Was ist mit aswMBR?

Zitat von cosinus

Was ist mit aswMBR?

Übersicht verloren

aswMBR version 0.9.8.986 Copyright(c) 2011 AVAST Software
Run date: 2011-09-17 18:29:31
-----------------------------
18:29:31.062 OS Version: Windows 5.1.2600 Service Pack 2
18:29:31.062 Number of processors: 2 586 0xF0A
18:29:31.062 ComputerName: CLAUDIA UserName: Karl
18:29:31.718 Initialize success
18:35:57.546 AVAST engine defs: 11091700
18:41:33.531 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-0
18:41:33.531 Disk 0 Vendor: Hitachi_ SBDO Size: 114473MB BusType: 3
18:41:33.546 Disk 0 MBR read successfully
18:41:33.546 Disk 0 MBR scan
18:41:33.593 Disk 0 unknown MBR code
18:41:33.593 Disk 0 scanning sectors +234436545
18:41:33.656 Disk 0 scanning C:\WINDOWS\system32\drivers
18:41:41.375 File: C:\WINDOWS\system32\drivers\ndis.sys **INFECTED** Win32:Cutwail-AP [Rtk]
18:41:45.078 Service scanning
18:41:46.640 Modules scanning
18:41:48.750 Module: C:\WINDOWS\System32\Drivers\NDIS.sys **SUSPICIOUS**
18:41:54.890 Disk 0 trace - called modules:
18:41:54.921 ntkrnlpa.exe >>UNKNOWN [0x870824d0]<<
18:41:54.953 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8714fab8]
18:41:55.156 AVAST engine scan C:\WINDOWS
18:42:01.625 AVAST engine scan C:\WINDOWS\system32
18:43:51.812 AVAST engine scan C:\WINDOWS\system32\drivers
18:43:59.609 File: C:\WINDOWS\system32\drivers\ndis.sys **INFECTED** Win32:Cutwail-AP [Rtk]
18:44:04.343 AVAST engine scan C:\Dokumente und Einstellungen\Karl
18:45:11.984 AVAST engine scan C:\Dokumente und Einstellungen\All Users
18:47:16.203 Scan finished successfully
20:47:34.328 Disk 0 MBR has been saved successfully to "F:\Programme\TROJANER-Board\aswMBR\MBR.dat"
20:47:34.359 The log file has been saved successfully to "F:\Programme\TROJANER-Board\aswMBR\aswMBR.txt"

.