aswMBR version 0.9.9.1297 Copyright(c) 2011 AVAST Software Run date: 2012-01-19 21:01:48 ----------------------------- 21:01:48.265 OS Version: Windows 5.1.2600 Service Pack 3 21:01:48.265 Number of processors: 2 586 0x1706 21:01:48.265 ComputerName: NB-KRISTYNA UserName: kristyna 21:01:55.562 Initialize success 21:02:08.859 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 21:02:08.859 Disk 0 Vendor: Hitachi_ FBEO Size: 238475MB BusType: 3 21:02:08.875 Disk 0 MBR read successfully 21:02:08.875 Disk 0 MBR scan 21:02:08.875 Disk 0 TDL4@MBR code has been found 21:02:08.875 Disk 0 Windows XP default MBR code found via API 21:02:08.875 Disk 0 MBR hidden 21:02:08.875 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 238464 MB offset 63 21:02:08.875 Disk 0 MBR [TDL4] **ROOTKIT** 21:02:08.875 Disk 0 trace - called modules: 21:02:08.890 ntkrnlpa.exe CLASSPNP.SYS disk.sys hpdskflt.sys hal.dll ACPI.sys >>UNKNOWN [0x88d4149f]<< 21:02:08.890 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x89d58030] 21:02:08.890 3 CLASSPNP.SYS[f74e7fd7] -> nt!IofCallDriver -> [0x89c96798] 21:02:08.890 5 hpdskflt.sys[f771033d] -> nt!IofCallDriver -> \Device\00000088[0x89d375c8] 21:02:08.906 7 ACPI.sys[f735e620] -> nt!IofCallDriver -> [0x89c97030] 21:02:08.906 \Driver\iaStor[0x88d5e2f0] -> IRP_MJ_CREATE -> 0x88d4149f 21:02:08.906 Scan finished successfully 21:02:31.531 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\kristyna\Plocha\MBR.dat" 21:02:31.531 The log file has been saved successfully to "C:\Documents and Settings\kristyna\Plocha\aswMBR.txt" 21:03:45.468 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\kristyna\Plocha\MBR.dat" 21:03:45.703 The log file has been saved successfully to "C:\Documents and Settings\kristyna\Plocha\aswMBR.txt" 21:28:52.140 Disk 0 MBR read successfully 21:28:52.156 Disk 0 TDL4@MBR code has been found 21:28:52.156 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 238464 MB offset 63 21:28:52.156 Disk 0 fixing MBR ... 21:28:52.156 Disk 0 MBR restored successfully 21:28:52.171 Verifying disinfection 21:29:02.234 Infection fixed successfully - please reboot ASAP 21:29:21.687 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\kristyna\Plocha\MBR.dat" 21:29:21.703 The log file has been saved successfully to "C:\Documents and Settings\kristyna\Plocha\aswMBR_1.txt"