortons was not as good as it is now... I have to give them a lot of credit because they improved on many things that customers were complaining about over the years... they did a great job on improving all those things which caused complaints, especially their CPU usage problem... personally, I never had anything get past Nortons in recent times, and I'm on the Internet a lot (and consider that is also after doing a full system scan with Malwarebytes, which I recently got introduced to by you and the gang on here)...

When you helped other members fix their BSOD with other antivirus, are you saying that the actual antivirus programs they had installed was causing it, or viruses that got by their antivirus programs?... Knock on wood, I haven't had a BSOD issue since Windows 98, but with Windows back during those times, it was a common occurrence anyway... Lol... if you get a BSOD these days with anything that has XP or later, then you know that you have a serious issue going in your machine... that's great that you were able to help members on here fix it...

And thanks SO much for the tip on WinPatrol... I'm definitely going to look into it right now!... thanks again Rich for everything, you've been awesome

-----------------------------------​

Update: Rich, I installed the paid version of WinPatrol, and I must say that I'm impressed with the entire concept of the program because even if something gets by your antivirus, that program will alert you to any changes that are made to your important system files... I also like the fact that it alerts you to any programs adding themselves to your Start-up programs... this saves the task of having to go in and check that list in MsConfig on a regular basis...

The only thing that I don't understand is when I go into the Program folder in the Start Menu, and open up the WinPatrol folder, there's an icon in there in addition to the "WinPatrol Explorer" icon that just says "WinPatrol"... when I restarted my computer for the first time after I had installed the program, I clicked on that icon because I thought that was the one to open it up... however when I clicked on it, nothing opened or anything, and I was concerned... I then decided to click on the WinPatrol Explorer one, and that one opened up the actual viewable application...

I then went back into the program's folder and noticed the alt tag that said "WinPatrol Spyware Monitor" when I put my cursor over the "WinPatrol" icon... if nothing opens up when you actually click on that icon, what is it even there for, and does this spyware monitor work?... it's a separate application from all the other monitoring features, or is it just the same thing as the "Scotty Monitoring" feature which monitors your system files for any changes?... just don't understand why it's a totally separate icon apart from the rest of the program, and especially if nothing opens when click on... sorry for all the questions, but I just would like to know what it is, and how it works (I couldn't find anything about it on WinPatrol's website)... thanks again.

 

[Corrine]

Hi, fullgrownut.

WinPatrol is a long-time favorite of mine. I hope you have WinPatrol set to launch at start-up.

To explain what you are seeing in the WinPatrol folder, WinPatrol is split into two components to provide the best possible performance.

WinPatrol.exe is the small component which monitors for changes on your system. This is the program which displays the little Scotty in the taskbar and remains running in the background at all times. This component doesn't require UAC access and should not bring up the UAC prompt.

When you double click on the little Scotty icon it launches the main tabbed interface or WinPatrol Explorer(WinPatrolEx.exe). The program provides the main interface and allows you to review all your various programs. This component will bring up the UAC prompt because it's the power house that is allowed to change your system configuration values. The tabbed interface is also launched if WinPatrol.exe is launched a 2nd time. When you click on "Close", this program is removed from memory so only the smallest required portion of WinPatrol is running (WinPatrol.exe).

 

[richc46]

Yes, I knew that you would like WinPatrol when I suggested it. Corrine seems to have taken care of your question.
Just one warning about WinPatrol. If I have my speakers on and Scotty notifies of a change, I just get somewhat startled.

 

[fullgrownnut]

Hi, fullgrownut.

WinPatrol is a long-time favorite of mine. I hope you have WinPatrol set to launch at start-up.

To explain what you are seeing in the WinPatrol folder, WinPatrol is split into two components to provide the best possible performance.

WinPatrol.exe is the small component which monitors for changes on your system. This is the program which displays the little Scotty in the taskbar and remains running in the background at all times. This component doesn't require UAC access and should not bring up the UAC prompt.

When you double click on the little Scotty icon it launches the main tabbed interface or WinPatrol Explorer(WinPatrolEx.exe). The program provides the main interface and allows you to review all your various programs. This component will bring up the UAC prompt because it's the power house that is allowed to change your system configuration values. The tabbed interface is also launched if WinPatrol.exe is launched a 2nd time. When you click on "Close", this program is removed from memory so only the smallest required portion of WinPatrol is running (WinPatrol.exe).

Hello Corrine, ok now I understand... after further testing of the program, I kinda figured that was what was happening, but needed one of you experienced WinPatrol users to verify it... and yes, I have it enabled at Start-up because I figured that it would have to be running in the background to monitor any changes to your system...

However, I am concerned about something that I just experienced with it... I was running my Secunia PSI program to locate any programs that needed updates, and Adobe Reader needed an update... I installed the update, and just at the end of the update, I received a Scotty notification indicating that Adobe Reader was trying to plant itself into my Start-up programs (of which I always have disabled at Start-up)... I clicked NO, not to allow it, and then a few seconds later, the same Scotty window popped again... it happened like four times, and I clicked NO every time, of course... Windows alerted me as the Administrator if I wanted WinPatrol to do it's thing each time also, which told me that WinPatrol was working to stop Acrobat Reader from getting into my Start-up programs... this was a good sign, of course...

But after ALL that, going to Msconfig and checking the list, Acrobat Reader was checked off as a start-up program (I always have it disabled in there, so it got past the WinPatrol program obviously)... to me, it's not a big deal that it got in there because I can always go in and manually disable it... BUT (and this is a BIG "but"), what happens if WinPatrol alerted me about something malicious trying to change something in one of my registries, and the same thing happened???... well, then the program would be totally useless in preventing the change, but on the other hand at least I would know something was up... however, that's not what the program is designed to do... it's designed to alert the user, and have him or her manually deny the change to prevent the potentially malicious activity...

So the bottom line is if it the program allows something benign get by it like a simple program getting into your Start-up programs, how is it going to stop something that is potentially detrimental to your system??... any thoughts on this?... and thanks for your input about this program Rich recommended to me

------------------------------------​

One more observation... after selecting the following settings under the Options Tab:

...I STILL received a notification pop-up of this change when, as you see it says, clicking a box next to the item is supposed to disable notifications... NOT only did I receive a notification, the program STILL planted itself into my Start-up programs... wow, it's disappointing to know that even the option to control notification alerts isn't even working :huh:

 

[fullgrownnut]

Yes, I knew that you would like WinPatrol when I suggested it. Corrine seems to have taken care of your question.
Just one warning about WinPatrol. If I have my speakers on and Scotty notifies of a change, I just get somewhat startled.

Yes, she did... and I just posted a major concern about the program... I'm sure you'll read that before you read this...

And Haha, he really scares you, huh?... well I already have that taken care of because one of my pet-peeves is preventing programs from making sounds (I don't like it), so I ALWAYS go into the Options and disable all sounds... AS LONG as their is always a visual notification of some sort, to me there is no need for any sound alerts...

Thanks again

 

[Corrine]

Hi, fullgrownnut.

I like Scotty's "bark" although my husband will always ask, "What's that?" and the dogs will look inquiringly at my computer.

First to address the alerts image you posted. Because you have the box at the bottom, "Show All Alerts (for temporary usage" checked, the option to disable alerts for Startup Programs is grayed out. I also note that it appears you checked the option to prevent changes to Startup. Realize that that means that WinPatrol will attempt to block programs you want to add to Startup.

Next, regarding the repeated alerts for Adobe Reader, see Dealing with Repeating Alerts].

(Sidebar: I've received approval from Bill Pytlovany to set up a dedicated "unofficial" WinPatrol support forum at LandzDown. I'll probably be launching it today or tomorrow.)

 

[Golden]

(Sidebar: I've received approval from Bill Pytlovany to set up a dedicated "unofficial" WinPatrol support forum at LandzDown. I'll probably be launching it today or tomorrow.)

Thats great news Corinne - let us know when its up and running.

Regards,
Golden