Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Hdd led is on (solid) all of the time


  • Please log in to reply

#1
Sercan

Sercan

    New Member

  • Member
  • Pip
  • 1 posts
My hdd led is on and solid after I tried opening 164 pages on Chrome at the same time to find a bookmark which I failed to locate after three times of eye scan (search didnt return it) I force shut (power button) my laptop (Asus K52J) and since after that the led started to lit on a solid state and my windows drastically slowed down. This is my report from the program called "OTL".

I hope to fix the problem with your help.

OTL logfile created on: 15.06.2012 22:32:05 - Run 1
OTL by OldTimer - Version 3.2.48.0 Folder = C:\Users\Sercan\Desktop
64bit- Enterprise Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 0000041f | Country: Türkiye | Language: TRK | Date Format: dd.MM.yyyy

3,93 Gb Total Physical Memory | 2,18 Gb Available Physical Memory | 55,43% Memory free
7,85 Gb Paging File | 5,91 Gb Available in Paging File | 75,29% Paging File free
Paging file location(s): c:\pagefile.sys 0 0 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 244,04 Gb Total Space | 104,75 Gb Free Space | 42,92% Space Free | Partition Type: NTFS
Drive D: | 221,62 Gb Total Space | 58,53 Gb Free Space | 26,41% Space Free | Partition Type: NTFS

Computer Name: SERCAN-PC | User Name: Sercan | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - File not found --
PRC - [2012.06.15 22:30:40 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Sercan\Desktop\OTL.exe
PRC - [2012.06.03 21:25:46 | 000,069,640 | ---- | M] (Nalpeiron Ltd.) -- C:\Windows\SysWOW64\NLSSRV32.EXE
PRC - [2012.04.12 13:34:36 | 003,478,936 | ---- | M] (Tonec Inc.) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe
PRC - [2012.04.10 21:13:17 | 000,159,432 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\Titanium\plugin\TMAS\TMAS_WLM\TMAS_WLMMon.exe
PRC - [2012.01.19 14:47:20 | 003,027,840 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
PRC - [2011.08.22 16:13:02 | 000,020,880 | ---- | M] () -- C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
PRC - [2011.08.18 20:49:17 | 000,066,872 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2011.03.04 11:39:14 | 000,584,488 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Nero\Update\NASvc.exe
PRC - [2010.05.25 15:28:58 | 000,263,600 | ---- | M] (Tonec Inc.) -- C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
PRC - [2009.10.30 06:03:42 | 000,073,728 | ---- | M] () -- C:\Program Files (x86)\MT880a Kolay Kurulum\MT880a Kolay Kurulum.exe


========== Modules (No Company Name) ==========

MOD - [2012.06.14 00:33:33 | 000,115,137 | ---- | M] () -- C:\Users\Sercan\AppData\Local\Temp\3dcf2df1-2a83-477c-a7dd-858967792357\CliSecureRT.dll
MOD - [2012.06.13 18:00:37 | 018,000,896 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\199683f6e79076b634ee6cc0a82c0654\PresentationFramework.ni.dll
MOD - [2012.06.13 18:00:14 | 011,451,904 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\e7dc084827f8df2dbdc819db5c633a0d\PresentationCore.ni.dll
MOD - [2012.06.13 17:59:59 | 013,198,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\3971e166cf827b6726e142f344061dc9\System.Windows.Forms.ni.dll
MOD - [2012.06.13 17:59:44 | 003,858,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\21f37f9f5162af7efb52169012bd111e\WindowsBase.ni.dll
MOD - [2012.06.13 17:59:44 | 001,666,048 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\8c40f40ef36622109793788049fbe9ab\System.Drawing.ni.dll
MOD - [2012.06.07 11:14:43 | 000,441,880 | ---- | M] () -- C:\Users\Sercan\AppData\Local\Google\Chrome\Application\19.0.1084.56\ppGoogleNaClPluginChrome.dll
MOD - [2012.06.07 11:14:42 | 003,922,456 | ---- | M] () -- C:\Users\Sercan\AppData\Local\Google\Chrome\Application\19.0.1084.56\pdf.dll
MOD - [2012.06.07 11:13:27 | 000,553,496 | ---- | M] () -- C:\Users\Sercan\AppData\Local\Google\Chrome\Application\19.0.1084.56\libglesv2.dll
MOD - [2012.06.07 11:13:26 | 000,117,784 | ---- | M] () -- C:\Users\Sercan\AppData\Local\Google\Chrome\Application\19.0.1084.56\libegl.dll
MOD - [2012.06.07 11:13:16 | 000,134,696 | ---- | M] () -- C:\Users\Sercan\AppData\Local\Google\Chrome\Application\19.0.1084.56\avutil-51.dll
MOD - [2012.06.07 11:13:15 | 000,250,408 | ---- | M] () -- C:\Users\Sercan\AppData\Local\Google\Chrome\Application\19.0.1084.56\avformat-54.dll
MOD - [2012.06.07 11:13:14 | 002,375,720 | ---- | M] () -- C:\Users\Sercan\AppData\Local\Google\Chrome\Application\19.0.1084.56\avcodec-54.dll
MOD - [2012.06.07 10:23:19 | 009,252,040 | ---- | M] () -- C:\Users\Sercan\AppData\Local\Google\Chrome\Application\19.0.1084.56\gcswf32.dll
MOD - [2012.06.07 10:23:19 | 009,252,040 | ---- | M] () -- C:\Users\Sercan\AppData\Local\Google\Chrome\APPLIC~1\190108~1.56\gcswf32.dll
MOD - [2012.06.05 16:58:21 | 001,218,560 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Management\0c2b0d52156447592f33edf4116b7e7d\System.Management.ni.dll
MOD - [2012.06.05 16:55:35 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\94b346f2ab12d38efb1331ded5783396\System.Runtime.Remoting.ni.dll
MOD - [2012.06.05 16:54:44 | 001,782,272 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\d234eceae699d070b5a5712ce776c01f\System.Xaml.ni.dll
MOD - [2012.06.03 15:27:37 | 000,595,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\a5fa2a1cfc6e9fdc39d9a8f2baa57bc9\PresentationFramework.Aero.ni.dll
MOD - [2012.06.03 15:23:45 | 007,069,184 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\ed91b57205429a23bb91f4499059a459\System.Core.ni.dll
MOD - [2012.06.03 15:23:37 | 005,617,664 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\d1f299160424bad90fe9f658661389e2\System.Xml.ni.dll
MOD - [2012.06.03 15:23:26 | 009,091,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\6f9f0467e8b2dd3f69b015c8e30ac945\System.ni.dll
MOD - [2012.06.03 15:23:19 | 014,412,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\3953b1d8b9b57e4957bff8f58145384e\mscorlib.ni.dll
MOD - [2011.08.22 16:13:02 | 000,020,880 | ---- | M] () -- C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
MOD - [2011.03.17 01:11:16 | 004,297,568 | ---- | M] () -- C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf
MOD - [2009.11.18 06:13:20 | 000,028,672 | ---- | M] () -- C:\Program Files (x86)\MT880a Kolay Kurulum\TurkishRC.dll
MOD - [2009.10.30 06:03:42 | 000,073,728 | ---- | M] () -- C:\Program Files (x86)\MT880a Kolay Kurulum\MT880a Kolay Kurulum.exe


========== Win32 Services (SafeList) ==========

SRV:64bit: - File not found [Auto | Running] -- C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe coreFrameworkHost.exe -- (Amsp)
SRV:64bit: - [2012.06.03 21:25:40 | 000,216,072 | ---- | M] (Nitro PDF Software) [Auto | Running] -- C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe -- (NitroDriverReadSpool2)
SRV:64bit: - [2012.04.05 14:08:24 | 000,035,648 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Windows\SysNative\uxtuneup.dll -- (UxTuneUp)
SRV:64bit: - [2011.07.08 06:25:02 | 000,204,288 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2011.01.25 14:11:56 | 000,379,520 | ---- | M] (ASUSTeK Computer Inc.) [Auto | Running] -- C:\Windows\SysNative\FBAgent.exe -- (AFBAgent)
SRV:64bit: - [2011.01.03 05:30:38 | 000,077,824 | ---- | M] (ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM) [Auto | Running] -- C:\Windows\SysNative\PrintCtrl.exe -- (Printer Control)
SRV:64bit: - [2009.07.14 04:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2009.07.14 04:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2012.06.11 09:58:12 | 000,257,224 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012.06.04 14:25:28 | 000,129,976 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012.06.03 21:25:46 | 000,069,640 | ---- | M] (Nalpeiron Ltd.) [Auto | Running] -- C:\Windows\SysWOW64\NLSSRV32.EXE -- (nlsX86cc)
SRV - [2012.06.03 20:48:22 | 000,529,232 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2012.05.30 16:30:30 | 003,417,376 | ---- | M] () [Auto | Running] -- c:\program files (x86)\common files\akamai/netsession_win_80c2ffa.dll -- (Akamai)
SRV - [2012.05.22 20:28:22 | 000,147,336 | ---- | M] (LogMeIn, Inc.) [Disabled | Stopped] -- C:\Program Files (x86)\LogMeIn\x64\RaMaint.exe -- (LMIMaint)
SRV - [2012.05.22 20:28:04 | 000,375,176 | ---- | M] (LogMeIn, Inc.) [Disabled | Stopped] -- C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe -- (LMIGuardianSvc)
SRV - [2012.04.05 14:08:34 | 002,143,552 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe -- (TuneUp.UtilitiesSvc)
SRV - [2012.04.05 14:08:24 | 000,028,992 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Windows\SysWOW64\uxtuneup.dll -- (UxTuneUp)
SRV - [2012.01.19 14:47:20 | 003,027,840 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe -- (TeamViewer7)
SRV - [2011.09.16 15:10:50 | 000,407,424 | ---- | M] (LogMeIn, Inc.) [Disabled | Stopped] -- C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe -- (LogMeIn)
SRV - [2011.08.30 19:18:30 | 002,358,656 | ---- | M] (TeamViewer GmbH) [Disabled | Stopped] -- C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe -- (TeamViewer6)
SRV - [2011.08.18 20:49:17 | 000,066,872 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2011.08.02 12:47:14 | 000,159,232 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Samsung\USB Drivers\26_VIA_driver2\amd64\VIAService.exe -- (CDMA Device Service)
SRV - [2011.03.04 11:39:14 | 000,584,488 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files (x86)\Nero\Update\NASvc.exe -- (NAUpdate) @C:\Program Files (x86)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009.12.15 10:39:38 | 000,096,896 | ---- | M] (ASUS) [Disabled | Stopped] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv)
SRV - [2009.06.15 17:30:42 | 000,084,536 | ---- | M] (ASUS) [Disabled | Stopped] -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe -- (ASLDRService)
SRV - [2009.06.11 00:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2012.05.22 20:28:05 | 000,087,456 | ---- | M] (LogMeIn, Inc.) [File_System | Disabled | Stopped] -- C:\Windows\SysNative\LMIRfsClientNP.dll -- (LMIRfsClientNP)
DRV:64bit: - [2012.04.23 14:26:26 | 000,154,272 | ---- | M] (Tonec Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\idmwfp.sys -- (IDMWFP)
DRV:64bit: - [2012.04.10 21:12:59 | 000,210,704 | ---- | M] (Trend Micro Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tmnciesc.sys -- (tmnciesc)
DRV:64bit: - [2012.04.10 21:12:59 | 000,167,696 | ---- | M] (Trend Micro Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\tmcomm.sys -- (tmcomm)
DRV:64bit: - [2012.04.10 21:12:59 | 000,105,744 | ---- | M] (Trend Micro Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\tmtdi.sys -- (tmtdi)
DRV:64bit: - [2012.04.10 21:12:59 | 000,091,920 | ---- | M] (Trend Micro Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\tmactmon.sys -- (tmactmon)
DRV:64bit: - [2012.04.10 21:12:59 | 000,070,928 | ---- | M] (Trend Micro Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\tmevtmgr.sys -- (tmevtmgr)
DRV:64bit: - [2012.04.10 21:12:59 | 000,067,344 | ---- | M] (Trend Micro Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tmeevw.sys -- (tmeevw)
DRV:64bit: - [2012.03.01 09:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2012.02.15 11:01:50 | 000,052,736 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2011.12.16 18:53:28 | 000,016,376 | ---- | M] (TeamViewer GmbH) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\TVMonitor.sys -- (MonitorFunction)
DRV:64bit: - [2011.09.16 15:10:50 | 000,072,216 | ---- | M] (LogMeIn, Inc.) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\LMIRfsDriver.sys -- (LMIRfsDriver)
DRV:64bit: - [2011.09.16 15:10:24 | 000,014,944 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\radpms.sys -- (radpms)
DRV:64bit: - [2011.09.16 15:10:24 | 000,011,552 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\lmimirr.sys -- (lmimirr)
DRV:64bit: - [2011.08.27 02:15:53 | 000,270,912 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:64bit: - [2011.07.18 07:24:42 | 000,172,104 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdmdm.sys -- (sscdmdm)
DRV:64bit: - [2011.07.18 07:24:42 | 000,141,384 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdserd.sys -- (sscdserd) SAMSUNG Mobile Modem Diagnostic Serial Port (WDM)
DRV:64bit: - [2011.07.18 07:24:42 | 000,136,264 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdbus.sys -- (sscdbus) SAMSUNG USB Composite Device driver (WDM)
DRV:64bit: - [2011.07.18 07:24:42 | 000,019,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdmdfl.sys -- (sscdmdfl)
DRV:64bit: - [2011.07.18 07:24:12 | 000,177,640 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadmdm.sys -- (ssadmdm)
DRV:64bit: - [2011.07.18 07:24:12 | 000,157,672 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadbus.sys -- (ssadbus) SAMSUNG Android USB Composite Device driver (WDM)
DRV:64bit: - [2011.07.18 07:24:12 | 000,146,920 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadserd.sys -- (ssadserd) SAMSUNG Android USB Diagnostic Serial Port (WDM)
DRV:64bit: - [2011.07.18 07:24:12 | 000,036,328 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadadb.sys -- (androidusb)
DRV:64bit: - [2011.07.18 07:24:12 | 000,016,872 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadmdfl.sys -- (ssadmdfl) SAMSUNG Android USB Modem (Filter)
DRV:64bit: - [2011.07.08 07:15:50 | 009,884,672 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2011.07.08 05:47:04 | 000,307,712 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2011.03.11 09:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 09:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2011.03.10 14:55:52 | 000,135,184 | ---- | M] (JMicron Technology Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\JME.sys -- (JME) JMicron Ethernet Adapter NDIS6.20 Driver (Amd64 Bits)
DRV:64bit: - [2010.11.20 16:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.11.20 14:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010.11.20 14:03:42 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2010.11.20 12:37:42 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:64bit: - [2010.11.17 08:04:32 | 000,115,216 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
DRV:64bit: - [2010.09.07 17:19:38 | 001,800,832 | ---- | M] (Sonix Technology Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\snp2uvc.sys -- (SNP2UVC) USB2.0 PC Camera (SNP2UVC)
DRV:64bit: - [2010.07.14 14:17:28 | 000,735,360 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CHDRT64.sys -- (CnxtHdAudService)
DRV:64bit: - [2010.04.13 18:15:04 | 000,135,560 | ---- | M] (ELAN Microelectronic Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ETD.sys -- (ETD)
DRV:64bit: - [2009.10.05 16:34:00 | 001,542,656 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:64bit: - [2009.08.19 07:23:32 | 000,143,472 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\jmcr.sys -- (JMCR)
DRV:64bit: - [2009.07.14 04:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 04:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 04:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.07.14 03:09:50 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx)
DRV:64bit: - [2009.06.10 23:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 23:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 23:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 23:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.05.18 13:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2009.05.13 09:07:20 | 000,015,928 | ---- | M] (ASUS) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ATK64AMD.sys -- (MTsensor)
DRV:64bit: - [2009.02.24 18:35:44 | 000,255,552 | ---- | M] (MagicISO, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mcdbus.sys -- (mcdbus)
DRV:64bit: - [2008.05.23 17:27:28 | 000,154,168 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)
DRV:64bit: - [2006.08.01 16:35:54 | 001,558,656 | ---- | M] (Vimicro Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbVM303.sys -- (ZSMC0303)
DRV - [2011.12.02 01:33:14 | 000,011,856 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys -- (TuneUpUtilitiesDrv)
DRV - [2011.09.16 15:10:50 | 000,015,928 | ---- | M] (LogMeIn, Inc.) [Kernel | Auto | Running] -- C:\Program Files (x86)\LogMeIn\x64\RaInfo.sys -- (LMIInfo)
DRV - [2009.07.14 04:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2009.07.02 17:36:14 | 000,015,416 | ---- | M] (ASUS) [Kernel | Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys -- (ASMMAP64)
DRV - [2009.02.24 18:35:44 | 000,255,552 | ---- | M] (MagicISO, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysWOW64\drivers\mcdbus.sys -- (mcdbus)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default Download Directory = C:\Users\Sercan\Documents
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,DefaultNetworkProfile = 529858521
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://tr.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = tr-TR
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 5C F9 8C 4D 06 4A CD 01 [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...Box&FORM=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = local;*.local

========== FireFox ==========



FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_257.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_257.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_32: C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nitropdf.com/NitroPDF: C:\Program Files (x86)\Nitro PDF\Professional 7\npnitromozilla.dll ( )
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll ()
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@onlive.com/OnLiveGameClientDetector,version=1.0.0: C:\Program Files (x86)\OnLive\Plugin\npolgdet.dll (OnLive)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\Sercan\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\Sercan\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\Sercan\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Sercan\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Sercan\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Sercan\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{38783831-6098-4faa-A9C9-1EE1E343F4D2}: C:\Program Files\Trend Micro\AMSP\Module\20002\7.1.1102\7.1.1102\firefoxextension [2012.04.11 21:58:09 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{22C7F6C6-8D67-4534-92B5-529A0EC09405}: C:\Program Files\Trend Micro\AMSP\module\20004\FxExt\firefoxextension\ [2012.04.11 21:58:23 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.06.04 14:25:28 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012.06.04 10:07:16 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\[email protected]: C:\Users\Sercan\AppData\Roaming\IDM\idmmzcc5 [2012.06.03 21:04:42 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\[email protected]: C:\Users\Sercan\AppData\Roaming\IDM\idmmzcc5 [2012.06.03 21:04:42 | 000,000,000 | ---D | M]

[2011.08.07 17:56:13 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sercan\AppData\Roaming\mozilla\Extensions
[2012.06.04 15:09:15 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sercan\AppData\Roaming\mozilla\Firefox\Profiles\h8j5qygq.default\extensions
[2012.06.11 14:25:52 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2012.04.11 21:58:09 | 000,000,000 | ---D | M] (Trend Micro BEP Firefox Extension) -- C:\PROGRAM FILES\TREND MICRO\AMSP\MODULE\20002\7.1.1102\7.1.1102\FIREFOXEXTENSION
[2012.06.03 21:04:42 | 000,000,000 | ---D | M] (IDM CC) -- C:\USERS\SERCAN\APPDATA\ROAMING\IDM\IDMMZCC5
[2012.01.21 11:42:35 | 000,007,913 | ---- | M] () (No name found) -- C:\USERS\SERCAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8J5QYGQ.DEFAULT\EXTENSIONS\{7D5A40B5-B9CC-4C76-A710-1CF3069A5E21}.XPI
[2012.01.21 11:42:35 | 000,634,964 | ---- | M] () (No name found) -- C:\USERS\SERCAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8J5QYGQ.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
[2012.06.04 14:25:28 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012.04.21 17:47:10 | 000,001,182 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-tr.xml
[2012.06.04 14:25:28 | 000,002,489 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yandex-tr.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Sercan\AppData\Local\Google\Chrome\Application\19.0.1084.56\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Sercan\AppData\Local\Google\Chrome\Application\19.0.1084.56\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Sercan\AppData\Local\Google\Chrome\Application\19.0.1084.56\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.270.7 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java™ Platform SE 6 U27 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Users\Sercan\AppData\Local\Google\Chrome\Application\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Users\Sercan\AppData\Local\Google\Chrome\Application\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Users\Sercan\AppData\Local\Google\Chrome\Application\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Users\Sercan\AppData\Local\Google\Chrome\Application\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Users\Sercan\AppData\Local\Google\Chrome\Application\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Users\Sercan\AppData\Local\Google\Chrome\Application\plugins\npqtplugin6.dll
CHR - plugin: Google Talk Plugin (Enabled) = C:\Users\Sercan\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
CHR - plugin: Google Talk Plugin Video Accelerator (Enabled) = C:\Users\Sercan\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
CHR - plugin: OnLive Game Client Detector (Enabled) = C:\Program Files (x86)\OnLive\Plugin\npolgdet.dll
CHR - plugin: Unity Player (Enabled) = C:\Users\Sercan\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll
CHR - plugin: Facebook Video Calling Plugin (Enabled) = C:\Users\Sercan\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll
CHR - plugin: Google Update (Enabled) = C:\Users\Sercan\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin

O1 HOSTS File: ([2012.06.04 01:26:30 | 000,000,854 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 secure.tune-up.com
O2:64bit: - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll (Internet Download Manager, Tonec Inc.)
O2:64bit: - BHO: (TmIEPlugInBHO Class) - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\module\20004\2.0.1313\6.8.1078\TmIEPlg.dll (Trend Micro Inc.)
O2:64bit: - BHO: (TmBpIeBHO Class) - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\module\20002\7.1.1102\7.1.1102\TmBpIe64.dll (Trend Micro Inc.)
O2:64bit: - BHO: (no name) - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - No CLSID value found.
O2 - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.)
O2 - BHO: (TmIEPlugInBHO Class) - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\module\20004\2.0.1313\6.8.1078\TmIEPlg32.dll (Trend Micro Inc.)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (TmBpIeBHO Class) - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\module\20002\7.1.1102\7.1.1102\TmBpIe32.dll (Trend Micro Inc.)
O4:64bit: - HKLM..\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronic Corp.)
O4:64bit: - HKLM..\Run: [LogMeIn GUI] C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe (LogMeIn, Inc.)
O4:64bit: - HKLM..\Run: [PrintDisp] C:\Windows\SysNative\PrintDisp.exe (ActMask Co.,Ltd - http://www.all2pdf.com)
O4:64bit: - HKLM..\Run: [SmartAudio] C:\Program Files\CONEXANT\SAII\SAIICpl.exe ()
O4:64bit: - HKLM..\Run: [Trend Micro Client Framework] C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe (Trend Micro Inc.)
O4:64bit: - HKLM..\Run: [Trend Micro Titanium] C:\Program Files\Trend Micro\Titanium\UIFramework\uiWinMgr.exe (Trend Micro Inc.)
O4:64bit: - HKLM..\Run: [WLM] C:\Program Files\Trend Micro\Titanium\Plugin\TMAS\TMAS_WLM\TMAS_WLMMon.exe (Trend Micro Inc.)
O4 - HKLM..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe (AMD)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS)
O4 - HKLM..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS)
O4 - HKLM..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ASUS)
O4 - HKLM..\Run: [MT880a Kolay Kurulum] C:\Program Files (x86)\MT880a Kolay Kurulum\MT880a Kolay Kurulum.exe ()
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe (Tonec Inc.)
O4 - HKCU..\Run: [KiesPDLR] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O8:64bit: - Extra context menu item: Bütün linkleri IDM ile indir - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()
O8:64bit: - Extra context menu item: IDM ile indir - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()
O8 - Extra context menu item: Bütün linkleri IDM ile indir - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()
O8 - Extra context menu item: IDM ile indir - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} http://support.asus....k_sys_ctrl3.cab (asusTek_sysctrl Class)
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} http://messenger.zon...kr.cab56986.cab (Checkers Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_32)
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} http://messenger.zon...nt.cab56907.cab (MessengerStatsClient Class)
O16 - DPF: {CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_32)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_32)
O16 - DPF: {E6F480FC-BD44-4CBA-B74A-89AF7842937D} http://content.syste...ri_4.4.26.0.cab (SysInfo Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2AC1B8CC-0B46-4C7A-926B-1F8A359550A3}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2AC1B8CC-0B46-4C7A-926B-1F8A359550A3}: NameServer = 4.2.2.3,4.2.2.4
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A2FB64B0-0A52-492C-868A-72AD6A69CA71}: DhcpNameServer = 192.168.42.129
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A2FB64B0-0A52-492C-868A-72AD6A69CA71}: NameServer = 4.2.2.2,4.2.2.4
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{DBD2AC0E-0936-4813-83D0-CDC0F5DB3409}: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\tmbp {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\7.1.1102\7.1.1102\TmBpIe64.dll (Trend Micro Inc.)
O18:64bit: - Protocol\Handler\tmpx {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\module\20004\2.0.1313\6.8.1078\TmIEPlg.dll (Trend Micro Inc.)
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\ms-help - No CLSID value found
O18 - Protocol\Handler\tmbp {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\7.1.1102\7.1.1102\TmBpIe32.dll (Trend Micro Inc.)
O18 - Protocol\Handler\tmpx {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\module\20004\2.0.1313\6.8.1078\TmIEPlg32.dll (Trend Micro Inc.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O27:64bit: - HKLM IFEO\AcroRd32.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27:64bit: - HKLM IFEO\airecoveryburner.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27:64bit: - HKLM IFEO\dtlite.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27:64bit: - HKLM IFEO\excel.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27:64bit: - HKLM IFEO\facemgr.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27:64bit: - HKLM IFEO\groove.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27:64bit: - HKLM IFEO\infopath.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27:64bit: - HKLM IFEO\logmeintoolkit.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27:64bit: - HKLM IFEO\logonmgr.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27:64bit: - HKLM IFEO\misc.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27:64bit: - HKLM IFEO\msaccess.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27:64bit: - HKLM IFEO\msoxmled.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27:64bit: - HKLM IFEO\mspub.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27:64bit: - HKLM IFEO\mstore.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27:64bit: - HKLM IFEO\onenote.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27:64bit: - HKLM IFEO\outlook.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27:64bit: - HKLM IFEO\p4gxui.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27:64bit: - HKLM IFEO\powerpnt.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27:64bit: - HKLM IFEO\sptdinst-x64.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27:64bit: - HKLM IFEO\teamviewer.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27:64bit: - HKLM IFEO\uninst.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27:64bit: - HKLM IFEO\winword.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\AcroRd32.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\airecoveryburner.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\dtlite.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\excel.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\facemgr.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\groove.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\infopath.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\logmeintoolkit.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\logonmgr.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\misc.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\msaccess.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\msoxmled.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\mspub.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\mstore.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\onenote.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\outlook.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\p4gxui.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\powerpnt.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\sptdinst-x64.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\teamviewer.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\uninst.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\winword.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software)
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2012.06.15 22:38:06 | 004,731,392 | ---- | C] (AVAST Software) -- C:\Users\Sercan\Desktop\aswMBR.exe
[2012.06.15 22:30:35 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Users\Sercan\Desktop\OTL.exe
[2012.06.15 21:23:50 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KoshyJohn.com
[2012.06.15 21:23:48 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Roaming\KoshyJohn.com
[2012.06.15 21:23:04 | 000,508,679 | ---- | C] (KoshyJohn.com) -- C:\Users\Sercan\Desktop\MemClean.exe
[2012.06.15 19:48:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2012.06.15 19:47:17 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2012.06.15 19:47:16 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2012.06.15 19:47:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes
[2012.06.15 19:41:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Safari
[2012.06.15 11:00:43 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Local\{C1C73A96-F433-4773-8827-A98A6134AD5C}
[2012.06.14 22:59:55 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Local\{4AD4F128-D93F-4075-9171-62BD94F5DCEF}
[2012.06.14 22:59:42 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Local\{9562BCE2-8AB9-46E2-A59C-791972ACD6E7}
[2012.06.14 10:57:00 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Local\{29C7CB9C-A905-44E2-9FD3-B1F17173FDC2}
[2012.06.14 10:56:47 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Local\{391DC845-994F-48DF-8239-DCE814D056CD}
[2012.06.13 22:21:59 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Local\{211546E2-CC49-4715-8B97-631A45A18DA4}
[2012.06.13 22:21:47 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Local\{F81DA185-A344-4E59-B219-B6C7AB8CD9D2}
[2012.06.13 09:48:26 | 000,000,000 | ---D | C] -- C:\Users\Sercan\Desktop\ASUS GÜNCEL SÜRÜCÜLER
[2012.06.13 02:02:34 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Local\{592A5B9C-95FF-48FE-80A1-F12F38474D7F}
[2012.06.13 02:02:20 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Local\{204F25E0-BFEC-4043-BE50-807535B7A3AD}
[2012.06.12 10:24:58 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Local\{C22AA098-7FB0-4201-A645-9772F8F0514C}
[2012.06.12 10:24:43 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Local\{F1EBDFB2-29C8-4E19-85C5-F7C79358C94C}
[2012.06.11 22:22:08 | 000,000,000 | ---D | C] -- C:\Users\Sercan\Documents\Virtua Tennis 4
[2012.06.11 22:11:14 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Local\{6FFC02D6-E474-4002-BD3C-C20EFFC0335A}
[2012.06.11 22:10:55 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Local\{C87FB65C-94C0-48D9-8275-D4930D5AF6FA}
[2012.06.11 22:09:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Sega
[2012.06.11 20:37:22 | 000,000,000 | ---D | C] -- C:\Users\Sercan\Desktop\Sanal Tenis
[2012.06.11 14:58:25 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Roaming\Nitro PDF
[2012.06.11 14:58:24 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Roaming\FileOpen
[2012.06.11 14:58:24 | 000,000,000 | ---D | C] -- C:\ProgramData\FileOpen
[2012.06.11 14:57:27 | 000,029,704 | ---- | C] (Nitro PDF Software) -- C:\Windows\SysNative\nitrolocalmon2.dll
[2012.06.11 14:57:27 | 000,017,928 | ---- | C] (Nitro PDF Software) -- C:\Windows\SysNative\nitrolocalui2.dll
[2012.06.11 14:57:08 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Nitro PDF
[2012.06.11 14:57:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Nitro PDF
[2012.06.11 14:57:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nitro PDF
[2012.06.11 14:57:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Nitro PDF
[2012.06.11 14:44:47 | 058,849,888 | ---- | C] (Nitro PDF Software) -- C:\Users\Sercan\Desktop\nitro_pdf_professional7_x64.exe
[2012.06.11 14:35:43 | 000,901,120 | ---- | C] (ActMask http://www.all2pdf.com) -- C:\Windows\SysWow64\SaveTo.dll
[2012.06.11 14:35:15 | 000,369,152 | ---- | C] (ActMask Co.,Ltd) -- C:\Windows\SysNative\ActPub.exe
[2012.06.11 14:34:53 | 000,377,344 | ---- | C] (ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM) -- C:\Windows\SysWow64\SetPrinter.exe
[2012.06.11 14:34:34 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Local\Aspell
[2012.06.11 14:25:41 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Local\Iceni
[2012.06.11 14:24:38 | 000,826,368 | ---- | C] (ActMask Co.,Ltd - http://www.all2pdf.com) -- C:\Windows\SysNative\PrintDisp.exe
[2012.06.11 14:24:37 | 000,077,824 | ---- | C] (ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM) -- C:\Windows\SysNative\PrintCtrl.exe
[2012.06.11 14:24:36 | 002,650,112 | ---- | C] (DynaForms GmbH) -- C:\Windows\SysWow64\CPDF.dll
[2012.06.11 14:24:15 | 001,171,456 | ---- | C] (ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM) -- C:\Windows\SysNative\PrtClient.exe
[2012.06.11 14:24:15 | 000,828,416 | ---- | C] (ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM) -- C:\Windows\SysNative\SetupDrv.exe
[2012.06.11 14:24:15 | 000,740,864 | ---- | C] (ActMask - http://www.all2pdf.com) -- C:\Windows\SysNative\PrtTools.exe
[2012.06.11 14:24:15 | 000,377,344 | ---- | C] (ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM) -- C:\Windows\SysNative\SetPrinter.exe
[2012.06.11 14:23:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Iceni
[2012.06.11 14:23:45 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Roaming\Aspell
[2012.06.11 14:22:50 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Roaming\Downloaded Installations
[2012.06.11 14:20:15 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Roaming\Foxit Software
[2012.06.11 11:22:22 | 000,000,000 | ---D | C] -- C:\Users\Sercan\Desktop\Subs
[2012.06.11 10:10:17 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Local\{F3EDB752-AE31-4A7A-80D2-21668FDF8D37}
[2012.06.11 10:10:05 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Local\{AF6EB88F-145D-43E6-B325-D6BFE81CA15E}
[2012.06.11 10:00:20 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Local\Macromedia
[2012.06.10 21:21:18 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Local\{957052D5-47D5-4317-8AFD-C00E61F9C732}
[2012.06.10 21:21:05 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Local\{D6E7D8B3-8958-4DF1-82EB-539B73D2286D}
[2012.06.07 13:09:27 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Local\{DD240151-962D-4519-B0C1-216BB1B557DF}
[2012.06.07 13:09:12 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Local\{41435394-B3B2-4889-AF80-D7293899C48E}
[2012.06.06 13:07:32 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Local\{001DF9B1-BEC5-4C4C-8DDB-DA244D6DDDEF}
[2012.06.06 13:07:18 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Local\{6401F25E-9BEA-4FDD-869C-34FB39C52288}
[2012.06.06 00:17:07 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Local\{82322F07-B00E-4266-A095-9E4A76DD0337}
[2012.06.06 00:16:55 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Local\{6F5E3EFC-8829-4A70-9C8C-F8873B8217C2}
[2012.06.05 19:57:54 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpeedFan
[2012.06.05 19:57:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpeedFan
[2012.06.05 19:57:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SpeedFan
[2012.06.05 12:16:22 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Local\{E06AAFD0-53C8-4739-B289-F7357E065710}
[2012.06.05 12:16:09 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Local\{924189E4-6F2A-4268-BF7C-054A63CFAE90}
[2012.06.04 15:06:36 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Local\{BA8C7855-FA0D-40EB-A414-4023DF4AE7E3}
[2012.06.04 15:06:21 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Local\{CC39CF35-DD63-415C-8A48-0B0A542DDD86}
[2012.06.04 14:25:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service
[2012.06.04 14:25:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla
[2012.06.04 10:06:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java
[2012.06.04 01:22:01 | 033,563,040 | ---- | C] (TuneUp Software) -- C:\Users\Sercan\Desktop\TuneUpUtilities2012_en-US.exe
[2012.06.03 21:56:26 | 000,000,000 | ---D | C] -- C:\POB
[2012.06.03 21:25:46 | 000,069,640 | ---- | C] (Nalpeiron Ltd.) -- C:\Windows\SysWow64\NLSSRV32.EXE
[2012.06.03 21:18:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
[2012.06.03 21:16:41 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight
[2012.06.03 21:16:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Silverlight
[2012.06.03 15:09:51 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Local\{BDEA1DEF-92F9-4991-8B0E-15DA5FD8DE01}
[2012.06.03 15:09:45 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BS.Player
[2012.06.03 15:09:33 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Local\{8A78C17D-E38A-45CC-9152-1A48560466D3}
[2012.06.03 15:06:20 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Roaming\BSplayer Pro
[2012.06.03 15:06:20 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Roaming\BSplayer
[2012.06.03 15:06:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Webteh
[2012.06.03 14:40:27 | 000,000,000 | ---D | C] -- C:\Users\Sercan\Desktop\Naruto Shippuuden
[2012.06.03 13:24:37 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Local\Apple Computer
[2012.06.03 13:24:36 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Roaming\Apple Computer
[2012.06.03 13:24:27 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\DRVSTORE
[2012.06.03 13:24:02 | 000,000,000 | ---D | C] -- C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
[2012.06.03 13:23:04 | 000,000,000 | ---D | C] -- C:\Users\Sercan\AppData\Local\Apple
[2012.06.03 13:23:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update
[2012.06.03 13:22:45 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple
[2012.06.03 13:22:30 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2012.06.03 13:22:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bonjour
[2012.06.03 13:22:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple
[2012.06.03 13:22:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Apple
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012.06.15 22:46:26 | 000,012,416 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.06.15 22:46:26 | 000,012,416 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.06.15 22:38:15 | 004,731,392 | ---- | M] (AVAST Software) -- C:\Users\Sercan\Desktop\aswMBR.exe
[2012.06.15 22:30:40 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Sercan\Desktop\OTL.exe
[2012.06.15 22:27:10 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.06.15 21:23:54 | 000,001,926 | ---- | M] () -- C:\Users\Sercan\Desktop\Memory Cleaner.lnk
[2012.06.15 21:23:11 | 000,508,679 | ---- | M] (KoshyJohn.com) -- C:\Users\Sercan\Desktop\MemClean.exe
[2012.06.15 21:07:12 | 000,000,814 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.06.15 19:49:55 | 000,143,456 | -H-- | M] () -- C:\Windows\SysWow64\mlfcache.dat
[2012.06.15 19:48:13 | 000,001,783 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2012.06.15 19:41:42 | 000,002,515 | ---- | M] () -- C:\Users\Sercan\Application Data\Microsoft\Internet Explorer\Quick Launch\Apple Safari.lnk
[2012.06.15 19:41:42 | 000,002,491 | ---- | M] () -- C:\Users\Public\Desktop\Safari.lnk
[2012.06.15 00:14:10 | 000,002,287 | ---- | M] () -- C:\Users\Public\Desktop\Resident Evil Operation Raccoon City.lnk
[2012.06.14 11:54:13 | 001,622,376 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012.06.14 11:54:13 | 000,679,008 | ---- | M] () -- C:\Windows\SysNative\perfh01F.dat
[2012.06.14 11:54:13 | 000,668,342 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.06.14 11:54:13 | 000,147,394 | ---- | M] () -- C:\Windows\SysNative\perfc01F.dat
[2012.06.14 11:54:13 | 000,129,422 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012.06.13 18:13:27 | 000,416,024 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012.06.12 16:44:36 | 000,001,768 | ---- | M] () -- C:\Users\Sercan\Desktop\Virtua Tennis 4™.lnk
[2012.06.12 10:22:35 | 000,002,048 | ---- | M] () -- C:\Windows\SysNative\AutoRunFilter.ini
[2012.06.12 10:22:35 | 000,001,418 | ---- | M] () -- C:\Windows\SysNative\ServiceFilter.ini
[2012.06.11 20:22:41 | 010,727,840 | ---- | M] () -- C:\Users\Sercan\Desktop\Detaylı Özgeçmişim.pdf
[2012.06.11 14:57:21 | 000,002,059 | ---- | M] () -- C:\Users\Public\Desktop\Nitro Pro 7.lnk
[2012.06.11 14:45:57 | 058,849,888 | ---- | M] (Nitro PDF Software) -- C:\Users\Sercan\Desktop\nitro_pdf_professional7_x64.exe
[2012.06.11 14:35:42 | 000,020,726 | ---- | M] () -- C:\Windows\unins000.dat
[2012.06.11 14:35:40 | 001,218,627 | ---- | M] () -- C:\Windows\unins000.exe
[2012.06.11 11:23:35 | 000,000,967 | ---- | M] () -- C:\Users\Sercan\Application Data\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk
[2012.06.07 14:22:38 | 000,107,183 | ---- | M] () -- C:\Users\Sercan\Desktop\Adsız.png
[2012.06.05 19:57:55 | 000,001,007 | ---- | M] () -- C:\Users\Sercan\Desktop\SpeedFan.lnk
[2012.06.05 19:57:52 | 000,000,045 | ---- | M] () -- C:\Windows\SysWow64\initdebug.nfo
[2012.06.05 11:35:45 | 000,156,418 | ---- | M] () -- C:\Users\Sercan\Desktop\Adsız.jpg
[2012.06.04 09:19:50 | 000,001,034 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-301910449-150800548-1094043551-1000UA.job
[2012.06.04 09:19:50 | 000,000,982 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-301910449-150800548-1094043551-1000Core.job
[2012.06.04 09:19:50 | 000,000,932 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-301910449-150800548-1094043551-1000UA.job
[2012.06.04 09:19:50 | 000,000,916 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-301910449-150800548-1094043551-1003UA.job
[2012.06.04 09:19:50 | 000,000,910 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-301910449-150800548-1094043551-1000Core.job
[2012.06.04 09:19:50 | 000,000,894 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-301910449-150800548-1094043551-1003Core.job
[2012.06.04 01:26:30 | 000,000,854 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2012.06.03 22:05:29 | 000,000,878 | ---- | M] () -- C:\Users\Sercan\Desktop\PBLauncher - Kısayol.lnk
[2012.06.03 21:25:46 | 000,069,640 | ---- | M] (Nalpeiron Ltd.) -- C:\Windows\SysWow64\NLSSRV32.EXE
[2012.06.03 21:25:08 | 000,029,704 | ---- | M] (Nitro PDF Software) -- C:\Windows\SysNative\nitrolocalmon2.dll
[2012.06.03 21:25:08 | 000,017,928 | ---- | M] (Nitro PDF Software) -- C:\Windows\SysNative\nitrolocalui2.dll
[2012.06.03 17:50:43 | 000,000,720 | ---- | M] () -- C:\Users\Sercan\Application Data\Microsoft\Internet Explorer\Quick Launch\EXARadyo.lnk
[2012.06.03 17:50:43 | 000,000,696 | ---- | M] () -- C:\Users\Public\Desktop\EXARadyo.lnk
[2012.06.03 15:09:46 | 000,001,146 | ---- | M] () -- C:\Users\Sercan\Application Data\Microsoft\Internet Explorer\Quick Launch\BS.Player FREE.lnk
[2012.06.03 15:09:45 | 000,001,122 | ---- | M] () -- C:\Users\Sercan\Desktop\BS.Player FREE.lnk
[2012.05.22 20:28:05 | 000,087,456 | ---- | M] (LogMeIn, Inc.) -- C:\Windows\SysNative\LMIRfsClientNP.dll
[2012.05.22 20:28:04 | 000,080,768 | ---- | M] (LogMeIn, Inc.) -- C:\Windows\SysNative\LMIinit.dll
[2012.05.22 20:28:04 | 000,034,688 | ---- | M] (LogMeIn, Inc.) -- C:\Windows\SysNative\LMIport.dll
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012.06.15 21:23:54 | 000,001,926 | ---- | C] () -- C:\Users\Sercan\Desktop\Memory Cleaner.lnk
[2012.06.15 19:49:55 | 000,143,456 | -H-- | C] () -- C:\Windows\SysWow64\mlfcache.dat
[2012.06.15 19:48:13 | 000,001,783 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2012.06.15 19:41:42 | 000,002,515 | ---- | C] () -- C:\Users\Sercan\Application Data\Microsoft\Internet Explorer\Quick Launch\Apple Safari.lnk
[2012.06.15 19:41:42 | 000,002,491 | ---- | C] () -- C:\Users\Public\Desktop\Safari.lnk
[2012.06.15 19:41:41 | 000,002,503 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Safari.lnk
[2012.06.13 15:48:59 | 002,097,152 | RH-- | C] () -- C:\K52JT.BIN
[2012.06.12 16:44:36 | 000,001,768 | ---- | C] () -- C:\Users\Sercan\Desktop\Virtua Tennis 4™.lnk
[2012.06.12 02:15:59 | 000,002,287 | ---- | C] () -- C:\Users\Public\Desktop\Resident Evil Operation Raccoon City.lnk
[2012.06.11 15:48:14 | 010,727,840 | ---- | C] () -- C:\Users\Sercan\Desktop\Detaylı Özgeçmişim.pdf
[2012.06.11 14:57:21 | 000,002,557 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nitro Pro 7.lnk
[2012.06.11 14:57:21 | 000,002,059 | ---- | C] () -- C:\Users\Public\Desktop\Nitro Pro 7.lnk
[2012.06.11 14:35:12 | 001,218,627 | ---- | C] () -- C:\Windows\unins000.exe
[2012.06.11 14:35:12 | 000,020,726 | ---- | C] () -- C:\Windows\unins000.dat
[2012.06.11 14:24:37 | 001,391,616 | ---- | C] () -- C:\Windows\SysWow64\ActPDF.dll
[2012.06.11 14:24:16 | 000,691,200 | ---- | C] () -- C:\Windows\SysNative\PrintLog.exe
[2012.06.11 14:24:16 | 000,524,288 | ---- | C] () -- C:\Windows\SysNative\PrtPass.exe
[2012.06.07 14:22:38 | 000,107,183 | ---- | C] () -- C:\Users\Sercan\Desktop\Adsız.png
[2012.06.05 19:57:55 | 000,001,007 | ---- | C] () -- C:\Users\Sercan\Desktop\SpeedFan.lnk
[2012.06.05 19:57:52 | 000,000,045 | ---- | C] () -- C:\Windows\SysWow64\initdebug.nfo
[2012.06.05 11:35:45 | 000,156,418 | ---- | C] () -- C:\Users\Sercan\Desktop\Adsız.jpg
[2012.06.04 01:22:00 | 000,000,591 | ---- | C] () -- C:\Users\Sercan\Desktop\TeknoMobil.url
[2012.06.03 22:05:29 | 000,000,878 | ---- | C] () -- C:\Users\Sercan\Desktop\PBLauncher - Kısayol.lnk
[2012.06.03 17:50:43 | 000,000,696 | ---- | C] () -- C:\Users\Public\Desktop\EXARadyo.lnk
[2012.06.03 15:09:46 | 000,001,146 | ---- | C] () -- C:\Users\Sercan\Application Data\Microsoft\Internet Explorer\Quick Launch\BS.Player FREE.lnk
[2012.06.03 15:09:45 | 000,001,122 | ---- | C] () -- C:\Users\Sercan\Desktop\BS.Player FREE.lnk
[2012.06.03 13:23:03 | 000,002,519 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
[2012.04.10 21:29:35 | 000,000,406 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2012.02.03 06:18:29 | 000,003,584 | ---- | C] () -- C:\Users\Sercan\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.11.09 23:39:44 | 000,059,904 | ---- | C] () -- C:\Windows\SysWow64\OpenVideo.dll
[2011.11.09 23:39:32 | 000,054,784 | ---- | C] () -- C:\Windows\SysWow64\OVDecode.dll
[2011.09.22 19:38:43 | 001,970,176 | ---- | C] () -- C:\Windows\SysWow64\d3dx9.dll
[2011.09.04 20:15:57 | 001,601,198 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2011.08.23 15:22:12 | 000,024,576 | ---- | C] () -- C:\Windows\VMPipe.dll
[2011.08.23 15:22:11 | 000,138,752 | ---- | C] () -- C:\Windows\VM303Uninst64.exe
[2011.08.23 15:22:11 | 000,073,728 | ---- | C] () -- C:\Windows\VMInstNT.exe
[2011.08.23 15:22:11 | 000,069,632 | ---- | C] () -- C:\Windows\VMInst64.exe
[2011.08.23 15:22:11 | 000,040,960 | ---- | C] () -- C:\Windows\VM303UninstNT.exe
[2011.08.23 15:22:11 | 000,040,960 | ---- | C] () -- C:\Windows\VM303Uninst.exe
[2011.08.23 15:22:11 | 000,032,768 | ---- | C] () -- C:\Windows\VMInst.exe
[2011.08.18 20:49:19 | 000,107,832 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2011.08.18 20:49:17 | 000,066,872 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2011.08.18 20:49:16 | 002,337,865 | ---- | C] () -- C:\Windows\SysWow64\pbsvc.exe
[2011.08.07 18:13:43 | 000,000,024 | ---- | C] () -- C:\Windows\ATKPF.ini
[2011.07.29 21:44:01 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini
[2011.07.29 21:43:58 | 000,216,064 | ---- | C] ( ) -- C:\Windows\SysWow64\lagarith.dll
[2011.07.29 21:43:57 | 000,644,608 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2011.07.29 21:43:57 | 000,243,200 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2011.07.29 21:43:56 | 000,073,216 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2011.07.29 21:05:52 | 000,000,017 | ---- | C] () -- C:\Users\Sercan\AppData\Local\resmon.resmoncfg
[2011.07.29 21:03:58 | 000,015,497 | ---- | C] () -- C:\Windows\snp2uvc.ini
[2011.07.28 23:52:04 | 000,175,616 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2011.07.28 23:46:06 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2011.07.26 17:26:48 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe
[2011.07.26 17:26:46 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll
[2011.07.26 17:26:46 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll
[2011.07.26 17:26:46 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll
[2011.07.26 17:26:46 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll
[2011.04.09 18:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2011.03.17 20:51:44 | 000,003,929 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat

========== LOP Check ==========

[2011.08.14 00:36:16 | 000,000,000 | ---D | M] -- C:\Users\Sercan\AppData\Roaming\7plus
[2012.06.03 15:15:57 | 000,000,000 | ---D | M] -- C:\Users\Sercan\AppData\Roaming\BSplayer
[2012.06.03 15:06:20 | 000,000,000 | ---D | M] -- C:\Users\Sercan\AppData\Roaming\BSplayer Pro
[2011.08.21 14:42:07 | 000,000,000 | ---D | M] -- C:\Users\Sercan\AppData\Roaming\Camfrog
[2012.04.14 14:51:56 | 000,000,000 | ---D | M] -- C:\Users\Sercan\AppData\Roaming\CDisplayEx
[2011.08.27 02:17:18 | 000,000,000 | ---D | M] -- C:\Users\Sercan\AppData\Roaming\DAEMON Tools Lite
[2012.06.15 20:57:19 | 000,000,000 | ---D | M] -- C:\Users\Sercan\AppData\Roaming\DMCache
[2012.04.21 22:15:30 | 000,000,000 | ---D | M] -- C:\Users\Sercan\AppData\Roaming\doctore
[2012.06.11 14:55:41 | 000,000,000 | ---D | M] -- C:\Users\Sercan\AppData\Roaming\Downloaded Installations
[2011.08.14 00:06:00 | 000,000,000 | ---D | M] -- C:\Users\Sercan\AppData\Roaming\eLanguage
[2012.06.11 14:58:25 | 000,000,000 | ---D | M] -- C:\Users\Sercan\AppData\Roaming\FileOpen
[2012.06.11 14:20:15 | 000,000,000 | ---D | M] -- C:\Users\Sercan\AppData\Roaming\Foxit Software
[2012.06.14 00:13:15 | 000,000,000 | ---D | M] -- C:\Users\Sercan\AppData\Roaming\IDM
[2012.06.15 21:23:48 | 000,000,000 | ---D | M] -- C:\Users\Sercan\AppData\Roaming\KoshyJohn.com
[2012.06.15 21:28:06 | 000,000,000 | ---D | M] -- C:\Users\Sercan\AppData\Roaming\Nitro PDF
[2011.09.06 01:11:44 | 000,000,000 | ---D | M] -- C:\Users\Sercan\AppData\Roaming\OnLive App
[2012.06.13 04:28:22 | 000,000,000 | ---D | M] -- C:\Users\Sercan\AppData\Roaming\Origin
[2012.06.11 19:49:50 | 000,000,000 | ---D | M] -- C:\Users\Sercan\AppData\Roaming\PointBlank
[2011.09.07 03:16:14 | 000,000,000 | ---D | M] -- C:\Users\Sercan\AppData\Roaming\PQFLVDownloader
[2011.09.11 13:36:26 | 000,000,000 | ---D | M] -- C:\Users\Sercan\AppData\Roaming\Rovio
[2011.09.03 17:04:11 | 000,000,000 | ---D | M] -- C:\Users\Sercan\AppData\Roaming\Samsung
[2011.09.11 03:30:50 | 000,000,000 | ---D | M] -- C:\Users\Sercan\AppData\Roaming\SystemRequirementsLab
[2011.08.21 13:41:20 | 000,000,000 | ---D | M] -- C:\Users\Sercan\AppData\Roaming\TeamViewer
[2012.01.30 14:31:45 | 000,000,000 | ---D | M] -- C:\Users\Sercan\AppData\Roaming\TuneUp Software
[2011.10.15 18:55:39 | 000,000,000 | ---D | M] -- C:\Users\Sercan\AppData\Roaming\Ubisoft
[2011.09.17 13:21:30 | 000,000,000 | ---D | M] -- C:\Users\Sercan\AppData\Roaming\Unity
[2012.06.15 22:54:01 | 000,000,000 | ---D | M] -- C:\Users\Sercan\AppData\Roaming\uTorrent
[2012.06.04 09:19:50 | 000,000,910 | ---- | M] () -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-301910449-150800548-1094043551-1000Core.job
[2012.06.04 09:19:50 | 000,000,932 | ---- | M] () -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-301910449-150800548-1094043551-1000UA.job
[2012.06.04 09:19:50 | 000,000,894 | ---- | M] () -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-301910449-150800548-1094043551-1003Core.job
[2012.06.04 09:19:50 | 000,000,916 | ---- | M] () -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-301910449-150800548-1094043551-1003UA.job
[2012.06.13 15:52:50 | 000,032,590 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 96 bytes -> C:\ProgramData\TEMP:F63A059B

< End of report >

Edited by Sercan, 15 June 2012 - 02:10 PM.

  • 0

Advertisements







Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP