aswMBR version 0.9.8.986 Copyright(c) 2011 AVAST Software Run date: 2011-09-16 11:42:40 ----------------------------- 11:42:40.515 OS Version: Windows 5.1.2600 Service Pack 3 11:42:40.515 Number of processors: 1 586 0xE08 11:42:40.515 ComputerName: MIK UserName: mik 11:42:43.062 Initialize success 11:55:01.265 AVAST engine defs: 11091600 11:55:18.187 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-0 11:55:18.187 Disk 0 Vendor: ST98823A 7.24 Size: 76319MB BusType: 3 11:55:18.203 Disk 0 MBR read successfully 11:55:18.203 Disk 0 MBR scan 11:55:18.296 Disk 0 MBR:Pihar [Rtk] 11:55:18.296 Disk 0 MBR hidden 11:55:18.296 Disk 0 MBR [possible unknown bootkit@MBR] **ROOTKIT** 11:55:18.312 Disk 0 trace - called modules: 11:55:18.328 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll >>UNKNOWN [0x89b924c0]<< 11:55:18.328 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8a5d2ab8] 11:55:18.343 3 CLASSPNP.SYS[f74e7fd7] -> nt!IofCallDriver -> \Device\00000089[0x8a59fa28] 11:55:18.359 5 ACPI.sys[f735e620] -> nt!IofCallDriver -> [0x8a5bd030] 11:55:18.359 \Driver\iaStor[0x8a5874e0] -> IRP_MJ_CREATE -> 0x89b924c0 11:55:19.343 AVAST engine scan C:\WINDOWS 11:55:24.828 AVAST engine scan C:\WINDOWS\system32 11:58:56.359 AVAST engine scan C:\WINDOWS\system32\drivers 11:59:31.109 AVAST engine scan C:\Documents and Settings\mik 12:09:26.750 AVAST engine scan C:\Documents and Settings\All Users 12:13:33.500 Scan finished successfully 12:20:23.515 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\mik\My Documents\MBR.dat" 12:20:23.531 The log file has been saved successfully to "C:\Documents and Settings\mik\My Documents\09162011.txt"