New
#11
I've only noticed this C:\ since I updated and installed MSE Client update version 2.
Must be a change in the way MSE scans. I know that there is a blurb about the new features that v2 offers, perhaps the way it scans is changed to be more effective.
Actually the UI looks the same as v1 but I have noticed some definite changes in the way v2 operates. You can see them if you look hard enough.
Whenever I do a scan with MSE, Malwarebytes, or Hitman Pro, the scan stops on the above file or folder. It takes about 90 seconds for any of the scans to move on. I first noticed \\.\C:\ after using Macrium free so I'm thinking it might have something to do with a shadow copy that was created by Macrium during a system image. But I can't locate this file/folder through Windows Explorer, registry, or using the start menu search function. Couldn't find any info by Googling, either. Anybody have any ideas? And for confirmation it really is "backslash backslash dot backslash Cee colon backslash" with no spaces.
Thanks for the quick response and that link, Golden. Figures I would have missed it!
So if \\.\C:\ is a Win32 Device Namespace for accessing physical disks and volumes directly without going through the file system, are these malware scans scanning my C: drive twice? Once by going through the file system and once by not going through the file system? If I remove Macrium from my computer, \\.\C:\ no longer appears as a scanned item by any of the antimalware programs. Just trying to wrap my head around this.
Well, as far as i know I don't have Macrium installed and this \\.\C:\ still
pops up. So that cannot be an explanation.
Maybe the issue should be placed on the Malwarebytes Forum. I'll give it a try.
I have been there before with a question.
Meanwhile i have checked my Malwarebyte's scans. The quick one as well as the
full scan (phew!). I do not see \\.\C:\
It was not there on MSE some time ago and then started appearing although i did not change anything on the computer.
So the only conclusion is that it must be due to something the programmers of MSE changed. I doubt they will tell why.
What \\.\C:\ is has been answered by Aegis23 in his post above.
Thanks, Franz. Still trying to figure out if the malware scans are scanning my C: drive twice ... once by going through the file system and once by not going through the file system. The scan on \\.\C:\ takes around 90 seconds. That's almost as long as the scan on the rest of the drive. So something fairly large is being scanned during those 90 seconds (probably the C: drive again) which seems a bit redundant.
The thread is marked as solved but.... rub your eyes: This \\.\C:\ has disappeared from the scene as
a fata morgana after i updated MSE today (to version 1.111.1162.0):
Go and figure that one out.
Sorry for all this commotion.
Cheers.
Franz....Your version of MSE is a little old. It is up to 2.1.1116.0 now.
Open MSE, Go to the little down arrow to the right of HELP and click on it.
Move cursor down to 'Check for Software updates' and click on that.
If you are using a browser other than IE, it, IE will open to the Windows Update Page and run for a few seconds.
Then your On-board Windows Update in Control Panel should open and tell you if there are any updates.
You may find that you have one for MSE, and maybe others as well.
If at any time the process asks you to upgrade, say yes/ok.