Gnosis said:
Yes! And PowerTool.
To see the events in the MBR, click on 'Report' tab in MBRScan (by eric_71): download link on the developer home page on security-x.fr/tools/ : http://security-x.fr/tools/
Look on our MBR thread called 'MBR check tools' : http://malwaretips.com/Thread-MBR-check-tools
Eagle, try
WinCheck rc8.45 by Redp - on Redplait blog 'протез памяти' (вы все еще верите написанному кириллицей ?) : http://redplait.blogspot.fr/2013/04/wincheck-rc845.html
Command line tool (I never downloaded) ..
First look on our little topic: Redplait's (redp) Russian security blog is closed then went back : http://malwaretips.com/Thread-Redplait-s-redp-Russian-security-blog-is-closed-then-went-back
WinCheck doc: http://redplait.blogspot.fr/2011/11/wincheck-doc.html
How Rootkit.Avatar looks like in wincheck logs : http://redplait.blogspot.ru/2013/05/how-rootkitavatar-looks-like-in.html
WinCheck rc8.45 log with Rootkit.Avatar infection: http://pastebin.com/1xg9DRHQ
Then how Redp looks now .. how he looks now, we don't know ..