Scanning Removable Drive

Hi,
I am using a Flash stick to store complete disk images for use in case of severe problems. I use the programme Macrium Reflect to put the image onto the stick.
My total system is about 17 GB and Macrium compresses this to about 10 GB which goes onto the stick.
Today after making an image I decided to do a virus check on the image on the stick with Avira Ant Virus which has a facility to check removable drives.
Normally when I run an on demand check of my hard drive with Avira it takes about 50 minutes but it checked the Corsair stick in just over a minute !
To me it just doesn't seem possible that it could check 10 GB of compressed info in that time. Am I missing something here ?
Any help would be welcome.
I tried the Avira Forum with no joy so I thought I would tap the Major Geeks brains.
I include a log for information.
Regards Alex



Avira AntiVir Personal
Report file date: 07 September 2009 09:29

Scanning for 1684804 virus strains and unwanted programs.

Licensee : Avira AntiVir Personal - FREE Antivirus
Serial number : 0000149996-ADJIE-0000001
Platform : Windows XP
Windows version : (Service Pack 3) [5.1.2600]
Boot mode : Normally booted
Username : Alex
Computer name : ERIC

Version information:
BUILD.DAT : 9.0.0.407 17961 Bytes 7/29/2009 10:34:00
AVSCAN.EXE : 9.0.3.7 466689 Bytes 7/21/2009 13:36:14
AVSCAN.DLL : 9.0.3.0 40705 Bytes 2/27/2009 10:58:24
LUKE.DLL : 9.0.3.2 209665 Bytes 2/20/2009 11:35:49
LUKERES.DLL : 9.0.2.0 12033 Bytes 2/27/2009 10:58:52
ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 10/27/2008 12:30:36
ANTIVIR1.VDF : 7.1.4.132 5707264 Bytes 6/24/2009 09:21:42
ANTIVIR2.VDF : 7.1.5.201 3414528 Bytes 9/3/2009 16:04:25
ANTIVIR3.VDF : 7.1.5.210 53760 Bytes 9/6/2009 16:04:26
Engineversion : 8.2.1.8
AEVDF.DLL : 8.1.1.1 106868 Bytes 7/28/2009 13:31:50
AESCRIPT.DLL : 8.1.2.27 467321 Bytes 9/6/2009 16:04:42
AESCN.DLL : 8.1.2.5 127346 Bytes 9/6/2009 16:04:39
AERDL.DLL : 8.1.2.4 430452 Bytes 7/23/2009 09:59:39
AEPACK.DLL : 8.1.3.18 401783 Bytes 7/28/2009 13:31:50
AEOFFICE.DLL : 8.1.0.38 196987 Bytes 7/23/2009 09:59:39
AEHEUR.DLL : 8.1.0.155 1921400 Bytes 8/30/2009 14:36:19
AEHELP.DLL : 8.1.7.0 237940 Bytes 9/6/2009 16:04:36
AEGEN.DLL : 8.1.1.60 364915 Bytes 9/6/2009 16:04:33
AEEMU.DLL : 8.1.0.9 393588 Bytes 10/9/2008 14:32:40
AECORE.DLL : 8.1.7.8 184692 Bytes 9/6/2009 16:04:28
AEBB.DLL : 8.1.0.3 53618 Bytes 10/9/2008 14:32:40
AVWINLL.DLL : 9.0.0.3 18177 Bytes 12/12/2008 08:47:59
AVPREF.DLL : 9.0.0.1 43777 Bytes 12/5/2008 10:32:15
AVREP.DLL : 8.0.0.3 155905 Bytes 1/20/2009 14:34:28
AVREG.DLL : 9.0.0.0 36609 Bytes 12/5/2008 10:32:09
AVARKT.DLL : 9.0.0.3 292609 Bytes 3/24/2009 15:05:41
AVEVTLOG.DLL : 9.0.0.7 167169 Bytes 1/30/2009 10:37:08
SQLITE3.DLL : 3.6.1.0 326401 Bytes 1/28/2009 15:03:49
SMTPLIB.DLL : 9.2.0.25 28417 Bytes 2/2/2009 08:21:33
NETNT.DLL : 9.0.0.0 11521 Bytes 12/5/2008 10:32:10
RCIMAGE.DLL : 9.0.0.25 2438913 Bytes 5/15/2009 15:39:58
RCTEXT.DLL : 9.0.37.0 86785 Bytes 4/17/2009 10:19:48

Configuration settings for the scan:
Jobname.............................: Removable Drives
Configuration file..................: C:\Program Files\Avira\AntiVir Desktop\rmdiscs.avp
Logging.............................: low
Primary action......................: interactive
Secondary action....................: ignore
Scan master boot sector.............: on
Scan boot sector....................: on
Boot sectors........................: E:, D:,
Process scan........................: on
Scan registry.......................: on
Search for rootkits.................: on
Integrity checking of system files..: off
Scan all files......................: All files
Scan archives.......................: on
Recursion depth.....................: 20
Smart extensions....................: on
Macro heuristic.....................: on
File heuristic......................: medium
Deviating risk categories...........: +APPL,+SPR,

Start of the scan: 07 September 2009 09:29

Starting search for hidden objects.
'46378' objects were checked, '0' hidden objects were found.

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'MailNotifier.Exe' - '1' Module(s) have been scanned
Scan process 'is360tray.exe' - '1' Module(s) have been scanned
Scan process 'avgtray.exe' - '1' Module(s) have been scanned
Scan process 'zlclient.exe' - '0' Module(s) have been scanned
Scan process 'ashDisp.exe' - '1' Module(s) have been scanned
Scan process 'SHUTZ.EXE' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'ashWebSv.exe' - '1' Module(s) have been scanned
Scan process 'ashMaiSv.exe' - '1' Module(s) have been scanned
Scan process 'ReflectService.exe' - '1' Module(s) have been scanned
Scan process 'IoctlSvc.exe' - '1' Module(s) have been scanned
Scan process 'jqs.exe' - '1' Module(s) have been scanned
Scan process 'avgnsx.exe' - '1' Module(s) have been scanned
Scan process 'is360srv.exe' - '1' Module(s) have been scanned
Scan process 'avgwdsvc.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'ashServ.exe' - '1' Module(s) have been scanned
Scan process 'aswUpdSv.exe' - '1' Module(s) have been scanned
Scan process 'vsmon.exe' - '0' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
32 processes with 32 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!
Master boot sector HD1
[INFO] No virus was found!

Start scanning boot sectors:
Boot sector 'E:\'
[INFO] No virus was found!

Starting to scan executable files (registry).
The registry was scanned ( '58' files ).


Starting the file scan:

Begin scan in 'E:\' <CORSAIR>
Begin scan in 'D:\'
Search path D:\ could not be opened!
System error [21]: The device is not ready.


End of the scan: 07 September 2009 09:31
Used time: 01:05 Minute(s)

The scan has been done completely.

1 Scanned directories
91 Files were scanned
0 Viruses and/or unwanted programs were found
0 Files were classified as suspicious
0 files were deleted
0 Viruses and unwanted programs were repaired
0 Files were moved to quarantine
0 Files were renamed
0 Files cannot be scanned
91 Files not concerned
0 Archives were scanned
0 Warnings
0 Notes
46378 Objects were scanned with rootkit scan
0 Hidden objects were found

 

Hi Plodre,
I have just checked and I had got checked "Scan Archives" , "All Archive Types" and "Smart Extensions". Is this right or should I uncheck one ?
Regards Alex

 

Hi Plodr,
As far as I can tell the settings
are universal but it doesn't make a point of saying that. At any rate I have been through every single setting and there is nothing relating to just removable media.
It just doesn't seem credible that a full compressed disk image can be checked in a minute.
Regards Alex

 

I would have said its due to the archive tbh. I would scan the drive originally, and see if anythign shows up there, and maybe chance it and take it for granted that theres nothing on the image of it.....

 

Thanks plodre and GroinshOt
I will try the Avira forum again but nobody there came up with anything at all. At least I now know it's not reliable.
I thought perhaps the low file count was because of the way the image is written but obviously not.
Cheers Alex