GMER shows ExDeleteNPagedLookasideList?

[giantbender]

I ran GMER 2.1.19163 on my computer but it only shows this. Is this a sign of an infection or a trojan? I've never seen it before. If you have any references please let me know.

 

---- Kernel code sections - GMER 2.1 ----

INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 560  fffff80002fb4000 45 bytes [00, 00, 42, 00, 56, 4D, 4F, ...]
INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 607  fffff80002fb402f 16 bytes [00, 00, A0, CD, 82, 01, 00, ...]

---- EOF - GMER 2.1 ----
 

Thanks

 

[AdvancedSetup]

This appears to be normal behavior. What issues are you having that would cause you to run this tool?

Is your computer infected or appear to be? Did you need help scanning it?

[giantbender]

This appears to be normal behavior. What issues are you having that would cause you to run this tool?

Is your computer infected or appear to be? Did you need help scanning it?

 

There was some strange behavior on one of the accounts where I couldn't drag and drop files or text from one place to another. When I switched accounts everything was fine. When I switched back the problem was still present and I killed off processes --anything with my session id and username in procexp-- one by one, including explorer, but there was no change. I also unplugged my USB keyboard and mouse and plugged them back in. At the end after everything was closed except a command prompt window so I reopened Process Explorer and then I ran GMER and that's what it showed. I've ran GMER many times before and I've never seen that before.

 

After I rebooted I ran GMER again and those two INITKDBG lines were gone. Also everything was fine and I could drag and drop again. I'm not saying the two are related but I thought it was pretty weird. I'm using Windows 7 x64 btw.

[AdvancedSetup]

Yes, the system was probably trying to close a file stream or similar and could not and that is probably what caused the issue.

If there is nothing else then I'll close you topic soon. Let me know if you need anything else.

Thanks

[giantbender]

Ok thanks for your help. I also ran TDSS Killer with the 'loaded modules' option but found nothing.

[AdvancedSetup]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!