Solved trouble with lost log file

Link to WDO in my signature.

Follow this procedure please:

HOW TO USE WINDOWS DEFENDER OFFLINE ON A USB STICK
Windows Defender Offline
· is a free standalone, bootable malware and virus remover from Microsoft.
· performs an offline scan of an infected PC to remove viruses, rootkits and other advanced malware.

Download Windows Defender Offline (about 764 kB)

You will have the choice of downloading the 32bit version (x86) or the 64 bit version (x64).
The link will help you determine whether you are running a 32 bit version or 64 bit version of Windows

NOTE!! You can download and prepare a 32 bit version using a 64 bit version of Windows
NOTE!! You can download and prepare a 64 bit version using a 32bit version of Windows.

You run the 32 bit version on a 32 bit version of Windows.
You run the 64 bit version on a 64 bit version of Windows.

The 32 bit download file name is: mssstool32.exe
The 64 bit download file name is: mssstool64.exe

For the curious, this program was originally name Microsoft Standalone System Sweeper.


INSTALLATION:
You will need an Internet Connection.
Insert 512 mB (Microsoft’s 256 mB is no longer accurate) or larger USB stick into a usb port.
Run the downloaded program--mssstool64.exe or mssstool32.exe
NEXT button
Choose the option On a USB flash drive that is not password protected
NEXT button
NEXT button
.
The install program will format the usb stick using the NTFS format.
The install program will download about 210 mB.
The install program will name the USB stick WDO_Media32 or WDO_Media64
The WDO_Media32 usb stick will have used space of 255 mB (268,140,544 bytes)
The WDO_Media64 usb stick will have used space of 282 mB (296,165,376 bytes)
You can expect the number of mB to increase as more malware appears.

UPDATE Windows Defender Offline USB stick:
· reinsert the usb stick
· run the installation program, mssstool64.exe or mssstool32.exe, again.
· the update will download about 66 mB (mssstool32.exe) and 68 mB (mssstool64.exe).

Since the malware database is sometimes updated several times in a day, always update before running.

PERFORM AN OFFLINE SCAN
Bootup your computer from the USB stick
Windows Defender Offline will automatically perform a quick scan.
After the quick scan finishes, Choose Full Scan
Select all of your drives

The initial, full scan can easily take several hours, but
Remember, your computer is being very thoroughly checked for all types of malware.


RESULTS OF THE SCAN
The results will be in 4 log files in:
\Windows\Microsoft Antimalware\Support
msssWrapper.log, (reveals start and stop time of WDO)
MPDetection-dddddddd-nnnnnn.log, (version of detection engine and AV database)
MPLog-dddddddd-nnnnnn.log (scan summary), and
MpCacheStats.log
.

Upload the four log files please.

Just to let you know i tried this on my new rig that has a OCZ Revo drive x2 120gb Pcie drive that i have the O/S on and it wont recognise the system drive.
but it works fine on my pc with a standard HDD.
 

My Computer

Computer Manufacturer/Model Number
Intel
OS
Windows 7 Ultimate x64
CPU
i7 2600k
Motherboard
Asrock Z68 Extreme 4 Gen 3
Memory
G.Skill Ripjaw X 1600 CL9
Graphics Card(s)
MSI HD 6950/70 2gb
Sound Card
Asus Xonar DS
Monitor(s) Displays
37inch samsung tv 1080p
Screen Resolution
1080p 60hz
Hard Drives
Revo drive x2 120gb PCI-express for OS
2 x 500gb Samsung f3 stripped raid 0
2 x 60gb Corsair Force 3 SSD Raid 0
Samsung F4 Eco Green 2TB storage/backups
PSU
Corsair Professional HX850 80+ silver
Case
Fractal Design R2
Cooling
CPU + GPU Custom Water Cooling loop
Keyboard
Logitach G15
Mouse
LX Gaming lazer mouse
Internet Speed
60.0 Mbps
Other Info
Samsung BR-DVD-RW Combo
NZXT 5 channel touch screen fan controller
3 case fans
5 Rad Fans
Removed with register editor next lines:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ASUS\i-Setup180917]
"Id"="{4960FFCF-AAED-4C16-AE65-B0BE6C318F7E}"
"Index"=dword:00000002"
NT\CurrentVersion\Schedule\TaskCache\Tree\ASUS\i-Setup182418]
"Id"="{4960FFCF-AAED-4C16-AE65-B0BE6C318F7E}"
"Index"=dword:00000002"
NT\CurrentVersion\Schedule\TaskCache\Tree\ASUS\i-Setup130842]
"Id"="{4960FFCF-AAED-4C16-AE65-B0BE6C318F7E}"
"Index"=dword:00000002"

Tried this but it wouldn`t let me delete the ID files os i just deleted the ASUS folder they were in, (A bit drastic yes but it worked)
 

My Computer

Computer Manufacturer/Model Number
Intel
OS
Windows 7 Ultimate x64
CPU
i7 2600k
Motherboard
Asrock Z68 Extreme 4 Gen 3
Memory
G.Skill Ripjaw X 1600 CL9
Graphics Card(s)
MSI HD 6950/70 2gb
Sound Card
Asus Xonar DS
Monitor(s) Displays
37inch samsung tv 1080p
Screen Resolution
1080p 60hz
Hard Drives
Revo drive x2 120gb PCI-express for OS
2 x 500gb Samsung f3 stripped raid 0
2 x 60gb Corsair Force 3 SSD Raid 0
Samsung F4 Eco Green 2TB storage/backups
PSU
Corsair Professional HX850 80+ silver
Case
Fractal Design R2
Cooling
CPU + GPU Custom Water Cooling loop
Keyboard
Logitach G15
Mouse
LX Gaming lazer mouse
Internet Speed
60.0 Mbps
Other Info
Samsung BR-DVD-RW Combo
NZXT 5 channel touch screen fan controller
3 case fans
5 Rad Fans
Thank you for posting that.

If you feel that a solution has been reached it would be helpful to other members if you marked this thread solved.
 

My Computer

Computer type
PC/Desktop
Computer Manufacturer/Model Number
Gateway DX4831-01e (Mid-Tower Desktop)
OS
Originally Win 7 Hm Prem x64 Ver 6.1.7600 Build 7601-SP1 | Upgraded to Windows 10 December 14, 2019
CPU
Intel i3 530 2.93GHz, 2933MHz 2 Cores 4 Logical Processors
Motherboard
Gateway H57M01 133 megahertz
Memory
6GB of 1,333MHz DDR3 SDRAM
Graphics Card(s)
32MB Intel Graphics Media Accelerator HD IGChip
Sound Card
Realtek High Definition Audio
Monitor(s) Displays
Gateway HX2000 20inch TFT active matrix TN
Screen Resolution
1600 x 900 x 59 hertz
Hard Drives
WDC WD10EADS-00M2B0 [HDD] (1000.20 GB) -- drive 0,
HL-DT-ST DVDRAM GH41N [CD-ROM dr]
Four card readers, and Four USB 2.0
PSU
300watts.
Case
Mid-Tower Desktop
Cooling
Stock from Gateway
Keyboard
Natural Ergonomic Keyboard 4000, see Other Info
Mouse
Orig. Gateway wore out now using Insignia USB wired optical
Internet Speed
Vz FIOS 10ms png 57.64Mbps down 65.53Mbps up Speedtest.org
Antivirus
Zamana Anti-logger with Anti-malware, MSE, Windows Firewall,
Browser
IE11.0.9600.19399-Upd ver11.0.135, Firefox 68.0.1 x64
Other Info
System Specs by Belarc.

BIOS: American Megatrends Inc. P01-A0 11/17/2009

Replaced the MS 'Natural' Standard PS/2 Enhanced 101-102 Keyboard with a new Natural Ergonomic Keyboard 4000 on August 1st 2014.

Canon Pixma MG3222 Printer.

Updated to IE11 on 12102015 | Fios Quantum Router g1100

Additional AV: SpywareBlaster, manual Mbam, SAS
Back
Top