aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software Run date: 2012-09-03 12:30:43 ----------------------------- 12:30:43.608 OS Version: Windows x64 6.1.7601 Service Pack 1 12:30:43.608 Number of processors: 2 586 0x603 12:30:43.608 ComputerName: MOLLY-VAIO UserName: Molly 12:30:48.366 Initialize success 12:31:51.496 AVAST engine defs: 12090300 12:31:58.065 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\00000063 12:31:58.081 Disk 0 Vendor: WDC_WD32 01.0 Size: 305245MB BusType: 11 12:31:58.112 Disk 0 MBR read successfully 12:31:58.112 Disk 0 MBR scan 12:31:58.127 Disk 0 Windows 7 default MBR code 12:31:58.143 Disk 0 Partition 1 00 27 Hidden NTFS WinRE NTFS 9584 MB offset 2048 12:31:58.174 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 19632128 12:31:58.190 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 295558 MB offset 19836928 12:31:58.237 Disk 0 scanning C:\Windows\system32\drivers 12:32:20.390 Service scanning 12:33:15.888 Modules scanning 12:33:15.904 Disk 0 trace - called modules: 12:33:15.951 ntoskrnl.exe CLASSPNP.SYS disk.sys amd_xata.sys ACPI.sys storport.sys hal.dll amd_sata.sys 12:33:16.481 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa80043011d0] 12:33:16.481 3 CLASSPNP.SYS[fffff88001a0143f] -> nt!IofCallDriver -> [0xfffffa80041dd040] 12:33:16.497 5 amd_xata.sys[fffff880011417a8] -> nt!IofCallDriver -> [0xfffffa80041dbe40] 12:33:16.512 7 ACPI.sys[fffff88000faa7a1] -> nt!IofCallDriver -> \Device\00000063[0xfffffa80041d9060] 12:33:19.507 AVAST engine scan C:\Windows 12:33:24.851 AVAST engine scan C:\Windows\system32 12:35:27.050 File: C:\Windows\system32\services.exe **INFECTED** Win32:Patched-AKC [Trj] 12:36:19.249 File: C:\Windows\assembly\GAC_32\Desktop.ini **INFECTED** Win32:Sirefef-PL [Rtk] 12:36:23.992 File: C:\Windows\assembly\GAC_64\Desktop.ini **INFECTED** Win32:Sirefef-PL [Rtk] 12:38:48.942 AVAST engine scan C:\Windows\system32\drivers 12:39:17.318 AVAST engine scan C:\Users\Molly 12:41:18.724 Disk 0 MBR has been saved successfully to "C:\Users\Molly\Desktop\MBR.dat" 12:41:18.740 The log file has been saved successfully to "C:\Users\Molly\Desktop\aswMBR.txt"