1. Oh My!

    Oh My! Malware Expert Staff Member

    Did you shut down or reboot the computer after setting Process Monitor?
     
  2. Yes, I was trying to follow your directions, but I may have misunderstood. Part of what you said was:
    • Close Process Monitor (I did this after changing the settings as you said to above this)
    • Close any open programs and shut down your computer (I shut it down here)
    • Reboot your computer and allow the boot up process to complete, including logging in if you use a password (I turned it back on)
    • Wait 5 minutes before doing anything further (I waited 5 minutes)
    • Right click on Process Monitor and select Run as administrator
    And then I saved the file as the default name, but here's where it took 9+ hours to get to 48%, when I decided something may be wrong and my computer was freaking out, I canceled it and restarted my computer again here.
     
  3. Oh My!

    Oh My! Malware Expert Staff Member

    Thanks.

    Delete any existing bootlog file.

    Repeat the steps but when you are presented with the Filter popup select Reset filter. If you run into problems again stop and let me know. Giving the computer 10 minutes to process the Bootlog should be plenty of time. If it doesn't appear to be making progress after 10 minutes shut it down. I can try to adjust things to increase the chances of success.
     
  4. Sorry it's been so long, we went through another long stretch of no internet. Apparently I failed to save the file to my desktop, and instead found an enormous amount of bootlog files in my documents folder. I have a screenshot of part of what I found (there were a few more I couldn't get to fit). Should I delete all of them and continue with your last instructions?

    Just an update since so much time has passed, I have not gotten another ctfmon error since 9/12 (don't know if not having internet helped, but I also didn't get one on the days I did have internet). Once my computer was horribly slow, I could hardly do anything. I checked the task manager, and most of my memory was being taken up by Edge, which I don't use. Maybe it was some Edge update? This is the first day in a while where we've had internet, but so far my computer is working pretty good right now.
     

    Attached Files:

  5. Oh My!

    Oh My! Malware Expert Staff Member

    Chaos Annihilator likes this.
  6. I deleted all of the bootlog files and reran your Process Monitor step. I did have to reset the filters. I gave it 10 minutes to process the bootlog, and it said it was only at 2% so I made it stop. Now I have 2 bootlog files on my desktop. I don't understand why it can't finish, yet I get multiple bootlogs. I remember not having these issues when I used Process Monitor in the past.

    Still no ctfmon error, but when I type I get too many of the letter S. So far there is improvement.
     
  7. Oh My!

    Oh My! Malware Expert Staff Member

    Let's see what was captured. Please zip and upload the file to GoFile or the file hosting site of your choice and send me a Personal Message with the download link.
     
  8. I just went to do this, and thought I'd open them up and take a look myself first. I don't think they will open. I click on the first one (bootlog.pml) and it says "A log of boot-time activity was created by a previous instance of Process Monitor. Do you wish to save the collected data now?" I thought this was the saved collected data, so I said no and another window pops up that says bootlog.pml wasn't closed cleanly and is corrupt. I say okay, and the bootlog opens but is empty, though says it is 3.25 GB. I tried to open bootlog-1.pml, and it does the same thing, but says it is 384 MB.
     
  9. Oh My!

    Oh My! Malware Expert Staff Member

    Run it again then zip and upload the file following the instructions here.
     
  10. Sorry, I'm confused. I just tried running it again, I even uninstalled and reinstalled Process Monitor to make sure I was starting all over. I followed the instructions exactly. When I finished and went to save the file to my desktop, it said it would take well into the night. I gave it 15 minutes, and it was only 2% complete. I canceled it, and found 6 bootlogs on my desktop: Bootlog.pml through Bootlog-5.pml. None of them will open.

    Are you wanting me to zip them and send them to you anyway to see if you can open them? Should I go through the whole process again during some time when I can give it hours to try to save the log again? It seems like they won't open because I keep interrupting it because it takes so long.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds