Trojan horse?

waddler_8

One last check

Download aswMBR and save it to your Desktop.

http://public.avast.com/~gmerek/aswMBR.exe

• Right click aswMBR.exe & choose "Run as Administrator" to run it.
• Click YES to the prompt to download Avast virus definitions
• When the virus definitions have downloaded, click the Scan button.
• Wait till the scan reports "Scan finished successfully"
• Click Save log & save the log to your desktop.
• Click OK
• Two files will be created, aswMBR.txt & a file named MBR.dat
• Click EXIT.
• Copy & Paste the contents of aswMBR.txt into your next reply.

Don't click to fix anything, just post the log

Harriett

Thanks for your help and patience

aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-09-10 23:04:32

---

23:04:32.978 OS Version: Windows x64 6.1.7601 Service Pack 1
23:04:32.978 Number of processors: 4 586 0x2505
23:04:32.979 ComputerName: ******** UserName: *****
23:04:33.674 Initialize success
23:05:50.832 AVAST engine defs: 12091001
23:05:57.749 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
23:05:57.753 Disk 0 Vendor: SAMSUNG_ 2AJ1 Size: 610480MB BusType: 3
23:05:57.768 Disk 0 MBR read successfully
23:05:57.772 Disk 0 MBR scan
23:05:57.780 Disk 0 unknown MBR code
23:05:57.786 Disk 0 Partition 1 00 27 Hidden NTFS WinRE NTFS 20480 MB offset 2048
23:05:57.805 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 41945088
23:05:57.822 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 236544 MB offset 42149888
23:05:57.831 Disk 0 Partition - 00 0F Extended LBA 353354 MB offset 526592000
23:05:57.869 Disk 0 Partition 4 00 07 HPFS/NTFS NTFS 353353 MB offset 526594048
23:05:57.914 Disk 0 scanning C:\windows\system32\drivers
23:06:10.399 Service scanning
23:06:37.834 Modules scanning
23:06:38.181 Disk 0 trace - called modules:
23:06:38.220 ntoskrnl.exe CLASSPNP.SYS disk.sys iaStor.sys hal.dll
23:06:38.229 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa80045f8060]
23:06:38.236 3 CLASSPNP.SYS[fffff88001b6b43f] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa800439c050]
23:06:39.439 AVAST engine scan C:\windows
23:06:42.413 AVAST engine scan C:\windows\system32
23:09:05.526 AVAST engine scan C:\windows\system32\drivers
23:09:17.095 AVAST engine scan C:\Users\*****
23:10:09.232 Disk 0 MBR has been saved successfully to "C:\Users\*****\Desktop\MBR.dat"
23:10:09.239 The log file has been saved successfully to "C:\Users\*****\Desktop\aswMBR.txt"

waddler_8

No problem.

I was a bit suspicious with you being unable to scan the file at VirusTotal, then being unable to download DDS.

Submit the file here as a false positive for analysis by AVG

http://samplesubmit.avg.com/gb-en/false-detection

Harriett

waddler_8 wrote: »

No problem.

I was a bit suspicious with you being unable to scan the file at VirusTotal, then being unable to download DDS.

Submit the file here as a false positive for analysis by AVG

http://samplesubmit.avg.com/gb-en/false-detection

:beer: Great thanks for your help with this waddler_8, you're a star.

ETA, submitted the file to AVG.