Combofix keeps hanging just before it shows Completed Stage_1... I see this in the screen when it hangs.
Scanning for Infected Files . . .
This typicaly doesn't take more then 10 minutes.
However, scan times for infected machines may easily double.
I have waited over an hour and it doesn't continue. I can control the PC and even close the combofix box. When I look at the process list I see CF1441.cfxxe and mbr.cfxxe is running. If i kill the mbr.cfxxe process combofix moves on.
If I try and boot the computer in safe mode I get no video but It acts like its booting properly, so I ran msconfig and set diagnostic mode but CF still hangs with the same symptoms. I tried running malwarebytes. Malwarebytes starts off fine but after 5 minutes it comes to a crawl and only scans 1 file every 5-10 seconds.
I did a fixmbr and a fixboot in the recovery console and it didn't help.
I ran HijackThis and didn't see anything exceptional.
I am guessing something is hooked into the disk access code and is blocking combofix from reading the mbr and also slowing down malwarebytes. It may be a virus or maybe is part of some antivirus/antispyware app that left hooks on the system.
I have the combofix log and the HJT log but I just noticed that Im not supposed to post them here. anyone have any ides on how to find out what might be hooked into the system and slowing it down?
Edited by JimMcGowanInlet, 12 April 2010 - 05:23 PM.