Jump to content
mikew_nt

Huge reduction in number of registry items scanned

Recommended Posts

I noticed this morning that SAS ran significantly faster overnight, and the difference appears to be the number of registry items scanned (24234 vs. 35800 yesterday).

This was a Complete scan mode.

This is probably due to a definitions change, and possibly a change that was in error unless SAS can comment and say that it was intentional.

AVG ran approximately the same amount of time and scanned the same amount of total entities as it did yesterday.

There have been no changes to the machine in the past few weeks, nor was the machine rebooted, etc.

There is no evidence of any issues on the computer at all.

My guess is that there was an intentional or accidental change to the definitions.

SUPERAntiSpyware Scan Log

https://www.superantispyware.com

Generated 08/31/2012 at 00:58 AM

Application Version : 5.5.1012

Core Rules Database Version : 9157

Trace Rules Database Version: 6969

Scan type : Complete Scan

Total Scan Time : 00:58:02

Operating System Information

Windows 7 Home Premium 32-bit, Service Pack 1 (Build 6.01.7601)

UAC On - Limited User

Memory items scanned : 849

Memory threats detected : 0

Registry items scanned : 24234

Registry threats detected : 0

File items scanned : 86489

File threats detected : 0

SUPERAntiSpyware Scan Log

https://www.superantispyware.com

Generated 08/30/2012 at 01:11 AM

Application Version : 5.5.1012

Core Rules Database Version : 9149

Trace Rules Database Version: 6961

Scan type : Complete Scan

Total Scan Time : 01:11:49

Operating System Information

Windows 7 Home Premium 32-bit, Service Pack 1 (Build 6.01.7601)

UAC On - Limited User

Memory items scanned : 858

Memory threats detected : 0

Registry items scanned : 35800

Registry threats detected : 0

File items scanned : 86859

File threats detected : 0

Share this post


Link to post
Share on other sites

No changes were made to SAS that would affect the number of registry items scanned. There are many items that are scanned because they're pointed to by other items in the registry. As a result, scanned item numbers could change noticeably if a linked item was added or removed.

Share this post


Link to post
Share on other sites

Sorry, I had meant to reply to this before. This was a SAS engine related issue from what I can tell nighthawkext.

The engine update (5.5.1016) of around Sept 8 put the behavior back to normal. Nothing changed on the PC before, or around this time.

I've included the logs below to show pre and post engine update from SAS.

SUPERAntiSpyware Scan Log

https://www.superantispyware.com

Generated 09/08/2012 at 00:59 AM

Application Version : 5.5.1012

Core Rules Database Version : 9196

Trace Rules Database Version: 7008

Scan type : Complete Scan

Total Scan Time : 00:59:17

Operating System Information

Windows 7 Home Premium 32-bit, Service Pack 1 (Build 6.01.7601)

UAC On - Limited User

Memory items scanned : 853

Memory threats detected : 0

Registry items scanned : 23482

Registry threats detected : 0

File items scanned : 87179

File threats detected : 0

SUPERAntiSpyware Scan Log

https://www.superantispyware.com

Generated 09/09/2012 at 01:13 AM

Application Version : 5.5.1016

Core Rules Database Version : 9198

Trace Rules Database Version: 7010

Scan type : Complete Scan

Total Scan Time : 01:12:58

Operating System Information

Windows 7 Home Premium 32-bit, Service Pack 1 (Build 6.01.7601)

UAC On - Limited User

Memory items scanned : 813

Memory threats detected : 0

Registry items scanned : 35050

Registry threats detected : 0

File items scanned : 86416

File threats detected : 0

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×