47 replies to this topic

[exile360]

For those of you with the Paid version of Malwarebytes' Anti-Malware:

Please test the following scheduler configurations:

• Open Malwarebytes' Anti-Malware and click the Protection tab
  
• Click on the Scheduler button
  
• Please make sure that the Scan tab is selected and click the drop down menu next to Frequency and select Once
  
• Click the drop down next to Type: and select Flash
  
• Check the following options:
  
  
  • Perform scheduled scan silently from system account.
    
  • Save log file regardless of user settings.

Set the time of the scan to occur sometime in the near future so you don't have to wait too long.

Once the scan completes, please check the following location to see if a log has been created there:
C:\WINDOWS\system32\config\systemprofile\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs

Please post back with your findings.

Thanks

[BMOC]

I noticed last night that scheduled scan log files weren't being created on my system either. I was going to bring it up this morning but you beat me to it. There is mention in the protection-log that the scan was executed but that seems to be it. Also, I don't have the folder you specified. The only Malwarebytes log folder I have it is at : C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\Logs

Win7 Professional 64bit

[sho-dan]

The Flash scan log is a no show in the Application Data folder! exile360

[njustice]

No such folder exists in Application Data.

Win XP Media Center Edition Version 2002 Service Pack 3

[exile360]

For 64 bit Vista and 7 systems it should be here:

C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs

And for 32 bit Vista and 7 systems it should be here:

C:\Windows\System32\config\systemprofile\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs

Note that this is where the logs from scans run under the System account will be stored.

[Sartori]

Hello

Am running win7 64 and the log did show up there...

[sho-dan]

Vista 32
Must check the 'Recover if missed by' box, mine is set for 1 hr (option time amount is your choice for both box options ) I also have Repeating every box checked for 1 day.

Flash Scan log found in the 'Roaming folder' in the App Data section now after checking said boxes.

Edit:

In the Recover if missed by box the time range setting is from 0 to 23 hr(s) would it be fesible to change the time set to 1 to 24 hr(s)
zero time set doesnt produce the Flash scan log in the 'Roaming folder' in the App Data section .

[exile360]

Thanks for testing this everybody. I've also found that in XP, the log is saved in the current user's log folder, even when executed from the system account. Also, in Vista and 7, when a scheduled task is running for mbam.exe under the system account, you can run MBAM simultaneously as the current user without issue, however, in XP, if you attempt to do so it throws an error that Malwarebytes' is already running. I've sent this info to the developers for their review.

[Tarnak]

exile360, on Mar 26 2010, 11:06 PM, said:

Thanks for testing this everybody. I've also found that in XP, the log is saved in the current user's log folder, even when executed from the system account.

Confirmed.

Attached Files

•  ScreenShot_MBAM_Test_01.gif   22.07K   2 downloads
•  ScreenShot_MBAM_Test_04.gif   22.48K   2 downloads

[exile360]

To clarify a bit, the logs I'm referring to are not the Protection Logs, but the scan logs being saved when a scan is performed from the System account (by scheduling it to be performed that way). For instructions on testing this, please refer to my first post in this topic.

So to recap, the scan logs from scans scheduled to execute from the System account should be in the following locations:

For XP it should be here:

C:\Documents and Settings\Your User Name\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs


For 64 bit Vista and 7 systems it should be here:

C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs


And for 32 bit Vista and 7 systems it should be here:

C:\Windows\System32\config\systemprofile\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs

[BMOC]

My logs were in the correct location and I learned a bit about what Windows search indexes by default. Thanks for clarifying the log locations!

[mona7865]

Exile, I'm truly sorry but the only logs to be found are the one I ran on Wednesday after installing the public beta, and the scheduled quick scan yesterday. No evidence whatsoever from the flash scans.


 Logs_Folder_MBAM.JPG   59.42K   27 downloads

[exile360]

Thanks Mona

I believe you're right, after reviewing on my XP VM (Virtual Machine), it seems I had a log left over from a previous scan run under my own user account that I thought was the log from the scheduled Flash scan. It appears that in XP the scan logs are not being created when run scheduled under the System account.

I'll let the developers know.

[Tarnak]

I ran the test again and confirm that the scan log is not being created in XP as per Mona's post above.

[exile360]

Mona, and anyone else running Windows XP: Please also check C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs for the scan logs (this is the same location where protection logs are stored) to see if the scan logs from the Flash scans are there and let me know.

Thanks

[Tarnak]

I find only protection logs, no scan logs in C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs

[mona7865]

Exile, still no luck here :


 Protection_Logs_folder.JPG   53.79K   21 downloads


Just a thought (and I might be completely wrong) but could it be that a log from a flash scan (after an update) were only to be saved if something would be found?

[exile360]

mona7865, on Mar 26 2010, 09:28 AM, said:

Just a thought (and I might be completely wrong) but could it be that a log from a flash scan (after an update) were only to be saved if something would be found?

Please create this scan task manually as illustrated in my first post in this thread, not using the Flash scan after update option. This will tell MBAM to save the log no matter what. Once the scheduled scan you just created runs, check that location again to see if it saved a scan log or not.

edit: Nevermind the Spycar file, it isn't needed and I'm not sure that the Flash scan checks C:\Windows anyway. The clean logs should still be saved (they are on my Vista system and this has already been confirmed by other users in this topic).

[Tarnak]

mona7865, on Mar 27 2010, 12:28 AM, said:

Just a thought (and I might be completely wrong) but could it be that a log from a flash scan (after an update) were only to be saved if something would be found?

I was thinking the same thing!...but you posted.

[Tarnak]

exile360, on Mar 27 2010, 12:33 AM, said:

Please create this scan task manually as illustrated in my first post in this thread, not using the Flash scan after update option.

I am sure that is what i did, if I understood your initial instructions.