aswMBR is the rootkit scanner that scans for TDL4/3, MBRoot (Sinowal), Whistler

aswMBR is the rootkit scanner that scans for TDL4/3, MBRoot (Sinowal), Whistler and other rootkits.

http://public.avast.com/~gmerek/aswMBR.exe

This is a standalone cleaning tool, not a full-featured antivirus program. For full protection, please install avast! Free Antivirus

How to scan

Download aswMBR.exe ( 1870KB ) to your desktop.

Double click the aswMBR.exe to run it

Click the [Scan] button to start scan

On completion of the scan click [Save log], save it to your desktop and post in your next reply

How to fix

Re-run aswMBR.exe

Click [Scan]

On completion of the scan

Click the [Fix] for TDL4 (MBRoot) or [FixMBR] for Whistler (button select as appropriate)

How to verify **SUSPICIOUS** file

Right click on the red item

Copy file to the new location as e.g. copy_afd.sys

Please note that accessing rootkit files via Windows Explorer is useless because the real data are hidden

Send the file to http://www.virustotal.com

... or download latest AVAST virus definitions and let the AV engine do the job