fleamour

Malwarebytes Scan Taking Forever

35 posts in this topic

I have a beefy enough spec, C2D 3.0GHz/4GB of RAM running Win 7 Ultimate, root disk is 0% fragmented. I have uninstalled/stopped running PC Tools Threatfire & Win Defender as they may conflict with Comodo Defense. But Malwarebytes scans are taking forever, especially when encountering .wav files. Strangely enough I deleted most of my .wav files & re-ripped to .wma to be more compatible with iTunes. So no idea why they are showing as .wav? Anyway what gives?

Share this post


Link to post
Share on other sites

Depends how many GBs of stuff you have, the size of your temp and temp internet caches and so on.

What type of scan have you been running? And how long is it taking?

A full scan on my system of between 24 and 25GB takes 30 min; a quick scan on the same takes about 3 min.

Share this post


Link to post
Share on other sites

Clear Temp Files Using ATF Cleaner:

  • Please download ATF Cleaner by Atribune from here and save the file to your desktop.
  • Close all open internet browser windows
  • Run ATF Cleaner by double clicking it.
  • Once the program opens, click the box next to Select All
    • Note: this will delete all cookies saved by sites that you have visited so if you need to keep any cookies for automatic logins etc then uncheck the Cookies option

    [*]Once that's all set click on the Empty Selected button and it will remove the temporary files from your system.

    [*]If you use Firefox or Opera browsers then click the appropriate button at the top of the program and delete the temp files from them as well following the same procedure.

Once that's done you may delete ATF Cleaner then do the following:

Download CCleaner from here to clean temp files from your computer.

  • Close all open internet browser windows
  • Double click on the ccsetup file to start the installation of the program.
  • Select your language and click OK, then click Next.
  • Read the license agreement and click I Agree.
  • Click Next to use the default install location. Click Install then click Finish to complete installation.
  • Double click the CCleaner shortcut on the desktop to start the program.
  • On the Windows tab, under Internet Explorer, uncheck Cookies if you do not want them deleted. (If deleted, you will likely need to reenter your passwords at all sites where a cookie is used to recognize you when you visit)
  • If you use Firefox or any other Mozilla browsers, the box to uncheck for Cookies is on the Applications tab, under Firefox/Mozilla.
  • Click on the Options icon at the left side of the window, then click on Advanced.
    uncheck Only delete files in Windows Temp folders older than 24 hours.
  • Click on the Cleaner icon on the left side of the window, then click Run Cleaner to run the program.
  • Caution: It is not recommended that you use the Registry feature unless you are very familiar with the registry as it has been known to find legitimate items for removal, which can cause issues with other programs.
  • After CCleaner has completed its process, click Exit.

After it's done and you've restarted your PC run another scan with Malwarebytes' Anti-Malware.

Please let us know how it goes.

Thanks :D

Share this post


Link to post
Share on other sites
What type of scan have you been running? And how long is it taking?

It just seems to hang a lot, I am running a quick scan now & it hangs forever at same file.

Share this post


Link to post
Share on other sites

Please follow Firefox's instructions above and also please let us know which file the scan stops at/hangs on.

Thank you.

Share this post


Link to post
Share on other sites

Well, cleaned temp files as asked & it still slow as molasses. Hangs on not any one particular file but more like every file. It is very unresponsive across the board with big pauses between the time updating & also hangs when cancelling scan. I used Task Manager to kill process last time.

I'll let you know how it goes but short scan at 25 minutes, & I do not have much data on this PC.

Share this post


Link to post
Share on other sites

Not sure if its been mentioned....

Have you entered the exceptions for MBAM in your antivirus software and firewall?

Please exclude the following files from your antivirus:

Note: If using a software firewall besides the built in Windows Firewall you'll need to exclude them from it as well

For Windows Vista or Windows 7:

  • C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
  • C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
  • C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
  • C:\Program Files\Malwarebytes' Anti-Malware\zlib.dll
  • C:\Program Files\Malwarebytes' Anti-Malware\mbam.dll
  • C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll
  • C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref
  • C:\Windows\System32\drivers\mbam.sys
  • C:\Windows\System32\drivers\mbamswissarmy.sys

For 64 bit versions of Windows Vista or Windows 7:

  • C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
  • C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
  • C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
  • C:\Program Files (x86)\Malwarebytes' Anti-Malware\zlib.dll
  • C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.dll
  • C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamext.dll
  • C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref
  • C:\Windows\System32\drivers\mbam.sys
  • C:\Windows\SysWoW64\drivers\mbamswissarmy.sys

Note: If using a software firewall besides the built in Windows Firewall you'll need to exclude MBAM.EXE from it as well

The FAQ contains examples of setting file exclusions for some known AV products

Please post back and let us know how it went.

Share this post


Link to post
Share on other sites

Always used Comodo & never a problem under XP. Exited Comodo & still same problem running scan with Comodo disabled.

Share this post


Link to post
Share on other sites

I'll have a look at an Autoruns log for you if you like.

Create an Autoruns Log:

  • Please download Sysinternals Autoruns from here and save it to your desktop.
    • Note: If using Windows Vista or Windows 7 then you also need to do the following:
      1. Right-click on Autoruns.exe and select Properties
      2. Click on the Compatibility tab
      3. Under Privilege Level check the box next to Run this program as an administrator
      4. Click on Apply then click OK

    [*]Double-click Autoruns.exe to run it.

    [*]Once it starts, please press the Esc key on your keyboard.

    [*]Now that scanning is stopped, click on the Options button at the top of the program and select Verify Code Signatures

    [*]Once that's done press the F5 key on your keyboard, this will start the scan again, this time let it finish.

    [*]When it's finished, please click on the File button at the top of the program and select Save and save the Autoruns.arn file to your desktop and close Autoruns.

    [*]Right click on the Autoruns.arn file on your desktop and hover your mouse over Send To and select Compressed (zipped) Folder

    [*]Attach the Autoruns.zip folder you just created to your next reply

Share this post


Link to post
Share on other sites

Hello :D

Please do the following to see if it corrects the issue:

Run a Disk Check on your C: drive in Windows Vista or Windws 7:

  • Click the Start vista-7-start.png button and select Computer
  • Right-click on C: and select Properties
  • Click on the Tools tab
  • Under Error-checking click the Check Now... button and click Continue at the User Account Control prompt
  • Mark the box next to Automatically fix file system errors and Scan for and attempt recovery of bad sectors
  • When the message box pops up, click the Schedule disk check button and restart your computer
  • Once your computer restarts it will check the drive, don't press any keys so that it is allowed to do so

If it does not, then please follow marktreg's instructions above so he can look into the problem further.

Thanks :)

Share this post


Link to post
Share on other sites
I'll have a look at an Autoruns log for you if you like.

Create an Autoruns Log:

  • Please download Sysinternals Autoruns from here and save it to your desktop.
    • Note: If using Windows Vista or Windows 7 then you also need to do the following:
      1. Right-click on Autoruns.exe and select Properties
      2. Click on the Compatibility tab
      3. Under Privilege Level check the box next to Run this program as an administrator
      4. Click on Apply then click OK

    [*]Double-click Autoruns.exe to run it.

    [*]Once it starts, please press the Esc key on your keyboard.

    [*]Now that scanning is stopped, click on the Options button at the top of the program and select Verify Code Signatures

    [*]Once that's done press the F5 key on your keyboard, this will start the scan again, this time let it finish.

    [*]When it's finished, please click on the File button at the top of the program and select Save and save the Autoruns.arn file to your desktop and close Autoruns.

    [*]Right click on the Autoruns.arn file on your desktop and hover your mouse over Send To and select Compressed (zipped) Folder

    [*]Attach the Autoruns.zip folder you just created to your next reply

Please see attached.

AutoRuns.zip

Share this post


Link to post
Share on other sites

Whilst I am looking at the Autoruns log, let's try a possible quick fix first.

(1) Please perform a full disk check as described by exile360 above.

(2) If this does not solve the problem, please perform a clean reinstall of MBAM.

  • Uninstall Malwarebytes' Anti-Malware
  • Restart your computer very important
  • Download and run mbam-clean.exe from here
  • It will ask to restart your computer, please allow it to do so very important
  • After the computer restarts, temporarily disable your Anti-Virus and install the latest version of Malwarebytes' Anti-Malware from here
    • Note: You will need to reactivate the program using the license you were sent via email if using the Pro version
    • Launch the program and set the Protection and Registration. Then go to the UPDATE tab if not done during installation and check for updates.
      Restart the computer again and verify that MBAM is in the task tray if using the Pro version. Now setup any file exclusions as may be required in your Anti-Virus/Internet-Security/Firewall applications and restart your Anti-Virus/Internet-Security applications. You may use the guides posted in the FAQ's here or ask and we'll explain how to do it.

Please let us know if this makes any difference to the scanning times.

Share this post


Link to post
Share on other sites

Have carried out both dskchk & clean install. Sorry, no difference.

Share this post


Link to post
Share on other sites

Please disable your Epson Status Monitor and try a Quick Scan.

If this doesn't solve the problem, please boot into Safe Mode and see if the MBAM scans are quicker.

This is only experimental and diagnostic stuff at the moment. We'll get some data to work with and go from there.

Share this post


Link to post
Share on other sites

Epson Monitor is not the culprit but she runs sprightly under Safe Mode, taking 2 1/2 mins instead of the 40 mins then give up!

Share this post


Link to post
Share on other sites

Please try the following in normal mode (not Safe Mode) and let us know if the scan works better:

  • Please copy and paste the following text in the Code box exactly as written into notepad (not wordpad or any other text editor):
    @echo off
    net stop Spooler
    if exist "%programfiles(x86)%" "%programfiles(x86)%\Malwarebytes' Anti-Malware\mbam.exe"
    if not exist "%programfiles(x86)%" "%programfiles%\Malwarebytes' Anti-Malware\mbam.exe"
    net start Spooler
    exit


  • Once you've done that click on File and select Save As...
  • In the Save dialogue box click on the drop down menu next to Save as type and select All Files
  • Name the file MBAM Scan.bat (the .bat extension is very important)
  • Save the file to your desktop and double click it to run it.
  • Once Malwarebytes' Anti-Malware opens, perform your Full Scan to see if it works better now.
    • Note: If running Windows Vista or Windows 7 you must right-click the file and select Run as administrator for it to work properly.

Share this post


Link to post
Share on other sites

Done as asked, the print spooler service was stopped successfully but no dice.

Share this post


Link to post
Share on other sites

Alright, lets try a new one, delete the existing bat file from your desktop then do the following:

  • Please copy and paste the following text in the Code box exactly as written into notepad (not wordpad or any other text editor):
    @echo off
    net stop EPSON_EB_RPCV4_01
    net stop EPSON_PM_RPCV4_01
    net stop spooler
    taskkill /f /im e_fatiefe.exe
    if exist "%programfiles(x86)%" "%programfiles(x86)%\Malwarebytes' Anti-Malware\mbam.exe"
    if not exist "%programfiles(x86)%" "%programfiles%\Malwarebytes' Anti-Malware\mbam.exe"
    net start spooler
    net start EPSON_EB_RPCV4_01
    net start EPSON_PM_RPCV4_01
    exit


  • Once you've done that click on File and select Save As...
  • In the Save dialogue box click on the drop down menu next to Save as type and select All Files
  • Name the file MBAM Scan.bat (the .bat extension is very important)
  • Save the file to your desktop and double click it to run it.
  • When Malwarebytes' Anti-Malware opens, perform your scan, once Malwarebytes' Anti-Malware is closed you'll be able to use your printer once more.
    • Note: If running Windows Vista or Windows 7 you must right-click the file and select Run as administrator for it to work properly.

Let me know how it goes.

Thanks :D

Share this post


Link to post
Share on other sites

I got the following error:

"The EPSON V5 Service4(01) service is stopping.

The EPSON V5 Service4(01) service was stopped successfully.

The EPSON V3 Service4(01) service is stopping.

The EPSON V3 Service4(01) service was stopped successfully.

The Print Spooler service is not started.

More help is available by typing NET HELPMSG 3521.

ERROR: The process "e_fatiefe.exe" not found."

Share this post


Link to post
Share on other sites
That's ok, did the scan work better this time?

No, sorry.

Share this post


Link to post
Share on other sites

Alright, I'll leave it in marktreg's hands then, just something I thought I'd try.

Share this post


Link to post
Share on other sites

Let's try to eliminate some processes first. You never know, we might find something without delving too deeply.

Please download Process Explorer from here:

http://technet.microsoft.com/en-us/sysinte...s/bb896653.aspx

Unzip it and doubleclick on procexp.exe

Then click File then click Save and rename the text file to norm.txt.

Then boot into Safe Mode and do the same thing. Except this time rename the text file to safe.txt.

Please attach norm.txt and safe.txt to your next reply.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.