Google Redirect

MBRCheck, version 1.2.3 © 2010, AD Command-line: Windows Version: Windows Vista Ultimate Edition Windows Information: Service Pack 2 (build 6002), 32-bit Base Board Manufacturer: Dell Inc. BIOS Manufacturer: Dell Inc. System Manufacturer: Dell Inc. System Product Name: Inspiron 530 Logical Drives Mask: 0x020007bc Kernel Drivers (total 167): 0x8220C000 \SystemRoot\system32\ntkrnlpa.exe 0x825C5000 \SystemRoot\system32\hal.dll 0x8060D000 \SystemRoot\system32\kdcom.dll 0x80614000 \SystemRoot\system32\mcupdate_GenuineIntel.dll 0x80684000 \SystemRoot\system32\PSHED.dll 0x80695000 \SystemRoot\system32\BOOTVID.dll 0x8069D000 \SystemRoot\system32\CLFS.SYS 0x806DE000 \SystemRoot\system32\CI.dll 0x8AC0C000 \SystemRoot\system32\drivers\Wdf01000.sys 0x8AC88000 \SystemRoot\system32\drivers\WDFLDR.SYS 0x8AC95000 \SystemRoot\system32\drivers\acpi.sys 0x8ACDB000 \SystemRoot\system32\drivers\WMILIB.SYS 0x8ACE4000 \SystemRoot\system32\drivers\msisadrv.sys 0x8ACEC000 \SystemRoot\system32\drivers\pci.sys 0x8AD13000 \SystemRoot\System32\drivers\partmgr.sys 0x8AD22000 \SystemRoot\system32\DRIVERS\compbatt.sys 0x8AD25000 \SystemRoot\system32\DRIVERS\BATTC.SYS 0x8AD2F000 \SystemRoot\system32\drivers\volmgr.sys 0x8AD3E000 \SystemRoot\System32\drivers\volmgrx.sys 0x8AD88000 \SystemRoot\system32\drivers\pciide.sys 0x8AD8F000 \SystemRoot\system32\drivers\PCIIDEX.SYS 0x8AD9D000 \SystemRoot\System32\drivers\mountmgr.sys 0x8ADAD000 \SystemRoot\system32\drivers\atapi.sys 0x8ADB5000 \SystemRoot\system32\drivers\ataport.SYS 0x807BE000 \SystemRoot\system32\drivers\fltmgr.sys 0x8ADD3000 \SystemRoot\system32\drivers\fileinfo.sys 0x8AE0E000 \SystemRoot\system32\drivers\NIS\1107000.00C\SYMDS.SYS 0x8AE64000 \SystemRoot\system32\drivers\NIS\1107000.00C\SYMEFA.SYS 0x8AE91000 \SystemRoot\System32\Drivers\ksecdd.sys 0x8B00A000 \SystemRoot\system32\drivers\ndis.sys 0x8B115000 \SystemRoot\system32\drivers\msrpc.sys 0x8B140000 \SystemRoot\system32\drivers\NETIO.SYS 0x8AF02000 \SystemRoot\System32\drivers\tcpip.sys 0x8B17B000 \SystemRoot\System32\drivers\fwpkclnt.sys 0x8B20E000 \SystemRoot\System32\Drivers\Ntfs.sys 0x8B31E000 \SystemRoot\system32\drivers\volsnap.sys 0x8B357000 \SystemRoot\System32\Drivers\spldr.sys 0x8B35F000 \SystemRoot\System32\Drivers\mup.sys 0x8B36E000 \SystemRoot\System32\drivers\ecache.sys 0x8B395000 \SystemRoot\System32\DRIVERS\fvevol.sys 0x8B3B9000 \SystemRoot\system32\drivers\disk.sys 0x8B3CA000 \SystemRoot\system32\drivers\CLASSPNP.SYS 0x8B3EB000 \SystemRoot\system32\drivers\crcdisk.sys 0x8B1AF000 \SystemRoot\system32\DRIVERS\tunnel.sys 0x8B1BA000 \SystemRoot\system32\DRIVERS\tunmp.sys 0x8B1C3000 \SystemRoot\system32\DRIVERS\intelppm.sys 0x90007000 \SystemRoot\system32\DRIVERS\atikmdag.sys 0x9051A000 \SystemRoot\System32\drivers\dxgkrnl.sys 0x905BB000 \SystemRoot\System32\drivers\watchdog.sys 0x90605000 \SystemRoot\system32\DRIVERS\HDAudBus.sys 0x90692000 \SystemRoot\system32\DRIVERS\e1e6032.sys 0x906CC000 \SystemRoot\system32\DRIVERS\usbuhci.sys 0x906D7000 \SystemRoot\system32\DRIVERS\USBPORT.SYS 0x90715000 \SystemRoot\system32\DRIVERS\usbehci.sys 0x90724000 \SystemRoot\system32\DRIVERS\AVerBas.sys 0x90731000 \SystemRoot\system32\DRIVERS\fdc.sys 0x9073C000 \SystemRoot\system32\DRIVERS\cdrom.sys 0x90754000 \SystemRoot\system32\DRIVERS\GEARAspiWDM.sys 0x9075A000 \SystemRoot\system32\DRIVERS\msiscsi.sys 0x90789000 \SystemRoot\system32\DRIVERS\storport.sys 0x907CA000 \SystemRoot\system32\DRIVERS\TDI.SYS 0x907D5000 \SystemRoot\system32\DRIVERS\rasl2tp.sys 0x907EC000 \SystemRoot\system32\DRIVERS\ndistapi.sys 0x905C7000 \SystemRoot\system32\DRIVERS\ndiswan.sys 0x905EA000 \SystemRoot\system32\DRIVERS\raspppoe.sys 0x8B1D2000 \SystemRoot\system32\DRIVERS\raspptp.sys 0x8B1E6000 \SystemRoot\system32\DRIVERS\rassstp.sys 0x907F7000 \SystemRoot\system32\DRIVERS\wanatw4.sys 0x90A0D000 \SystemRoot\system32\DRIVERS\rdpdr.sys 0x90A96000 \SystemRoot\system32\DRIVERS\termdd.sys 0x90AA6000 \SystemRoot\system32\DRIVERS\kbdclass.sys 0x90AB1000 \SystemRoot\system32\DRIVERS\mouclass.sys 0x90ABC000 \SystemRoot\system32\DRIVERS\swenum.sys 0x90ABE000 \SystemRoot\system32\DRIVERS\ks.sys 0x90AE8000 \SystemRoot\system32\DRIVERS\mssmbios.sys 0x90AF2000 \SystemRoot\system32\DRIVERS\umbus.sys 0x90AFF000 \SystemRoot\system32\DRIVERS\usbhub.sys 0x90B34000 \SystemRoot\system32\DRIVERS\AVerCap.sys 0x90B6A000 \SystemRoot\system32\DRIVERS\AVerTun.sys 0x90B8F000 \SystemRoot\system32\DRIVERS\BdaSup.SYS 0x90B92000 \SystemRoot\System32\Drivers\NDProxy.SYS 0x90BA3000 \SystemRoot\system32\drivers\HdAudio.sys 0x90E06000 \SystemRoot\system32\drivers\portcls.sys 0x90E33000 \SystemRoot\system32\drivers\drmk.sys 0x91000000 \SystemRoot\system32\drivers\RTKVHDA.sys 0x911F5000 \SystemRoot\system32\DRIVERS\hidusb.sys 0x90E58000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS 0x90E68000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS 0x911FE000 \SystemRoot\system32\DRIVERS\USBD.SYS 0x90E6F000 \SystemRoot\system32\DRIVERS\usbscan.sys 0x90E7C000 \SystemRoot\system32\DRIVERS\kbdhid.sys 0x90E85000 \SystemRoot\system32\DRIVERS\mouhid.sys 0x90E8D000 \SystemRoot\System32\Drivers\Fs_Rec.SYS 0x90E96000 \SystemRoot\System32\Drivers\Null.SYS 0x90E9D000 \SystemRoot\System32\Drivers\Beep.SYS 0x90EA4000 \SystemRoot\System32\drivers\vga.sys 0x90EB0000 \SystemRoot\System32\drivers\VIDEOPRT.SYS 0x90ED1000 \SystemRoot\System32\DRIVERS\RDPCDD.sys 0x90ED9000 \SystemRoot\system32\drivers\rdpencdd.sys 0x90EE1000 \SystemRoot\System32\Drivers\Msfs.SYS 0x90EEC000 \SystemRoot\System32\Drivers\Npfs.SYS 0x90EFA000 \SystemRoot\System32\DRIVERS\rasacd.sys 0x90F03000 \SystemRoot\system32\DRIVERS\tdx.sys 0x90F19000 \SystemRoot\System32\Drivers\NIS\1107000.00C\SYMTDIV.SYS 0x90F72000 \??\C:\Windows\system32\Drivers\SYMEVENT.SYS 0x90F97000 \SystemRoot\system32\DRIVERS\smb.sys 0x90FAB000 \SystemRoot\system32\drivers\afd.sys 0x91600000 \SystemRoot\System32\DRIVERS\netbt.sys 0x91632000 \SystemRoot\system32\DRIVERS\pacer.sys 0x91648000 \SystemRoot\system32\DRIVERS\netbios.sys 0x91656000 \SystemRoot\system32\DRIVERS\wanarp.sys 0x91669000 \SystemRoot\system32\drivers\NIS\1107000.00C\Ironx86.SYS 0x91688000 \SystemRoot\system32\drivers\NIS\1107000.00C\SRTSPX.SYS 0x91692000 \SystemRoot\system32\DRIVERS\rdbss.sys 0x916CE000 \SystemRoot\system32\drivers\nsiproxy.sys 0x916D8000 \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\IPSDefs\20100908.001\IDSvix86.sys 0x91730000 \SystemRoot\System32\Drivers\FileDisk.SYS 0x91733000 \??\C:\Windows\system32\drivers\elrawdsk.sys 0x91737000 \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys 0x91795000 \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys 0x9220A000 \SystemRoot\system32\drivers\csc.sys 0x92265000 \SystemRoot\System32\Drivers\dfsc.sys 0x9227C000 \SystemRoot\system32\drivers\NIS\1107000.00C\ccHPx86.sys 0x922FB000 \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\BASHDefs\20100810.004\BHDrvx86.sys 0x923A7000 \SystemRoot\System32\Drivers\crashdmp.sys 0x923B4000 \SystemRoot\System32\Drivers\dump_dumpata.sys 0x923BF000 \SystemRoot\System32\Drivers\dump_atapi.sys 0x923C7000 \SystemRoot\System32\Drivers\dump_dumpfve.sys 0x923D8000 \SystemRoot\system32\DRIVERS\usbccgp.sys 0x917B2000 \SystemRoot\system32\DRIVERS\USBSTOR.SYS 0x923EF000 \SystemRoot\system32\DRIVERS\usbprint.sys 0x923F9000 \SystemRoot\system32\drivers\hpfxbulk.sys 0x92200000 \SystemRoot\system32\drivers\HPFXGEN.SYS 0xA92D0000 \SystemRoot\System32\win32k.sys 0x917C7000 \SystemRoot\System32\drivers\Dxapi.sys 0x917D1000 \SystemRoot\system32\DRIVERS\monitor.sys 0xA94F0000 \SystemRoot\System32\TSDDD.dll 0xA9510000 \SystemRoot\System32\cdd.dll 0x917E0000 \SystemRoot\system32\drivers\luafv.sys 0x90BE2000 \SystemRoot\system32\DRIVERS\lltdio.sys 0x8B196000 \SystemRoot\system32\DRIVERS\rspndr.sys 0xAE004000 \SystemRoot\system32\drivers\spsys.sys 0xAE0B4000 \SystemRoot\system32\drivers\HTTP.sys 0xAE121000 \SystemRoot\System32\DRIVERS\srvnet.sys 0xAE13E000 \SystemRoot\system32\DRIVERS\bowser.sys 0xAE157000 \SystemRoot\System32\drivers\mpsdrv.sys 0xAE16C000 \SystemRoot\system32\drivers\mrxdav.sys 0xAE18D000 \SystemRoot\system32\DRIVERS\mrxsmb.sys 0xAE1AC000 \SystemRoot\system32\DRIVERS\mrxsmb10.sys 0xAE1E5000 \SystemRoot\system32\DRIVERS\mrxsmb20.sys 0xAEE09000 \SystemRoot\System32\DRIVERS\srv2.sys 0xAEE30000 \SystemRoot\System32\DRIVERS\srv.sys 0xAEE7E000 \SystemRoot\system32\DRIVERS\asyncmac.sys 0xAEE87000 \SystemRoot\System32\Drivers\Aspi32.SYS 0xAEE8B000 \??\C:\Windows\system32\drivers\cpuz132_x32.sys 0xAEE8F000 \SystemRoot\System32\Drivers\fastfat.SYS 0xAEEB7000 \SystemRoot\system32\drivers\peauth.sys 0xAEF95000 \SystemRoot\System32\Drivers\secdrv.SYS 0xAEF9F000 \SystemRoot\System32\drivers\tcpipreg.sys 0xAEFAB000 \??\C:\Program Files\Common Files\Realtime Soft\UltraMonMirrorDrv\x32\UltraMonUtility.sys 0xAEFAE000 \SystemRoot\system32\DRIVERS\WUDFRd.sys 0xAEFC3000 \SystemRoot\system32\DRIVERS\WUDFPf.sys 0xBD20B000 \SystemRoot\System32\Drivers\NIS\1107000.00C\SRTSP.SYS 0xBD3C2000 \SystemRoot\system32\DRIVERS\cdfs.sys 0xBD262000 \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\VirusDefs\20100908.050\NAVEX15.SYS 0xBD3AE000 \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\VirusDefs\20100908.050\NAVENG.SYS 0x77560000 \Windows\System32\ntdll.dll Processes (total 85): 0 System Idle Process 4 System 524 C:\Windows\System32\smss.exe 592 csrss.exe 648 C:\Windows\System32\wininit.exe 656 csrss.exe 692 C:\Windows\System32\services.exe 708 C:\Windows\System32\lsass.exe 740 C:\Windows\System32\lsm.exe 748 C:\Windows\System32\winlogon.exe 908 C:\Windows\System32\svchost.exe 968 C:\Windows\System32\svchost.exe 1096 C:\Windows\System32\svchost.exe 1120 C:\Windows\System32\svchost.exe 1132 C:\Windows\System32\svchost.exe 1240 C:\Windows\System32\audiodg.exe 1280 C:\Windows\System32\svchost.exe 1324 C:\Windows\System32\SLsvc.exe 1388 C:\Windows\System32\svchost.exe 1508 C:\Windows\System32\svchost.exe 1704 C:\Windows\System32\taskeng.exe 1828 C:\Windows\System32\spoolsv.exe 1852 C:\Windows\System32\svchost.exe 224 C:\Windows\System32\taskeng.exe 1964 C:\Windows\System32\dwm.exe 2100 C:\Windows\explorer.exe 2188 C:\Program Files\Common Files\aol\1252186683\ee\aolsoftware.exe 2204 C:\Program Files\Unlocker\UnlockerAssistant.exe 2240 C:\Program Files\PFU\Rack2\RKiwrtK.exe 2264 C:\Program Files\Common Files\Real\Update_OB\realsched.exe 2276 C:\Program Files\PFU\Rack2\Rkasynct.exe 2332 C:\Program Files\DivX\DivX Update\DivXUpdate.exe 2368 C:\Program Files\iTunes\iTunesHelper.exe 2380 C:\Program Files\Common Files\Java\Java Update\jusched.exe 2436 C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe 2488 C:\Program Files\PFU\ScanSnap\CardMinder\CardLauncher.exe 2576 C:\Program Files\PFU\ScanSnap\Driver\PfuSsMon.exe 2612 C:\Program Files\UltraMon\UltraMon.exe 2620 C:\Program Files\WinZip\WZQKPICK.EXE 2640 C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE 2660 C:\Program Files\UltraMon\UltraMonTaskbar.exe 2708 C:\Users\Peter\AppData\Local\Google\Update\1.2.183.29\GoogleCrashHandler.exe 2884 C:\Program Files\APC\APC PowerChute Personal Edition\apcsystray.exe 2936 C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe 2956 C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 2968 C:\Windows\System32\atashost.exe 2988 C:\Program Files\Bonjour\mDNSResponder.exe 3012 C:\Windows\csifcsvc.exe 3164 C:\Program Files\Common Files\microsoft shared\VS7DEBUG\mdm.exe 3236 C:\Program Files\Microsoft SQL Server\MSSQL.2\MSSQL\Binn\sqlservr.exe 3300 C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe 3372 C:\Program Files\Norton Internet Security\Engine\17.7.0.12\ccsvchst.exe 3452 C:\Windows\System32\svchost.exe 3476 C:\Program Files\Common Files\Sage SData\Sage.SData.Service.exe 3608 C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe 3684 C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe 3768 C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe 3804 C:\Windows\System32\svchost.exe 3852 C:\Windows\System32\svchost.exe 3876 C:\Windows\System32\SearchIndexer.exe 2200 WUDFHost.exe 544 C:\Program Files\Norton Internet Security\Engine\17.7.0.12\ccsvchst.exe 2432 dllhost.exe 4276 C:\Program Files\iPod\bin\iPodService.exe 4408 C:\Program Files\Windows Media Player\wmpnscfg.exe 5044 C:\Program Files\Windows Media Player\wmpnetwk.exe 5180 C:\Users\Peter\AppData\Local\Google\Chrome\Application\chrome.exe 5400 C:\PROGRA~1\MICROS~2\Office14\OUTLOOK.EXE 5508 C:\Users\Peter\AppData\Local\Google\Chrome\Application\chrome.exe 5808 C:\Program Files\Microsoft AutoRoute 2010\StreetsOlkShim.exe 5984 C:\Users\Peter\AppData\Local\Google\Chrome\Application\chrome.exe 772 C:\Program Files\Common Files\Apple\Mobile Device Support\MobileMeServices.exe 5736 C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE 4428 C:\Users\Peter\AppData\Local\Google\Chrome\Application\chrome.exe 1656 C:\Program Files\Digita\Practice Management\DPM.exe 4728 C:\Users\Peter\AppData\Local\Google\Chrome\Application\chrome.exe 3084 C:\Users\Peter\AppData\Local\Google\Chrome\Application\chrome.exe 5848 C:\Users\Peter\AppData\Local\Google\Chrome\Application\chrome.exe 5708 C:\Program Files\UltraMon\UltraMonUiAcc.exe 2564 C:\Users\Peter\AppData\Local\Google\Chrome\Application\chrome.exe 2560 C:\Users\Peter\AppData\Local\Google\Chrome\Application\chrome.exe 2120 C:\Windows\System32\SearchProtocolHost.exe 5504 C:\Windows\System32\SearchFilterHost.exe 3572 C:\Users\Peter\AppData\Local\Google\Chrome\Application\chrome.exe 5748 C:\Users\Peter\Desktop\MBRCheck.exe \\.\C: –> \\.\PhysicalDrive0 at offset 0x00000002`83f00000 (NTFS) \\.\D: –> \\.\PhysicalDrive1 at offset 0x00000000`00100000 (NTFS) \\.\E: –> \\.\PhysicalDrive0 at offset 0x00000000`03f00000 (NTFS) PhysicalDrive0 Model Number: WDCWD5000AAKS-75A7B0, Rev: 01.03B01 PhysicalDrive1 Model Number: WDCWD5000AAKS-75A7B0, Rev: 01.03B01 Size Device Name MBR Status ——————————————– 465 GB \\.\PhysicalDrive0 Windows Vista MBR code detected SHA1: 8DF43F2BDE2D9451948FA14B5279969C777A7979 465 GB \\.\PhysicalDrive1 Known-bad MBR code detected (Whistler / Black Internet)! SHA1: CB9391A348A4F8AD6FC6EA596AEDB9C336710CA7 Found non-standard or infected MBR. Enter 'Y' and hit ENTER for more options, or 'N' to exit: Done!

MBRCheck, version 1.2.3 © 2010, AD Command-line: Windows Version: Windows Vista Ultimate Edition Windows Information: Service Pack 2 (build 6002), 32-bit Base Board Manufacturer: Dell Inc. BIOS Manufacturer: Dell Inc. System Manufacturer: Dell Inc. System Product Name: Inspiron 530 Logical Drives Mask: 0x020007bc Kernel Drivers (total 167): 0x8220C000 \SystemRoot\system32\ntkrnlpa.exe 0x825C5000 \SystemRoot\system32\hal.dll 0x8060D000 \SystemRoot\system32\kdcom.dll 0x80614000 \SystemRoot\system32\mcupdate_GenuineIntel.dll 0x80684000 \SystemRoot\system32\PSHED.dll 0x80695000 \SystemRoot\system32\BOOTVID.dll 0x8069D000 \SystemRoot\system32\CLFS.SYS 0x806DE000 \SystemRoot\system32\CI.dll 0x8AC0C000 \SystemRoot\system32\drivers\Wdf01000.sys 0x8AC88000 \SystemRoot\system32\drivers\WDFLDR.SYS 0x8AC95000 \SystemRoot\system32\drivers\acpi.sys 0x8ACDB000 \SystemRoot\system32\drivers\WMILIB.SYS 0x8ACE4000 \SystemRoot\system32\drivers\msisadrv.sys 0x8ACEC000 \SystemRoot\system32\drivers\pci.sys 0x8AD13000 \SystemRoot\System32\drivers\partmgr.sys 0x8AD22000 \SystemRoot\system32\DRIVERS\compbatt.sys 0x8AD25000 \SystemRoot\system32\DRIVERS\BATTC.SYS 0x8AD2F000 \SystemRoot\system32\drivers\volmgr.sys 0x8AD3E000 \SystemRoot\System32\drivers\volmgrx.sys 0x8AD88000 \SystemRoot\system32\drivers\pciide.sys 0x8AD8F000 \SystemRoot\system32\drivers\PCIIDEX.SYS 0x8AD9D000 \SystemRoot\System32\drivers\mountmgr.sys 0x8ADAD000 \SystemRoot\system32\drivers\atapi.sys 0x8ADB5000 \SystemRoot\system32\drivers\ataport.SYS 0x807BE000 \SystemRoot\system32\drivers\fltmgr.sys 0x8ADD3000 \SystemRoot\system32\drivers\fileinfo.sys 0x8AE0E000 \SystemRoot\system32\drivers\NIS\1107000.00C\SYMDS.SYS 0x8AE64000 \SystemRoot\system32\drivers\NIS\1107000.00C\SYMEFA.SYS 0x8AE91000 \SystemRoot\System32\Drivers\ksecdd.sys 0x8B00A000 \SystemRoot\system32\drivers\ndis.sys 0x8B115000 \SystemRoot\system32\drivers\msrpc.sys 0x8B140000 \SystemRoot\system32\drivers\NETIO.SYS 0x8AF02000 \SystemRoot\System32\drivers\tcpip.sys 0x8B17B000 \SystemRoot\System32\drivers\fwpkclnt.sys 0x8B20E000 \SystemRoot\System32\Drivers\Ntfs.sys 0x8B31E000 \SystemRoot\system32\drivers\volsnap.sys 0x8B357000 \SystemRoot\System32\Drivers\spldr.sys 0x8B35F000 \SystemRoot\System32\Drivers\mup.sys 0x8B36E000 \SystemRoot\System32\drivers\ecache.sys 0x8B395000 \SystemRoot\System32\DRIVERS\fvevol.sys 0x8B3B9000 \SystemRoot\system32\drivers\disk.sys 0x8B3CA000 \SystemRoot\system32\drivers\CLASSPNP.SYS 0x8B3EB000 \SystemRoot\system32\drivers\crcdisk.sys 0x8B1AF000 \SystemRoot\system32\DRIVERS\tunnel.sys 0x8B1BA000 \SystemRoot\system32\DRIVERS\tunmp.sys 0x8B1C3000 \SystemRoot\system32\DRIVERS\intelppm.sys 0x90007000 \SystemRoot\system32\DRIVERS\atikmdag.sys 0x9051A000 \SystemRoot\System32\drivers\dxgkrnl.sys 0x905BB000 \SystemRoot\System32\drivers\watchdog.sys 0x90605000 \SystemRoot\system32\DRIVERS\HDAudBus.sys 0x90692000 \SystemRoot\system32\DRIVERS\e1e6032.sys 0x906CC000 \SystemRoot\system32\DRIVERS\usbuhci.sys 0x906D7000 \SystemRoot\system32\DRIVERS\USBPORT.SYS 0x90715000 \SystemRoot\system32\DRIVERS\usbehci.sys 0x90724000 \SystemRoot\system32\DRIVERS\AVerBas.sys 0x90731000 \SystemRoot\system32\DRIVERS\fdc.sys 0x9073C000 \SystemRoot\system32\DRIVERS\cdrom.sys 0x90754000 \SystemRoot\system32\DRIVERS\GEARAspiWDM.sys 0x9075A000 \SystemRoot\system32\DRIVERS\msiscsi.sys 0x90789000 \SystemRoot\system32\DRIVERS\storport.sys 0x907CA000 \SystemRoot\system32\DRIVERS\TDI.SYS 0x907D5000 \SystemRoot\system32\DRIVERS\rasl2tp.sys 0x907EC000 \SystemRoot\system32\DRIVERS\ndistapi.sys 0x905C7000 \SystemRoot\system32\DRIVERS\ndiswan.sys 0x905EA000 \SystemRoot\system32\DRIVERS\raspppoe.sys 0x8B1D2000 \SystemRoot\system32\DRIVERS\raspptp.sys 0x8B1E6000 \SystemRoot\system32\DRIVERS\rassstp.sys 0x907F7000 \SystemRoot\system32\DRIVERS\wanatw4.sys 0x90A0D000 \SystemRoot\system32\DRIVERS\rdpdr.sys 0x90A96000 \SystemRoot\system32\DRIVERS\termdd.sys 0x90AA6000 \SystemRoot\system32\DRIVERS\kbdclass.sys 0x90AB1000 \SystemRoot\system32\DRIVERS\mouclass.sys 0x90ABC000 \SystemRoot\system32\DRIVERS\swenum.sys 0x90ABE000 \SystemRoot\system32\DRIVERS\ks.sys 0x90AE8000 \SystemRoot\system32\DRIVERS\mssmbios.sys 0x90AF2000 \SystemRoot\system32\DRIVERS\umbus.sys 0x90AFF000 \SystemRoot\system32\DRIVERS\usbhub.sys 0x90B34000 \SystemRoot\system32\DRIVERS\AVerCap.sys 0x90B6A000 \SystemRoot\system32\DRIVERS\AVerTun.sys 0x90B8F000 \SystemRoot\system32\DRIVERS\BdaSup.SYS 0x90B92000 \SystemRoot\System32\Drivers\NDProxy.SYS 0x90BA3000 \SystemRoot\system32\drivers\HdAudio.sys 0x90E06000 \SystemRoot\system32\drivers\portcls.sys 0x90E33000 \SystemRoot\system32\drivers\drmk.sys 0x91000000 \SystemRoot\system32\drivers\RTKVHDA.sys 0x911F5000 \SystemRoot\system32\DRIVERS\hidusb.sys 0x90E58000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS 0x90E68000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS 0x911FE000 \SystemRoot\system32\DRIVERS\USBD.SYS 0x90E6F000 \SystemRoot\system32\DRIVERS\usbscan.sys 0x90E7C000 \SystemRoot\system32\DRIVERS\kbdhid.sys 0x90E85000 \SystemRoot\system32\DRIVERS\mouhid.sys 0x90E8D000 \SystemRoot\System32\Drivers\Fs_Rec.SYS 0x90E96000 \SystemRoot\System32\Drivers\Null.SYS 0x90E9D000 \SystemRoot\System32\Drivers\Beep.SYS 0x90EA4000 \SystemRoot\System32\drivers\vga.sys 0x90EB0000 \SystemRoot\System32\drivers\VIDEOPRT.SYS 0x90ED1000 \SystemRoot\System32\DRIVERS\RDPCDD.sys 0x90ED9000 \SystemRoot\system32\drivers\rdpencdd.sys 0x90EE1000 \SystemRoot\System32\Drivers\Msfs.SYS 0x90EEC000 \SystemRoot\System32\Drivers\Npfs.SYS 0x90EFA000 \SystemRoot\System32\DRIVERS\rasacd.sys 0x90F03000 \SystemRoot\system32\DRIVERS\tdx.sys 0x90F19000 \SystemRoot\System32\Drivers\NIS\1107000.00C\SYMTDIV.SYS 0x90F72000 \??\C:\Windows\system32\Drivers\SYMEVENT.SYS 0x90F97000 \SystemRoot\system32\DRIVERS\smb.sys 0x90FAB000 \SystemRoot\system32\drivers\afd.sys 0x91600000 \SystemRoot\System32\DRIVERS\netbt.sys 0x91632000 \SystemRoot\system32\DRIVERS\pacer.sys 0x91648000 \SystemRoot\system32\DRIVERS\netbios.sys 0x91656000 \SystemRoot\system32\DRIVERS\wanarp.sys 0x91669000 \SystemRoot\system32\drivers\NIS\1107000.00C\Ironx86.SYS 0x91688000 \SystemRoot\system32\drivers\NIS\1107000.00C\SRTSPX.SYS 0x91692000 \SystemRoot\system32\DRIVERS\rdbss.sys 0x916CE000 \SystemRoot\system32\drivers\nsiproxy.sys 0x916D8000 \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\IPSDefs\20100908.001\IDSvix86.sys 0x91730000 \SystemRoot\System32\Drivers\FileDisk.SYS 0x91733000 \??\C:\Windows\system32\drivers\elrawdsk.sys 0x91737000 \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys 0x91795000 \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys 0x9220A000 \SystemRoot\system32\drivers\csc.sys 0x92265000 \SystemRoot\System32\Drivers\dfsc.sys 0x9227C000 \SystemRoot\system32\drivers\NIS\1107000.00C\ccHPx86.sys 0x922FB000 \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\BASHDefs\20100810.004\BHDrvx86.sys 0x923A7000 \SystemRoot\System32\Drivers\crashdmp.sys 0x923B4000 \SystemRoot\System32\Drivers\dump_dumpata.sys 0x923BF000 \SystemRoot\System32\Drivers\dump_atapi.sys 0x923C7000 \SystemRoot\System32\Drivers\dump_dumpfve.sys 0x923D8000 \SystemRoot\system32\DRIVERS\usbccgp.sys 0x917B2000 \SystemRoot\system32\DRIVERS\USBSTOR.SYS 0x923EF000 \SystemRoot\system32\DRIVERS\usbprint.sys 0x923F9000 \SystemRoot\system32\drivers\hpfxbulk.sys 0x92200000 \SystemRoot\system32\drivers\HPFXGEN.SYS 0xA92D0000 \SystemRoot\System32\win32k.sys 0x917C7000 \SystemRoot\System32\drivers\Dxapi.sys 0x917D1000 \SystemRoot\system32\DRIVERS\monitor.sys 0xA94F0000 \SystemRoot\System32\TSDDD.dll 0xA9510000 \SystemRoot\System32\cdd.dll 0x917E0000 \SystemRoot\system32\drivers\luafv.sys 0x90BE2000 \SystemRoot\system32\DRIVERS\lltdio.sys 0x8B196000 \SystemRoot\system32\DRIVERS\rspndr.sys 0xAE004000 \SystemRoot\system32\drivers\spsys.sys 0xAE0B4000 \SystemRoot\system32\drivers\HTTP.sys 0xAE121000 \SystemRoot\System32\DRIVERS\srvnet.sys 0xAE13E000 \SystemRoot\system32\DRIVERS\bowser.sys 0xAE157000 \SystemRoot\System32\drivers\mpsdrv.sys 0xAE16C000 \SystemRoot\system32\drivers\mrxdav.sys 0xAE18D000 \SystemRoot\system32\DRIVERS\mrxsmb.sys 0xAE1AC000 \SystemRoot\system32\DRIVERS\mrxsmb10.sys 0xAE1E5000 \SystemRoot\system32\DRIVERS\mrxsmb20.sys 0xAEE09000 \SystemRoot\System32\DRIVERS\srv2.sys 0xAEE30000 \SystemRoot\System32\DRIVERS\srv.sys 0xAEE7E000 \SystemRoot\system32\DRIVERS\asyncmac.sys 0xAEE87000 \SystemRoot\System32\Drivers\Aspi32.SYS 0xAEE8B000 \??\C:\Windows\system32\drivers\cpuz132_x32.sys 0xAEE8F000 \SystemRoot\System32\Drivers\fastfat.SYS 0xAEEB7000 \SystemRoot\system32\drivers\peauth.sys 0xAEF95000 \SystemRoot\System32\Drivers\secdrv.SYS 0xAEF9F000 \SystemRoot\System32\drivers\tcpipreg.sys 0xAEFAB000 \??\C:\Program Files\Common Files\Realtime Soft\UltraMonMirrorDrv\x32\UltraMonUtility.sys 0xAEFAE000 \SystemRoot\system32\DRIVERS\WUDFRd.sys 0xAEFC3000 \SystemRoot\system32\DRIVERS\WUDFPf.sys 0xBD20B000 \SystemRoot\System32\Drivers\NIS\1107000.00C\SRTSP.SYS 0xBD3C2000 \SystemRoot\system32\DRIVERS\cdfs.sys 0xBD262000 \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\VirusDefs\20100908.050\NAVEX15.SYS 0xBD3AE000 \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\VirusDefs\20100908.050\NAVENG.SYS 0x77560000 \Windows\System32\ntdll.dll Processes (total 85): 0 System Idle Process 4 System 524 C:\Windows\System32\smss.exe 592 csrss.exe 648 C:\Windows\System32\wininit.exe 656 csrss.exe 692 C:\Windows\System32\services.exe 708 C:\Windows\System32\lsass.exe 740 C:\Windows\System32\lsm.exe 748 C:\Windows\System32\winlogon.exe 908 C:\Windows\System32\svchost.exe 968 C:\Windows\System32\svchost.exe 1096 C:\Windows\System32\svchost.exe 1120 C:\Windows\System32\svchost.exe 1132 C:\Windows\System32\svchost.exe 1240 C:\Windows\System32\audiodg.exe 1280 C:\Windows\System32\svchost.exe 1324 C:\Windows\System32\SLsvc.exe 1388 C:\Windows\System32\svchost.exe 1508 C:\Windows\System32\svchost.exe 1704 C:\Windows\System32\taskeng.exe 1828 C:\Windows\System32\spoolsv.exe 1852 C:\Windows\System32\svchost.exe 224 C:\Windows\System32\taskeng.exe 1964 C:\Windows\System32\dwm.exe 2100 C:\Windows\explorer.exe 2188 C:\Program Files\Common Files\aol\1252186683\ee\aolsoftware.exe 2204 C:\Program Files\Unlocker\UnlockerAssistant.exe 2240 C:\Program Files\PFU\Rack2\RKiwrtK.exe 2264 C:\Program Files\Common Files\Real\Update_OB\realsched.exe 2276 C:\Program Files\PFU\Rack2\Rkasynct.exe 2332 C:\Program Files\DivX\DivX Update\DivXUpdate.exe 2368 C:\Program Files\iTunes\iTunesHelper.exe 2380 C:\Program Files\Common Files\Java\Java Update\jusched.exe 2436 C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe 2488 C:\Program Files\PFU\ScanSnap\CardMinder\CardLauncher.exe 2576 C:\Program Files\PFU\ScanSnap\Driver\PfuSsMon.exe 2612 C:\Program Files\UltraMon\UltraMon.exe 2620 C:\Program Files\WinZip\WZQKPICK.EXE 2640 C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE 2660 C:\Program Files\UltraMon\UltraMonTaskbar.exe 2708 C:\Users\Peter\AppData\Local\Google\Update\1.2.183.29\GoogleCrashHandler.exe 2884 C:\Program Files\APC\APC PowerChute Personal Edition\apcsystray.exe 2936 C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe 2956 C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 2968 C:\Windows\System32\atashost.exe 2988 C:\Program Files\Bonjour\mDNSResponder.exe 3012 C:\Windows\csifcsvc.exe 3164 C:\Program Files\Common Files\microsoft shared\VS7DEBUG\mdm.exe 3236 C:\Program Files\Microsoft SQL Server\MSSQL.2\MSSQL\Binn\sqlservr.exe 3300 C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe 3372 C:\Program Files\Norton Internet Security\Engine\17.7.0.12\ccsvchst.exe 3452 C:\Windows\System32\svchost.exe 3476 C:\Program Files\Common Files\Sage SData\Sage.SData.Service.exe 3608 C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe 3684 C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe 3768 C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe 3804 C:\Windows\System32\svchost.exe 3852 C:\Windows\System32\svchost.exe 3876 C:\Windows\System32\SearchIndexer.exe 2200 WUDFHost.exe 544 C:\Program Files\Norton Internet Security\Engine\17.7.0.12\ccsvchst.exe 2432 dllhost.exe 4276 C:\Program Files\iPod\bin\iPodService.exe 4408 C:\Program Files\Windows Media Player\wmpnscfg.exe 5044 C:\Program Files\Windows Media Player\wmpnetwk.exe 5180 C:\Users\Peter\AppData\Local\Google\Chrome\Application\chrome.exe 5400 C:\PROGRA~1\MICROS~2\Office14\OUTLOOK.EXE 5508 C:\Users\Peter\AppData\Local\Google\Chrome\Application\chrome.exe 5808 C:\Program Files\Microsoft AutoRoute 2010\StreetsOlkShim.exe 5984 C:\Users\Peter\AppData\Local\Google\Chrome\Application\chrome.exe 772 C:\Program Files\Common Files\Apple\Mobile Device Support\MobileMeServices.exe 5736 C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE 4428 C:\Users\Peter\AppData\Local\Google\Chrome\Application\chrome.exe 1656 C:\Program Files\Digita\Practice Management\DPM.exe 4728 C:\Users\Peter\AppData\Local\Google\Chrome\Application\chrome.exe 3084 C:\Users\Peter\AppData\Local\Google\Chrome\Application\chrome.exe 5848 C:\Users\Peter\AppData\Local\Google\Chrome\Application\chrome.exe 5708 C:\Program Files\UltraMon\UltraMonUiAcc.exe 2564 C:\Users\Peter\AppData\Local\Google\Chrome\Application\chrome.exe 2560 C:\Users\Peter\AppData\Local\Google\Chrome\Application\chrome.exe 2120 C:\Windows\System32\SearchProtocolHost.exe 5504 C:\Windows\System32\SearchFilterHost.exe 3572 C:\Users\Peter\AppData\Local\Google\Chrome\Application\chrome.exe 5748 C:\Users\Peter\Desktop\MBRCheck.exe \\.\C: –> \\.\PhysicalDrive0 at offset 0x00000002`83f00000 (NTFS) \\.\D: –> \\.\PhysicalDrive1 at offset 0x00000000`00100000 (NTFS) \\.\E: –> \\.\PhysicalDrive0 at offset 0x00000000`03f00000 (NTFS) PhysicalDrive0 Model Number: WDCWD5000AAKS-75A7B0, Rev: 01.03B01 PhysicalDrive1 Model Number: WDCWD5000AAKS-75A7B0, Rev: 01.03B01 Size Device Name MBR Status ——————————————– 465 GB \\.\PhysicalDrive0 Windows Vista MBR code detected SHA1: 8DF43F2BDE2D9451948FA14B5279969C777A7979 465 GB \\.\PhysicalDrive1 Known-bad MBR code detected (Whistler / Black Internet)! SHA1: CB9391A348A4F8AD6FC6EA596AEDB9C336710CA7 Found non-standard or infected MBR. Enter 'Y' and hit ENTER for more options, or 'N' to exit: Done!

Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Database version: 4582 Windows 6.0.6002 Service Pack 2 Internet Explorer 8.0.6001.18943 09/09/2010 14:40:10 mbam-log-2010-09-09 (14-40-10).txt Scan type: Quick scan Objects scanned: 162687 Time elapsed: 13 minute(s), 35 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 2 Folders Infected: 0 Files Infected: 3 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: HKEY_CLASSES_ROOT\scrfile\shell\open\command\(default) (Broken.OpenCommand) -> Bad: (NOTEPAD.EXE %1) Good: ("%1" /S) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\regfile\shell\open\command\(default) (Broken.OpenCommand) -> Bad: (NOTEPAD.EXE %1) Good: (regedit.exe "%1") -> Quarantined and deleted successfully. Folders Infected: (No malicious items detected) Files Infected: C:\Users\Peter\AppData\Local\Temp\loader.exe (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Users\Peter\AppData\Local\Temp\smss.exe (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Windows\PictureViewerEXE.scr (Backdoor.Bot) -> Quarantined and deleted successfully.

Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Database version: 4582 Windows 6.0.6002 Service Pack 2 Internet Explorer 8.0.6001.18943 09/09/2010 14:40:10 mbam-log-2010-09-09 (14-40-10).txt Scan type: Quick scan Objects scanned: 162687 Time elapsed: 13 minute(s), 35 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 2 Folders Infected: 0 Files Infected: 3 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: HKEY_CLASSES_ROOT\scrfile\shell\open\command\(default) (Broken.OpenCommand) -> Bad: (NOTEPAD.EXE %1) Good: ("%1" /S) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\regfile\shell\open\command\(default) (Broken.OpenCommand) -> Bad: (NOTEPAD.EXE %1) Good: (regedit.exe "%1") -> Quarantined and deleted successfully. Folders Infected: (No malicious items detected) Files Infected: C:\Users\Peter\AppData\Local\Temp\loader.exe (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Users\Peter\AppData\Local\Temp\smss.exe (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Windows\PictureViewerEXE.scr (Backdoor.Bot) -> Quarantined and deleted successfully.

Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Database version: 4582 Windows 6.0.6002 Service Pack 2 Internet Explorer 8.0.6001.18943 09/09/2010 14:40:10 mbam-log-2010-09-09 (14-40-10).txt Scan type: Quick scan Objects scanned: 162687 Time elapsed: 13 minute(s), 35 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 2 Folders Infected: 0 Files Infected: 3 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: HKEY_CLASSES_ROOT\scrfile\shell\open\command\(default) (Broken.OpenCommand) -> Bad: (NOTEPAD.EXE %1) Good: ("%1" /S) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\regfile\shell\open\command\(default) (Broken.OpenCommand) -> Bad: (NOTEPAD.EXE %1) Good: (regedit.exe "%1") -> Quarantined and deleted successfully. Folders Infected: (No malicious items detected) Files Infected: C:\Users\Peter\AppData\Local\Temp\loader.exe (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Users\Peter\AppData\Local\Temp\smss.exe (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Windows\PictureViewerEXE.scr (Backdoor.Bot) -> Quarantined and deleted successfully.

Sorry, I think I posted that MBAM log twice I tried to run MBRcheck but Norton says it's a security risk! I'll turn Norton off for a few minutes MBRcheck has been deleted Do I need to download again or does the log I have posted tell you what you want to know?

Hi petersaxton, Please delete any MBRCheck logs you have then down load MBRCheck again and run it. Please post the new log. Which OS is on the D:\ drive? Thank

MBRCheck, version 1.2.3 © 2010, AD Command-line: Windows Version: Windows Vista Ultimate Edition Windows Information: Service Pack 2 (build 6002), 32-bit Base Board Manufacturer: Dell Inc. BIOS Manufacturer: Dell Inc. System Manufacturer: Dell Inc. System Product Name: Inspiron 530 Logical Drives Mask: 0x020007bc Kernel Drivers (total 168): 0x82212000 \SystemRoot\system32\ntkrnlpa.exe 0x825CB000 \SystemRoot\system32\hal.dll 0x80604000 \SystemRoot\system32\kdcom.dll 0x8060B000 \SystemRoot\system32\mcupdate_GenuineIntel.dll 0x8067B000 \SystemRoot\system32\PSHED.dll 0x8068C000 \SystemRoot\system32\BOOTVID.dll 0x80694000 \SystemRoot\system32\CLFS.SYS 0x806D5000 \SystemRoot\system32\CI.dll 0x807B5000 \SystemRoot\System32\drivers\mtgfi.sys 0x8AE06000 \SystemRoot\system32\drivers\Wdf01000.sys 0x8AE82000 \SystemRoot\system32\drivers\WDFLDR.SYS 0x8AE8F000 \SystemRoot\system32\drivers\acpi.sys 0x8AED5000 \SystemRoot\system32\drivers\WMILIB.SYS 0x8AEDE000 \SystemRoot\system32\drivers\msisadrv.sys 0x8AEE6000 \SystemRoot\system32\drivers\pci.sys 0x8AF0D000 \SystemRoot\System32\drivers\partmgr.sys 0x8AF1C000 \SystemRoot\system32\DRIVERS\compbatt.sys 0x8AF1F000 \SystemRoot\system32\DRIVERS\BATTC.SYS 0x8AF29000 \SystemRoot\system32\drivers\volmgr.sys 0x8AF38000 \SystemRoot\System32\drivers\volmgrx.sys 0x8AF82000 \SystemRoot\system32\drivers\pciide.sys 0x8AF89000 \SystemRoot\system32\drivers\PCIIDEX.SYS 0x8AF97000 \SystemRoot\System32\drivers\mountmgr.sys 0x8AFA7000 \SystemRoot\system32\drivers\atapi.sys 0x8AFAF000 \SystemRoot\system32\drivers\ataport.SYS 0x8AFCD000 \SystemRoot\system32\drivers\fltmgr.sys 0x807C3000 \SystemRoot\system32\drivers\fileinfo.sys 0x8B009000 \SystemRoot\system32\drivers\NIS\1107000.00C\SYMDS.SYS 0x8B05F000 \SystemRoot\system32\drivers\NIS\1107000.00C\SYMEFA.SYS 0x8B08C000 \SystemRoot\System32\Drivers\ksecdd.sys 0x8B209000 \SystemRoot\system32\drivers\ndis.sys 0x8B314000 \SystemRoot\system32\drivers\msrpc.sys 0x8B33F000 \SystemRoot\system32\drivers\NETIO.SYS 0x8B0FD000 \SystemRoot\System32\drivers\tcpip.sys 0x8B37A000 \SystemRoot\System32\drivers\fwpkclnt.sys 0x8B407000 \SystemRoot\System32\Drivers\Ntfs.sys 0x8B517000 \SystemRoot\system32\drivers\volsnap.sys 0x8B550000 \SystemRoot\System32\Drivers\spldr.sys 0x8B558000 \SystemRoot\System32\Drivers\mup.sys 0x8B567000 \SystemRoot\System32\drivers\ecache.sys 0x8B58E000 \SystemRoot\System32\DRIVERS\fvevol.sys 0x8B5B2000 \SystemRoot\system32\drivers\disk.sys 0x8B5C3000 \SystemRoot\system32\drivers\CLASSPNP.SYS 0x8B5E4000 \SystemRoot\system32\drivers\crcdisk.sys 0x8B3B9000 \SystemRoot\system32\DRIVERS\tunnel.sys 0x8B3C4000 \SystemRoot\system32\DRIVERS\tunmp.sys 0x8B3CD000 \SystemRoot\system32\DRIVERS\intelppm.sys 0x90808000 \SystemRoot\system32\DRIVERS\atikmdag.sys 0x90D1B000 \SystemRoot\System32\drivers\dxgkrnl.sys 0x90DBC000 \SystemRoot\System32\drivers\watchdog.sys 0x90E00000 \SystemRoot\system32\DRIVERS\HDAudBus.sys 0x90E8D000 \SystemRoot\system32\DRIVERS\e1e6032.sys 0x90EC7000 \SystemRoot\system32\DRIVERS\usbuhci.sys 0x90ED2000 \SystemRoot\system32\DRIVERS\USBPORT.SYS 0x90F10000 \SystemRoot\system32\DRIVERS\usbehci.sys 0x90F1F000 \SystemRoot\system32\DRIVERS\AVerBas.sys 0x90F2C000 \SystemRoot\system32\DRIVERS\fdc.sys 0x90F37000 \SystemRoot\system32\DRIVERS\cdrom.sys 0x90F4F000 \SystemRoot\system32\DRIVERS\GEARAspiWDM.sys 0x90F55000 \SystemRoot\system32\DRIVERS\msiscsi.sys 0x90F84000 \SystemRoot\system32\DRIVERS\storport.sys 0x90FC5000 \SystemRoot\system32\DRIVERS\TDI.SYS 0x90FD0000 \SystemRoot\system32\DRIVERS\rasl2tp.sys 0x90FE7000 \SystemRoot\system32\DRIVERS\ndistapi.sys 0x90DC8000 \SystemRoot\system32\DRIVERS\ndiswan.sys 0x90DEB000 \SystemRoot\system32\DRIVERS\raspppoe.sys 0x8B3DC000 \SystemRoot\system32\DRIVERS\raspptp.sys 0x8B1E7000 \SystemRoot\system32\DRIVERS\rassstp.sys 0x90FF2000 \SystemRoot\system32\DRIVERS\wanatw4.sys 0x9120A000 \SystemRoot\system32\DRIVERS\rdpdr.sys 0x91293000 \SystemRoot\system32\DRIVERS\termdd.sys 0x912A3000 \SystemRoot\system32\DRIVERS\kbdclass.sys 0x912AE000 \SystemRoot\system32\DRIVERS\mouclass.sys 0x912B9000 \SystemRoot\system32\DRIVERS\swenum.sys 0x912BB000 \SystemRoot\system32\DRIVERS\ks.sys 0x912E5000 \SystemRoot\system32\DRIVERS\mssmbios.sys 0x912EF000 \SystemRoot\system32\DRIVERS\umbus.sys 0x912FC000 \SystemRoot\system32\DRIVERS\usbhub.sys 0x91331000 \SystemRoot\system32\DRIVERS\AVerCap.sys 0x91367000 \SystemRoot\system32\DRIVERS\AVerTun.sys 0x9138C000 \SystemRoot\system32\DRIVERS\BdaSup.SYS 0x9138F000 \SystemRoot\System32\Drivers\NDProxy.SYS 0x913A0000 \SystemRoot\system32\drivers\HdAudio.sys 0x807D3000 \SystemRoot\system32\drivers\portcls.sys 0x9140A000 \SystemRoot\system32\drivers\drmk.sys 0x91600000 \SystemRoot\system32\drivers\RTKVHDA.sys 0x917F5000 \SystemRoot\system32\DRIVERS\hidusb.sys 0x9142F000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS 0x9143F000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS 0x917FE000 \SystemRoot\system32\DRIVERS\USBD.SYS 0x91446000 \SystemRoot\system32\DRIVERS\usbscan.sys 0x91453000 \SystemRoot\system32\DRIVERS\mouhid.sys 0x9145B000 \SystemRoot\system32\DRIVERS\kbdhid.sys 0x91464000 \SystemRoot\System32\Drivers\NIS\1107000.00C\SRTSP.SYS 0x914BB000 \SystemRoot\system32\drivers\NIS\1107000.00C\Ironx86.SYS 0x914DA000 \SystemRoot\system32\drivers\NIS\1107000.00C\SRTSPX.SYS 0x9280C000 \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\VirusDefs\20100908.050\NAVEX15.SYS 0x92958000 \??\C:\Windows\system32\Drivers\SYMEVENT.SYS 0x9297D000 \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\VirusDefs\20100908.050\NAVENG.SYS 0x92991000 \SystemRoot\System32\Drivers\Fs_Rec.SYS 0x9299A000 \SystemRoot\System32\Drivers\Null.SYS 0x929A1000 \SystemRoot\System32\Drivers\Beep.SYS 0x929A8000 \SystemRoot\System32\drivers\vga.sys 0x929B4000 \SystemRoot\System32\drivers\VIDEOPRT.SYS 0x929D5000 \SystemRoot\System32\DRIVERS\RDPCDD.sys 0x929DD000 \SystemRoot\system32\drivers\rdpencdd.sys 0x929E5000 \SystemRoot\System32\Drivers\Msfs.SYS 0x929F0000 \SystemRoot\System32\Drivers\Npfs.SYS 0x92800000 \SystemRoot\System32\DRIVERS\rasacd.sys 0x914E4000 \SystemRoot\system32\DRIVERS\tdx.sys 0x914FA000 \SystemRoot\System32\Drivers\NIS\1107000.00C\SYMTDIV.SYS 0x91553000 \SystemRoot\system32\DRIVERS\smb.sys 0x91567000 \SystemRoot\system32\drivers\afd.sys 0x915AF000 \SystemRoot\System32\DRIVERS\netbt.sys 0x915E1000 \SystemRoot\system32\DRIVERS\pacer.sys 0x913DF000 \SystemRoot\system32\DRIVERS\netbios.sys 0x913ED000 \SystemRoot\system32\DRIVERS\wanarp.sys 0x9CE0E000 \SystemRoot\system32\DRIVERS\rdbss.sys 0x9CE4A000 \SystemRoot\system32\drivers\nsiproxy.sys 0x9CE54000 \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\IPSDefs\20100908.001\IDSvix86.sys 0x9CEAC000 \SystemRoot\System32\Drivers\FileDisk.SYS 0x9CEAF000 \??\C:\Windows\system32\drivers\elrawdsk.sys 0x9CEB3000 \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys 0x9CF11000 \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys 0x9CF2E000 \SystemRoot\system32\drivers\csc.sys 0x9CF89000 \SystemRoot\System32\Drivers\dfsc.sys 0x9DC03000 \SystemRoot\system32\drivers\NIS\1107000.00C\ccHPx86.sys 0x9DC82000 \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\BASHDefs\20100810.004\BHDrvx86.sys 0x9DD2E000 \SystemRoot\system32\DRIVERS\usbccgp.sys 0x9DD45000 \SystemRoot\system32\DRIVERS\usbprint.sys 0x9DD4F000 \SystemRoot\system32\drivers\hpfxbulk.sys 0x9DD52000 \SystemRoot\system32\drivers\HPFXGEN.SYS 0x9DD57000 \SystemRoot\system32\DRIVERS\USBSTOR.SYS 0x9DD6C000 \SystemRoot\System32\Drivers\crashdmp.sys 0x9DD79000 \SystemRoot\System32\Drivers\dump_dumpata.sys 0x9DD84000 \SystemRoot\System32\Drivers\dump_atapi.sys 0x9DD8C000 \SystemRoot\System32\Drivers\dump_dumpfve.sys 0xAF400000 \SystemRoot\System32\win32k.sys 0x9DD9D000 \SystemRoot\System32\drivers\Dxapi.sys 0x9DDA7000 \SystemRoot\system32\DRIVERS\monitor.sys 0xAF620000 \SystemRoot\System32\TSDDD.dll 0xAF640000 \SystemRoot\System32\cdd.dll 0x9DDB6000 \SystemRoot\system32\drivers\luafv.sys 0xB5C09000 \SystemRoot\system32\drivers\spsys.sys 0xB5CB9000 \SystemRoot\system32\DRIVERS\lltdio.sys 0xB5CC9000 \SystemRoot\system32\DRIVERS\rspndr.sys 0xB5CDC000 \SystemRoot\system32\drivers\HTTP.sys 0xB5D49000 \SystemRoot\System32\DRIVERS\srvnet.sys 0xB5D66000 \SystemRoot\system32\DRIVERS\bowser.sys 0xB5D7F000 \SystemRoot\System32\drivers\mpsdrv.sys 0xB5D94000 \SystemRoot\system32\drivers\mrxdav.sys 0xB5DB5000 \SystemRoot\system32\DRIVERS\mrxsmb.sys 0x9CFA0000 \SystemRoot\system32\DRIVERS\mrxsmb10.sys 0xB5DD4000 \SystemRoot\system32\DRIVERS\mrxsmb20.sys 0x9DDD1000 \SystemRoot\System32\DRIVERS\srv2.sys 0xB6A0A000 \SystemRoot\System32\DRIVERS\srv.sys 0xB6A58000 \SystemRoot\system32\DRIVERS\asyncmac.sys 0xB6A61000 \SystemRoot\System32\Drivers\Aspi32.SYS 0xB6A65000 \??\C:\Windows\system32\drivers\cpuz132_x32.sys 0xB6A69000 \SystemRoot\system32\drivers\peauth.sys 0xB6B47000 \SystemRoot\System32\Drivers\fastfat.SYS 0xB6B6F000 \SystemRoot\System32\Drivers\secdrv.SYS 0xB6B79000 \SystemRoot\System32\drivers\tcpipreg.sys 0xB6B85000 \??\C:\Program Files\Common Files\Realtime Soft\UltraMonMirrorDrv\x32\UltraMonUtility.sys 0xB6B88000 \SystemRoot\system32\DRIVERS\WUDFRd.sys 0xB6B9D000 \SystemRoot\system32\DRIVERS\WUDFPf.sys 0xB6BAF000 \SystemRoot\system32\DRIVERS\cdfs.sys 0x76FC0000 \Windows\System32\ntdll.dll Processes (total 79): 0 System Idle Process 4 System 544 C:\Windows\System32\smss.exe 624 csrss.exe 680 C:\Windows\System32\wininit.exe 688 csrss.exe 724 C:\Windows\System32\services.exe 756 C:\Windows\System32\winlogon.exe 780 C:\Windows\System32\lsass.exe 792 C:\Windows\System32\lsm.exe 936 C:\Windows\System32\svchost.exe 996 C:\Windows\System32\svchost.exe 1136 C:\Windows\System32\svchost.exe 1160 C:\Windows\System32\svchost.exe 1176 C:\Windows\System32\svchost.exe 1292 C:\Windows\System32\audiodg.exe 1320 C:\Windows\System32\svchost.exe 1364 C:\Windows\System32\SLsvc.exe 1420 C:\Windows\System32\svchost.exe 1556 C:\Windows\System32\svchost.exe 1748 C:\Windows\System32\taskeng.exe 1816 C:\Windows\System32\spoolsv.exe 1848 C:\Windows\System32\svchost.exe 1500 C:\Program Files\Common Files\aol\acs\AOLacsd.exe 1564 C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe 980 C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 1636 C:\Windows\System32\atashost.exe 988 C:\Program Files\Bonjour\mDNSResponder.exe 1212 C:\Windows\csifcsvc.exe 2196 C:\Program Files\Common Files\microsoft shared\VS7DEBUG\mdm.exe 2224 C:\Program Files\Microsoft SQL Server\MSSQL.2\MSSQL\Binn\sqlservr.exe 2296 C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe 2328 C:\Program Files\Norton Internet Security\Engine\17.7.0.12\ccsvchst.exe 2360 C:\Windows\System32\svchost.exe 2396 C:\Program Files\Common Files\Sage SData\Sage.SData.Service.exe 2596 C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe 2684 C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe 2704 C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe 2724 C:\Windows\System32\svchost.exe 2784 C:\Windows\System32\svchost.exe 2828 C:\Windows\System32\SearchIndexer.exe 3204 WUDFHost.exe 3388 dllhost.exe 3544 C:\Program Files\Norton Internet Security\Engine\17.7.0.12\ccsvchst.exe 3588 C:\Windows\System32\taskeng.exe 3596 C:\Windows\System32\dwm.exe 3764 C:\Windows\explorer.exe 4056 C:\Windows\servicing\TrustedInstaller.exe 3904 C:\Program Files\Common Files\aol\1252186683\ee\aolsoftware.exe 4052 C:\Program Files\Unlocker\UnlockerAssistant.exe 4168 C:\Program Files\PFU\Rack2\RKiwrtK.exe 4216 C:\Program Files\Common Files\Real\Update_OB\realsched.exe 4324 C:\Program Files\PFU\Rack2\Rkasynct.exe 4356 C:\Program Files\DivX\DivX Update\DivXUpdate.exe 4368 C:\Program Files\iTunes\iTunesHelper.exe 4388 C:\Program Files\Common Files\Java\Java Update\jusched.exe 4424 C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe 4468 C:\Program Files\PFU\ScanSnap\CardMinder\CardLauncher.exe 4504 C:\Program Files\PFU\ScanSnap\Driver\PfuSsMon.exe 4540 C:\Program Files\UltraMon\UltraMon.exe 4548 C:\Program Files\WinZip\WZQKPICK.EXE 4556 C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE 4612 C:\Program Files\UltraMon\UltraMonTaskbar.exe 4776 C:\Program Files\Windows Media Player\wmpnscfg.exe 4824 C:\Program Files\Windows Media Player\wmpnetwk.exe 4984 C:\Users\Peter\AppData\Local\Google\Update\1.2.183.29\GoogleCrashHandler.exe 5132 C:\Program Files\APC\APC PowerChute Personal Edition\apcsystray.exe 5228 C:\Program Files\iPod\bin\iPodService.exe 5484 C:\Users\Peter\AppData\Local\Google\Chrome\Application\chrome.exe 2288 C:\Users\Peter\AppData\Local\Google\Chrome\Application\chrome.exe 3260 C:\Users\Peter\AppData\Local\Google\Chrome\Application\chrome.exe 4380 C:\Windows\System32\SearchProtocolHost.exe 5552 C:\Users\Peter\AppData\Local\Google\Chrome\Application\chrome.exe 4932 C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe 6032 C:\Program Files\UltraMon\UltraMonUiAcc.exe 5708 taskeng.exe 4192 C:\Users\Peter\Desktop\MBRCheck.exe 4464 C:\Windows\System32\SearchProtocolHost.exe 4948 C:\Windows\System32\SearchFilterHost.exe \\.\C: –> \\.\PhysicalDrive1 at offset 0x00000002`83f00000 (NTFS) \\.\D: –> \\.\PhysicalDrive0 at offset 0x00000000`00100000 (NTFS) \\.\E: –> \\.\PhysicalDrive1 at offset 0x00000000`03f00000 (NTFS) PhysicalDrive1 Model Number: WDCWD5000AAKS-75A7B0, Rev: 01.03B01 PhysicalDrive0 Model Number: WDCWD5000AAKS-75A7B0, Rev: 01.03B01 Size Device Name MBR Status ——————————————– 465 GB \\.\PhysicalDrive1 Windows Vista MBR code detected SHA1: 8DF43F2BDE2D9451948FA14B5279969C777A7979 465 GB \\.\PhysicalDrive0 Known-bad MBR code detected (Whistler / Black Internet)! SHA1: CB9391A348A4F8AD6FC6EA596AEDB9C336710CA7 Found non-standard or infected MBR. Enter 'Y' and hit ENTER for more options, or 'N' to exit: Done!

I don't have a separate operating system on the D drive In fact I only have six folders: $Recycle.bin System VolumeInformation four other folders with very old backup data

When I try to access the System Volume Information folder it says access is denied even though I am administrator

Hi petersaxon,

Let's try this again as the tool still shows a problem Please make sure you follow the instructions as written.

• Run MBRCheck.exe
• Wait until you see the following line: Enter 'Y' and hit ENTER for more options, or 'N' to exit:
• Please push the 'Y' key and then press Enter
• When program ask you Enter your choice: enter 2 and press the Enter key
• Now the program will ask you "Enter the physical disk number to fix (0-99, -1 to cancel):"
• Enter 1 and press the Enter key.
• The program will show Available MBR codes:, followed by a list of operating systems. Please enter 3 for Vista, and then press Enter.
• The program will prompt for confirmation. Type 'YES' and hit Enter.
• Left click on the title bar (where program name and path is written).
• From menu chose Edit -> Select All
• Hit the Enter key on your keyboard to copy selected text.
• Paste that text into Notepad, save it to your desktop as "MBRCheck results.txt"
• Important! Restart your PC for the fix to take effect.
• Post the contents of the MBRCheck results log in your next reply

MBRCheck, version 1.2.3 © 2010, AD Command-line: Windows Version: Windows Vista Ultimate Edition Windows Information: Service Pack 2 (build 6002), 32-bit Base Board Manufacturer: Dell Inc. BIOS Manufacturer: Dell Inc. System Manufacturer: Dell Inc. System Product Name: Inspiron 530 Logical Drives Mask: 0x020007bc Kernel Drivers (total 168): 0x82212000 \SystemRoot\system32\ntkrnlpa.exe 0x825CB000 \SystemRoot\system32\hal.dll 0x80604000 \SystemRoot\system32\kdcom.dll 0x8060B000 \SystemRoot\system32\mcupdate_GenuineIntel.dll 0x8067B000 \SystemRoot\system32\PSHED.dll 0x8068C000 \SystemRoot\system32\BOOTVID.dll 0x80694000 \SystemRoot\system32\CLFS.SYS 0x806D5000 \SystemRoot\system32\CI.dll 0x807B5000 \SystemRoot\System32\drivers\mtgfi.sys 0x8AE06000 \SystemRoot\system32\drivers\Wdf01000.sys 0x8AE82000 \SystemRoot\system32\drivers\WDFLDR.SYS 0x8AE8F000 \SystemRoot\system32\drivers\acpi.sys 0x8AED5000 \SystemRoot\system32\drivers\WMILIB.SYS 0x8AEDE000 \SystemRoot\system32\drivers\msisadrv.sys 0x8AEE6000 \SystemRoot\system32\drivers\pci.sys 0x8AF0D000 \SystemRoot\System32\drivers\partmgr.sys 0x8AF1C000 \SystemRoot\system32\DRIVERS\compbatt.sys 0x8AF1F000 \SystemRoot\system32\DRIVERS\BATTC.SYS 0x8AF29000 \SystemRoot\system32\drivers\volmgr.sys 0x8AF38000 \SystemRoot\System32\drivers\volmgrx.sys 0x8AF82000 \SystemRoot\system32\drivers\pciide.sys 0x8AF89000 \SystemRoot\system32\drivers\PCIIDEX.SYS 0x8AF97000 \SystemRoot\System32\drivers\mountmgr.sys 0x8AFA7000 \SystemRoot\system32\drivers\atapi.sys 0x8AFAF000 \SystemRoot\system32\drivers\ataport.SYS 0x8AFCD000 \SystemRoot\system32\drivers\fltmgr.sys 0x807C3000 \SystemRoot\system32\drivers\fileinfo.sys 0x8B009000 \SystemRoot\system32\drivers\NIS\1107000.00C\SYMDS.SYS 0x8B05F000 \SystemRoot\system32\drivers\NIS\1107000.00C\SYMEFA.SYS 0x8B08C000 \SystemRoot\System32\Drivers\ksecdd.sys 0x8B209000 \SystemRoot\system32\drivers\ndis.sys 0x8B314000 \SystemRoot\system32\drivers\msrpc.sys 0x8B33F000 \SystemRoot\system32\drivers\NETIO.SYS 0x8B0FD000 \SystemRoot\System32\drivers\tcpip.sys 0x8B37A000 \SystemRoot\System32\drivers\fwpkclnt.sys 0x8B407000 \SystemRoot\System32\Drivers\Ntfs.sys 0x8B517000 \SystemRoot\system32\drivers\volsnap.sys 0x8B550000 \SystemRoot\System32\Drivers\spldr.sys 0x8B558000 \SystemRoot\System32\Drivers\mup.sys 0x8B567000 \SystemRoot\System32\drivers\ecache.sys 0x8B58E000 \SystemRoot\System32\DRIVERS\fvevol.sys 0x8B5B2000 \SystemRoot\system32\drivers\disk.sys 0x8B5C3000 \SystemRoot\system32\drivers\CLASSPNP.SYS 0x8B5E4000 \SystemRoot\system32\drivers\crcdisk.sys 0x8B3B9000 \SystemRoot\system32\DRIVERS\tunnel.sys 0x8B3C4000 \SystemRoot\system32\DRIVERS\tunmp.sys 0x8B3CD000 \SystemRoot\system32\DRIVERS\intelppm.sys 0x90808000 \SystemRoot\system32\DRIVERS\atikmdag.sys 0x90D1B000 \SystemRoot\System32\drivers\dxgkrnl.sys 0x90DBC000 \SystemRoot\System32\drivers\watchdog.sys 0x90E00000 \SystemRoot\system32\DRIVERS\HDAudBus.sys 0x90E8D000 \SystemRoot\system32\DRIVERS\e1e6032.sys 0x90EC7000 \SystemRoot\system32\DRIVERS\usbuhci.sys 0x90ED2000 \SystemRoot\system32\DRIVERS\USBPORT.SYS 0x90F10000 \SystemRoot\system32\DRIVERS\usbehci.sys 0x90F1F000 \SystemRoot\system32\DRIVERS\AVerBas.sys 0x90F2C000 \SystemRoot\system32\DRIVERS\fdc.sys 0x90F37000 \SystemRoot\system32\DRIVERS\cdrom.sys 0x90F4F000 \SystemRoot\system32\DRIVERS\GEARAspiWDM.sys 0x90F55000 \SystemRoot\system32\DRIVERS\msiscsi.sys 0x90F84000 \SystemRoot\system32\DRIVERS\storport.sys 0x90FC5000 \SystemRoot\system32\DRIVERS\TDI.SYS 0x90FD0000 \SystemRoot\system32\DRIVERS\rasl2tp.sys 0x90FE7000 \SystemRoot\system32\DRIVERS\ndistapi.sys 0x90DC8000 \SystemRoot\system32\DRIVERS\ndiswan.sys 0x90DEB000 \SystemRoot\system32\DRIVERS\raspppoe.sys 0x8B3DC000 \SystemRoot\system32\DRIVERS\raspptp.sys 0x8B1E7000 \SystemRoot\system32\DRIVERS\rassstp.sys 0x90FF2000 \SystemRoot\system32\DRIVERS\wanatw4.sys 0x9120A000 \SystemRoot\system32\DRIVERS\rdpdr.sys 0x91293000 \SystemRoot\system32\DRIVERS\termdd.sys 0x912A3000 \SystemRoot\system32\DRIVERS\kbdclass.sys 0x912AE000 \SystemRoot\system32\DRIVERS\mouclass.sys 0x912B9000 \SystemRoot\system32\DRIVERS\swenum.sys 0x912BB000 \SystemRoot\system32\DRIVERS\ks.sys 0x912E5000 \SystemRoot\system32\DRIVERS\mssmbios.sys 0x912EF000 \SystemRoot\system32\DRIVERS\umbus.sys 0x912FC000 \SystemRoot\system32\DRIVERS\usbhub.sys 0x91331000 \SystemRoot\system32\DRIVERS\AVerCap.sys 0x91367000 \SystemRoot\system32\DRIVERS\AVerTun.sys 0x9138C000 \SystemRoot\system32\DRIVERS\BdaSup.SYS 0x9138F000 \SystemRoot\System32\Drivers\NDProxy.SYS 0x913A0000 \SystemRoot\system32\drivers\HdAudio.sys 0x807D3000 \SystemRoot\system32\drivers\portcls.sys 0x9140A000 \SystemRoot\system32\drivers\drmk.sys 0x91600000 \SystemRoot\system32\drivers\RTKVHDA.sys 0x917F5000 \SystemRoot\system32\DRIVERS\hidusb.sys 0x9142F000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS 0x9143F000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS 0x917FE000 \SystemRoot\system32\DRIVERS\USBD.SYS 0x91446000 \SystemRoot\system32\DRIVERS\usbscan.sys 0x91453000 \SystemRoot\system32\DRIVERS\mouhid.sys 0x9145B000 \SystemRoot\system32\DRIVERS\kbdhid.sys 0x91464000 \SystemRoot\System32\Drivers\NIS\1107000.00C\SRTSP.SYS 0x914BB000 \SystemRoot\system32\drivers\NIS\1107000.00C\Ironx86.SYS 0x914DA000 \SystemRoot\system32\drivers\NIS\1107000.00C\SRTSPX.SYS 0x92958000 \??\C:\Windows\system32\Drivers\SYMEVENT.SYS 0x92991000 \SystemRoot\System32\Drivers\Fs_Rec.SYS 0x9299A000 \SystemRoot\System32\Drivers\Null.SYS 0x929A1000 \SystemRoot\System32\Drivers\Beep.SYS 0x929A8000 \SystemRoot\System32\drivers\vga.sys 0x929B4000 \SystemRoot\System32\drivers\VIDEOPRT.SYS 0x929D5000 \SystemRoot\System32\DRIVERS\RDPCDD.sys 0x929DD000 \SystemRoot\system32\drivers\rdpencdd.sys 0x929E5000 \SystemRoot\System32\Drivers\Msfs.SYS 0x929F0000 \SystemRoot\System32\Drivers\Npfs.SYS 0x92800000 \SystemRoot\System32\DRIVERS\rasacd.sys 0x914E4000 \SystemRoot\system32\DRIVERS\tdx.sys 0x914FA000 \SystemRoot\System32\Drivers\NIS\1107000.00C\SYMTDIV.SYS 0x91553000 \SystemRoot\system32\DRIVERS\smb.sys 0x91567000 \SystemRoot\system32\drivers\afd.sys 0x915AF000 \SystemRoot\System32\DRIVERS\netbt.sys 0x915E1000 \SystemRoot\system32\DRIVERS\pacer.sys 0x913DF000 \SystemRoot\system32\DRIVERS\netbios.sys 0x913ED000 \SystemRoot\system32\DRIVERS\wanarp.sys 0x9CE0E000 \SystemRoot\system32\DRIVERS\rdbss.sys 0x9CE4A000 \SystemRoot\system32\drivers\nsiproxy.sys 0x9CE54000 \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\IPSDefs\20100908.001\IDSvix86.sys 0x9CEAC000 \SystemRoot\System32\Drivers\FileDisk.SYS 0x9CEAF000 \??\C:\Windows\system32\drivers\elrawdsk.sys 0x9CEB3000 \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys 0x9CF11000 \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys 0x9CF2E000 \SystemRoot\system32\drivers\csc.sys 0x9CF89000 \SystemRoot\System32\Drivers\dfsc.sys 0x9DC03000 \SystemRoot\system32\drivers\NIS\1107000.00C\ccHPx86.sys 0x9DC82000 \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\BASHDefs\20100810.004\BHDrvx86.sys 0x9DD2E000 \SystemRoot\system32\DRIVERS\usbccgp.sys 0x9DD45000 \SystemRoot\system32\DRIVERS\usbprint.sys 0x9DD4F000 \SystemRoot\system32\drivers\hpfxbulk.sys 0x9DD52000 \SystemRoot\system32\drivers\HPFXGEN.SYS 0x9DD57000 \SystemRoot\system32\DRIVERS\USBSTOR.SYS 0x9DD6C000 \SystemRoot\System32\Drivers\crashdmp.sys 0x9DD79000 \SystemRoot\System32\Drivers\dump_dumpata.sys 0x9DD84000 \SystemRoot\System32\Drivers\dump_atapi.sys 0x9DD8C000 \SystemRoot\System32\Drivers\dump_dumpfve.sys 0xAF400000 \SystemRoot\System32\win32k.sys 0x9DD9D000 \SystemRoot\System32\drivers\Dxapi.sys 0x9DDA7000 \SystemRoot\system32\DRIVERS\monitor.sys 0xAF620000 \SystemRoot\System32\TSDDD.dll 0xAF640000 \SystemRoot\System32\cdd.dll 0x9DDB6000 \SystemRoot\system32\drivers\luafv.sys 0xB5C09000 \SystemRoot\system32\drivers\spsys.sys 0xB5CB9000 \SystemRoot\system32\DRIVERS\lltdio.sys 0xB5CC9000 \SystemRoot\system32\DRIVERS\rspndr.sys 0xB5CDC000 \SystemRoot\system32\drivers\HTTP.sys 0xB5D49000 \SystemRoot\System32\DRIVERS\srvnet.sys 0xB5D66000 \SystemRoot\system32\DRIVERS\bowser.sys 0xB5D7F000 \SystemRoot\System32\drivers\mpsdrv.sys 0xB5D94000 \SystemRoot\system32\drivers\mrxdav.sys 0xB5DB5000 \SystemRoot\system32\DRIVERS\mrxsmb.sys 0x9CFA0000 \SystemRoot\system32\DRIVERS\mrxsmb10.sys 0xB5DD4000 \SystemRoot\system32\DRIVERS\mrxsmb20.sys 0x9DDD1000 \SystemRoot\System32\DRIVERS\srv2.sys 0xB6A0A000 \SystemRoot\System32\DRIVERS\srv.sys 0xB6A58000 \SystemRoot\system32\DRIVERS\asyncmac.sys 0xB6A61000 \SystemRoot\System32\Drivers\Aspi32.SYS 0xB6A65000 \??\C:\Windows\system32\drivers\cpuz132_x32.sys 0xB6A69000 \SystemRoot\system32\drivers\peauth.sys 0xB6B47000 \SystemRoot\System32\Drivers\fastfat.SYS 0xB6B6F000 \SystemRoot\System32\Drivers\secdrv.SYS 0xB6B79000 \SystemRoot\System32\drivers\tcpipreg.sys 0xB6B85000 \??\C:\Program Files\Common Files\Realtime Soft\UltraMonMirrorDrv\x32\UltraMonUtility.sys 0xB6B88000 \SystemRoot\system32\DRIVERS\WUDFRd.sys 0xB6B9D000 \SystemRoot\system32\DRIVERS\WUDFPf.sys 0xB6BAF000 \SystemRoot\system32\DRIVERS\cdfs.sys 0x92809000 \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\VirusDefs\20100909.002\NAVEX15.SYS 0xB6BC5000 \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\VirusDefs\20100909.002\NAVENG.SYS 0x76FC0000 \Windows\System32\ntdll.dll Processes (total 90): 0 System Idle Process 4 System 544 C:\Windows\System32\smss.exe 624 csrss.exe 680 C:\Windows\System32\wininit.exe 688 csrss.exe 724 C:\Windows\System32\services.exe 756 C:\Windows\System32\winlogon.exe 780 C:\Windows\System32\lsass.exe 792 C:\Windows\System32\lsm.exe 936 C:\Windows\System32\svchost.exe 996 C:\Windows\System32\svchost.exe 1136 C:\Windows\System32\svchost.exe 1160 C:\Windows\System32\svchost.exe 1176 C:\Windows\System32\svchost.exe 1292 C:\Windows\System32\audiodg.exe 1320 C:\Windows\System32\svchost.exe 1364 C:\Windows\System32\SLsvc.exe 1420 C:\Windows\System32\svchost.exe 1556 C:\Windows\System32\svchost.exe 1748 C:\Windows\System32\taskeng.exe 1816 C:\Windows\System32\spoolsv.exe 1848 C:\Windows\System32\svchost.exe 1500 C:\Program Files\Common Files\aol\acs\AOLacsd.exe 1564 C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe 980 C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 1636 C:\Windows\System32\atashost.exe 988 C:\Program Files\Bonjour\mDNSResponder.exe 1212 C:\Windows\csifcsvc.exe 2196 C:\Program Files\Common Files\microsoft shared\VS7DEBUG\mdm.exe 2224 C:\Program Files\Microsoft SQL Server\MSSQL.2\MSSQL\Binn\sqlservr.exe 2296 C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe 2328 C:\Program Files\Norton Internet Security\Engine\17.7.0.12\ccsvchst.exe 2360 C:\Windows\System32\svchost.exe 2396 C:\Program Files\Common Files\Sage SData\Sage.SData.Service.exe 2596 C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe 2684 C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe 2704 C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe 2724 C:\Windows\System32\svchost.exe 2784 C:\Windows\System32\svchost.exe 2828 C:\Windows\System32\SearchIndexer.exe 3204 WUDFHost.exe 3388 dllhost.exe 3544 C:\Program Files\Norton Internet Security\Engine\17.7.0.12\ccsvchst.exe 3588 C:\Windows\System32\taskeng.exe 3596 C:\Windows\System32\dwm.exe 3764 C:\Windows\explorer.exe 3904 C:\Program Files\Common Files\aol\1252186683\ee\aolsoftware.exe 4052 C:\Program Files\Unlocker\UnlockerAssistant.exe 4168 C:\Program Files\PFU\Rack2\RKiwrtK.exe 4216 C:\Program Files\Common Files\Real\Update_OB\realsched.exe 4324 C:\Program Files\PFU\Rack2\Rkasynct.exe 4356 C:\Program Files\DivX\DivX Update\DivXUpdate.exe 4368 C:\Program Files\iTunes\iTunesHelper.exe 4388 C:\Program Files\Common Files\Java\Java Update\jusched.exe 4424 C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe 4468 C:\Program Files\PFU\ScanSnap\CardMinder\CardLauncher.exe 4504 C:\Program Files\PFU\ScanSnap\Driver\PfuSsMon.exe 4540 C:\Program Files\UltraMon\UltraMon.exe 4548 C:\Program Files\WinZip\WZQKPICK.EXE 4556 C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE 4612 C:\Program Files\UltraMon\UltraMonTaskbar.exe 4776 C:\Program Files\Windows Media Player\wmpnscfg.exe 4824 C:\Program Files\Windows Media Player\wmpnetwk.exe 4984 C:\Users\Peter\AppData\Local\Google\Update\1.2.183.29\GoogleCrashHandler.exe 5132 C:\Program Files\APC\APC PowerChute Personal Edition\apcsystray.exe 5228 C:\Program Files\iPod\bin\iPodService.exe 5484 C:\Users\Peter\AppData\Local\Google\Chrome\Application\chrome.exe 2288 C:\Users\Peter\AppData\Local\Google\Chrome\Application\chrome.exe 6032 C:\Program Files\UltraMon\UltraMonUiAcc.exe 1720 C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE 2244 C:\Program Files\Microsoft AutoRoute 2010\StreetsOlkShim.exe 4148 C:\Program Files\Common Files\Apple\Mobile Device Support\MobileMeServices.exe 4496 C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE 3056 C:\Program Files\Digita\Practice Management\DPM.exe 4896 C:\Users\Peter\AppData\Local\Google\Chrome\Application\chrome.exe 1372 C:\Users\Peter\AppData\Local\Google\Chrome\Application\chrome.exe 1872 C:\Users\Peter\AppData\Local\Google\Chrome\Application\chrome.exe 4924 C:\Users\Peter\AppData\Local\Google\Chrome\Application\chrome.exe 5596 C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrobat.exe 5328 C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe 356 C:\Program Files\Microsoft Office\Office14\EXCEL.EXE 5464 C:\Users\Peter\AppData\Local\Google\Chrome\Application\chrome.exe 5352 C:\Users\Peter\AppData\Local\Google\Chrome\Application\chrome.exe 4412 C:\Users\Peter\AppData\Local\Google\Chrome\Application\chrome.exe 888 C:\Windows\System32\SearchProtocolHost.exe 5744 C:\Users\Peter\AppData\Local\Google\Chrome\Application\chrome.exe 1916 C:\Windows\System32\SearchFilterHost.exe 1680 C:\Users\Peter\Downloads\MBRCheck.exe 4048 C:\Windows\System32\SearchProtocolHost.exe \\.\C: –> \\.\PhysicalDrive1 at offset 0x00000002`83f00000 (NTFS) \\.\D: –> \\.\PhysicalDrive0 at offset 0x00000000`00100000 (NTFS) \\.\E: –> \\.\PhysicalDrive1 at offset 0x00000000`03f00000 (NTFS) PhysicalDrive1 Model Number: WDCWD5000AAKS-75A7B0, Rev: 01.03B01 PhysicalDrive0 Model Number: WDCWD5000AAKS-75A7B0, Rev: 01.03B01 Size Device Name MBR Status ——————————————– 465 GB \\.\PhysicalDrive1 Windows Vista MBR code detected SHA1: 8DF43F2BDE2D9451948FA14B5279969C777A7979 465 GB \\.\PhysicalDrive0 Known-bad MBR code detected (Whistler / Black Internet)! SHA1: CB9391A348A4F8AD6FC6EA596AEDB9C336710CA7 Found non-standard or infected MBR. Enter 'Y' and hit ENTER for more options, or 'N' to exit: Options: [1] Dump the MBR of a physical disk to file. [2] Restore the MBR of a physical disk with a standard boot code. [3] Exit. Enter your choice: Enter the physical disk number to fix (0-99, -1 to cancel): 1Available MBR codes: [ 0] Default (Windows Vista) [ 1] Windows XP [ 2] Windows Server 2003 [ 3] Windows Vista [ 4] Windows 2008 [ 5] Windows 7 [-1] Cancel Please select the MBR code to write to this drive: 3 Do you want to fix the MBR code? Type 'YES' and hit ENTER to continue: YES Successfully wrote new MBR code! Please reboot your computer to complete the fix. Done!

Hi petersaxton,

Have you rebooted the computer? If not please do so now.

After the computer rerun MBRCheck as below so we can see if the fix took.

• Be sure to disable your security programs
• Double click on the file to run it (Vista and Windows 7 users will have to confirm the UAC prompt)
• A window will open on your desktop
• if an unknown bootcode is found you will have further options available to you, at this time press N then press Enter twice.
• If nothing unusual is found just press Enter
• A .txt file named MBRCheck_mm.dd.yy_hh.mm.ss should appear on your desktop.
• Please post the contents of that file.

Yes, I had rebooted MBRCheck, version 1.2.3 © 2010, AD Command-line: Windows Version: Windows Vista Ultimate Edition Windows Information: Service Pack 2 (build 6002), 32-bit Base Board Manufacturer: Dell Inc. BIOS Manufacturer: Dell Inc. System Manufacturer: Dell Inc. System Product Name: Inspiron 530 Logical Drives Mask: 0x020007bc Kernel Drivers (total 167): 0x8223F000 \SystemRoot\system32\ntkrnlpa.exe 0x8220C000 \SystemRoot\system32\hal.dll 0x80603000 \SystemRoot\system32\kdcom.dll 0x8060A000 \SystemRoot\system32\mcupdate_GenuineIntel.dll 0x8067A000 \SystemRoot\system32\PSHED.dll 0x8068B000 \SystemRoot\system32\BOOTVID.dll 0x80693000 \SystemRoot\system32\CLFS.SYS 0x806D4000 \SystemRoot\system32\CI.dll 0x8AC07000 \SystemRoot\system32\drivers\Wdf01000.sys 0x8AC83000 \SystemRoot\system32\drivers\WDFLDR.SYS 0x8AC90000 \SystemRoot\system32\drivers\acpi.sys 0x8ACD6000 \SystemRoot\system32\drivers\WMILIB.SYS 0x8ACDF000 \SystemRoot\system32\drivers\msisadrv.sys 0x8ACE7000 \SystemRoot\system32\drivers\pci.sys 0x8AD0E000 \SystemRoot\System32\drivers\partmgr.sys 0x8AD1D000 \SystemRoot\system32\DRIVERS\compbatt.sys 0x8AD20000 \SystemRoot\system32\DRIVERS\BATTC.SYS 0x8AD2A000 \SystemRoot\system32\drivers\volmgr.sys 0x8AD39000 \SystemRoot\System32\drivers\volmgrx.sys 0x8AD83000 \SystemRoot\system32\drivers\pciide.sys 0x8AD8A000 \SystemRoot\system32\drivers\PCIIDEX.SYS 0x8AD98000 \SystemRoot\System32\drivers\mountmgr.sys 0x8ADA8000 \SystemRoot\system32\drivers\atapi.sys 0x8ADB0000 \SystemRoot\system32\drivers\ataport.SYS 0x8ADCE000 \SystemRoot\system32\drivers\fltmgr.sys 0x807B4000 \SystemRoot\system32\drivers\fileinfo.sys 0x8AE04000 \SystemRoot\system32\drivers\NIS\1107000.00C\SYMDS.SYS 0x8AE5A000 \SystemRoot\system32\drivers\NIS\1107000.00C\SYMEFA.SYS 0x8AE87000 \SystemRoot\System32\Drivers\ksecdd.sys 0x8B000000 \SystemRoot\system32\drivers\ndis.sys 0x8B10B000 \SystemRoot\system32\drivers\msrpc.sys 0x8B136000 \SystemRoot\system32\drivers\NETIO.SYS 0x8AEF8000 \SystemRoot\System32\drivers\tcpip.sys 0x8B171000 \SystemRoot\System32\drivers\fwpkclnt.sys 0x8B20A000 \SystemRoot\System32\Drivers\Ntfs.sys 0x8B31A000 \SystemRoot\system32\drivers\volsnap.sys 0x8B353000 \SystemRoot\System32\Drivers\spldr.sys 0x8B35B000 \SystemRoot\System32\Drivers\mup.sys 0x8B36A000 \SystemRoot\System32\drivers\ecache.sys 0x8B391000 \SystemRoot\System32\DRIVERS\fvevol.sys 0x8B3B5000 \SystemRoot\system32\drivers\disk.sys 0x8B3C6000 \SystemRoot\system32\drivers\CLASSPNP.SYS 0x8B3E7000 \SystemRoot\system32\drivers\crcdisk.sys 0x8B1A8000 \SystemRoot\system32\DRIVERS\tunnel.sys 0x8B1B3000 \SystemRoot\system32\DRIVERS\tunmp.sys 0x8B1BC000 \SystemRoot\system32\DRIVERS\intelppm.sys 0x90008000 \SystemRoot\system32\DRIVERS\atikmdag.sys 0x9051B000 \SystemRoot\System32\drivers\dxgkrnl.sys 0x905BC000 \SystemRoot\System32\drivers\watchdog.sys 0x90602000 \SystemRoot\system32\DRIVERS\HDAudBus.sys 0x9068F000 \SystemRoot\system32\DRIVERS\e1e6032.sys 0x906C9000 \SystemRoot\system32\DRIVERS\usbuhci.sys 0x906D4000 \SystemRoot\system32\DRIVERS\USBPORT.SYS 0x90712000 \SystemRoot\system32\DRIVERS\usbehci.sys 0x90721000 \SystemRoot\system32\DRIVERS\AVerBas.sys 0x9072E000 \SystemRoot\system32\DRIVERS\fdc.sys 0x90739000 \SystemRoot\system32\DRIVERS\cdrom.sys 0x90751000 \SystemRoot\system32\DRIVERS\GEARAspiWDM.sys 0x90757000 \SystemRoot\system32\DRIVERS\msiscsi.sys 0x90786000 \SystemRoot\system32\DRIVERS\storport.sys 0x907C7000 \SystemRoot\system32\DRIVERS\TDI.SYS 0x907D2000 \SystemRoot\system32\DRIVERS\rasl2tp.sys 0x907E9000 \SystemRoot\system32\DRIVERS\ndistapi.sys 0x905C8000 \SystemRoot\system32\DRIVERS\ndiswan.sys 0x905EB000 \SystemRoot\system32\DRIVERS\raspppoe.sys 0x8B1CB000 \SystemRoot\system32\DRIVERS\raspptp.sys 0x8B1DF000 \SystemRoot\system32\DRIVERS\rassstp.sys 0x907F4000 \SystemRoot\system32\DRIVERS\wanatw4.sys 0x90A07000 \SystemRoot\system32\DRIVERS\rdpdr.sys 0x90A90000 \SystemRoot\system32\DRIVERS\termdd.sys 0x90AA0000 \SystemRoot\system32\DRIVERS\kbdclass.sys 0x90AAB000 \SystemRoot\system32\DRIVERS\mouclass.sys 0x90AB6000 \SystemRoot\system32\DRIVERS\swenum.sys 0x90AB8000 \SystemRoot\system32\DRIVERS\ks.sys 0x90AE2000 \SystemRoot\system32\DRIVERS\mssmbios.sys 0x90AEC000 \SystemRoot\system32\DRIVERS\umbus.sys 0x90AF9000 \SystemRoot\system32\DRIVERS\usbhub.sys 0x90B2E000 \SystemRoot\system32\DRIVERS\AVerCap.sys 0x90B64000 \SystemRoot\system32\DRIVERS\AVerTun.sys 0x90B89000 \SystemRoot\system32\DRIVERS\BdaSup.SYS 0x90B8C000 \SystemRoot\System32\Drivers\NDProxy.SYS 0x90B9D000 \SystemRoot\system32\drivers\HdAudio.sys 0x807C4000 \SystemRoot\system32\drivers\portcls.sys 0x90C08000 \SystemRoot\system32\drivers\drmk.sys 0x90E00000 \SystemRoot\system32\drivers\RTKVHDA.sys 0x90FF5000 \SystemRoot\system32\DRIVERS\hidusb.sys 0x90C2D000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS 0x90C3D000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS 0x90FFE000 \SystemRoot\system32\DRIVERS\USBD.SYS 0x90C44000 \SystemRoot\system32\DRIVERS\usbscan.sys 0x90C51000 \SystemRoot\system32\DRIVERS\kbdhid.sys 0x90C5A000 \SystemRoot\system32\DRIVERS\mouhid.sys 0x90C62000 \SystemRoot\System32\Drivers\NIS\1107000.00C\SRTSP.SYS 0x90CB9000 \SystemRoot\system32\drivers\NIS\1107000.00C\Ironx86.SYS 0x90CD8000 \SystemRoot\system32\drivers\NIS\1107000.00C\SRTSPX.SYS 0x92008000 \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\VirusDefs\20100909.002\NAVEX15.SYS 0x92154000 \??\C:\Windows\system32\Drivers\SYMEVENT.SYS 0x92179000 \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\VirusDefs\20100909.002\NAVENG.SYS 0x9218D000 \SystemRoot\system32\DRIVERS\usbccgp.sys 0x921A4000 \SystemRoot\system32\DRIVERS\usbprint.sys 0x921AE000 \SystemRoot\system32\drivers\hpfxbulk.sys 0x921B1000 \SystemRoot\system32\drivers\HPFXGEN.SYS 0x921B6000 \SystemRoot\System32\Drivers\Fs_Rec.SYS 0x921BF000 \SystemRoot\System32\Drivers\Null.SYS 0x921C6000 \SystemRoot\System32\Drivers\Beep.SYS 0x921CD000 \SystemRoot\System32\drivers\vga.sys 0x921D9000 \SystemRoot\System32\drivers\VIDEOPRT.SYS 0x92000000 \SystemRoot\System32\DRIVERS\RDPCDD.sys 0x90CE2000 \SystemRoot\system32\drivers\rdpencdd.sys 0x90CEA000 \SystemRoot\System32\Drivers\Msfs.SYS 0x90CF5000 \SystemRoot\System32\Drivers\Npfs.SYS 0x90D03000 \SystemRoot\System32\DRIVERS\rasacd.sys 0x90D0C000 \SystemRoot\system32\DRIVERS\tdx.sys 0x90D22000 \SystemRoot\System32\Drivers\NIS\1107000.00C\SYMTDIV.SYS 0x90D7B000 \SystemRoot\system32\DRIVERS\USBSTOR.SYS 0x90D90000 \SystemRoot\system32\DRIVERS\smb.sys 0x90DA4000 \SystemRoot\system32\drivers\afd.sys 0x9C60C000 \SystemRoot\System32\DRIVERS\netbt.sys 0x9C63E000 \SystemRoot\system32\DRIVERS\pacer.sys 0x9C654000 \SystemRoot\system32\DRIVERS\netbios.sys 0x9C662000 \SystemRoot\system32\DRIVERS\wanarp.sys 0x9C675000 \SystemRoot\system32\DRIVERS\rdbss.sys 0x9C6B1000 \SystemRoot\system32\drivers\nsiproxy.sys 0x9C6BB000 \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\IPSDefs\20100908.001\IDSvix86.sys 0x9C713000 \SystemRoot\System32\Drivers\FileDisk.SYS 0x9C716000 \??\C:\Windows\system32\drivers\elrawdsk.sys 0x9C71A000 \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys 0x9C778000 \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys 0x9C795000 \SystemRoot\system32\drivers\csc.sys 0x90BDC000 \SystemRoot\System32\Drivers\dfsc.sys 0x9CA07000 \SystemRoot\system32\drivers\NIS\1107000.00C\ccHPx86.sys 0x9CA86000 \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\BASHDefs\20100810.004\BHDrvx86.sys 0x9CB32000 \SystemRoot\System32\Drivers\crashdmp.sys 0x9CB3F000 \SystemRoot\System32\Drivers\dump_dumpata.sys 0x9CB4A000 \SystemRoot\System32\Drivers\dump_atapi.sys 0x9CB52000 \SystemRoot\System32\Drivers\dump_dumpfve.sys 0xAEC20000 \SystemRoot\System32\win32k.sys 0x9CB63000 \SystemRoot\System32\drivers\Dxapi.sys 0x9CB6D000 \SystemRoot\system32\DRIVERS\monitor.sys 0xAEE40000 \SystemRoot\System32\TSDDD.dll 0xAEE60000 \SystemRoot\System32\cdd.dll 0x9CB7C000 \SystemRoot\system32\drivers\luafv.sys 0xB5E06000 \SystemRoot\system32\drivers\spsys.sys 0xB5EB6000 \SystemRoot\system32\DRIVERS\lltdio.sys 0xB5EC6000 \SystemRoot\system32\DRIVERS\rspndr.sys 0xB5ED9000 \SystemRoot\system32\drivers\HTTP.sys 0xB5F46000 \SystemRoot\System32\DRIVERS\srvnet.sys 0xB5F63000 \SystemRoot\system32\DRIVERS\bowser.sys 0xB5F7C000 \SystemRoot\System32\drivers\mpsdrv.sys 0xB5F91000 \SystemRoot\system32\drivers\mrxdav.sys 0xB5FB2000 \SystemRoot\system32\DRIVERS\mrxsmb.sys 0x9CB97000 \SystemRoot\system32\DRIVERS\mrxsmb10.sys 0xB5FD1000 \SystemRoot\system32\DRIVERS\mrxsmb20.sys 0x9CBD0000 \SystemRoot\System32\DRIVERS\srv2.sys 0xB6A02000 \SystemRoot\System32\DRIVERS\srv.sys 0xB6A50000 \SystemRoot\system32\DRIVERS\asyncmac.sys 0xB6A59000 \SystemRoot\System32\Drivers\Aspi32.SYS 0xB6A5D000 \??\C:\Windows\system32\drivers\cpuz132_x32.sys 0xB6A61000 \SystemRoot\System32\Drivers\fastfat.SYS 0xB6A89000 \SystemRoot\system32\drivers\peauth.sys 0xB6B67000 \SystemRoot\System32\Drivers\secdrv.SYS 0xB6B71000 \SystemRoot\System32\drivers\tcpipreg.sys 0xB6B7D000 \??\C:\Program Files\Common Files\Realtime Soft\UltraMonMirrorDrv\x32\UltraMonUtility.sys 0xB6B80000 \SystemRoot\system32\DRIVERS\WUDFRd.sys 0xB6B95000 \SystemRoot\system32\DRIVERS\WUDFPf.sys 0xB6BA7000 \SystemRoot\system32\DRIVERS\cdfs.sys 0x77400000 \Windows\System32\ntdll.dll Processes (total 73): 0 System Idle Process 4 System 536 C:\Windows\System32\smss.exe 612 csrss.exe 668 C:\Windows\System32\wininit.exe 676 csrss.exe 720 C:\Windows\System32\winlogon.exe 756 C:\Windows\System32\services.exe 772 C:\Windows\System32\lsass.exe 784 C:\Windows\System32\lsm.exe 928 C:\Windows\System32\svchost.exe 988 C:\Windows\System32\svchost.exe 1136 C:\Windows\System32\svchost.exe 1160 C:\Windows\System32\svchost.exe 1172 C:\Windows\System32\svchost.exe 1288 C:\Windows\System32\audiodg.exe 1316 C:\Windows\System32\svchost.exe 1400 C:\Windows\System32\SLsvc.exe 1436 C:\Windows\System32\svchost.exe 1580 C:\Windows\System32\svchost.exe 1752 C:\Windows\System32\taskeng.exe 1820 C:\Windows\System32\spoolsv.exe 1852 C:\Windows\System32\svchost.exe 984 C:\Windows\System32\taskeng.exe 1664 C:\Windows\System32\dwm.exe 2112 C:\Windows\explorer.exe 2196 C:\Program Files\Common Files\aol\1252186683\ee\aolsoftware.exe 2212 C:\Program Files\Unlocker\UnlockerAssistant.exe 2332 C:\Program Files\PFU\Rack2\RKiwrtK.exe 2348 C:\Program Files\PFU\Rack2\Rkasynct.exe 2360 C:\Program Files\Common Files\Real\Update_OB\realsched.exe 2400 C:\Program Files\DivX\DivX Update\DivXUpdate.exe 2420 C:\Program Files\iTunes\iTunesHelper.exe 2444 C:\Program Files\Common Files\Java\Java Update\jusched.exe 2472 C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe 2520 C:\Program Files\PFU\ScanSnap\CardMinder\CardLauncher.exe 2592 C:\Users\Peter\AppData\Local\Google\Update\1.2.183.29\GoogleCrashHandler.exe 2612 C:\Program Files\PFU\ScanSnap\Driver\PfuSsMon.exe 2640 C:\Program Files\UltraMon\UltraMon.exe 2692 C:\Program Files\WinZip\WZQKPICK.EXE 2708 C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE 2736 C:\Program Files\UltraMon\UltraMonTaskbar.exe 2888 C:\Program Files\APC\APC PowerChute Personal Edition\apcsystray.exe 2952 C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe 2968 C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 2988 C:\Windows\System32\atashost.exe 3004 C:\Program Files\Bonjour\mDNSResponder.exe 3064 C:\Windows\csifcsvc.exe 3156 C:\Program Files\Common Files\microsoft shared\VS7DEBUG\mdm.exe 3220 C:\Program Files\Microsoft SQL Server\MSSQL.2\MSSQL\Binn\sqlservr.exe 3280 C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe 3308 C:\Program Files\Norton Internet Security\Engine\17.7.0.12\ccsvchst.exe 3472 C:\Windows\System32\svchost.exe 3552 C:\Program Files\Common Files\Sage SData\Sage.SData.Service.exe 3684 C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe 3720 C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe 3740 C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe 3756 C:\Windows\System32\svchost.exe 3820 C:\Windows\System32\svchost.exe 3860 C:\Windows\System32\SearchIndexer.exe 2320 WUDFHost.exe 2428 dllhost.exe 2944 C:\Program Files\Norton Internet Security\Engine\17.7.0.12\ccsvchst.exe 4312 C:\Program Files\iPod\bin\iPodService.exe 4384 C:\Program Files\Windows Media Player\wmpnscfg.exe 4552 C:\Program Files\Windows Media Player\wmpnetwk.exe 5292 C:\Users\Peter\AppData\Local\Google\Chrome\Application\chrome.exe 5500 C:\Users\Peter\AppData\Local\Google\Chrome\Application\chrome.exe 1248 C:\Users\Peter\AppData\Local\Google\Chrome\Application\chrome.exe 6108 C:\Program Files\UltraMon\UltraMonUiAcc.exe 4744 C:\Windows\System32\SearchProtocolHost.exe 4848 C:\Windows\System32\SearchFilterHost.exe 5692 C:\Users\Peter\Desktop\MBRCheck.exe \\.\C: –> \\.\PhysicalDrive0 at offset 0x00000002`83f00000 (NTFS) \\.\D: –> \\.\PhysicalDrive1 at offset 0x00000000`00100000 (NTFS) \\.\E: –> \\.\PhysicalDrive0 at offset 0x00000000`03f00000 (NTFS) PhysicalDrive0 Model Number: WDCWD5000AAKS-75A7B0, Rev: 01.03B01 PhysicalDrive1 Model Number: WDCWD5000AAKS-75A7B0, Rev: 01.03B01 Size Device Name MBR Status ——————————————– 465 GB \\.\PhysicalDrive0 Windows Vista MBR code detected SHA1: 8DF43F2BDE2D9451948FA14B5279969C777A7979 465 GB \\.\PhysicalDrive1 Known-bad MBR code detected (Whistler / Black Internet)! SHA1: CB9391A348A4F8AD6FC6EA596AEDB9C336710CA7 Found non-standard or infected MBR. Enter 'Y' and hit ENTER for more options, or 'N' to exit: Done!

Hi petersaxton,

I'll need to look into this a bit more. I'll have you do an onlinescan to see if there isn't anything amiss that is not showing in the logs.


In order to run this scan you will need to open a browser with Aministrator Rights.

• Right click your browser icon and select "Run as Administrator"
• Do not use this browser for anything else but running this scan
• Once the scan has completed and the results saved, close that browser.
• Open a new browser the normal way and post the Kaspersky log here.

*Note
It is recommended to disable onboard antivirus program and antispyware programs while performing scans so there are no conflicts and it will speed up scan time.
Please don't go surfing while your resident protection is disabled!
Once the scan is finished remember to re-enable your antivirus along with your antispyware programs.


Please go to Kaspersky website and perform an online antivirus scan.

• Read through the requirements and privacy statement and click on Accept button.
• It will start downloading and installing the scanner and virus definitions.
• You will be prompted to install an application from Kaspersky. Click Run.
• When the downloads have finished, click on Settings.
• Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button
  
  • Spyware, Adware, Dialers, and other potentially dangerous programs
  • Archives
  • Mail databases
• Click on My Computer under Scan.
• Once the scan is complete, it will display the results. Click on View Scan Report.
• You will see a list of infected items there. Click on Save Report As….
• Change the Files of type to Text file (.txt)
• Set the Save In to Desktop
• click the Save button.
• Please post this log in your next reply.

Please post back with the OTL fix log and Kaspersky log.