aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software Run date: 2012-03-28 11:50:16 ----------------------------- 11:50:16.072 OS Version: Windows x64 6.1.7601 Service Pack 1 11:50:16.072 Number of processors: 8 586 0x1E05 11:50:16.072 ComputerName: ALIENWARE UserName: 11:50:16.634 Initialize success 11:51:00.938 AVAST engine defs: 12032801 11:51:05.571 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 11:51:05.571 Disk 0 Vendor: SAMSUNG_ VBM2 Size: 244198MB BusType: 3 11:51:05.571 Disk 1 \Device\Harddisk1\DR1 -> \Device\Ide\IAAStorageDevice-2 11:51:05.571 Disk 1 Vendor: SAMSUNG_ VBM2 Size: 244198MB BusType: 3 11:51:05.571 Disk 0 MBR read successfully 11:51:05.587 Disk 0 MBR scan 11:51:05.587 Disk 0 Windows 7 default MBR code 11:51:05.587 Disk 0 Partition 1 00 DE Dell Utility Dell 8.0 101 MB offset 63 11:51:05.587 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 9118 MB offset 208896 11:51:05.602 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 234977 MB offset 18882560 11:51:05.602 Disk 0 scanning C:\Windows\system32\drivers 11:51:11.983 Service scanning 11:51:20.251 Service sfilter C:\Windows\system32\MobilePreInstallerService.dll **INFECTED** Win64:ZAccess-E [Rtk] 11:51:22.591 Modules scanning 11:51:22.591 Disk 0 trace - called modules: 11:51:22.591 ntoskrnl.exe CLASSPNP.SYS disk.sys stdflt.sys iaStor.sys hal.dll 11:51:22.606 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8007cb5790] 11:51:22.606 3 CLASSPNP.SYS[fffff8800185143f] -> nt!IofCallDriver -> [0xfffffa8007bbace0] 11:51:22.606 5 stdflt.sys[fffff88001b65a4a] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa8007a40050] 11:51:31.530 AVAST engine scan C:\Windows 11:51:32.762 AVAST engine scan C:\Windows\system32 11:51:36.178 File: C:\Windows\system32\consrv.dll **INFECTED** Win32:Sirefef-HO [Rtk] 11:51:36.241 File: C:\Windows\system32\crauto.dll **INFECTED** Win64:ZAccess-E [Rtk] 11:51:44.525 File: C:\Windows\system32\lxrjd31s.dll **INFECTED** Win64:ZAccess-E [Rtk] 11:51:45.461 File: C:\Windows\system32\MobilePreInstallerService.dll **INFECTED** Win64:ZAccess-E [Rtk] 11:52:04.867 File: C:\Windows\assembly\GAC_32\Desktop.ini **INFECTED** Win32:Sirefef-FQ [Drp] 11:52:05.351 File: C:\Windows\assembly\GAC_64\Desktop.ini **INFECTED** Win32:Sirefef-HO [Rtk] 11:52:28.579 AVAST engine scan C:\Windows\system32\drivers 11:52:31.933 AVAST engine scan C:\Users\rockroland 11:52:34.928 File: C:\Users\rockroland\AppData\Local\Google\Update\1.3.21.111\GoogleCrashHandler.exe **INFECTED** Win32:Malware-gen 11:52:34.959 File: C:\Users\rockroland\AppData\Local\Google\Update\1.3.21.111\GoogleUpdate.exe **INFECTED** Win32:Trojan-gen 11:52:35.365 File: C:\Users\rockroland\AppData\Local\Google\Update\GoogleUpdate.exe **INFECTED** Win32:Trojan-gen 11:52:55.520 AVAST engine scan C:\ProgramData 11:53:04.709 Scan finished successfully 11:53:23.881 Disk 0 MBR has been saved successfully to "C:\Installs\VirusTools\MBR.dat" 11:53:23.897 The log file has been saved successfully to "C:\Installs\VirusTools\aswMBR.txt"