aswMBR version 1.0.1.2252 Copyright(c) 2014 AVAST Software Run date: 2017-05-07 06:13:53 ----------------------------- 06:13:53.541 OS Version: Windows 6.1.7601 Service Pack 1 06:13:53.541 Number of processors: 1 586 0x170A 06:13:53.556 ComputerName: PAT-PC UserName: Pat 06:13:54.368 Initialize success 06:13:54.368 VM: initialized successfully 06:13:54.368 VM: Intel CPU virtualization not supported 06:24:56.175 AVAST engine defs: 17030301 09:00:28.127 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 09:00:28.127 Disk 0 Vendor: Size: 0MB BusType: 0 09:00:28.267 Disk 0 MBR read successfully 09:00:28.267 Disk 0 MBR scan 09:00:28.298 Disk 0 Windows VISTA default MBR code 09:00:28.314 Disk 0 MBR hidden 09:00:28.330 Disk 0 Partition 1 80 (A) 27 Hidden NTFS WinRE NTFS 1500 MB offset 2048 09:00:28.330 Disk 0 default boot code 09:00:28.361 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 228633 MB offset 3074048 09:00:28.408 Disk 0 Partition 3 00 17 Hidd HPFS/NTFS NTFS 8341 MB offset 471314432 09:00:28.454 Disk 0 scanning C:\windows\system32\drivers 09:00:47.814 Service scanning 09:01:20.215 Modules scanning 09:01:20.215 Disk 0 trace - called modules: 09:01:20.262 ntkrnlpa.exe CLASSPNP.SYS disk.sys avgSP.sys halmacpi.dll iaStor.sys 09:01:20.278 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x864ab2e0] 09:01:20.278 3 avgSP.sys[8a255661] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0x87197028] 09:01:21.307 AVAST engine scan C:\windows 09:01:23.523 AVAST engine scan C:\windows\system32 09:01:41.322 File: C:\windows\system32\csrsrv.dll **INFECTED** Win32:Aluroot-B [Rtk] 09:05:39.145 AVAST engine scan C:\windows\system32\drivers 09:06:09.112 AVAST engine scan C:\Users\Pat 09:15:55.049 AVAST engine scan C:\ProgramData 09:21:44.084 Disk 0 statistics 3087929/0/0 @ 1.60 MB/s 09:21:44.084 Scan finished successfully 10:47:05.979 Disk 0 MBR has been saved successfully to "C:\Users\Pat\Desktop\MBR.dat" 10:47:05.994 The log file has been saved successfully to "C:\Users\Pat\Desktop\aswMBR.txt" 10:47:32.990 Disk 0 MBR has been saved successfully to "C:\Users\Pat\Desktop\MBR.dat" 10:47:33.005 The log file has been saved successfully to "C:\Users\Pat\Desktop\aswMBR.txt"