aswMBR version 0.9.5.256 Copyright(c) 2011 AVAST Software Run date: 2011-06-05 15:54:59 ----------------------------- 15:54:59.921 OS Version: Windows 5.1.2600 Dodatek Service Pack 3 15:54:59.921 Number of processors: 2 586 0x170A 15:54:59.921 ComputerName: D68BB28DCD53412 UserName: Łukasz 15:55:00.125 Initialize success 15:55:07.796 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T1L0-16 15:55:07.812 Disk 0 Vendor: SAMSUNG_HD321KJ CP100-12 Size: 305244MB BusType: 3 15:55:07.812 Device \Driver\atapi -> DriverStartIo 8af7353b 15:55:09.812 Disk 0 MBR read successfully 15:55:09.812 Disk 0 MBR scan 15:55:09.812 Disk 0 TDL4@MBR code has been found 15:55:09.812 Disk 0 MBR hidden 15:55:09.812 Disk 0 MBR [TDL4] **ROOTKIT** 15:55:09.812 Disk 0 trace - called modules: 15:55:09.812 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll >>UNKNOWN [0x8af736f0]<< 15:55:09.812 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8afb7ab8] 15:55:09.812 3 CLASSPNP.SYS[ba108fd7] -> nt!IofCallDriver -> \Device\00000079[0x8af5bb78] 15:55:09.812 5 ACPI.sys[b9f7e620] -> nt!IofCallDriver -> [0x8afd5b00] 15:55:09.812 \Driver\atapi[0x8af50868] -> IRP_MJ_CREATE -> 0x8af736f0 15:55:09.812 Scan finished successfully 15:55:26.671 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\Łukasz\Pulpit\MBR.dat" 15:55:26.671 The log file has been saved successfully to "C:\Documents and Settings\Łukasz\Pulpit\aswMBR.txt"