Software: Sophos Virus Removal Tool.
OS: Windows 10
I have completely reinstalled Windows now since the last one got infected. A virus was detected by Norton and removed. Though to stay on the safe side, I installed/downloaded a lot of free anti virus on demand scanners and started scanning. One of them deleted a file or made a change which made my computer unbootable. The install was encrypted so I couldn't repair any damage.
Anyways, I have now reinstalled Windows and have files backed up from my last install. I am in the process of transferring the files to this new machine but before I do that, I would like to scan my files to ensure my computer is definitely clean. Most of the encrypted volumes which have been mounted are in read only mode. Only my USB should be capable of transferring malware, if there are any. Though Avast and ClamAV on Linux have both confirmed my USB is clean. It should be clean.
Real-Time scanners: Norton Security, Malwarebytes Pro/Premium. (They shouldn't/don't conflict with one another. Malwarebytes is designed to run alongside real-time AV scanners)
Both of the above have scanned my machine and other files and stated that my computer is clean.
On-demand scanners I will use to scan my machine:
ClamWin, Kaspersky Virus Removal Tool, Microsoft Safety Scanner, Stinger (by McAfee) and Sophos Virus Removal Tool.
However I cannot scan with Sophos. Whenever I do, in the middle of the scan, my machine crashes and a BSOD error displays "SYSTEM_SERVICE_EXCEPTION (NTFS.sys)". The event viewer under source "User32" and EventID "1072", displays:
The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-MDSKIRC) has initiated the restart of computer DESKTOP-MDSKIRC on behalf of user DESKTOP-MDSKIRC\Admin for the following reason: Other (Unplanned)
Reason Code: 0x0
Shut-down Type: restart
Comment:
Is there a solution for this? I have tried contacting Sophos directly as I believe there is a bug, possibly memory leakage or excessive CPU usage? But I have been directed here first. It is worth noting my CPU is i7-4790K. So there should not be any problems with my CPU being too slow.
The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-MDSKIRC) has initiated the restart of computer DESKTOP-MDSKIRC on behalf of user DESKTOP-MDSKIRC\Admin for the following reason: Other (Unplanned)
Reason Code: 0x0
Shut-down Type: restart
Comment:
This thread was automatically locked due to age.
