system
18
Today I got this message too. It appears during antirootkit skan after turning PC on only. File scanning if sfloppy.sys by Avast! say nothing.
Previously I turned ny PC on in th middle of previous week, everything was fine.
aswMBR shows error too
aswMBR version 0.9.8.986 Copyright(c) 2011 AVAST Software
Run date: 2011-12-06 20:07:02
20:07:02.875 OS Version: Windows 5.1.2600 Service Pack 3
20:07:02.875 Number of processors: 4 586 0xF0B
20:07:02.875 ComputerName: PSW UserName:
20:07:03.531 Initialize success
20:07:03.671 AVAST engine defs: 11120601
20:07:08.953 Disk 0 (boot) \Device\Harddisk0\DR0 → \Device\Ide\IdeDeviceP0T0L0-3
20:07:08.953 Disk 0 Vendor: WDC_WD3200AAKS-00VYA0 12.01B02 Size: 305115MB BusType: 3
20:07:10.953 Disk 0 MBR read successfully
20:07:10.953 Disk 0 MBR scan
20:07:10.953 Disk 0 Windows XP default MBR code
20:07:10.968 Disk 0 scanning sectors +624876202
20:07:10.984 Disk 0 scanning H:\WINDOWS\system32\drivers
20:07:16.250 File: H:\WINDOWS\system32\drivers\sfloppy.sys INFECTED Win32:Alureon-AOR [Rtk]
20:07:17.812 Service scanning
20:07:18.906 Modules scanning
20:07:38.000 Disk 0 trace - called modules:
20:07:38.015 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys PCIIDEX.SYS
20:07:38.015 1 nt!IofCallDriver → \Device\Harddisk0\DR0[0x8b710ab8]
20:07:38.015 3 CLASSPNP.SYS[ba118fd7] → nt!IofCallDriver → \Device\0000007b[0x8b716940]
20:07:38.015 5 ACPI.sys[b9f7f620] → nt!IofCallDriver → \Device\Ide\IdeDeviceP0T0L0-3[0x8b76fd98]
20:07:38.015 Scan finished successfully
20:07:51.296 Disk 0 MBR has been saved successfully to “C:\Archieve\Avir\Tools.new\aswMBR\MBR.dat”
20:07:51.296 The log file has been saved successfully to “C:\Archieve\Avir\Tools.new\aswMBR\aswMBR.txt”
But I’m sure that it is FP.
TDSSKiller says nothing bad
AVZ says nothing bad