aswMBR version 0.9.8.986 Copyright(c) 2011 AVAST Software Run date: 2011-08-27 02:22:24 ----------------------------- 02:22:24.531 OS Version: Windows 5.1.2600 Service Pack 2 02:22:24.531 Number of processors: 2 586 0xF0D 02:22:24.531 ComputerName: D6YKGDD1 UserName: steve 02:22:24.843 Initialize success 02:22:51.187 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-e 02:22:51.187 Disk 0 Vendor: ST9120822AS 3.CDD Size: 114473MB BusType: 3 02:22:51.187 Device \Driver\atapi -> DriverStartIo 8667431b 02:22:53.250 Disk 0 MBR read successfully 02:22:53.250 Disk 0 MBR scan 02:22:53.250 Disk 0 TDL4@MBR code has been found 02:22:53.250 Disk 0 Windows XP default MBR code found via API 02:22:53.250 Disk 0 MBR hidden 02:22:53.250 Disk 0 MBR [TDL4] **ROOTKIT** 02:22:53.250 Disk 0 trace - called modules: 02:22:53.250 ntkrnlpa.exe CLASSPNP.SYS disk.sys >>UNKNOWN [0x866744d0]<< 02:22:53.250 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x86753ab8] 02:22:53.250 3 CLASSPNP.SYS[f767305b] -> nt!IofCallDriver -> [0x866c6f18] 02:22:53.250 \Driver\atapi[0x8678cf38] -> IRP_MJ_CREATE -> 0x866744d0 02:22:53.250 Scan finished successfully 02:23:38.625 Disk 0 MBR has been saved successfully to "F:\New Folder\MBR.dat" 02:23:38.671 The log file has been saved successfully to "F:\New Folder\aswMBR.txt"