Where's the log located? Nevermind,
found it Here's the error codes
QUOTE
0 = No infection found
1 = OS Environment Error
2 = Not running as an Administrator
3 = Not a supported OS
4 = Error Initializing the scanner. (Download a new copy of the tool)
5 = Not used
6 = At least one infection detected. No errors.
7 = At least one infection was detected, but errors were encountered.
8 = At least one infection was detected and removed, but manual steps are required for a complete removal.
9 = At least one infection was detected and removed, but manual steps are required for complete removal and errors were encountered.
10 = At least one infection was detected and removed, but a restart is required for complete removal
11 = At least one infection was detected and removed, but a restart is required for complete removal and errors were encountered
12 = At least one infection was detected and removed, but both manual steps and a restart is required for complete removal.
13 = At least one infection was detected and removed, but a restart is required. No errors were encountered.
It's strange that it says code 5 is not used.
QUOTE
Error: MemScanGetImagePathFromPid(pid: 552) failed.
0x00000005: Access is denied.
Note The pid number will vary.
This error message occurs when a process is just starting or when a process has been recently stopped. The only effect is that the process that is designated by the pid is not scanned
Guess I should've kept reading. It looks like it just means that it couldn't scan those objects. The most likely reason (at least for most of them) is because they are in use or aren't scannable (the errors for hiberfile.sys and pagefile.sys cause this type of error with av scanners all the time) and the same is most likely true for those etwrt logs because they're constantly being written to by the system so they can't be fully scanned because they're always open/changing. Not sure why it couldn't scan audiodg, but it could be because it's always in use by the system since it's somewhat driver related.