Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

All File transfers hang. No virus!


  • Please log in to reply

#91
RKinner

RKinner

    Malware Expert

  • Expert
  • 21,325 posts
  • MVP

Can you give me a process monitor log of the time between when you plug in a device and when it becomes available?


  • 0

Advertisements


#92
phickspc

phickspc

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 291 posts

This logfile was captured by process monitor when epson scanner was plugged in and the capture was stopped when the 'this device can run faster' warning appeared in system tray.

 

 


  • 0

#93
RKinner

RKinner

    Malware Expert

  • Expert
  • 21,325 posts
  • MVP

Apparently I don't have permission to get the file plus it appears to be a txt file.  Best to save with the native process monitor extension


  • 0

#94
phickspc

phickspc

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 291 posts

Apparently I don't have permission to get the file plus it appears to be a txt file.  Best to save with the native process monitor extension

Uploaded here again.

I usually save these files as PMLs but manually rename to .txt incase of upload type limitations.

It's now a txt file.


  • 0

#95
RKinner

RKinner

    Malware Expert

  • Expert
  • 21,325 posts
  • MVP

Says I need a login & password


  • 0

#96
phickspc

phickspc

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 291 posts

Says I need a login & password

I just downloaded from another device, it downloaded & launched fine. Maybe clear your cookies/cache.


Edited by phickspc, 14 March 2018 - 05:08 PM.

  • 0

#97
RKinner

RKinner

    Malware Expert

  • Expert
  • 21,325 posts
  • MVP

Try uninstalling or stopping Stream What You Hear SWYH.exe.  87% of the entries are from it.   Then make a new log.


  • 0

#98
phickspc

phickspc

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 291 posts

Try uninstalling or stopping Stream What You Hear SWYH.exe.  87% of the entries are from it.   Then make a new log.

Done.

Warning still displays upon connecting scanner.

Log here

 

Also, not sure if this relates to the issue we're working on,

but recently, as I was checking my multiple backup hard drives via usb/sata/esata (whilst PC was off), I turned on PC and launched Seatools and experienced BSOD. Restarted and then that particular drive would read fine with Seatools, but then when I connected another drive whilst pc was off, launching Seatools created a BSOD again.

 

Screenshot of the errors shown via Nirsoft's Bluescreenview:

Seatools BSOD errors  Bluescreenview.jpg


Edited by phickspc, 15 March 2018 - 11:14 AM.

  • 0

#99
RKinner

RKinner

    Malware Expert

  • Expert
  • 21,325 posts
  • MVP

The most active process is related to Microsoft Security Essentials.  You might try uninstalling it and see if things go faster.  The other process is something called HTC Sync Manager. or HSMServiceEntry.exe  Not sure why it has to run for a scanner but I suppose it checks to see if you have plugged in a phone. 

 

Can't seem to find where it tells you about USB speed.


  • 0

#100
phickspc

phickspc

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 291 posts

HTC Sync Manager. or HSMServiceEntry.exe was installed a week ago but I end task'd it from task manager.

 

Uninstalled MSE but the usb warning still occured.

Log here.

Please note: this time I allowed the log to continue capturing a few more seconds after seeing the usb warning incase it didn't capture it in the log last time around.

 

Additionally, when I clicked to remove usb & esata, still had to wait a long time before it allowed me to disconnect the drive.

 

Since MSE didnt solve the problem, I have now system restored it.


Edited by phickspc, 16 March 2018 - 04:34 PM.

  • 0

Advertisements


#101
RKinner

RKinner

    Malware Expert

  • Expert
  • 21,325 posts
  • MVP

The log is defective.  No Process Names & no PIDs. 


  • 0

#102
phickspc

phickspc

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 291 posts

The log is defective.  No Process Names & no PIDs. 

Sorry.

Here's another one


  • 0

#103
RKinner

RKinner

    Malware Expert

  • Expert
  • 21,325 posts
  • MVP
High Resolution Date & Time:    3/16/2018 6:30:13.4705060 PM
Event Class:    Registry
Operation:    RegOpenKey
Result:    ACCESS DENIED
Path:    HKLM\System\CurrentControlSet\Control\Class\{6bdd1fc6-810f-11d0-bec7-08002be2092f}\0000
TID:    892
Duration:    0.0000594
Desired Access:    Read/Write

 

 

I have this key and have no problem accessing it.  There may be a permission error.  Open regedit and navigate to the key and see if you can Take Ownership and give System & Administrators Full Control.

 

https://www.howtogee...y-in-windows-7/


  • 0

#104
phickspc

phickspc

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 291 posts

 

High Resolution Date & Time:    3/16/2018 6:30:13.4705060 PM
Event Class:    Registry
Operation:    RegOpenKey
Result:    ACCESS DENIED
Path:    HKLM\System\CurrentControlSet\Control\Class\{6bdd1fc6-810f-11d0-bec7-08002be2092f}\0000
TID:    892
Duration:    0.0000594
Desired Access:    Read/Write

 

 

I have this key and have no problem accessing it.  There may be a permission error.  Open regedit and navigate to the key and see if you can Take Ownership and give System & Administrators Full Control.

 

https://www.howtogee...y-in-windows-7/

 

 

Thanks, I found three identical folders wth the long name {6bdd1fc6-810f-11d0-bec7-08002be2092f} and made sure I could access each subfolder, but found two that weren't allowed, but then I checked the read permission boxes anyway but it said I don't have the rights to do so. I clicked cancel and then restarted and was able to access the three identical folders & subfolders.

 

I connected scanner but the warning still showed.

Click here for New log.


Edited by phickspc, 18 March 2018 - 08:44 AM.

  • 0

#105
RKinner

RKinner

    Malware Expert

  • Expert
  • 21,325 posts
  • MVP

There is really only key with the name:

 

{6bdd1fc6-810f-11d0-bec7-08002be2092f}

 

Note the fc6 at the end of the first group of numbers.

 

There should be a sub key under {6bdd1fc6-810f-11d0-bec7-08002be2092f} called 0000

 

Do you see it?

 

If not right click on {6bdd1fc6-810f-11d0-bec7-08002be2092f} and export the key to your desktop.  Call it whatever you want.  Then right click on it and Edit and copy and paste the text into a reply.


  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP