aswMBR version 0.9.8.986 Copyright(c) 2011 AVAST Software
Run date: 2011-09-06 01:40:41
-----------------------------
01:40:41.462    OS Version: Windows 5.1.2600 
01:40:41.462    Number of processors: 1 586 0x204
01:40:41.472    ComputerName: TOSHIBA-USER  UserName: pab
01:41:00.169    Initialize success
01:41:18.025    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3
01:41:18.035    Disk 0 Vendor: TOSHIBA_MK3018GAS Q3.03_E Size: 28615MB BusType: 3
01:41:20.138    Disk 0 MBR read successfully
01:41:20.138    Disk 0 MBR scan
01:41:20.138    Disk 0 unknown MBR code
01:41:20.148    Disk 0 scanning sectors +58605120
01:41:20.198    Disk 0 scanning C:\WINDOWS\System32\drivers
01:41:30.042    Service scanning
01:41:31.905    Modules scanning
01:41:52.694    Module: C:\WINDOWS\system32\ntdll.dll  **SUSPICIOUS**
01:41:52.694    Disk 0 trace - called modules:
01:41:52.724    ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys intelide.sys PCIIDEX.SYS 
01:41:52.734    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x86384b48]
01:41:52.734    3 CLASSPNP.SYS[f787fceb] -> nt!IofCallDriver -> \Device\0000007b[0x8636bf18]
01:41:53.085    5 ACPI.sys[f77e811b] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-3[0x86339940]
01:41:53.085    Scan finished successfully
01:42:14.396    Disk 0 MBR has been saved successfully to "C:\Documents and Settings\pab\Desktop\MBR.dat"
01:42:14.406    The log file has been saved successfully to "C:\Documents and Settings\pab\Desktop\aswMBR.txt"