Cannot Get Malwarebytes To Finish

Hello,

I tried to run malwarebytes today and it got as far as the heuristic analysis section. I just sat on that icon for more than 2 hours. The buttons to pause or cancel the scan were grayed out and not functional. The computer was locked up pretty good. I tried to close malwarebytes by closing the window and that just hung for a long time. There was no way to quit from the task manager either. Eventually everything closed, but I was left with just my desktop wallpaper and no icons like windows explorer was no longer running. Ctrl+Alt+Delete would not open a task manager, so I could not try a manual restart of explorer. I ended up having to hard restart.

On restart, everything seems ok and I uninstalled malwarebytes. No items were detected in the scans before the heuristic analysis.

I could try again and just leave it overnight to see if it would finish, but I have no idea why the buttons to stop the scan would not work. Are there any suggestions here?

I did the scans with RogueKiller, TDSSkiller, and MGtools and they didn't turn up anything. I haven't run hitman yet because I had to download it from a different site and don't want to run it until I can check it's digital signature.

I can post the logs from the scans that did finish if that would be helpful.

Thanks,

LMHmedchem

 

The other thread was to ask for a digital signature for hitman pro which I will need unless you can confirm that the download location where I got my copy of hitman pro is reputable.

I have included the logs for RogueKiller, TDSSKiller, and MGtools.

Is it unusual for a user to not be able to run malwarebytes? Should I try running it overnight and just leaving it to see if it finished?

LMHmedchem

 

Here is the hitman log. I don't think it found anything.

LMHmedchem

 

The oddest thing at the moment is that I am getting about 30 intrusion attempts per hour from the same IP address. All the inbound connection attempts are TCP and each attempt is to a different port. This has been going on for a bit and I have changed my IP address twice. I just did it again and after rebooting, the inbound connection attempts are there in the log immediately.

I get hundreds of intrusion attempts a day like most users (most from APNIC), but it is unusual to get more than a handful from the same IP. My guess it that when there are many from the same IP, the intrusion attempts are coming from a compromised computer somewhere. If these intrusions are wide spread, meaning that many computers are being targeted, I would have expected that IP to have been shut down by now, or at least the user notified that their system is has been hacked.

I thought I should check to make sure that there was nothing on my system that may be alerting someone to my new IP address after it has been changed. I have a sofaware hardware firewall and I added a rule to block the entire IP range for both inbound and outbound and then changed my IP. I was particularly looking to see if there were any outbound connections attempts to that range that were now being blocked and logged by my new rules. I haven't seen any outbound connections either in my hardware firewall logs or my software firewall logs.

At any rate, I decided to run the malware scans today and ran into issues when I couldn't download hitman from major geeks and couldn't get malware bytes to finish running. I am reasonably well convinced that there is nothing on my system that is inviting this but I may restore from a clean image tomorrow and see if that makes a difference.

Do you see this kind of thing often? Do you have any other suggestions?

LMHmedchem