Jump to content

kjeans

Members
 View Profile  See their activity

  • Posts

    3

  • Joined

  • Last visited

 Content Type 

Posts posted by kjeans

    infected with smitfraud-c.generic

    in Resolved Malware Removal Logs

    Posted

    here's the logs

    Malwarebytes Anti-Rootkit 1.1.0.1009

    www.malwarebytes.org

    Database version: v2012.11.15.08

    Windows 7 Service Pack 1 x64 NTFS

    Internet Explorer 9.0.8112.16421

    Kimberly :: KIMBERLY-PC [administrator]

    11/15/2012 2:29:26 PM

    mbar-log-2012-11-15 (14-29-26).txt

    Scan type: Quick scan

    Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken

    Scan options disabled: PUP | PUM | P2P

    Objects scanned: 24972

    Time elapsed: 9 minute(s), 45 second(s)

    Memory Processes Detected: 0

    (No malicious items detected)

    Memory Modules Detected: 0

    (No malicious items detected)

    Registry Keys Detected: 0

    (No malicious items detected)

    Registry Values Detected: 0

    (No malicious items detected)

    Registry Data Items Detected: 0

    (No malicious items detected)

    Folders Detected: 0

    (No malicious items detected)

    Files Detected: 4

    C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\Bootstrap_0_0_53_infected.mbam (Rootkit.Pihar.c.MBR) -> Delete on reboot. [c82046ff1450cb1f6b56f5ac5fd55621]

    C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\MBR_0_infected.mbam (Rootkit.Pihar.c.MBR) -> Delete on reboot. [8b1a0eaf518bf1a255d62a2ab0deaebb]

    C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\Sector_0_1465148931_user.mbam (Forged physical sector) -> Delete on reboot. [8240dd042845ebed5e91aabb51877474]

    C:\Windows\svchost.exe (Trojan.Agent) -> Delete on reboot. [fe9012a5055862d44bfa661862a0f10f]

    (end)

    DDS (Ver_2012-11-07.01) - NTFS_AMD64

    Internet Explorer: 9.0.8112.16450

    Run by Kimberly at 14:35:25 on 2012-11-15

    Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.8119.5916 [GMT -8:00]

    .

    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    .

    ============== Running Processes ===============

    .

    C:\windows\system32\lsm.exe

    C:\windows\system32\svchost.exe -k DcomLaunch

    C:\windows\system32\svchost.exe -k RPCSS

    C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted

    C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted

    C:\windows\system32\svchost.exe -k netsvcs

    C:\windows\system32\svchost.exe -k LocalService

    C:\windows\system32\svchost.exe -k NetworkService

    C:\windows\System32\spoolsv.exe

    C:\windows\system32\svchost.exe -k LocalServiceNoNetwork

    C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BBSvc.exe

    C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

    C:\Program Files\Intel\iCLS Client\HeciServer.exe

    C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe

    C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe

    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

    C:\windows\system32\taskhost.exe

    C:\windows\system32\taskeng.exe

    C:\windows\system32\Dwm.exe

    C:\windows\Explorer.EXE

    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

    C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.17.38\ccSvcHst.exe

    C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe

    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

    C:\windows\system32\svchost.exe -k imgsvc

    C:\windows\system32\TODDSrv.exe

    C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe

    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

    C:\Program Files\TOSHIBA\TECO\TecoService.exe

    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

    C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe

    C:\windows\system32\wbem\wmiprvse.exe

    C:\windows\system32\wbem\wmiprvse.exe

    C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

    C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.17.38\ccSvcHst.exe

    C:\windows\System32\rundll32.exe

    C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

    C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe

    C:\Program Files\Toshiba\Power Saver\TPwrMain.exe

    C:\Program Files\Toshiba\FlashCards\TCrdMain.exe

    C:\Program Files\Toshiba\TECO\Teco.exe

    C:\Program Files\Toshiba\TosVolRegulator\TosVolRegulator.exe

    C:\Program Files\Toshiba\BulletinBoard\TosNcCore.exe

    C:\Program Files\Toshiba\ReelTime\TosReelTimeMonitor.exe

    C:\Windows\System32\igfxtray.exe

    C:\Windows\System32\hkcmd.exe

    C:\Windows\System32\igfxpers.exe

    C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

    C:\Program Files (x86)\Skype\Phone\Skype.exe

    C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE

    C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe

    C:\Program Files (x86)\Toshiba\TOSHIBA Service Station\ToshibaServiceStation.exe

    C:\Program Files (x86)\Toshiba\TOSHIBA Sleep Utility\TSleepSrv.exe

    C:\Program Files (x86)\Internet Explorer\IELowutil.exe

    C:\windows\system32\SearchIndexer.exe

    C:\windows\system32\SearchProtocolHost.exe

    C:\Program Files\Windows Media Player\wmpnetwk.exe

    C:\windows\System32\svchost.exe -k LocalServicePeerNet

    C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe

    C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

    C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.17.38\SymcPCCULaunchSvc.exe

    C:\windows\system32\sppsvc.exe

    C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

    C:\Program Files (x86)\Internet Explorer\iexplore.exe

    C:\Program Files (x86)\Internet Explorer\iexplore.exe

    C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe

    C:\Program Files (x86)\Internet Explorer\iexplore.exe

    C:\windows\SysWOW64\Macromed\Flash\FlashUtil32_11_4_402_287_ActiveX.exe

    C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe

    C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe

    C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe

    C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe

    C:\windows\system32\NOTEPAD.EXE

    C:\windows\servicing\TrustedInstaller.exe

    \\?\C:\windows\system32\wbem\WMIADAP.EXE

    C:\windows\system32\SearchProtocolHost.exe

    C:\windows\system32\SearchFilterHost.exe

    C:\windows\System32\cscript.exe

    .

    ============== Pseudo HJT Report ===============

    .

    uStart Page = hxxp://www.google.com/

    uDefault_Page_URL = hxxp://start.toshiba.com

    uProxyOverride = <local>

    mWinlogon: Userinit = userinit.exe,

    BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

    BHO: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL

    BHO: Bing Bar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll

    BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

    BHO: TOSHIBA Media Controller Plug-in: {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\Toshiba\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll

    TB: Google Toolbar: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

    TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

    TB: Bing Bar: {8dcb7100-df86-4384-8842-8fa844297b3f} -

    uRun: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

    uRun: [EA Core] "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent

    uRun: [EADM] "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart

    uRun: [skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun

    mRun: [iTSecMng] C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START

    mRun: [uSB3MON] "C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"

    mRun: [ToshibaServiceStation] "C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe" /hide:60

    mRun: [TSleepSrv] C:\Program Files (x86)\TOSHIBA\TOSHIBA Sleep Utility\TSleepSrv.exe

    mRun: [ToshibaAppPlace] "C:\Program Files (x86)\Toshiba\Toshiba App Place\ToshibaAppPlace.exe"

    mRun: [NortonOnlineBackupReminder] "C:\Program Files (x86)\Toshiba\Toshiba Online Backup\Activation\TOBuActivation.exe" UNATTENDED

    mPolicies-Explorer: NoActiveDesktop = dword:1

    mPolicies-Explorer: NoActiveDesktopChanges = dword:1

    mPolicies-System: ConsentPromptBehaviorAdmin = dword:5

    mPolicies-System: ConsentPromptBehaviorUser = dword:3

    mPolicies-System: EnableUIADesktopToggle = dword:0

    IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000

    IE: Se&nd to OneNote - C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105

    IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

    IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

    IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

    IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    .

    INFO: HKCU has more than 50 listed domains.

    If you wish to scan all of them, select the 'Force scan all domains' option.

    .

    .

    INFO: HKLM has more than 50 listed domains.

    If you wish to scan all of them, select the 'Force scan all domains' option.

    .

    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab

    DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab

    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab

    TCP: NameServer = 192.168.1.1

    TCP: Interfaces\{CB2FA3F4-4BE0-4A11-8E5B-11ED1D82D1DB} : DHCPNameServer = 192.168.1.1

    TCP: Interfaces\{CB2FA3F4-4BE0-4A11-8E5B-11ED1D82D1DB}\E4544524C65756 : DHCPNameServer = 192.168.0.1

    Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

    Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll

    Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

    SSODL: WebCheck - <orphaned>

    x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    x64-BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll

    x64-BHO: Skype add-on for Internet Explorer: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll

    x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL

    x64-BHO: TOSHIBA Media Controller Plug-in: {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\Toshiba\TOSHIBA Media Controller Plug-in\x64\TOSHIBAMediaControllerIE.dll

    x64-TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll

    x64-Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s

    x64-Run: [synTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe

    x64-Run: [sRS Premium Sound HD] "C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe" /f="C:\Program Files\SRS Labs\SRS Control Panel\SRS_Premium_Sound_HD.zip" /h

    x64-Run: [TPwrMain] C:\Program Files (x86)\TOSHIBA\Power Saver\TPwrMain.EXE

    x64-Run: [TCrdMain] C:\Program Files (x86)\TOSHIBA\FlashCards\TCrdMain.exe

    x64-Run: [Teco] "C:\Program Files (x86)\TOSHIBA\TECO\Teco.exe" /r

    x64-Run: [TosWaitSrv] C:\Program Files (x86)\TOSHIBA\TPHM\TosWaitSrv.exe

    x64-Run: [TosSENotify] C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe

    x64-Run: [TosVolRegulator] C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe

    x64-Run: [TosNC] C:\Program Files (x86)\Toshiba\BulletinBoard\TosNcCore.exe

    x64-Run: [TosReelTimeMonitor] C:\Program Files (x86)\TOSHIBA\ReelTime\TosReelTimeMonitor.exe

    x64-Run: [igfxTray] C:\windows\System32\igfxtray.exe

    x64-Run: [HotKeysCmds] C:\windows\System32\hkcmd.exe

    x64-Run: [Persistence] C:\windows\System32\igfxpers.exe

    x64-Run: [Logitech Download Assistant] C:\windows\System32\rundll32.exe C:\windows\System32\LogiLDA.dll,LogiFetch

    x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll

    x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

    x64-IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll

    .

    INFO: x64-HKLM has more than 50 listed domains.

    If you wish to scan all of them, select the 'Force scan all domains' option.

    .

    x64-Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

    x64-Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll

    x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>

    x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>

    x64-Notify: igfxcui - igfxdev.dll

    x64-SSODL: WebCheck - <orphaned>

    Hosts: 127.0.0.1 www.spywareinfo.com

    .

    ============= SERVICES / DRIVERS ===============

    .

    R0 iusb3hcs;Intel® USB 3.0 Host Controller Switch Driver;C:\windows\System32\drivers\iusb3hcs.sys [2012-1-5 16152]

    R0 tos_sps64;TOSHIBA tos_sps64 Service;C:\windows\System32\drivers\tos_sps64.sys [2009-6-24 482384]

    R2 BBSvc;BingBar Service;C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BBSvc.EXE [2012-6-11 193616]

    R2 Intel® Capability Licensing Service Interface;Intel® Capability Licensing Service Interface;C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-1-10 627936]

    R2 Intel® ME Service;Intel® ME Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe [2012-8-9 128280]

    R2 jhi_service;Intel® Dynamic Application Loader Host Interface Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe [2012-8-9 161560]

    R2 MBAMScheduler;MBAMScheduler;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2012-11-15 399432]

    R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-11-15 676936]

    R2 Norton PC Checkup Application Launcher;Toshiba Laptop Checkup Application Launcher;C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.17.38\SymcPCCULaunchSvc.exe [2012-8-9 123320]

    R2 PCCUJobMgr;Common Client Job Manager Service;C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.17.38\ccSvcHst.exe [2012-8-9 126392]

    R2 SBSDWSCService;SBSD Security Center Service;C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2012-10-11 1153368]

    R2 Skype C2C Service;Skype C2C Service;C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2012-10-2 3064000]

    R2 TOSHIBA eco Utility Service;TOSHIBA eco Utility Service;C:\Program Files\Toshiba\TECO\TecoService.exe [2011-11-24 294848]

    R2 TVALZFL;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Filter Driver;C:\windows\System32\drivers\TVALZFL.sys [2009-6-19 14472]

    R2 UNS;Intel® Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2012-8-9 363800]

    R3 FwLnk;FwLnk Driver;C:\windows\System32\drivers\FwLnk.sys [2012-8-9 9216]

    R3 IntcDAud;Intel® Display Audio;C:\windows\System32\drivers\IntcDAud.sys [2011-12-6 331264]

    R3 iusb3hub;Intel® USB 3.0 Hub Driver;C:\windows\System32\drivers\iusb3hub.sys [2012-1-5 355096]

    R3 iusb3xhc;Intel® USB 3.0 eXtensible Host Controller Driver;C:\windows\System32\drivers\iusb3xhc.sys [2012-1-5 786200]

    R3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller;C:\windows\System32\drivers\L1C62x64.sys [2012-1-16 103536]

    R3 MBAMProtector;MBAMProtector;C:\windows\System32\drivers\mbam.sys [2012-11-15 25928]

    R3 PGEffect;Pangu effect driver;C:\windows\System32\drivers\PGEffect.sys [2012-8-9 38096]

    R3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader;C:\windows\System32\drivers\rtsuvstor.sys [2012-8-9 313448]

    R3 RTL8192Ce;Realtek Wireless LAN 802.11n PCI-E NIC Driver;C:\windows\System32\drivers\rtwlane.sys [2012-8-9 1082472]

    R3 SmbDrv;SmbDrv;C:\windows\System32\drivers\Smb_driver.sys [2011-12-22 21264]

    R3 TMachInfo;TMachInfo;C:\Program Files (x86)\Toshiba\TOSHIBA Service Station\TMachInfo.exe [2012-8-9 57216]

    R3 TOSHIBA HDD SSD Alert Service;TOSHIBA HDD SSD Alert Service;C:\Program Files\Toshiba\TOSHIBA HDD SSD Alert\TosSmartSrv.exe [2011-11-25 138152]

    R3 TPCHSrv;TPCH Service;C:\Program Files\Toshiba\TPHM\TPCHSrv.exe [2011-12-14 833976]

    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

    S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]

    S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-7-13 160944]

    S3 BBUpdate;BBUpdate;C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\SeaPort.EXE [2012-6-11 240208]

    S3 RtkBtFilter;Realtek Bluetooth Filter Driver;C:\windows\System32\drivers\RtkBtfilter.sys [2012-1-5 21096]

    S3 TsUsbFlt;TsUsbFlt;C:\windows\System32\drivers\TsUsbFlt.sys [2010-11-20 59392]

    S3 TsUsbGD;Remote Desktop Generic USB Device;C:\windows\System32\drivers\TsUsbGD.sys [2010-11-20 31232]

    S3 WatAdminSvc;Windows Activation Technologies Service;C:\windows\System32\Wat\WatAdminSvc.exe [2012-10-19 1255736]

    S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184]

    .

    =============== Created Last 30 ================

    .

    2012-11-15 18:55:12 -------- d-----w- C:\Users\Kimberly\AppData\Roaming\Malwarebytes

    2012-11-15 18:54:59 -------- d-----w- C:\ProgramData\Malwarebytes

    2012-11-15 18:54:58 25928 ----a-w- C:\windows\System32\drivers\mbam.sys

    2012-11-15 18:54:58 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware

    2012-11-05 21:00:29 -------- d-----w- C:\Users\Kimberly\AppData\Local\CrashDumps

    2012-11-05 19:19:53 -------- d-----w- C:\ProgramData\EA Core

    2012-11-05 00:46:07 5632 ----a-w- C:\ProgramData\Microsoft\Windows\DRM\5486.tmp

    2012-11-05 00:46:07 5632 ----a-w- C:\ProgramData\Microsoft\Windows\DRM\5466.tmp

    2012-11-04 01:07:47 99840 ----a-w- C:\windows\System32\Spool\prtprocs\x64\HPZPPLHN.DLL

    2012-10-31 14:17:03 -------- d-----w- C:\Users\Kimberly\AppData\Local\Microsoft Games

    2012-10-22 01:26:53 -------- d-sh--w- C:\windows\SysWow64\%APPDATA%

    2012-10-20 01:28:34 -------- d-----w- C:\windows\SysWow64\Wat

    2012-10-20 01:28:34 -------- d-----w- C:\windows\System32\Wat

    2012-10-20 01:06:49 -------- d-sh--w- C:\windows\System32\%APPDATA%

    2012-10-20 01:06:41 81408 ----a-w- C:\windows\System32\imagehlp.dll

    2012-10-20 01:06:41 5120 ----a-w- C:\windows\SysWow64\wmi.dll

    2012-10-20 01:06:41 5120 ----a-w- C:\windows\System32\wmi.dll

    2012-10-20 01:06:41 23408 ----a-w- C:\windows\System32\drivers\fs_rec.sys

    2012-10-20 01:06:41 159232 ----a-w- C:\windows\SysWow64\imagehlp.dll

    .

    ==================== Find3M ====================

    .

    2012-10-11 18:39:34 73656 ----a-w- C:\windows\SysWow64\FlashPlayerCPLApp.cpl

    2012-10-11 18:39:34 696760 ----a-w- C:\windows\SysWow64\FlashPlayerApp.exe

    2012-09-21 00:02:06 1832760 ----a-w- C:\windows\System32\LogiLDA.DLL

    2012-09-14 19:19:29 2048 ----a-w- C:\windows\System32\tzres.dll

    2012-09-14 18:28:53 2048 ----a-w- C:\windows\SysWow64\tzres.dll

    2012-08-31 18:19:35 1659760 ----a-w- C:\windows\System32\drivers\ntfs.sys

    2012-08-30 18:03:45 5559664 ----a-w- C:\windows\System32\ntoskrnl.exe

    2012-08-30 17:12:02 3968880 ----a-w- C:\windows\SysWow64\ntkrnlpa.exe

    2012-08-30 17:12:02 3914096 ----a-w- C:\windows\SysWow64\ntoskrnl.exe

    2012-08-24 18:05:07 220160 ----a-w- C:\windows\System32\wintrust.dll

    2012-08-24 16:57:48 172544 ----a-w- C:\windows\SysWow64\wintrust.dll

    2012-08-24 10:31:32 2312704 ----a-w- C:\windows\System32\jscript9.dll

    2012-08-24 10:21:18 1392128 ----a-w- C:\windows\System32\wininet.dll

    2012-08-24 10:20:11 1494528 ----a-w- C:\windows\System32\inetcpl.cpl

    2012-08-24 10:14:45 173056 ----a-w- C:\windows\System32\ieUnatt.exe

    2012-08-24 10:13:29 599040 ----a-w- C:\windows\System32\vbscript.dll

    2012-08-24 10:09:42 2382848 ----a-w- C:\windows\System32\mshtml.tlb

    2012-08-24 06:59:17 1800704 ----a-w- C:\windows\SysWow64\jscript9.dll

    2012-08-24 06:51:27 1129472 ----a-w- C:\windows\SysWow64\wininet.dll

    2012-08-24 06:51:02 1427968 ----a-w- C:\windows\SysWow64\inetcpl.cpl

    2012-08-24 06:47:26 142848 ----a-w- C:\windows\SysWow64\ieUnatt.exe

    2012-08-24 06:47:12 420864 ----a-w- C:\windows\SysWow64\vbscript.dll

    2012-08-24 06:43:58 2382848 ----a-w- C:\windows\SysWow64\mshtml.tlb

    2012-08-22 18:12:50 1913200 ----a-w- C:\windows\System32\drivers\tcpip.sys

    2012-08-22 18:12:40 950128 ----a-w- C:\windows\System32\drivers\ndis.sys

    2012-08-22 18:12:40 376688 ----a-w- C:\windows\System32\drivers\netio.sys

    2012-08-22 18:12:33 288624 ----a-w- C:\windows\System32\drivers\FWPKCLNT.SYS

    2012-08-21 21:01:00 245760 ----a-w- C:\windows\System32\OxpsConverter.exe

    2012-08-20 18:48:44 362496 ----a-w- C:\windows\System32\wow64win.dll

    2012-08-20 18:48:44 243200 ----a-w- C:\windows\System32\wow64.dll

    2012-08-20 18:48:44 13312 ----a-w- C:\windows\System32\wow64cpu.dll

    2012-08-20 18:48:43 215040 ----a-w- C:\windows\System32\winsrv.dll

    2012-08-20 18:48:37 16384 ----a-w- C:\windows\System32\ntvdm64.dll

    2012-08-20 18:48:35 424448 ----a-w- C:\windows\System32\KernelBase.dll

    2012-08-20 18:46:22 338432 ----a-w- C:\windows\System32\conhost.exe

    2012-08-20 17:40:21 14336 ----a-w- C:\windows\SysWow64\ntvdm64.dll

    2012-08-20 17:38:44 44032 ----a-w- C:\windows\apppatch\acwow64.dll

    2012-08-20 17:38:26 25600 ----a-w- C:\windows\SysWow64\setup16.exe

    2012-08-20 17:37:19 5120 ----a-w- C:\windows\SysWow64\wow32.dll

    2012-08-20 17:37:18 274944 ----a-w- C:\windows\SysWow64\KernelBase.dll

    2012-08-20 15:38:21 7680 ----a-w- C:\windows\SysWow64\instnm.exe

    2012-08-20 15:38:20 2048 ----a-w- C:\windows\SysWow64\user.exe

    2012-08-20 15:33:28 6144 ---ha-w- C:\windows\SysWow64\api-ms-win-security-base-l1-1-0.dll

    2012-08-20 15:33:28 4608 ---ha-w- C:\windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll

    2012-08-20 15:33:28 3584 ---ha-w- C:\windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll

    2012-08-20 15:33:28 3072 ---ha-w- C:\windows\SysWow64\api-ms-win-core-util-l1-1-0.dll

    .

    ============= FINISH: 14:36:02.93 ===============

    infected with smitfraud-c.generic

    in Resolved Malware Removal Logs

    Posted

    just in case ..here's the full logs

    DDS (Ver_2012-11-07.01) - NTFS_AMD64

    Internet Explorer: 9.0.8112.16450

    Run by Kimberly at 11:11:37 on 2012-11-15

    Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.8119.5965 [GMT -8:00]

    .

    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    .

    ============== Running Processes ===============

    .

    C:\windows\system32\lsm.exe

    C:\windows\system32\svchost.exe -k DcomLaunch

    C:\windows\system32\svchost.exe -k RPCSS

    C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted

    C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted

    C:\windows\system32\svchost.exe -k netsvcs

    C:\windows\system32\svchost.exe -k LocalService

    C:\windows\system32\svchost.exe -k NetworkService

    C:\windows\System32\spoolsv.exe

    C:\windows\system32\svchost.exe -k LocalServiceNoNetwork

    C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BBSvc.exe

    C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

    C:\Program Files\Intel\iCLS Client\HeciServer.exe

    C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe

    C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe

    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

    C:\windows\system32\taskhost.exe

    C:\windows\system32\taskeng.exe

    C:\windows\system32\Dwm.exe

    C:\windows\Explorer.EXE

    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

    C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.17.38\ccSvcHst.exe

    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

    C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe

    C:\windows\system32\svchost.exe -k imgsvc

    C:\windows\system32\TODDSrv.exe

    C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe

    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

    C:\Program Files\TOSHIBA\TECO\TecoService.exe

    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

    C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe

    C:\windows\system32\wbem\wmiprvse.exe

    C:\windows\system32\wbem\wmiprvse.exe

    C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

    C:\windows\System32\rundll32.exe

    C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.17.38\ccSvcHst.exe

    C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

    C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe

    C:\Program Files\Toshiba\Power Saver\TPwrMain.exe

    C:\Program Files\Toshiba\FlashCards\TCrdMain.exe

    C:\Program Files\Toshiba\TECO\Teco.exe

    C:\Program Files\Toshiba\TosVolRegulator\TosVolRegulator.exe

    C:\Program Files\Toshiba\BulletinBoard\TosNcCore.exe

    C:\Program Files\Toshiba\ReelTime\TosReelTimeMonitor.exe

    C:\Windows\System32\igfxtray.exe

    C:\Windows\System32\hkcmd.exe

    C:\Windows\System32\igfxpers.exe

    C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

    C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe

    C:\Program Files (x86)\Skype\Phone\Skype.exe

    C:\windows\system32\SearchIndexer.exe

    C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe

    C:\Program Files (x86)\Toshiba\TOSHIBA Service Station\ToshibaServiceStation.exe

    C:\Program Files (x86)\Toshiba\TOSHIBA Sleep Utility\TSleepSrv.exe

    C:\windows\system32\SearchProtocolHost.exe

    C:\Program Files (x86)\Internet Explorer\IELowutil.exe

    C:\windows\System32\svchost.exe -k LocalServicePeerNet

    C:\Program Files\Windows Media Player\wmpnetwk.exe

    C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE

    C:\Program Files (x86)\Internet Explorer\iexplore.exe

    C:\Program Files (x86)\Internet Explorer\iexplore.exe

    C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe

    C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe

    C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

    C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.17.38\SymcPCCULaunchSvc.exe

    C:\windows\system32\sppsvc.exe

    C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

    C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe

    C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe

    C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe

    C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe

    C:\windows\servicing\TrustedInstaller.exe

    C:\Program Files (x86)\Internet Explorer\iexplore.exe

    C:\windows\system32\SearchFilterHost.exe

    C:\windows\System32\cscript.exe

    .

    ============== Pseudo HJT Report ===============

    .

    uStart Page = hxxp://www.google.com/

    uDefault_Page_URL = hxxp://start.toshiba.com

    uProxyOverride = <local>

    mWinlogon: Userinit = userinit.exe,

    BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    BHO: Spybot-S&D IE Protection: {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll

    BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

    BHO: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL

    BHO: Bing Bar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll

    BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

    BHO: TOSHIBA Media Controller Plug-in: {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\Toshiba\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll

    TB: Google Toolbar: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

    TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

    TB: Bing Bar: {8dcb7100-df86-4384-8842-8fa844297b3f} -

    uRun: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

    uRun: [spybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe

    uRun: [EA Core] "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent

    uRun: [EADM] "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart

    uRun: [skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun

    mRun: [iTSecMng] C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START

    mRun: [uSB3MON] "C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"

    mRun: [ToshibaServiceStation] "C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe" /hide:60

    mRun: [TSleepSrv] C:\Program Files (x86)\TOSHIBA\TOSHIBA Sleep Utility\TSleepSrv.exe

    mRun: [ToshibaAppPlace] "C:\Program Files (x86)\Toshiba\Toshiba App Place\ToshibaAppPlace.exe"

    mRun: [NortonOnlineBackupReminder] "C:\Program Files (x86)\Toshiba\Toshiba Online Backup\Activation\TOBuActivation.exe" UNATTENDED

    mPolicies-Explorer: NoActiveDesktop = dword:1

    mPolicies-Explorer: NoActiveDesktopChanges = dword:1

    mPolicies-System: ConsentPromptBehaviorAdmin = dword:5

    mPolicies-System: ConsentPromptBehaviorUser = dword:3

    mPolicies-System: EnableUIADesktopToggle = dword:0

    IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000

    IE: Se&nd to OneNote - C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105

    IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

    IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

    IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

    IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll

    .

    INFO: HKCU has more than 50 listed domains.

    If you wish to scan all of them, select the 'Force scan all domains' option.

    .

    .

    INFO: HKLM has more than 50 listed domains.

    If you wish to scan all of them, select the 'Force scan all domains' option.

    .

    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab

    DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab

    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab

    TCP: NameServer = 192.168.1.1

    TCP: Interfaces\{CB2FA3F4-4BE0-4A11-8E5B-11ED1D82D1DB} : DHCPNameServer = 192.168.1.1

    TCP: Interfaces\{CB2FA3F4-4BE0-4A11-8E5B-11ED1D82D1DB}\E4544524C65756 : DHCPNameServer = 192.168.0.1

    Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

    Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll

    Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

    SSODL: WebCheck - <orphaned>

    x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    x64-BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll

    x64-BHO: Skype add-on for Internet Explorer: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll

    x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL

    x64-BHO: TOSHIBA Media Controller Plug-in: {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\Toshiba\TOSHIBA Media Controller Plug-in\x64\TOSHIBAMediaControllerIE.dll

    x64-TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll

    x64-Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s

    x64-Run: [synTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe

    x64-Run: [sRS Premium Sound HD] "C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe" /f="C:\Program Files\SRS Labs\SRS Control Panel\SRS_Premium_Sound_HD.zip" /h

    x64-Run: [TPwrMain] C:\Program Files (x86)\TOSHIBA\Power Saver\TPwrMain.EXE

    x64-Run: [TCrdMain] C:\Program Files (x86)\TOSHIBA\FlashCards\TCrdMain.exe

    x64-Run: [Teco] "C:\Program Files (x86)\TOSHIBA\TECO\Teco.exe" /r

    x64-Run: [TosWaitSrv] C:\Program Files (x86)\TOSHIBA\TPHM\TosWaitSrv.exe

    x64-Run: [TosSENotify] C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe

    x64-Run: [TosVolRegulator] C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe

    x64-Run: [TosNC] C:\Program Files (x86)\Toshiba\BulletinBoard\TosNcCore.exe

    x64-Run: [TosReelTimeMonitor] C:\Program Files (x86)\TOSHIBA\ReelTime\TosReelTimeMonitor.exe

    x64-Run: [igfxTray] C:\windows\System32\igfxtray.exe

    x64-Run: [HotKeysCmds] C:\windows\System32\hkcmd.exe

    x64-Run: [Persistence] C:\windows\System32\igfxpers.exe

    x64-Run: [Logitech Download Assistant] C:\windows\System32\rundll32.exe C:\windows\System32\LogiLDA.dll,LogiFetch

    x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll

    x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

    x64-IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll

    .

    INFO: x64-HKLM has more than 50 listed domains.

    If you wish to scan all of them, select the 'Force scan all domains' option.

    .

    x64-Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

    x64-Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll

    x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>

    x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>

    x64-Notify: igfxcui - igfxdev.dll

    x64-SSODL: WebCheck - <orphaned>

    Hosts: 127.0.0.1 www.spywareinfo.com

    .

    ============= SERVICES / DRIVERS ===============

    .

    R0 iusb3hcs;Intel® USB 3.0 Host Controller Switch Driver;C:\windows\System32\drivers\iusb3hcs.sys [2012-1-5 16152]

    R0 tos_sps64;TOSHIBA tos_sps64 Service;C:\windows\System32\drivers\tos_sps64.sys [2009-6-24 482384]

    R2 BBSvc;BingBar Service;C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BBSvc.EXE [2012-6-11 193616]

    R2 Intel® Capability Licensing Service Interface;Intel® Capability Licensing Service Interface;C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-1-10 627936]

    R2 Intel® ME Service;Intel® ME Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe [2012-8-9 128280]

    R2 jhi_service;Intel® Dynamic Application Loader Host Interface Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe [2012-8-9 161560]

    R2 MBAMScheduler;MBAMScheduler;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2012-11-15 399432]

    R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-11-15 676936]

    R2 Norton PC Checkup Application Launcher;Toshiba Laptop Checkup Application Launcher;C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.17.38\SymcPCCULaunchSvc.exe [2012-8-9 123320]

    R2 PCCUJobMgr;Common Client Job Manager Service;C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.17.38\ccSvcHst.exe [2012-8-9 126392]

    R2 SBSDWSCService;SBSD Security Center Service;C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2012-10-11 1153368]

    R2 Skype C2C Service;Skype C2C Service;C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2012-10-2 3064000]

    R2 TOSHIBA eco Utility Service;TOSHIBA eco Utility Service;C:\Program Files\Toshiba\TECO\TecoService.exe [2011-11-24 294848]

    R2 TVALZFL;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Filter Driver;C:\windows\System32\drivers\TVALZFL.sys [2009-6-19 14472]

    R2 UNS;Intel® Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2012-8-9 363800]

    R3 FwLnk;FwLnk Driver;C:\windows\System32\drivers\FwLnk.sys [2012-8-9 9216]

    R3 IntcDAud;Intel® Display Audio;C:\windows\System32\drivers\IntcDAud.sys [2011-12-6 331264]

    R3 iusb3hub;Intel® USB 3.0 Hub Driver;C:\windows\System32\drivers\iusb3hub.sys [2012-1-5 355096]

    R3 iusb3xhc;Intel® USB 3.0 eXtensible Host Controller Driver;C:\windows\System32\drivers\iusb3xhc.sys [2012-1-5 786200]

    R3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller;C:\windows\System32\drivers\L1C62x64.sys [2012-1-16 103536]

    R3 MBAMProtector;MBAMProtector;C:\windows\System32\drivers\mbam.sys [2012-11-15 25928]

    R3 PGEffect;Pangu effect driver;C:\windows\System32\drivers\PGEffect.sys [2012-8-9 38096]

    R3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader;C:\windows\System32\drivers\rtsuvstor.sys [2012-8-9 313448]

    R3 RTL8192Ce;Realtek Wireless LAN 802.11n PCI-E NIC Driver;C:\windows\System32\drivers\rtwlane.sys [2012-8-9 1082472]

    R3 SmbDrv;SmbDrv;C:\windows\System32\drivers\Smb_driver.sys [2011-12-22 21264]

    R3 TMachInfo;TMachInfo;C:\Program Files (x86)\Toshiba\TOSHIBA Service Station\TMachInfo.exe [2012-8-9 57216]

    R3 TOSHIBA HDD SSD Alert Service;TOSHIBA HDD SSD Alert Service;C:\Program Files\Toshiba\TOSHIBA HDD SSD Alert\TosSmartSrv.exe [2011-11-25 138152]

    R3 TPCHSrv;TPCH Service;C:\Program Files\Toshiba\TPHM\TPCHSrv.exe [2011-12-14 833976]

    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

    S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]

    S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-7-13 160944]

    S3 BBUpdate;BBUpdate;C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\SeaPort.EXE [2012-6-11 240208]

    S3 RtkBtFilter;Realtek Bluetooth Filter Driver;C:\windows\System32\drivers\RtkBtfilter.sys [2012-1-5 21096]

    S3 TsUsbFlt;TsUsbFlt;C:\windows\System32\drivers\TsUsbFlt.sys [2010-11-20 59392]

    S3 TsUsbGD;Remote Desktop Generic USB Device;C:\windows\System32\drivers\TsUsbGD.sys [2010-11-20 31232]

    S3 WatAdminSvc;Windows Activation Technologies Service;C:\windows\System32\Wat\WatAdminSvc.exe [2012-10-19 1255736]

    S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184]

    .

    =============== Created Last 30 ================

    .

    2012-11-15 19:07:58 20480 ----a-w- C:\windows\svchost.exe

    2012-11-15 18:55:12 -------- d-----w- C:\Users\Kimberly\AppData\Roaming\Malwarebytes

    2012-11-15 18:54:59 -------- d-----w- C:\ProgramData\Malwarebytes

    2012-11-15 18:54:58 25928 ----a-w- C:\windows\System32\drivers\mbam.sys

    2012-11-15 18:54:58 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware

    2012-11-05 21:00:29 -------- d-----w- C:\Users\Kimberly\AppData\Local\CrashDumps

    2012-11-05 19:19:53 -------- d-----w- C:\ProgramData\EA Core

    2012-11-05 00:46:07 5632 ----a-w- C:\ProgramData\Microsoft\Windows\DRM\5486.tmp

    2012-11-05 00:46:07 5632 ----a-w- C:\ProgramData\Microsoft\Windows\DRM\5466.tmp

    2012-11-04 01:07:47 99840 ----a-w- C:\windows\System32\Spool\prtprocs\x64\HPZPPLHN.DLL

    2012-10-31 14:17:03 -------- d-----w- C:\Users\Kimberly\AppData\Local\Microsoft Games

    2012-10-22 01:26:53 -------- d-sh--w- C:\windows\SysWow64\%APPDATA%

    2012-10-20 01:28:34 -------- d-----w- C:\windows\SysWow64\Wat

    2012-10-20 01:28:34 -------- d-----w- C:\windows\System32\Wat

    2012-10-20 01:06:49 -------- d-sh--w- C:\windows\System32\%APPDATA%

    2012-10-20 01:06:41 81408 ----a-w- C:\windows\System32\imagehlp.dll

    2012-10-20 01:06:41 5120 ----a-w- C:\windows\SysWow64\wmi.dll

    2012-10-20 01:06:41 5120 ----a-w- C:\windows\System32\wmi.dll

    2012-10-20 01:06:41 23408 ----a-w- C:\windows\System32\drivers\fs_rec.sys

    2012-10-20 01:06:41 159232 ----a-w- C:\windows\SysWow64\imagehlp.dll

    .

    ==================== Find3M ====================

    .

    2012-10-11 18:39:34 73656 ----a-w- C:\windows\SysWow64\FlashPlayerCPLApp.cpl

    2012-10-11 18:39:34 696760 ----a-w- C:\windows\SysWow64\FlashPlayerApp.exe

    2012-09-21 00:02:06 1832760 ----a-w- C:\windows\System32\LogiLDA.DLL

    2012-09-14 19:19:29 2048 ----a-w- C:\windows\System32\tzres.dll

    2012-09-14 18:28:53 2048 ----a-w- C:\windows\SysWow64\tzres.dll

    2012-08-31 18:19:35 1659760 ----a-w- C:\windows\System32\drivers\ntfs.sys

    2012-08-30 18:03:45 5559664 ----a-w- C:\windows\System32\ntoskrnl.exe

    2012-08-30 17:12:02 3968880 ----a-w- C:\windows\SysWow64\ntkrnlpa.exe

    2012-08-30 17:12:02 3914096 ----a-w- C:\windows\SysWow64\ntoskrnl.exe

    2012-08-24 18:05:07 220160 ----a-w- C:\windows\System32\wintrust.dll

    2012-08-24 16:57:48 172544 ----a-w- C:\windows\SysWow64\wintrust.dll

    2012-08-24 10:31:32 2312704 ----a-w- C:\windows\System32\jscript9.dll

    2012-08-24 10:21:18 1392128 ----a-w- C:\windows\System32\wininet.dll

    2012-08-24 10:20:11 1494528 ----a-w- C:\windows\System32\inetcpl.cpl

    2012-08-24 10:14:45 173056 ----a-w- C:\windows\System32\ieUnatt.exe

    2012-08-24 10:13:29 599040 ----a-w- C:\windows\System32\vbscript.dll

    2012-08-24 10:09:42 2382848 ----a-w- C:\windows\System32\mshtml.tlb

    2012-08-24 06:59:17 1800704 ----a-w- C:\windows\SysWow64\jscript9.dll

    2012-08-24 06:51:27 1129472 ----a-w- C:\windows\SysWow64\wininet.dll

    2012-08-24 06:51:02 1427968 ----a-w- C:\windows\SysWow64\inetcpl.cpl

    2012-08-24 06:47:26 142848 ----a-w- C:\windows\SysWow64\ieUnatt.exe

    2012-08-24 06:47:12 420864 ----a-w- C:\windows\SysWow64\vbscript.dll

    2012-08-24 06:43:58 2382848 ----a-w- C:\windows\SysWow64\mshtml.tlb

    2012-08-22 18:12:50 1913200 ----a-w- C:\windows\System32\drivers\tcpip.sys

    2012-08-22 18:12:40 950128 ----a-w- C:\windows\System32\drivers\ndis.sys

    2012-08-22 18:12:40 376688 ----a-w- C:\windows\System32\drivers\netio.sys

    2012-08-22 18:12:33 288624 ----a-w- C:\windows\System32\drivers\FWPKCLNT.SYS

    2012-08-21 21:01:00 245760 ----a-w- C:\windows\System32\OxpsConverter.exe

    2012-08-20 18:48:44 362496 ----a-w- C:\windows\System32\wow64win.dll

    2012-08-20 18:48:44 243200 ----a-w- C:\windows\System32\wow64.dll

    2012-08-20 18:48:44 13312 ----a-w- C:\windows\System32\wow64cpu.dll

    2012-08-20 18:48:43 215040 ----a-w- C:\windows\System32\winsrv.dll

    2012-08-20 18:48:37 16384 ----a-w- C:\windows\System32\ntvdm64.dll

    2012-08-20 18:48:35 424448 ----a-w- C:\windows\System32\KernelBase.dll

    2012-08-20 18:46:22 338432 ----a-w- C:\windows\System32\conhost.exe

    2012-08-20 17:40:21 14336 ----a-w- C:\windows\SysWow64\ntvdm64.dll

    2012-08-20 17:38:44 44032 ----a-w- C:\windows\apppatch\acwow64.dll

    2012-08-20 17:38:26 25600 ----a-w- C:\windows\SysWow64\setup16.exe

    2012-08-20 17:37:19 5120 ----a-w- C:\windows\SysWow64\wow32.dll

    2012-08-20 17:37:18 274944 ----a-w- C:\windows\SysWow64\KernelBase.dll

    2012-08-20 15:38:21 7680 ----a-w- C:\windows\SysWow64\instnm.exe

    2012-08-20 15:38:20 2048 ----a-w- C:\windows\SysWow64\user.exe

    2012-08-20 15:33:28 6144 ---ha-w- C:\windows\SysWow64\api-ms-win-security-base-l1-1-0.dll

    2012-08-20 15:33:28 4608 ---ha-w- C:\windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll

    2012-08-20 15:33:28 3584 ---ha-w- C:\windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll

    2012-08-20 15:33:28 3072 ---ha-w- C:\windows\SysWow64\api-ms-win-core-util-l1-1-0.dll

    .

    ============= FINISH: 11:12:51.57 ===============

    .

    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

    IF REQUESTED, ZIP IT UP & ATTACH IT

    .

    DDS (Ver_2012-11-07.01)

    .

    Microsoft Windows 7 Home Premium

    Boot Device: \Device\HarddiskVolume1

    Install Date: 10/11/2012 10:17:02 AM

    System Uptime: 11/15/2012 11:06:38 AM (0 hours ago)

    .

    Motherboard: TOSHIBA | | Portable PC

    Processor: Intel® Core i7-3610QM CPU @ 2.30GHz | U3E1 | 2301/100mhz

    .

    ==== Disk Partitions =========================

    .

    C: is FIXED (NTFS) - 684 GiB total, 623.309 GiB free.

    D: is CDROM (UDF)

    .

    ==== Disabled Device Manager Items =============

    .

    ==== System Restore Points ===================

    .

    RP3: 10/11/2012 10:17:16 AM - Windows Update

    RP4: 10/11/2012 10:17:46 AM - Installed TOSHIBA Quality Application

    RP5: 10/11/2012 10:18:37 AM - Windows Modules Installer

    RP6: 10/11/2012 11:22:38 AM - Windows Update

    RP7: 10/11/2012 11:30:53 AM - Installed Microsoft Office Home and Student 2010

    RP8: 10/11/2012 11:37:36 AM - Configured Microsoft Office Home and Student 2010

    RP9: 10/11/2012 9:43:26 PM - Installed The Sims 3

    RP10: 10/11/2012 10:10:39 PM - Installed The Sims 3

    RP11: 10/11/2012 10:15:30 PM - Installed TheSims3SP7

    RP12: 10/11/2012 10:21:12 PM - Installed TheSims3EP6

    RP13: 10/11/2012 10:32:40 PM - Installed The Sims 3 Master Suite Stuff

    RP14: 10/11/2012 10:35:20 PM - Installed TheSims3EP4

    RP15: 10/19/2012 6:02:02 PM - Windows Update

    RP16: 10/25/2012 12:57:30 AM - Windows Update

    RP17: 11/3/2012 7:17:13 AM - Windows Update

    RP18: 11/5/2012 12:18:40 PM - Installed The Sims 3

    .

    ==== Installed Programs ======================

    .

    Adobe AIR

    Adobe Flash Player 11 ActiveX

    Adobe Reader X MUI

    Amazon Links

    Atheros Communications Inc.® AR81Family Gigabit/Fast Ethernet Driver

    Bing Bar

    Bluetooth Stack for Windows by Toshiba

    D3DX10

    Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition

    Google Chrome

    Google Toolbar for Internet Explorer

    Google Update Helper

    Intel® Manageability Engine Firmware Recovery Agent

    Intel® Management Engine Components

    Intel® OpenCL CPU Runtime

    Intel® Processor Graphics

    Intel® Rapid Storage Technology

    Intel® USB 3.0 eXtensible Host Controller Driver

    Intel® Trusted Connect Service Client

    Java Auto Updater

    Java 6 Update 25

    Junk Mail filter update

    Malwarebytes Anti-Malware version 1.65.1.1000

    Mesh Runtime

    Microsoft .NET Framework 4 Client Profile

    Microsoft .NET Framework 4 Extended

    Microsoft Application Error Reporting

    Microsoft Office 2010 Service Pack 1 (SP1)

    Microsoft Office Access MUI (English) 2010

    Microsoft Office Access Setup Metadata MUI (English) 2010

    Microsoft Office Excel MUI (English) 2010

    Microsoft Office Home and Student 2010

    Microsoft Office Office 64-bit Components 2010

    Microsoft Office OneNote MUI (English) 2010

    Microsoft Office Outlook MUI (English) 2010

    Microsoft Office PowerPoint MUI (English) 2010

    Microsoft Office Proof (English) 2010

    Microsoft Office Proof (French) 2010

    Microsoft Office Proof (Spanish) 2010

    Microsoft Office Proofing (English) 2010

    Microsoft Office Publisher MUI (English) 2010

    Microsoft Office Shared 64-bit MUI (English) 2010

    Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010

    Microsoft Office Shared MUI (English) 2010

    Microsoft Office Shared Setup Metadata MUI (English) 2010

    Microsoft Office Single Image 2010

    Microsoft Office Word MUI (English) 2010

    Microsoft Silverlight

    Microsoft SQL Server 2005 Compact Edition [ENU]

    Microsoft Visual C++ 2005 Redistributable

    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17

    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148

    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

    Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319

    Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319

    Microsoft WSE 3.0 Runtime

    MSVCRT

    MSVCRT_amd64

    Origin

    PlayReady PC Runtime amd64

    PlayReady PC Runtime x86

    Premium Sound HD

    Realtek High Definition Audio Driver

    Realtek USB 2.0 Reader Driver

    Realtek WLAN Driver

    RtkClassFilter

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)

    Security Update for Microsoft .NET Framework 4 Extended (KB2487367)

    Security Update for Microsoft .NET Framework 4 Extended (KB2656351)

    Security Update for Microsoft Excel 2010 (KB2597166) 32-Bit Edition

    Security Update for Microsoft InfoPath 2010 (KB2687417) 32-Bit Edition

    Security Update for Microsoft Office 2010 (KB2553091)

    Security Update for Microsoft Office 2010 (KB2553096)

    Security Update for Microsoft Office 2010 (KB2553260) 32-Bit Edition

    Security Update for Microsoft Office 2010 (KB2553371) 32-Bit Edition

    Security Update for Microsoft Office 2010 (KB2553447) 32-Bit Edition

    Security Update for Microsoft Office 2010 (KB2589320) 32-Bit Edition

    Security Update for Microsoft Office 2010 (KB2589322) 32-Bit Edition

    Security Update for Microsoft Office 2010 (KB2597986) 32-Bit Edition

    Security Update for Microsoft Office 2010 (KB2598243) 32-Bit Edition

    Security Update for Microsoft PowerPoint 2010 (KB2553185) 32-Bit Edition

    Security Update for Microsoft SharePoint Workspace 2010 (KB2566445)

    Security Update for Microsoft Visio Viewer 2010 (KB2598287) 32-Bit Edition

    Security Update for Microsoft Word 2010 (KB2553488) 32-Bit Edition

    Skype Click to Call

    Skype™ 5.10

    Spybot - Search & Destroy

    Synaptics Pointing Device Driver

    The Sims™ 3

    The Sims™ 3 Diesel Stuff

    The Sims™ 3 Generations

    The Sims™ 3 Master Suite Stuff

    The Sims™ 3 Showtime

    Toshiba App Place

    TOSHIBA Application Installer

    TOSHIBA Assist

    Toshiba Book Place

    TOSHIBA Bulletin Board

    TOSHIBA Disc Creator

    TOSHIBA eco Utility

    TOSHIBA Face Recognition

    TOSHIBA Hardware Setup

    TOSHIBA HDD/SSD Alert

    Toshiba Laptop Checkup

    TOSHIBA Media Controller

    TOSHIBA Media Controller Plug-in

    Toshiba Online Backup

    TOSHIBA PC Health Monitor

    TOSHIBA Quality Application

    TOSHIBA Recovery Media Creator

    TOSHIBA ReelTime

    TOSHIBA Resolution+ Plug-in for Windows Media Player

    Toshiba Security Dashboard

    TOSHIBA Service Station

    TOSHIBA Sleep Utility

    TOSHIBA Supervisor Password

    TOSHIBA User's Guide

    TOSHIBA Value Added Package

    TOSHIBA Web Camera Application

    TOSHIBARegistration

    Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

    Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

    Update for Microsoft .NET Framework 4 Client Profile (KB2600217)

    Update for Microsoft .NET Framework 4 Extended (KB2468871)

    Update for Microsoft .NET Framework 4 Extended (KB2533523)

    Update for Microsoft .NET Framework 4 Extended (KB2600217)

    Update for Microsoft Office 2010 (KB2553065)

    Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition

    Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition

    Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition

    Update for Microsoft Office 2010 (KB2553272) 32-Bit Edition

    Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition

    Update for Microsoft Office 2010 (KB2566458)

    Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition

    Update for Microsoft Office 2010 (KB2598289) 32-Bit Edition

    Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition

    Update for Microsoft OneNote 2010 (KB2589345) 32-Bit Edition

    Update for Microsoft Outlook 2010 (KB2553248) 32-Bit Edition

    Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition

    Windows Driver Package - Realtek Semiconductor Corp. RtkBtFilter Bluetooth (12/15/2011 2.3.9.1)

    Windows Live Communications Platform

    Windows Live Essentials

    Windows Live ID Sign-in Assistant

    Windows Live Installer

    Windows Live Language Selector

    Windows Live Mail

    Windows Live Mesh

    Windows Live Mesh ActiveX Control for Remote Connections

    Windows Live Messenger

    Windows Live MIME IFilter

    Windows Live Movie Maker

    Windows Live Photo Common

    Windows Live Photo Gallery

    Windows Live PIMT Platform

    Windows Live Remote Client

    Windows Live Remote Client Resources

    Windows Live Remote Service

    Windows Live Remote Service Resources

    Windows Live SOXE

    Windows Live SOXE Definitions

    Windows Live UX Platform

    Windows Live UX Platform Language Pack

    Windows Live Writer

    Windows Live Writer Resources

    .

    ==== Event Viewer Messages From Past Week ========

    .

    11/15/2012 10:32:30 AM, Error: Schannel [36888] - The following fatal alert was generated: 40. The internal error state is 107.

    11/15/2012 10:32:30 AM, Error: Schannel [36874] - An SSL 3.0 connection request was received from a remote client application, but none of the cipher suites supported by the client application are supported by the server. The SSL connection request has failed.

    11/15/2012 10:28:05 AM, Error: Microsoft-Windows-DistributedCOM [10016] - The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {FBA44040-BD27-4A09-ACC8-C08B7C723DCD} and APPID {A97CA128-6998-4F8E-807E-8ED05FADAFB0} to the user Kimberly-PC\Kimberly SID (S-1-5-21-3900100189-1945141013-796457887-1001) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.

    .

    ==== End Of File ===========================

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.