Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Freezing pages, cannot run OTL, rogue killer shows ntoskml.exe


  • This topic is locked This topic is locked

#31
zep516

zep516

    Trusted Helper

  • Malware Removal
  • 6,791 posts
Hello,

Lets check the disk for issues... This will take a while. Take your time. It's best to view these instructions on another computer or print them out if these options are available to you.

Here's how:
  • Click on Start then click on My Computer
  • Right click on the C: drive, scroll down and click on Properties
  • Click on the Tools tab
  • Click on the Check Now... button
  • In the dialog box that opens, place a checkmark in the 2 boxes and click on Start
  • The next dialog box will now show the following
    • Chkdsk cannot run because the volume is in use by another
      process. Would you like to schedule this volume to be
      checked the next time the system restarts? <Y/N>
    • Type Y
    and reboot the computer.
  • Checkdisk will start once the computer reboots. It can take up to an hour or more to complete as it goes through the stages. Allow it to run uninterrupted till complete.
To find the log that is produced please do the following:
  • Reboot the computer.
  • Click on Start then Control Panel
  • In Control Panel click on Administrative Tools
  • Click on Event Viewer
  • Once the Event Viewer opens, click on Application in the left pane
  • In the right pane locate the Winlogon entry under the Source column that corresponds with the time that Checkdisk was ran.
  • Double click on it and a window will open.
  • Click on the save to clipboard button --> clipboardbutton.jpg
This will save the log to the clipboard so you can paste it in you next reply.
  • 0

Advertisements


#32
Vintage Charms

Vintage Charms

    Member

  • Topic Starter
  • Member
  • PipPip
  • 75 posts

OK, Can't find a Winlogon entry.  The c: scannow ended up The Volume is Clean. 

 

Bu I see an error list but it covers dates back to 12/2013.  I can put it in excel and sort out every but the Aug 13th.


Edited by Vintage Charms, 13 August 2014 - 07:15 PM.

  • 0

#33
zep516

zep516

    Trusted Helper

  • Malware Removal
  • 6,791 posts
"The volume is clean"

volume is Hard drive.
That means there were no errors detected on the volume or all the errors were corrected.

It just seems to have run very quickly, did it actually scan the drive ?

How was the computer running today ?
  • 0

#34
Vintage Charms

Vintage Charms

    Member

  • Topic Starter
  • Member
  • PipPip
  • 75 posts

It only went to 71%.  It is ok, but I have not run any cleaners.  I actually haven't done anything on it much.  I am afraid someone is getting information.  I don't want to go into any account.  I have a laptrop I use too.


  • 0

#35
Vintage Charms

Vintage Charms

    Member

  • Topic Starter
  • Member
  • PipPip
  • 75 posts

finally found something under application:  The winlogon notification subscriber <SessionEnv> was unavailable to handle a notification event.


  • 0

#36
Vintage Charms

Vintage Charms

    Member

  • Topic Starter
  • Member
  • PipPip
  • 75 posts

Just ran roguekiller again and now I have 6 Pom policies and PUM start menu.  They weren't there before either.  The good thing is these I can delete.


  • 0

#37
Vintage Charms

Vintage Charms

    Member

  • Topic Starter
  • Member
  • PipPip
  • 75 posts

Now Malwarebytes won't run again.  I really think something is still in here.


  • 0

#38
zep516

zep516

    Trusted Helper

  • Malware Removal
  • 6,791 posts
I don't see anything, Malwarebytes was clean and OTL was clean. I believe your machine is clean and there maybe other issues going on.

Who ran combofix? I see signs that it was run at some point. Do you have the log file for it? ComboFix's log shall be located at C:\COMBOFIX.TXT

See if you can find it...

Joe
  • 0

#39
Vintage Charms

Vintage Charms

    Member

  • Topic Starter
  • Member
  • PipPip
  • 75 posts

I searched for that file and combofix.  Nothing shows up.  It might have been in December when I asked geekstogo to help me.   But I don't believe I have run it since. 


  • 0

#40
zep516

zep516

    Trusted Helper

  • Malware Removal
  • 6,791 posts
What version of AVG did you have installed ? Do you remember ?
  • 0

Advertisements


#41
Vintage Charms

Vintage Charms

    Member

  • Topic Starter
  • Member
  • PipPip
  • 75 posts

No, I had problems with that so I went to avast.  But I don't know when that was.


  • 0

#42
zep516

zep516

    Trusted Helper

  • Malware Removal
  • 6,791 posts
I know when it was, so I want you to run the AVG REMOVER TOOL just in case there are left over AVG files,

Go to this page Here Look for this one on the right side of the page-->4th one down AVG Remover(64bit) 2013 and download the file save it to the desktop and run it.

Let me know you have done that.

Joe
  • 0

#43
Vintage Charms

Vintage Charms

    Member

  • Topic Starter
  • Member
  • PipPip
  • 75 posts

Ran that and rebooted.  Guess I lost you.  Everything seems to be running smoothly.  Those entries on the RogueKiller scan worry me, but I guess until something happens I won't worry.  Malwarebytes ran thru within 1 hour or so and came up clean.  Superantispyware always dredges up something but those are to be expected.  Thank you very much for all of the help.  Please close this task. 


Edited by Vintage Charms, 19 August 2014 - 04:09 PM.

  • 0

#44
zep516

zep516

    Trusted Helper

  • Malware Removal
  • 6,791 posts
Sorry,

Very tied up with additional work in real life.

How are things right now...
  • 0

#45
Vintage Charms

Vintage Charms

    Member

  • Topic Starter
  • Member
  • PipPip
  • 75 posts

Yes, I understand.  Everything seems to be running smoothly.  Those entries on the RogueKiller scan worry me, but I guess until something happens I won't worry.  Malwarebytes ran thru within 1 hour or so and came up clean.  Superantispyware always dredges up something but those are to be expected.  Thank you very much for all of the help.  Please close this task.


  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP