aswMBR version 0.9.5.256 Copyright(c) 2011 AVAST Software Run date: 2011-05-19 01:46:36 ----------------------------- 01:46:36.718 OS Version: Windows 5.1.2600 Service Pack 3 01:46:36.718 Number of processors: 1 586 0x401 01:46:36.718 ComputerName: DEN UserName: 01:46:37.500 Initialize success 01:46:47.140 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-e 01:46:47.156 Disk 0 Vendor: ST380013AS 8.12 Size: 76293MB BusType: 3 01:46:47.156 Device \Driver\atapi -> DriverStartIo 82d8331b 01:46:49.156 Disk 0 MBR read successfully 01:46:49.156 Disk 0 MBR scan 01:46:49.156 Disk 0 TDL4@MBR code has been found 01:46:49.156 Disk 0 Windows XP default MBR code found via API 01:46:49.156 Disk 0 MBR hidden 01:46:49.156 Disk 0 MBR [TDL4] **ROOTKIT** 01:46:49.171 Disk 0 trace - called modules: 01:46:49.171 ntkrnlpa.exe CLASSPNP.SYS disk.sys >>UNKNOWN [0x82d834d0]<< 01:46:49.171 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x82d46030] 01:46:49.171 3 CLASSPNP.SYS[f8535fd7] -> nt!IofCallDriver -> [0x82d09160] 01:46:49.187 \Driver\atapi[0x82d80f38] -> IRP_MJ_CREATE -> 0x82d834d0 01:46:49.734 Scan finished successfully 01:47:14.734 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\Jack Menashe\Desktop\MBR.dat" 01:47:14.734 The log file has been saved successfully to "C:\Documents and Settings\Jack Menashe\Desktop\aswMBR.txt"