Jump to content


  • Posts

  • Joined

  • Last visited


0 Neutral
  1. Man that ProcMan file was huge - even compressed it was 24 MB. Looks like this forum only allows 20 MB max, so I uploaded it to my dropbox FTP site. Feel free to grab it there if you like http://dl.dropbox.com/u/39356082/ProcMon.zip
  2. MrC, I appreciate all your help! I haven't done anything yet, I am a bit too busy right now. I think in the next few weeks that I will go ahead and just rebuild the laptop. I am fairly confident that I don't have a virus or Malware but the fact that I can't run MB in the future is not that comforting. So to be safe I will just go ahead and start from scratch. I applaud your effort though...
  3. I tried real quick to run another MB scan it after a minute and a half the "Fake file path" scan returned. I just killed MB's scan so it wouldn't lock up my machine again. A rebuild might be imminent in the near future.
  4. Checking file system on C: The type of the file system is NTFS. A disk check has been scheduled. Windows will now check the disk. CHKDSK is verifying files (stage 1 of 5)... 125184 file records processed. File verification completed. 78 large file records processed. 0 bad file records processed. 2 EA records processed. 91 reparse records processed. CHKDSK is verifying indexes (stage 2 of 5)... 169856 index entries processed. Index verification completed. 0 unindexed files scanned. 0 unindexed files recovered. CHKDSK is verifying security descriptors (stage 3 of 5)... 125184 file SDs/SIDs processed. Cleaning up 568 unused index entries from index $SII of file 0x9. Cleaning up 568 unused index entries from index $SDH of file 0x9. Cleaning up 568 unused security descriptors. Security descriptor verification completed. 22337 data files processed. CHKDSK is verifying Usn Journal... 37170416 USN bytes processed. Usn Journal verification completed. CHKDSK is verifying file data (stage 4 of 5)... 125168 files processed. File data verification completed. CHKDSK is verifying free space (stage 5 of 5)... 46040262 free clusters processed. Free space verification is complete. CHKDSK discovered free space marked as allocated in the master file table (MFT) bitmap. CHKDSK discovered free space marked as allocated in the volume bitmap. Windows has made corrections to the file system. 243386367 KB total disk space. 58932796 KB in 97283 files. 56864 KB in 22338 indexes. 0 KB in bad sectors. 235655 KB in use by the system. 65536 KB occupied by the log file. 184161052 KB available on disk. 4096 bytes in each allocation unit. 60846591 total allocation units on disk. 46040263 allocation units available on disk. Internal Info: 00 e9 01 00 50 d3 01 00 fc 4c 03 00 00 00 00 00 ....P....L...... 58 02 00 00 5b 00 00 00 00 00 00 00 00 00 00 00 X...[........... 70 61 57 00 50 01 55 00 38 1e 55 00 00 00 55 00 paW.P.U.8.U...U. Windows has finished checking your disk. Please wait while your computer restarts.
  5. I only have network drives I do not have any other local partitions. At any rate the new log is attached. GMER2.log
  6. MrC, Ok this is weird. I booted to safe-mode without running any command line switches or ignor list and it ran fine. MB found (1) vulnerability pum.disabled.securitycenter. It ran until completion and did not lock up. In addition, I never saw it scan the jibberous file path like in my screenshot in this post. So I booted into windows and ran MalwareBytes again like normal and I almost instantly saw it trying to scan the jibberish file path again. So I just stopped the scan. Is it possible to only have Spyware in Windows or is there some kind of "Fake" file path that just loops and freaks out the MB scanner? Not sure but it's definitely an odd issue.
  7. MrC, I disabled my Symantec Endpoint Protection in the system try and went into services and stop all the Symantec services. I then ran MB again and did not touch it for 45 minutes. 8 minutes into the scan the file counter quit incrementing, but I left everything alone and just moved the mouse occasionally so the screensaver wouldn't pop on. About the 30-40 minute mark the files still haven't incremented and the time scanning still said 8 minutes - that's when the machine totally locked up. I had to hard power cycle it. So there is definitely something hidden in those folders of jibberous that is hanging when MB runs.
  8. No it was able to scan the other Bitlocked machine. So I have no clue.
  9. I am wondering if it's because of drive encryption (Win 7 Bitlocker) I am going to install on another Bitlocked laptop with a fresh build. I will keep ya posted.
  10. I exclude the database and the Cisco folder with no avail. My machine froze after about 2 mins of MB scan.
  11. No the JLEPass.kdbx is KeePass encrypted database for password. The other program is to manage my fiber fabric. If you are running out of utils then I may just have to rebuild it. Let me know your thoughts. Thanks!
  12. I tried Malwarebytes again and it hung after about 6 minutes. Same bogus jiberish file path as the screenshot above. I ensured that my folders were unhidden in explorer and that folder does not exist. Obviously it's pulling that from the registry somewhere. 02022012_162503.log OTL.Txt
  13. MrC, I have a HR video that is two hours long and I have 3/4 of the way done. I read the OL restarts your computer automatically so I haven't ran that one yet because I don't want to blow away my place in the HR video. Should be finished up within an hour then I will run the other util and post. Thanks!
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.