aswMBR version 0.9.5.256 Copyright(c) 2011 AVAST Software Run date: 2011-06-03 23:17:05 ----------------------------- 23:17:05.484 OS Version: Windows 6.0.6002 Service Pack 2 23:17:05.484 Number of processors: 2 586 0xF0B 23:17:05.484 ComputerName: HEGEMON-PC UserName: Hegemon 23:17:08.604 Initialize success 23:17:20.475 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 23:17:20.491 Disk 0 Vendor: Hitachi_HDT725040VLA360 V5COA7BA Size: 381554MB BusType: 3 23:17:22.581 Disk 0 MBR read successfully 23:17:22.581 Disk 0 MBR scan 23:17:22.581 Disk 0 TDL4@MBR code has been found 23:17:22.581 Disk 0 MBR hidden 23:17:22.581 Disk 0 MBR [TDL4] **ROOTKIT** 23:17:22.581 Disk 0 trace - called modules: 23:17:22.581 ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll >>UNKNOWN [0x862544d0]<< 23:17:22.581 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x85624ac8] 23:17:22.597 3 CLASSPNP.SYS[82f9d8b3] -> nt!IofCallDriver -> [0x84a898f0] 23:17:22.597 5 acpi.sys[806956bc] -> nt!IofCallDriver -> [0x8540cb98] 23:17:22.597 \Driver\atapi[0x860c60d8] -> IRP_MJ_CREATE -> 0x862544d0 23:17:22.597 Scan finished successfully 23:17:35.093 Disk 0 MBR has been saved successfully to "C:\Program Files\Mozilla Firefox\MBR.dat" 23:17:35.093 The log file has been saved successfully to "C:\Program Files\Mozilla Firefox\aswMBR.txt" 23:18:04.467 Disk 0 MBR has been saved successfully to "C:\Users\Hegemon\Desktop\MBR.dat" 23:18:04.795 The log file has been saved successfully to "C:\Users\Hegemon\Desktop\aswMBR.txt"