Reply to thread

Message

<blockquote data-quote="ten9six" data-source="post: 117856" data-attributes="member: 7737">Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 23-04-2013 03Ran by SYSTEM on 24-04-2013 13:24:53Running from G:\PaulWindows Vista (TM) Home Premium Service Pack 1 (X86) OS Language: English(US)Internet Explorer Version 9Boot Mode: RecoveryThe current controlset is ControlSet002==================== Registry (Whitelisted) ==================HKLM\...\Run: [RtHDVCpl] RtHDVCpl.exe [x]HKLM\...\Run: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe [x]HKLM\...\Run: [UsbMonitor] &quot;C:\Program Files\TrueSuite Access Manager\usbnotify.exe&quot; [x]HKLM\...\Run: [PwdBank] &quot;C:\Program Files\TrueSuite Access Manager\PwdBank.exe&quot; [x]HKLM\...\Run: [HDMICtrlMan] C:\Program Files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe [x]HKLM\...\Run: [Adobe ARM] &quot;C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe&quot; [x]HKLM\...\Run: [vProt] &quot;C:\Program Files\AVG Secure Search\vprot.exe&quot; [x]BootExecute: autocheck autochk * lsdelete========================== Services (Whitelisted) =================S2 Authentec memory manager; C:\Windows\system32\TAMSvr.exe [49152 2008-03-31] (AuthenTec Inc.)S2 Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3289208 2013-03-19] (Skype Technologies S.A.)S2 AdobeARMservice; &quot;C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe&quot; [x]S2 Apple Mobile Device; &quot;C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe&quot; [x]S2 AVGIDSAgent; &quot;C:\Program Files\AVG\AVG2013\avgidsagent.exe&quot; [x]S2 avgwd; &quot;C:\Program Files\AVG\AVG2013\avgwdsvc.exe&quot; [x]S2 Bonjour Service; &quot;C:\Program Files\Bonjour\mDNSResponder.exe&quot; [x]S2 ConfigFree Service; &quot;C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe&quot; [x]S3 fsssvc; &quot;C:\Program Files\Windows Live\Family Safety\fsssvc.exe&quot; [x]S2 gupdate; &quot;C:\Program Files\Google\Update\GoogleUpdate.exe&quot; /svc [x]S3 gupdatem; &quot;C:\Program Files\Google\Update\GoogleUpdate.exe&quot; /medsvc [x]S3 gusvc; &quot;C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe&quot; [x]S3 iPod Service; &quot;C:\Program Files\iPod\bin\iPodService.exe&quot; [x]S2 Lavasoft Ad-Aware Service; &quot;C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe&quot; [x]S3 msiserver; %systemroot%\system32\msiexec /V [x]S3 odserv; &quot;C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE&quot; [x]S3 ose; &quot;C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE&quot; [x]S2 pinger; C:\TOSHIBA\IVP\ISM\pinger.exe [x]S2 SeaPort; &quot;C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe&quot; [x]S3 ServiceLayer; &quot;C:\Program Files\PC Connectivity Solution\ServiceLayer.exe&quot; [x]S2 SkypeUpdate; &quot;C:\Program Files\Skype\Updater\Updater.exe&quot; [x]S3 SmartFaceVWatchSrv; &quot;C:\Program Files\TOSHIBA\SmartFaceV\SmartFaceVWatchSrv.exe&quot; [x]S2 Swupdtmr; c:\TOSHIBA\IVP\swupdate\swupdtmr.exe [x]S2 TNaviSrv; C:\Program Files\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe [x]S2 TosCoSrv; &quot;C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe&quot; [x]S2 TOSHIBA Bluetooth Service; C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [x]S2 TOSHIBA SMART Log Service; &quot;C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe&quot; [x]S2 UleadBurningHelper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [x]S2 vToolbarUpdater14.2.0; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe [x]S2 WinDefend; %ProgramFiles%\Windows Defender\mpsvc.dll [x]S4 wlcrasvc; &quot;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe&quot; [x]S2 wlidsvc; &quot;C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE&quot; [x]S3 WMPNetworkSvc; &quot;%ProgramFiles%\Windows Media Player\wmpnetwk.exe&quot; [x]==================== Drivers (Whitelisted) ====================S0 AlfaFF; C:\Windows\System32\Drivers\AlfaFF.sys [42608 2008-02-29] (Alfa Corporation)S3 ATSWPDRV; C:\Windows\System32\DRIVERS\ATSwpDrv.sys [146944 2009-01-25] (AuthenTec, Inc.)S1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [179936 2012-10-21] (AVG Technologies CZ, s.r.o. )S0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [55776 2012-10-14] (AVG Technologies CZ, s.r.o. )S1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [19936 2012-09-20] (AVG Technologies CZ, s.r.o. )S1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [159712 2012-10-01] (AVG Technologies CZ, s.r.o.)S0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [177376 2012-09-20] (AVG Technologies CZ, s.r.o.)S0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [94048 2012-11-15] (AVG Technologies CZ, s.r.o.)S0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [35552 2012-09-13] (AVG Technologies CZ, s.r.o.)S1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [164832 2012-09-20] (AVG Technologies CZ, s.r.o.)S1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [33112 2013-02-19] (AVG Technologies)S3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [36608 2009-05-10] ()S0 Lbd; C:\Windows\System32\DRIVERS\Lbd.sys [64512 2011-06-19] (Lavasoft AB)S3 PCASp50; C:\Windows\System32\Drivers\PCASp50.sys [27072 2007-07-13] (Printing Communications Assoc., Inc. (PCAUSA))S3 RTHDMIAzAudService; C:\Windows\System32\drivers\RtHDMIV.sys [141408 2008-02-27] (Realtek Semiconductor Corp.)S1 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [5632 2010-05-22] ()S3 SWNC8U55; C:\Windows\System32\DRIVERS\swnc8u55.sys [164480 2007-11-19] (Sierra Wireless Inc.)S3 SWUMX55; C:\Windows\System32\DRIVERS\swumx55.sys [140672 2007-11-19] (Sierra Wireless Inc.)S3 UVCFTR; C:\Windows\System32\Drivers\UVCFTR_S.SYS [18432 2007-12-17] (Chicony Electronics Co., Ltd.)S3 IpInIp; system32\DRIVERS\ipinip.sys [x]S3 Lavasoft Kernexplorer; \??\C:\Program Files\Lavasoft\Ad-Aware\KernExplorer.sys [x]S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]S2 OpenLibSys; \??\C:\Program Files\NXP\FM Radio\OpenLibSys.sys [x]==================== NetSvcs (Whitelisted) ======================================= One Month Created Files and Folders ========2013-04-24 13:24 - 2013-04-24 13:24 - 00000000 ____D C:\FRST==================== One Month Modified Files and Folders ========2013-04-24 13:24 - 2013-04-24 13:24 - 00000000 ____D C:\FRST2013-04-24 13:14 - 2008-10-04 15:02 - 00000000 ____D C:\users\Michelle2013-04-23 18:29 - 2008-10-04 13:17 - 01885255 ____A C:\Windows\WindowsUpdate.log2013-04-23 18:29 - 2006-11-02 05:01 - 00032580 ____A C:\Windows\Tasks\SCHEDLGU.TXT2013-04-23 18:29 - 2006-11-02 05:01 - 00000006 ___AH C:\Windows\Tasks\SA.DAT2013-04-23 18:28 - 2012-08-11 22:09 - 00003415 ____A C:\Windows\setupact.log2013-04-23 18:28 - 2010-02-25 03:05 - 00000882 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job2013-04-23 18:26 - 2011-11-06 16:36 - 00091640 ____A C:\aaw7boot.log2013-04-23 18:26 - 2006-11-02 04:47 - 00003216 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A02013-04-23 18:26 - 2006-11-02 04:47 - 00003216 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A02013-04-23 16:15 - 2006-11-02 02:33 - 00755350 ____A C:\Windows\System32\PerfStringBackup.INI2013-04-23 15:32 - 2011-07-18 17:17 - 00000064 ____A C:\Windows\System32\rp_stats.dat2013-04-23 15:32 - 2011-07-18 17:17 - 00000044 ____A C:\Windows\System32\rp_rules.dat2013-04-23 15:09 - 2010-02-25 03:05 - 00000886 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job2013-04-22 21:50 - 2006-11-02 04:47 - 00061440 ____A C:\Windows\System32\umstartup.etl2013-04-18 22:48 - 2012-06-29 19:34 - 00000830 ____A C:\Windows\Tasks\Adobe Flash Player Updater.jobZeroAccess:C:\$Recycle.Bin\S-1-5-21-3787745059-794909223-3978064198-1000\$d9e77c65513ee53e2d014397449dd4bc==================== Known DLLs (ALL) ============================================= Bamital &amp; volsnap Check =================C:\Windows\explorer.exe =&gt; MD5 is legitC:\Windows\System32\winlogon.exe =&gt; MD5 is legitC:\Windows\System32\wininit.exe =&gt; MD5 is legitC:\Windows\System32\svchost.exe =&gt; MD5 is legitC:\Windows\System32\services.exe =&gt; MD5 is legitC:\Windows\System32\User32.dll =&gt; MD5 is legitC:\Windows\System32\userinit.exe =&gt; MD5 is legitC:\Windows\System32\Drivers\volsnap.sys =&gt; MD5 is legit==================== EXE ASSOCIATION =====================HKLM\...\.exe: exefile =&gt; OKHKLM\...\exefile\DefaultIcon: %1 =&gt; OKHKLM\...\exefile\open\command: &quot;%1&quot; %* =&gt; OK==================== Restore Points&nbsp; =========================Restore point made on: 2013-03-19 07:38:45Restore point made on: 2013-03-20 02:57:13Restore point made on: 2013-03-26 03:55:22Restore point made on: 2013-03-30 21:12:08Restore point made on: 2013-03-31 07:29:52Restore point made on: 2013-03-31 18:44:40Restore point made on: 2013-04-03 02:31:24Restore point made on: 2013-04-09 00:09:07Restore point made on: 2013-04-12 00:29:46Restore point made on: 2013-04-15 05:34:16Restore point made on: 2013-04-15 18:02:00Restore point made on: 2013-04-16 16:25:40Restore point made on: 2013-04-16 17:50:39==================== Memory info =========================== Percentage of memory in use: 12%Total physical RAM: 4093.07 MBAvailable physical RAM: 3592.03 MBTotal Pagefile: 3949.34 MBAvailable Pagefile: 3748.01 MBTotal Virtual: 2047.88 MBAvailable Virtual: 1966.31 MB==================== Drives ================================Drive c: (S3A6597D005) (Fixed) (Total:176.6 GB) (Free:123.45 GB) NTFS ==&gt;[Drive with boot components (obtained from BCD)]Drive d: () (Fixed) (Total:186.31 GB) (Free:154.73 GB) NTFSDrive f: (TOSHIBA SYSTEM VOLUME) (Fixed) (Total:1.46 GB) (Free:1.31 GB) NTFSDrive g: () (Removable) (Total:1.95 GB) (Free:1.14 GB) FATDrive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS&nbsp; Disk ###&nbsp; Status&nbsp; &nbsp; &nbsp; Size&nbsp; &nbsp;&nbsp; Free&nbsp; &nbsp;&nbsp; Dyn&nbsp; Gpt&nbsp; --------&nbsp; ----------&nbsp; -------&nbsp; -------&nbsp; ---&nbsp; ---&nbsp; Disk 0&nbsp; &nbsp; Online&nbsp; &nbsp; &nbsp;&nbsp; 186 GB&nbsp; 6144 KB&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; Disk 1&nbsp; &nbsp; Online&nbsp; &nbsp; &nbsp;&nbsp; 186 GB&nbsp; &nbsp; &nbsp; 0 B&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; Disk 2&nbsp; &nbsp; Online&nbsp; &nbsp; &nbsp; 2001 MB&nbsp; &nbsp; &nbsp; 0 B&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; Partitions of Disk 0:===============&nbsp; Partition ###&nbsp; Type&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Size&nbsp; &nbsp;&nbsp; Offset&nbsp; -------------&nbsp; ----------------&nbsp; -------&nbsp; -------&nbsp; Partition 1&nbsp; &nbsp; OEM&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 1500 MB&nbsp; 1024 KB&nbsp; Partition 2&nbsp; &nbsp; Primary&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 177 GB&nbsp; 1501 MB&nbsp; Partition 3&nbsp; &nbsp; Primary&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 8 GB&nbsp;&nbsp; 178 GB==================================================================================Disk: 0Partition 1Type&nbsp; : 27Hidden: YesActive: No&nbsp; Volume ###&nbsp; Ltr&nbsp; Label&nbsp; &nbsp; &nbsp; &nbsp; Fs&nbsp; &nbsp;&nbsp; Type&nbsp; &nbsp; &nbsp; &nbsp; Size&nbsp; &nbsp;&nbsp; Status&nbsp; &nbsp;&nbsp; Info&nbsp; ----------&nbsp; ---&nbsp; -----------&nbsp; -----&nbsp; ----------&nbsp; -------&nbsp; ---------&nbsp; --------* Volume 4&nbsp; &nbsp;&nbsp; F&nbsp;&nbsp; TOSHIBA SYS&nbsp; NTFS&nbsp;&nbsp; Partition&nbsp;&nbsp; 1500 MB&nbsp; Healthy&nbsp; &nbsp; Hidden&nbsp; =========================================================Disk: 0Partition 2Type&nbsp; : 07Hidden: NoActive: Yes&nbsp; Volume ###&nbsp; Ltr&nbsp; Label&nbsp; &nbsp; &nbsp; &nbsp; Fs&nbsp; &nbsp;&nbsp; Type&nbsp; &nbsp; &nbsp; &nbsp; Size&nbsp; &nbsp;&nbsp; Status&nbsp; &nbsp;&nbsp; Info&nbsp; ----------&nbsp; ---&nbsp; -----------&nbsp; -----&nbsp; ----------&nbsp; -------&nbsp; ---------&nbsp; --------* Volume 1&nbsp; &nbsp;&nbsp; C&nbsp;&nbsp; S3A6597D005&nbsp; NTFS&nbsp;&nbsp; Partition&nbsp; &nbsp; 177 GB&nbsp; Healthy&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =========================================================Disk: 0Partition 3Type&nbsp; : 17Hidden: YesActive: NoThere is no volume associated with this partition.=========================================================Partitions of Disk 1:===============&nbsp; Partition ###&nbsp; Type&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Size&nbsp; &nbsp;&nbsp; Offset&nbsp; -------------&nbsp; ----------------&nbsp; -------&nbsp; -------&nbsp; Partition 1&nbsp; &nbsp; Primary&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 186 GB&nbsp; 1024 KB==================================================================================Disk: 1Partition 1Type&nbsp; : 07Hidden: NoActive: No&nbsp; Volume ###&nbsp; Ltr&nbsp; Label&nbsp; &nbsp; &nbsp; &nbsp; Fs&nbsp; &nbsp;&nbsp; Type&nbsp; &nbsp; &nbsp; &nbsp; Size&nbsp; &nbsp;&nbsp; Status&nbsp; &nbsp;&nbsp; Info&nbsp; ----------&nbsp; ---&nbsp; -----------&nbsp; -----&nbsp; ----------&nbsp; -------&nbsp; ---------&nbsp; --------* Volume 2&nbsp; &nbsp;&nbsp; D&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; NTFS&nbsp;&nbsp; Partition&nbsp; &nbsp; 186 GB&nbsp; Healthy&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =========================================================Partitions of Disk 2:===============&nbsp; Partition ###&nbsp; Type&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Size&nbsp; &nbsp;&nbsp; Offset&nbsp; -------------&nbsp; ----------------&nbsp; -------&nbsp; -------* Partition 1&nbsp; &nbsp; Primary&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 2001 MB&nbsp; &nbsp; &nbsp; 0 B==================================================================================Disk: 2There is no partition selected.There is no partition selected.Please select a partition and try again.======================================================================================= MBR &amp; Partition Table ======================================================================================Disk: 0 (MBR Code: Windows Vista) (Size: 186 GB) (Disk ID: 0101C97E)Partition 1: (Not Active) - (Size=1 GB) - (Type=27)Partition 2: (Active) - (Size=177 GB) - (Type=07) (NTFS)Partition 3: (Not Active) - (Size=8 GB) - (Type=17)====================================================================Disk: 1 (MBR Code: Windows Vista) (Size: 186 GB) (Disk ID: 57ABCDAD)Partition 1: (Not Active) - (Size=186 GB) - (Type=07) (NTFS)====================================================================Disk: 2 (Size: 2 GB) (Disk ID: 73696420)Partition 1: (Not Active) - (Size=260 GB) - (Type=20)Partition 2: (Not Active) - (Size=257 GB) - (Type=6B)Partition 3: (Not Active) - (Size=667 GB) - (Type=53)Partition 4: (Active) - (Size=10 MB) - (Type=49)Last Boot: 2013-04-23 16:16==================== End Of Log ============================</blockquote>

[QUOTE="ten9six, post: 117856, member: 7737"] Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 23-04-2013 03 Ran by SYSTEM on 24-04-2013 13:24:53 Running from G:\Paul Windows Vista (TM) Home Premium Service Pack 1 (X86) OS Language: English(US) Internet Explorer Version 9 Boot Mode: Recovery The current controlset is ControlSet002 ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] RtHDVCpl.exe [x] HKLM\...\Run: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe [x] HKLM\...\Run: [UsbMonitor] "C:\Program Files\TrueSuite Access Manager\usbnotify.exe" [x] HKLM\...\Run: [PwdBank] "C:\Program Files\TrueSuite Access Manager\PwdBank.exe" [x] HKLM\...\Run: [HDMICtrlMan] C:\Program Files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe [x] HKLM\...\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [x] HKLM\...\Run: [vProt] "C:\Program Files\AVG Secure Search\vprot.exe" [x] BootExecute: autocheck autochk * lsdelete ========================== Services (Whitelisted) ================= S2 Authentec memory manager; C:\Windows\system32\TAMSvr.exe [49152 2008-03-31] (AuthenTec Inc.) S2 Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3289208 2013-03-19] (Skype Technologies S.A.) S2 AdobeARMservice; "C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe" [x] S2 Apple Mobile Device; "C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe" [x] S2 AVGIDSAgent; "C:\Program Files\AVG\AVG2013\avgidsagent.exe" [x] S2 avgwd; "C:\Program Files\AVG\AVG2013\avgwdsvc.exe" [x] S2 Bonjour Service; "C:\Program Files\Bonjour\mDNSResponder.exe" [x] S2 ConfigFree Service; "C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe" [x] S3 fsssvc; "C:\Program Files\Windows Live\Family Safety\fsssvc.exe" [x] S2 gupdate; "C:\Program Files\Google\Update\GoogleUpdate.exe" /svc [x] S3 gupdatem; "C:\Program Files\Google\Update\GoogleUpdate.exe" /medsvc [x] S3 gusvc; "C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe" [x] S3 iPod Service; "C:\Program Files\iPod\bin\iPodService.exe" [x] S2 Lavasoft Ad-Aware Service; "C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe" [x] S3 msiserver; %systemroot%\system32\msiexec /V [x] S3 odserv; "C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE" [x] S3 ose; "C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE" [x] S2 pinger; C:\TOSHIBA\IVP\ISM\pinger.exe [x] S2 SeaPort; "C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe" [x] S3 ServiceLayer; "C:\Program Files\PC Connectivity Solution\ServiceLayer.exe" [x] S2 SkypeUpdate; "C:\Program Files\Skype\Updater\Updater.exe" [x] S3 SmartFaceVWatchSrv; "C:\Program Files\TOSHIBA\SmartFaceV\SmartFaceVWatchSrv.exe" [x] S2 Swupdtmr; c:\TOSHIBA\IVP\swupdate\swupdtmr.exe [x] S2 TNaviSrv; C:\Program Files\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe [x] S2 TosCoSrv; "C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe" [x] S2 TOSHIBA Bluetooth Service; C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [x] S2 TOSHIBA SMART Log Service; "C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe" [x] S2 UleadBurningHelper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [x] S2 vToolbarUpdater14.2.0; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe [x] S2 WinDefend; %ProgramFiles%\Windows Defender\mpsvc.dll [x] S4 wlcrasvc; "C:\Program Files\Windows Live\Mesh\wlcrasvc.exe" [x] S2 wlidsvc; "C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE" [x] S3 WMPNetworkSvc; "%ProgramFiles%\Windows Media Player\wmpnetwk.exe" [x] ==================== Drivers (Whitelisted) ==================== S0 AlfaFF; C:\Windows\System32\Drivers\AlfaFF.sys [42608 2008-02-29] (Alfa Corporation) S3 ATSWPDRV; C:\Windows\System32\DRIVERS\ATSwpDrv.sys [146944 2009-01-25] (AuthenTec, Inc.) S1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [179936 2012-10-21] (AVG Technologies CZ, s.r.o. ) S0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [55776 2012-10-14] (AVG Technologies CZ, s.r.o. ) S1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [19936 2012-09-20] (AVG Technologies CZ, s.r.o. ) S1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [159712 2012-10-01] (AVG Technologies CZ, s.r.o.) S0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [177376 2012-09-20] (AVG Technologies CZ, s.r.o.) S0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [94048 2012-11-15] (AVG Technologies CZ, s.r.o.) S0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [35552 2012-09-13] (AVG Technologies CZ, s.r.o.) S1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [164832 2012-09-20] (AVG Technologies CZ, s.r.o.) S1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [33112 2013-02-19] (AVG Technologies) S3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [36608 2009-05-10] () S0 Lbd; C:\Windows\System32\DRIVERS\Lbd.sys [64512 2011-06-19] (Lavasoft AB) S3 PCASp50; C:\Windows\System32\Drivers\PCASp50.sys [27072 2007-07-13] (Printing Communications Assoc., Inc. (PCAUSA)) S3 RTHDMIAzAudService; C:\Windows\System32\drivers\RtHDMIV.sys [141408 2008-02-27] (Realtek Semiconductor Corp.) S1 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [5632 2010-05-22] () S3 SWNC8U55; C:\Windows\System32\DRIVERS\swnc8u55.sys [164480 2007-11-19] (Sierra Wireless Inc.) S3 SWUMX55; C:\Windows\System32\DRIVERS\swumx55.sys [140672 2007-11-19] (Sierra Wireless Inc.) S3 UVCFTR; C:\Windows\System32\Drivers\UVCFTR_S.SYS [18432 2007-12-17] (Chicony Electronics Co., Ltd.) S3 IpInIp; system32\DRIVERS\ipinip.sys [x] S3 Lavasoft Kernexplorer; \??\C:\Program Files\Lavasoft\Ad-Aware\KernExplorer.sys [x] S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x] S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x] S2 OpenLibSys; \??\C:\Program Files\NXP\FM Radio\OpenLibSys.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-04-24 13:24 - 2013-04-24 13:24 - 00000000 ____D C:\FRST ==================== One Month Modified Files and Folders ======== 2013-04-24 13:24 - 2013-04-24 13:24 - 00000000 ____D C:\FRST 2013-04-24 13:14 - 2008-10-04 15:02 - 00000000 ____D C:\users\Michelle 2013-04-23 18:29 - 2008-10-04 13:17 - 01885255 ____A C:\Windows\WindowsUpdate.log 2013-04-23 18:29 - 2006-11-02 05:01 - 00032580 ____A C:\Windows\Tasks\SCHEDLGU.TXT 2013-04-23 18:29 - 2006-11-02 05:01 - 00000006 ___AH C:\Windows\Tasks\SA.DAT 2013-04-23 18:28 - 2012-08-11 22:09 - 00003415 ____A C:\Windows\setupact.log 2013-04-23 18:28 - 2010-02-25 03:05 - 00000882 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-04-23 18:26 - 2011-11-06 16:36 - 00091640 ____A C:\aaw7boot.log 2013-04-23 18:26 - 2006-11-02 04:47 - 00003216 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 2013-04-23 18:26 - 2006-11-02 04:47 - 00003216 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 2013-04-23 16:15 - 2006-11-02 02:33 - 00755350 ____A C:\Windows\System32\PerfStringBackup.INI 2013-04-23 15:32 - 2011-07-18 17:17 - 00000064 ____A C:\Windows\System32\rp_stats.dat 2013-04-23 15:32 - 2011-07-18 17:17 - 00000044 ____A C:\Windows\System32\rp_rules.dat 2013-04-23 15:09 - 2010-02-25 03:05 - 00000886 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-04-22 21:50 - 2006-11-02 04:47 - 00061440 ____A C:\Windows\System32\umstartup.etl 2013-04-18 22:48 - 2012-06-29 19:34 - 00000830 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job ZeroAccess: C:\$Recycle.Bin\S-1-5-21-3787745059-794909223-3978064198-1000\$d9e77c65513ee53e2d014397449dd4bc ==================== Known DLLs (ALL) ========================= ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit ==================== EXE ASSOCIATION ===================== HKLM\...\.exe: exefile => OK HKLM\...\exefile\DefaultIcon: %1 => OK HKLM\...\exefile\open\command: "%1" %* => OK ==================== Restore Points ========================= Restore point made on: 2013-03-19 07:38:45 Restore point made on: 2013-03-20 02:57:13 Restore point made on: 2013-03-26 03:55:22 Restore point made on: 2013-03-30 21:12:08 Restore point made on: 2013-03-31 07:29:52 Restore point made on: 2013-03-31 18:44:40 Restore point made on: 2013-04-03 02:31:24 Restore point made on: 2013-04-09 00:09:07 Restore point made on: 2013-04-12 00:29:46 Restore point made on: 2013-04-15 05:34:16 Restore point made on: 2013-04-15 18:02:00 Restore point made on: 2013-04-16 16:25:40 Restore point made on: 2013-04-16 17:50:39 ==================== Memory info =========================== Percentage of memory in use: 12% Total physical RAM: 4093.07 MB Available physical RAM: 3592.03 MB Total Pagefile: 3949.34 MB Available Pagefile: 3748.01 MB Total Virtual: 2047.88 MB Available Virtual: 1966.31 MB ==================== Drives ================================ Drive c: (S3A6597D005) (Fixed) (Total:176.6 GB) (Free:123.45 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: () (Fixed) (Total:186.31 GB) (Free:154.73 GB) NTFS Drive f: (TOSHIBA SYSTEM VOLUME) (Fixed) (Total:1.46 GB) (Free:1.31 GB) NTFS Drive g: () (Removable) (Total:1.95 GB) (Free:1.14 GB) FAT Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS Disk ### Status Size Free Dyn Gpt -------- ---------- ------- ------- --- --- Disk 0 Online 186 GB 6144 KB Disk 1 Online 186 GB 0 B Disk 2 Online 2001 MB 0 B Partitions of Disk 0: =============== Partition ### Type Size Offset ------------- ---------------- ------- ------- Partition 1 OEM 1500 MB 1024 KB Partition 2 Primary 177 GB 1501 MB Partition 3 Primary 8 GB 178 GB ================================================================================== Disk: 0 Partition 1 Type : 27 Hidden: Yes Active: No Volume ### Ltr Label Fs Type Size Status Info ---------- --- ----------- ----- ---------- ------- --------- -------- * Volume 4 F TOSHIBA SYS NTFS Partition 1500 MB Healthy Hidden ========================================================= Disk: 0 Partition 2 Type : 07 Hidden: No Active: Yes Volume ### Ltr Label Fs Type Size Status Info ---------- --- ----------- ----- ---------- ------- --------- -------- * Volume 1 C S3A6597D005 NTFS Partition 177 GB Healthy ========================================================= Disk: 0 Partition 3 Type : 17 Hidden: Yes Active: No There is no volume associated with this partition. ========================================================= Partitions of Disk 1: =============== Partition ### Type Size Offset ------------- ---------------- ------- ------- Partition 1 Primary 186 GB 1024 KB ================================================================================== Disk: 1 Partition 1 Type : 07 Hidden: No Active: No Volume ### Ltr Label Fs Type Size Status Info ---------- --- ----------- ----- ---------- ------- --------- -------- * Volume 2 D NTFS Partition 186 GB Healthy ========================================================= Partitions of Disk 2: =============== Partition ### Type Size Offset ------------- ---------------- ------- ------- * Partition 1 Primary 2001 MB 0 B ================================================================================== Disk: 2 There is no partition selected. There is no partition selected. Please select a partition and try again. ========================================================= ============================== MBR & Partition Table ================== ==================================================================== Disk: 0 (MBR Code: Windows Vista) (Size: 186 GB) (Disk ID: 0101C97E) Partition 1: (Not Active) - (Size=1 GB) - (Type=27) Partition 2: (Active) - (Size=177 GB) - (Type=07) (NTFS) Partition 3: (Not Active) - (Size=8 GB) - (Type=17) ==================================================================== Disk: 1 (MBR Code: Windows Vista) (Size: 186 GB) (Disk ID: 57ABCDAD) Partition 1: (Not Active) - (Size=186 GB) - (Type=07) (NTFS) ==================================================================== Disk: 2 (Size: 2 GB) (Disk ID: 73696420) Partition 1: (Not Active) - (Size=260 GB) - (Type=20) Partition 2: (Not Active) - (Size=257 GB) - (Type=6B) Partition 3: (Not Active) - (Size=667 GB) - (Type=53) Partition 4: (Active) - (Size=10 MB) - (Type=49) Last Boot: 2013-04-23 16:16 ==================== End Of Log ============================ [/QUOTE]

Verification