Probably a very silly techie question

RussJK

Are any of the accounts set up so that other accounts can't access their files? If so, that will easily explain this. The scanner will have to negotiate permissions with each file, so will take more time.

linni

No, nothing being shared at the moment. I could understand it it is was the main account because it's got more on it, but it's the rarely used 2nd account that takes longer.

linni

logs removed

The_Grandmaster

The second scan did scan more files which may explain the time difference.

aliEnRIK

Still a long time though


Please run COMBOFIX
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Shut down your anti virus
Follow the simple instructions it gives
Post the COMPLETE log it creates here (Split into sections if need be) ~ if there are loads of 'SNAPSHOT' pages then leave them out

If it comes up with a RENAMING error then RIGHT click the exe file and RENAME and call it QWERTY (Making the complete file name 'QWERTY.exe') Or SAVE as 'QWERTY' on download
(If no log comes up or you lose it, COMBOFIX.TXT can be found in C drive)

linni

Will do this this later today. Would it help if I run the scans on the first and second accounts and posted them both? Does it make any difference?

aliEnRIK

linni wrote: »

Will do this this later today. Would it help if I run the scans on the first and second accounts and posted them both? Does it make any difference?

Im more concerned if theres a virus on that 2nd account. If its taking a lot more time it suggests 'something' is running that shouldnt be. So no, not for now anyways

RussJK

linni wrote: »

No, nothing being shared at the moment. I could understand it it is was the main account because it's got more on it, but it's the rarely used 2nd account that takes longer.

If you log in as your second account, and try to browse to the user account folder of your main account, you can easily see if your main account has been set so that its files can't be viewed by the second account. If you don't know how, just double click on:
My Computer > 'C:' > 'Documents & Settings', and look for the name of your main account. If you can't access it, then that would explain why it is so slow for MBAM to scan - as MBAM would be negotiating permissions for each and every protected file.

I've seen this myself when I created a protected user account on someone's Windows XP computer (a long time ago), and running an antivirus from another account: it takes longer, and will linger on each file stored in the protected user account.

(if you know what you are doing, you could also check the 'user accounts' section of the Control Panel and directly see whether the main account has its files hidden from other users. I can't quite remember the exact way to do this with XP, but could do it in a second if the computer was in front of me!)

linni

logs removed

linni

Hi RussJK - I've looked at c:documents&settings/admin/favourites (& my documents) which are empty but if I go into c:documents&settings/account1 access is denied. In documents&setting here is also a Temp file which is also empty, but there is a temp2 file which has stuff from a 3rd account which is now closed and I have no idea how it got there. Iwill go into account1 and delete it and see if that helps.