DavidR
4
You’re welcome.
I wish my malware removal skills extended beyond the obvious ;D
However, the aswMBR log data you provided does Unknown entries different number in some cases (third log copy is a duplication of the second), but is consistent in the Disk 0 unknown MBR code one.
00:51:38.390 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll >>UNKNOWN [0x86ee2168]<<
10:59:21.046 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll >>UNKNOWN [0x86e42c50]<<
That will need further investigation, I will try and have someone take a look at this.