Windows 10: What is wrong with the Microsoft Safety Scanner status information and logging?

EXAMPLE #1

MSS reported it found 19-infected files during the scan. When the scan was complete, it said no infections were found.

Here's the log:

-----------------------------------------------------------

Microsoft Safety Scanner v1.333, build 1.333.203.0
Started On Thu Mar 11 23:15:09 2021
Engine: 1.1.17900.7
Signatures: 1.333.203.0
MpGear: 1.1.16330.1
Run Mode: Interactive Graphical Mode
Results Summary:
----------------
No infection found.
Successfully Submitted MAPS Report
Successfully Submitted Heartbeat Report
Microsoft Safety Scanner Finished On Fri Mar 12 10:33:14 2021

Return code: 0 0x0

-----------------------------------------------------------

Where are the 19-infections it found when scanning and what did it do with them?


EXAMPLE #2

MSS reported it found 3-infected files during the scan. When the scan was complete it only reported 2-infections. One was removed and the other needed a restart to complete removal. Here's the log:

-----------------------------------------------------------

Microsoft Safety Scanner v1.333, build 1.333.203.0

Started On Fri Mar 12 00:16:11 2021

Engine: 1.1.17900.7
Signatures: 1.333.203.0
MpGear: 1.1.16330.1
Run Mode: Interactive Graphical Mode
Results Summary:

----------------
No infection found.
Successfully Submitted Heartbeat Report
Microsoft Safety Scanner Finished On Fri Mar 12 00:18:56 2021
Return code: 0 0x0
-----------------------------------------------------------

Not only did it not report infections in the log after reporting them in the scan results, but it also says the scan took 2-seconds when it took over 10-hours.

At this point, I have zero trust in the Microsoft Safety Scanner. There is no such thing as security without accountability, which, in this case, would mean having an accurate and complete log file.


Does anyone know why MSS is misreporting infections and not logging them when found? Maybe there is another log hidden somewhere?

:)

 

Unable to Load Microsoft Safety Scanner Web Page


Hi, Which specific URL are you having problems with?

Does this help?
You cannot download the Microsoft Safety Scanner because of a malware infection
"If a malware infection is preventing you from downloading the Microsoft Safety Scanner to your computer, use one of the following methods to download and run the tool.Method 1: Run the Microsoft Safety Scanner from removable media

Save the Microsoft Safety Scanner to removable media on an uninfected computer, and then run the tool on the infected computer. To do this, follow these steps:........................................"

You can also get the scanner here e.g.
Microsoft Safety Scanner Download

 

What's wrong with Microsoft Safety Scanner?

I always download Microsoft Safety Scanner and Malicious Malware Removal Tool but today it says the Safety Scanner is not working. I try it again and it tries to load but is taking too long and looks unusual loading up and then down and takes a long time.
Somethings wrong. So, I did not run it. anyone know what's going on with this? I use Windows 10 64bit and never had this issue before.

 

Need to know what Microsoft Safety Scanner is removing - logs not verbose enough

The current version of Microsoft Safety Scanner v1.0 (build 1.227.458.0) logging provides no details that can help in determining what was found and the location of the threat on the system. The only thing given that's relative to the threat detected is
a PID number, but if the system is then turned off and/or or has the threat removed then you won't be able to find out what process the PID belonged to or anything else to help identify it for documentation and future purposes.

Here's an example:

"

Threat detected: TrojanDownloader:Win32/Zdowbot.A

process://pid:72020,ProcessStart:131164393356509360

SigSeq: 0x00007578FC0EA743

Quick Scan Removal Results

----------------

Start 'remove' for process://pid:72020,ProcessStart:131164393356509360

Operation succeeded !

Results Summary:

----------------

Found TrojanDownloader:Win32/Zdowbot.A and Removed!

Microsoft Safety Scanner Finished On Tue Aug 23 14:31:26 2016

"

Says it removed the threat, but from a filesystem perspective what exactly was removed? There's absolutely no information in these logs telling me what changes were actually made by the Safety Scanner.

Not looking for suggestions on other tools outside of Microsoft Safety Scanner or requests to describe my situation and why I used it. Subsequent scans with this tool turned up clean so there's confidence that between the second clean scan, plus clean Mc-Crappy
and Malwarebytes scans that it is in fact removed. With that said though lack of info in the logs and not knowing what changes are being made by this type of tool is an issue for me, I don't think I'll continue to use this tool and will begin looking to other
offline scanners out there.

My real question is:

Does anyone know if there's any place to suggest enhancements to this tool?