Scan in safe mode question

K

Ken A

Today for the first time I did a virus & malware scan in safe mode. For the
scan I used Spybot SD, AdawareSE. and AVG Pro 7.5. Spybot did the scan in
about the same time as in regular mode. AdawareSE took a lot longer. AVG
scan took almost twice as long as a scan in regular mode. I am wondering
why a scan in safe mode takes so much longer. I welcome anyone's thoughts
on this time difference.

Thank you,
Ken A
 
Y

Yves Leclerc

Safe Mode(s) only load up the "bare" minimum drivers needed to access the
hardware. It does not load up any enhanced drivers that can be used to
accelerate the hard drive access so the hard drive is accessed at the safe
slowest speed possible.
 
P

Pop`

You're teasing, right? Suffice it to say it's slower because not everything
is loaded and stop there. Hard drive speeds and writes etc. do not change;
that's a hardware spec and is a constant.

Pop`
 
N

NewScience

I disagree. Hardware drivers may provide double-buffering in read/write
aheads and such. The MFT can be read in shared memory, which may not fully
be accessible as quickly in Safe Mode due to minimal hardware drivers and
services.
 
R

Rock

Replied to [Ken A]s message :

Did you actually look at this thread? It's about running scandisk in win98
in safe mode, not chkdsk in XP, and provides no revealing info about why
safe mode takes longer.
 
A

Ayush

Replied to [Rock]s message :
-----------------------------------------------------------
Did you actually look at this thread? It's about running scandisk in
win98 in safe mode, not chkdsk in XP, and provides no revealing info
about why safe mode takes longer.


Yes. The main thing was same. The read/write time on hard disk. See the reply of
Bob_b named "a whole bunch" :
--------------------
I'm not sure what the correct terms are so I'll say safe mode uses basic drivers
and normal mode use advanced drivers.
Advanced is faster.
Scandisk through has an option to enable write testing, if that option is enabled
the test will take a long time.
I think what the option does is>read a block>rewrite the block>reread the block,
if you couple that with safe mode drivers the test may take a while.
In the multi-years I have used this machine I have run scandisk through once, just
for a test.
As I recall, scandisk through>normal mode drivers>disable write test>40GB HD=
about an hour.
 
J

Jim Byrd

Hi Ken - You might want to consider running such programs from a 'Clean
Boot' which offers some advantages over Safe mode.

From my Blog, Defending Your Machine, addy below in my Signature:


#########IMPORTANT#########

Show hidden files and run all of the following removal tools from Safe mode
or preferably a "Clean Boot" when possible (which will let you use the
Windows Installer, access the Internet safely, etc., while still avoiding
interfering programs or malware), logged on as an Administrator. BEFORE
running these tools, be sure to clear all Temp files and your Temporary
Internet Files (TIF) (including offline content.) Reboot and test if the
malware is fixed after using each tool.

HOW TO Enable Hidden Files
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2002092715262339

How to boot to Safe mode
http://spyware-free.us/tutorials/safemode/ and
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406

Clean Boot - General Win2k/XP procedure, but see below for links for other
OS's (The procedure does differ by OS, so be sure to check for yours. The
following is for Win2k w/msconfig - you can obtain msconfig for Win2k here:
http://www.3feetunder.com/files/win2K_msconfig_setup.exe ):

1. StartRun enter msconfig.

2. On the General tab, click Selective Startup, and then clear the 'Process
System.ini File', 'Process Win.ini File', and 'Load Startup Items' check
boxes. Leave the 'boot.ini' boxes however they are currently set.

3. In the Services tab, check the "Hide All Microsoft Services" checkbox,
and then click the "Disable All" button. If you use a third party firewall
then re-check (enable) it. For example, if you use Zone Alarm, re-check the
True Vector Internet Monitor service (and you may also want to re-check
(enable) the zlclient on the Startup tab.) Equivalent services exist for
other third party firewalls. An alternative to this for XP users is to
enable at this time the XP native firewall (Internet Connection Firewall -
ICF). Be sure to turn it back off when you re-enable your non-MS services
and Startup tab programs and restore your normal msconfig configuration
after cleaning your machine.

4. Click OK and then reboot.

For additional information about how to clean boot your operating system,
click the following article links to view the articles in the Microsoft
Knowledge Base:

310353 How to Perform a Clean Boot in Windows XP
http://support.microsoft.com/kb/310353
281770 How to Perform Clean-Boot Troubleshooting for Windows 2000
http://support.microsoft.com/kb/281770/EN-US/ (Procedure not using msconfig)
267288 How to Perform a Clean Boot in Windows Millennium Edition
http://support.microsoft.com/kb/267288/EN-US/
192926 How to Perform Clean-Boot Troubleshooting for Windows 98
http://support.microsoft.com/kb/192926/EN-US/
243039 How to Perform a Clean Boot in Windows 95
http://support.microsoft.com/kb/243039/EN-US/
#########IMPORTANT#########



--
Regards, Jim Byrd, MVP, DTS, ASVOP
My Blog, Defending Your Machine,
http://defendingyourmachine.blogspot.com/



In Ken A <nospaml@nospamnet> typed:
|| Thank you Yves Leclerc for your reply. I appreciate your prompt
|| responce.
||
|| Ken A
||
|| ||| Safe Mode(s) only load up the "bare" minimum drivers needed to
||| access the hardware. It does not load up any enhanced drivers that
||| can be used to accelerate the hard drive access so the hard drive
||| is accessed at the safe slowest speed possible.
|||
|||
|||
|||| Today for the first time I did a virus & malware scan in safe
|||| mode. For the
|||| scan I used Spybot SD, AdawareSE. and AVG Pro 7.5. Spybot did the
|||| scan in about the same time as in regular mode. AdawareSE took a
|||| lot longer. AVG scan took almost twice as long as a scan in
|||| regular mode. I am wondering why a scan in safe mode takes so
|||| much longer. I welcome anyone's thoughts on this time difference.
||||
|||| Thank you,
|||| Ken A
||||
||||
|||
||| --
||| ---
|||
||| Y.
 
R

Rock

Ayush said:
Replied to [Rock]s message :
-----------------------------------------------------------
Did you actually look at this thread? It's about running scandisk in
win98 in safe mode, not chkdsk in XP, and provides no revealing info
about why safe mode takes longer.


Yes. The main thing was same. The read/write time on hard disk. See the
reply of Bob_b named "a whole bunch" :
--------------------
I'm not sure what the correct terms are so I'll say safe mode uses basic
drivers and normal mode use advanced drivers.
Advanced is faster.
Scandisk through has an option to enable write testing, if that option is
enabled the test will take a long time.
I think what the option does is>read a block>rewrite the block>reread the
block, if you couple that with safe mode drivers the test may take a
while.
In the multi-years I have used this machine I have run scandisk through
once, just for a test.
As I recall, scandisk through>normal mode drivers>disable write test>40GB
HD= about an hour.


My point is this link deals with scandisk in win98, not chkdsk in XP.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top