Seen as no one has replied to this thread i'll muddle on by myself. If its in the wrong part of the forum i do apologise but im going to continue for completeness.
After using system restore i have re-run FSS and aswMBR. FSS seems fine though ive only just started using it so dont fully understand it. However aswMBR still comes up with 1 red error:-\Driver\atapi[0xfffffa80039f6060] -> IRP_MJ_CREATE -> 0xfffffa80043042c0
Is there a way to get rid of this? Full logs are below:-
Farbar Service Scanner Version: 19-07-2012
Ran by Buz (administrator) on 22-07-2012 at 10:35:10
Running from "C:\Users\Buz\Desktop"
Microsoft Windows 7 Ultimate Service Pack 1 (X64)
Boot Mode: Normal
Localhost is accessible.
Google IP is accessible.
Google.com is accessible.
Attempt to access Yahoo IP returned error: Other errors
Yahoo.com is accessible.
Firewall Disabled Policy:
System Restore Disabled Policy:
Windows Autoupdate Disabled Policy:
sharedaccess Service is not running. Checking service configuration:
The start type of sharedaccess service is set to Auto
The ImagePath of sharedaccess service is OK.
The ServiceDll of sharedaccess service is OK.
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
**** End of log ****
As always thanks for looking, though don't be shy and post something if you like...anything will do...otherwise it's just me talking to myself.
Looking through the rest of the forum it appears this thread may be better suited to the "Virus, Trojan, Spyware, and Malware Removal Logs" forum. Didnt see that that before sorry. Can the thread be moved there please? Thanks.Mod Edit: Removed Aswmbr log, not allowed in this forum - Hamluis.
Edited by hamluis, 22 July 2012 - 02:48 PM.
Removed MRL forum data - Hamluis.