aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software Run date: 2012-03-29 23:05:32 ----------------------------- 23:05:32.089 OS Version: Windows x64 6.1.7601 Service Pack 1 23:05:32.089 Number of processors: 2 586 0x2505 23:05:32.089 ComputerName: OWNER-PC UserName: Owner 23:05:33.914 Initialize success 23:05:34.008 AVAST engine defs: 12032901 23:05:50.419 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 23:05:50.435 Disk 0 Vendor: Hitachi_ PB3O Size: 305245MB BusType: 3 23:05:50.450 Disk 0 MBR read successfully 23:05:50.450 Disk 0 MBR scan 23:05:50.466 Disk 0 Windows VISTA default MBR code 23:05:50.481 Disk 0 Partition 1 80 (A) 27 Hidden NTFS WinRE NTFS 1500 MB offset 2048 23:05:50.481 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 291742 MB offset 3074048 23:05:50.513 Disk 0 Partition 3 00 17 Hidd HPFS/NTFS NTFS 12002 MB offset 600561664 23:05:50.544 Disk 0 scanning C:\windows\system32\drivers 23:05:57.704 Service scanning 23:06:23.990 Modules scanning 23:06:23.990 Disk 0 trace - called modules: 23:06:24.037 ntoskrnl.exe CLASSPNP.SYS disk.sys iaStor.sys hal.dll 23:06:24.037 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8004b6b740] 23:06:24.053 3 CLASSPNP.SYS[fffff8800185143f] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa80049e0050] 23:06:24.786 AVAST engine scan C:\windows 23:06:26.393 AVAST engine scan C:\windows\system32 23:06:32.430 File: C:\windows\system32\consrv.dll **INFECTED** Win32:Sirefef-HO [Rtk] 23:08:18.198 AVAST engine scan C:\windows\system32\drivers 23:08:26.497 AVAST engine scan C:\Users\Owner 23:09:28.273 File: C:\Users\Owner\Desktop\RK_Quarantine\isecurity.exe.vir **INFECTED** Win32:FakeRean-B [Trj] 23:10:05.776 AVAST engine scan C:\ProgramData 23:11:27.286 Scan finished successfully 23:13:11.089 Disk 0 MBR has been saved successfully to "C:\Users\Owner\Desktop\MBR.dat" 23:13:11.089 The log file has been saved successfully to "C:\Users\Owner\Desktop\aswMBR.txt"