Hello again,
Please do not use any codeboxes when posting logs, they are much harder to analyze that way.
How is the machine running now?
bloopie
Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!
Hello again,
Please do not use any codeboxes when posting logs, they are much harder to analyze that way.
How is the machine running now?
bloopie
Please don't miss my last post.
In addition to my question in the previous post, please run this tool for me next:
Please download Junkware Removal Tool to your desktop.
==========
Please answer the question in my previous post, and post the JRT.txt log (without codeboxes) in your next reply!
bloopie
okey i wont
thanks for that
its good my speed problems are solved but the "Automatic Maintenance" is always open, it wont close if i closed it manually it resumes after 1-2 hours later.
JRT log is empty, it dont find antything.
Hello again, and sorry for the delay!
its good my speed problems are solved
That's good to hear!
Are you still having your initial problems with the chrome browser, or is that doing much better now?
==========
the "Automatic Maintenance" is always open, it wont close if i closed it manually it resumes after 1-2 hours later.
If this machine is not used for "work purposes", then we can disable the automatic maintenence...you really don't need it enabled on a home computer.
Have a look here on how to disable it: http://www.eightforu...indows-8-a.html
==========
After disabling the automatic maintenence, please let me know if things are better!
Otherwise, things are looking pretty good, so please tell me if there is anything else you'd like to bring to my attention!
bloopie
thanks for that,
My internet speed is sometimes slown on chrome it's normal or not?
otherwise
i dont have any speed problem my computer thanks for your effort
hello again
i disabled the automatic maintenence like that post, but it's always enabling after pc restart.
Hello again, and sorry for the long delay! I meant to reply yesterday but couldn't get to my computer at home, and replying with my phone would be fairly pointless. Again, I apologize!
If that happens again (as mentioned in my signature of every post), please feel free to shoot me a PM and let me know!
==========
Okay, I see you have msconfig set to selective startup. Could you please open msconfig (WIndows Key + R, and in the runbox type in msconfig and press enter), and under the "General" tab, make sure "Normal startup" is ticked and click Apply and OK.
Then please reboot the machine (<--Important), and run a fresh FRST scan and post the FRST.txt (please do not put the log in a codebox, just copy and paste the fresh log into your reply)...no need for an Addition.txt. Also, please let me know if you notice the system any slower after this as well.
I want to see if there is some more registry "Run" keys that could be causing the automatic maintenence issue.
Thanks,
bloopie
Hello There is the log file, i don't see any speed change
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-02-2015
Ran by ihsan (administrator) on IHOCAN on 10-02-2015 01:48:43
Running from C:\Users\ihsan\Desktop
Loaded Profiles: ihsan & MsDtsServer110 & MSSQLServerOLAPService & ReportServer & MSSQLFDLauncher & MSSQLSERVER (Available profiles: ihsan & MsDtsServer110 & MSSQLServerOLAPService & ReportServer & MSSQLFDLauncher & MSSQLSERVER)
Platform: Windows 8.1 Pro (X64) OS Language: Türkçe (Türkiye)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Internet Security\a2service.exe
() C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTDevMgr.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Micro-Star International Co., Ltd.) C:\Program Files (x86)\SCM\MSIService.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\110\DTS\Binn\MsDtsSrvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSAS11.MSSQLSERVER\OLAP\bin\msmdsrv.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect 2\creator-ws.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSRS11.MSSQLSERVER\Reporting Services\ReportServer\bin\ReportingServicesService.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Windows\System32\vmms.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\fdlauncher.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\fdhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTServer.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(MSI) C:\Program Files (x86)\SCM\Radio Manager.exe
(MSI) C:\Program Files (x86)\SCM\SCM.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VsHub\1.0.0.0\VsHub.exe
(Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Internet Security\a2guard.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe
(Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [BtServer] => C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [253952 2013-05-07] (Realtek Semiconductor Corporation)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2893104 2013-08-23] (ELAN Microelectronics Corp.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [320360 2014-08-04] (Intel Corporation)
HKLM\...\Run: [Radio Manager] => C:\Program Files (x86)\SCM\Radio Manager.exe [406920 2013-09-26] (MSI)
HKLM\...\Run: [SCM] => C:\Program Files (x86)\SCM\SCM.exe [408232 2013-09-26] (MSI)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2531472 2014-12-13] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13636824 2013-07-26] (Realtek Semiconductor)
HKLM\...\Run: [MBCfg64] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\MBCfg64.dll,RunDLLEntry MBCfg64
HKLM-x32\...\Run: [Sound Blaster Cinema] => C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe [711680 2012-11-29] (Creative Technology Ltd)
HKLM-x32\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\isuspm.exe [2068856 2011-10-12] (Flexera Software LLC.)
HKLM-x32\...\Run: [OmniPage Preload] => C:\Program Files (x86)\Nuance\OmniPage19\OmniPage19.exe [2922824 2013-04-22] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [Nuance OmniPage Ultimate-reminder] => C:\Program Files (x86)\Nuance\OmniPage19\Ereg\Ereg.exe [334152 2013-01-14] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [VsHub.exe] => C:\Program Files (x86)\Common Files\Microsoft Shared\VsHub\1.0.0.0\vshub.exe [141440 2014-11-10] (Microsoft Corporation)
HKLM-x32\...\Run: [emsisoft anti-malware] => c:\program files (x86)\emsisoft internet security\a2guard.exe [4997872 2014-12-31] (Emsisoft GmbH)
HKU\S-1-5-21-3051402733-4133393625-984315149-1001\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\isuspm.exe [2068856 2011-10-12] (Flexera Software LLC.)
HKU\S-1-5-21-3051402733-4133393625-984315149-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7404312 2015-01-20] (Piriform Ltd)
HKU\S-1-5-21-3051402733-4133393625-984315149-1001\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [3878480 2014-09-03] (Tonec Inc.)
HKU\S-1-5-21-3051402733-4133393625-984315149-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [174856 2014-11-04] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [156840 2014-11-04] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll (Tonec Inc.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
URLSearchHook: [S-1-5-80-1770670200-1234090253-3451813168-4041049723-2370973757] ATTENTION ==> Default URLSearchHook is missing.
URLSearchHook: [S-1-5-80-2872255330-672591203-888807865-2791174282-1554802921] ATTENTION ==> Default URLSearchHook is missing.
URLSearchHook: [S-1-5-80-2885764129-887777008-271615777-1616004480-2722851051] ATTENTION ==> Default URLSearchHook is missing.
URLSearchHook: [S-1-5-80-3263513310-3392720605-1798839546-683002060-3227631582] ATTENTION ==> Default URLSearchHook is missing.
URLSearchHook: [S-1-5-80-3880718306-3832830129-1677859214-2598158968-1052248003] ATTENTION ==> Default URLSearchHook is missing.
SearchScopes: HKU\S-1-5-80-3880718306-3832830129-1677859214-2598158968-1052248003 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: PDF Architect Helper -> {691B33B0-B86E-47F3-81C7-56E4FE3B929C} -> C:\Program Files (x86)\PDF Architect 2\creator-ie-helper.dll (pdfforge GmbH)
BHO-x32: Microsoft Web Test Recorder 10.0 Helper -> {876d9f09-c6d6-4324-a2cc-04dd9a4de12f} -> C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft Web Test Recorder 14.0 Helper -> {b924f0b4-0b3c-49c0-bab2-213fb9ebd1d3} -> C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
Toolbar: HKLM-x32 - PDF Architect Toolbar - {DEEB13D7-CEA9-45FB-B77C-E039BEC85221} - C:\Program Files (x86)\PDF Architect 2\creator-ie-plugin.dll (pdfforge GmbH)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 0.0.0.0
FireFox:
========
FF ProfilePath: C:\Users\ihsan\AppData\Roaming\Mozilla\Firefox\Profiles\kg35b0ue.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~4\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin-x32: @huawei.com/npHWPlugin -> C:\Program Files (x86)\Web_TV\WebTVPlugin\npHWPlugin.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll (pdfforge GmbH)
FF Plugin HKU\S-1-5-21-3051402733-4133393625-984315149-1001: @acestream.net/acestreamplugin,version=3.0.5 -> C:\Users\ihsan\AppData\Roaming\ACEStream\player\npace_plugin.dll (Innovative Digital Technologies)
FF Plugin HKU\S-1-5-21-3051402733-4133393625-984315149-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\ihsan\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-3051402733-4133393625-984315149-1001: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yandex-tr.xml
FF Extension: AS Magic Player - C:\Users\ihsan\AppData\Roaming\Mozilla\Firefox\Profiles\kg35b0ue.default\Extensions\[email protected] [2015-01-08]
FF Extension: User Agent Switcher - C:\Users\ihsan\AppData\Roaming\Mozilla\Firefox\Profiles\kg35b0ue.default\Extensions\{e968fc70-8f95-4ab9-9e79-304de2a71ee1}.xpi [2015-01-15]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension
FF Extension: PDF Architect 2 Creator - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension [2014-10-18]
FF HKU\S-1-5-21-3051402733-4133393625-984315149-1001\...\Firefox\Extensions: [[email protected]] - C:\Users\ihsan\AppData\Roaming\IDM\idmmzcc5
FF Extension: IDM CC - C:\Users\ihsan\AppData\Roaming\IDM\idmmzcc5 [2014-09-28]
FF HKU\S-1-5-21-3051402733-4133393625-984315149-1001\...\SeaMonkey\Extensions: [[email protected]] - C:\Users\ihsan\AppData\Roaming\IDM\idmmzcc5
Chrome:
=======
CHR HomePage: Default -> hxxp://klit.startnow.com/?src=startpage&provider=&provider_name=yahoo&provider_code=&partner_id=693&product_id=741&affiliate_id=&channel=&toolbar_id=200&toolbar_version=2.4.0&install_country=US&install_date=20120929&user_guid=3220074E5BF444FFABB0303EA47C4FB8&machine_id=67326ca3ae2301667ef9afd37f603db0&browser=CR&os=win&os_version=6.1-x86-SP0
CHR StartupUrls: Default -> "https://www.google.com.tr/"
CHR DefaultSearchKeyword: Default -> google.com.trhttps://www.google.c...eferences?hl=tr
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\ihsan\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (From Dust) - C:\Users\ihsan\AppData\Local\Google\Chrome\User Data\Default\Extensions\anelkojiepicmcldgnmkplocifmegpfj [2014-12-28]
CHR Extension: (Google Drive) - C:\Users\ihsan\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-12-28]
CHR Extension: (Manga Viewer) - C:\Users\ihsan\AppData\Local\Google\Chrome\User Data\Default\Extensions\bebalkdfejapnfbngpmhchkboajaofen [2014-12-28]
CHR Extension: (Adguard AdBlocker) - C:\Users\ihsan\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg [2014-12-29]
CHR Extension: (MEGA) - C:\Users\ihsan\AppData\Local\Google\Chrome\User Data\Default\Extensions\bigefpfhnfcobdlfbedofhhaibnlghod [2014-12-28]
CHR Extension: (Adblock Plus) - C:\Users\ihsan\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-12-28]
CHR Extension: (Pushbullet) - C:\Users\ihsan\AppData\Local\Google\Chrome\User Data\Default\Extensions\chlffgpmiacpedhhbkiomidkjlcfhogd [2015-01-10]
CHR Extension: (Google Apps Script) - C:\Users\ihsan\AppData\Local\Google\Chrome\User Data\Default\Extensions\eoieeedlomnegifmaghhjnghhmcldobl [2014-12-28]
CHR Extension: (+ Flip It) - C:\Users\ihsan\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbmppankahdodchhioklnbcmohehhjoa [2014-12-28]
CHR Extension: (ZenMate Security & Privacy VPN) - C:\Users\ihsan\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdcgdnkidjaadafnichfpabhfomcebme [2014-12-28]
CHR Extension: (Office Belgeleri Düzenleme) - C:\Users\ihsan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbkeegbaiigmenfmjfclcdgdpimamgkj [2014-12-28]
CHR Extension: (Quick Javascript Switcher) - C:\Users\ihsan\AppData\Local\Google\Chrome\User Data\Default\Extensions\geddoclleiomckbhadiaipdggiiccfje [2014-12-28]
CHR Extension: (Orta Dünya'da Bir Yolculuk) - C:\Users\ihsan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjgkjeheegjnnmheaflhdocglkiegoni [2014-12-28]
CHR Extension: (360 İnternet Koruması) - C:\Users\ihsan\AppData\Local\Google\Chrome\User Data\Default\Extensions\glcimepnljoholdmjchkloafkggfoijh [2014-12-28]
CHR Extension: (Bookmark Manager) - C:\Users\ihsan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2014-12-29]
CHR Extension: (Tureng Dictionary) - C:\Users\ihsan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihedienojfhdahpomfldoejaimefofff [2014-12-28]
CHR Extension: (Streamus™) - C:\Users\ihsan\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbnkffmindojffecdhbbmekbmkkfpmjd [2014-12-28]
CHR Extension: (IDM Integration Module) - C:\Users\ihsan\AppData\Local\Google\Chrome\User Data\Default\Extensions\jeaohhlajejodfjadcponpnjgkiikocn [2014-12-28]
CHR Extension: (Chrome extension source viewer) - C:\Users\ihsan\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifpbeccnghkjeaalbbjmodiffmgedin [2014-12-28]
CHR Extension: (Google Inbox Checker (Inbox by Gmail)) - C:\Users\ihsan\AppData\Local\Google\Chrome\User Data\Default\Extensions\llldafpkkdiljghncbdnkgfinfiifnig [2014-12-28]
CHR Extension: (Google Mail Checker) - C:\Users\ihsan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2014-12-28]
CHR Extension: (Google Cüzdan) - C:\Users\ihsan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-12-28]
CHR Extension: (Chrome Apps & Extensions Developer Tool) - C:\Users\ihsan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohmmkhmmmpcnpikjeljgnaoabkaalbgc [2014-12-28]
CHR Extension: (Gmail) - C:\Users\ihsan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-12-28]
CHR Extension: (Chrome Dev Editor (developer preview)) - C:\Users\ihsan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnoffddplpippgcfjdhbmhkofpnaalpg [2014-12-28]
CHR HKLM\...\Chrome\Extension: [jeaohhlajejodfjadcponpnjgkiikocn] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2014-09-12]
CHR HKLM-x32\...\Chrome\Extension: [jeaohhlajejodfjadcponpnjgkiikocn] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2014-09-12]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 a2AntiMalware; C:\Program Files (x86)\Emsisoft Internet Security\a2service.exe [4920104 2014-12-31] (Emsisoft GmbH)
R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [56832 2013-08-28] () [File not signed]
S3 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
S3 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
S3 c2wts; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [5632 2014-12-23] (Microsoft Corporation)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [174624 2015-01-19] (EasyAntiCheat Ltd)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [99632 2013-08-23] (ELAN Microelectronics Corp.)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2014-02-20] (Microsoft Corporation) [File not signed]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148560 2014-12-13] (NVIDIA Corporation)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-08-04] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282096 2014-03-12] (Intel Corporation)
R2 Intel® Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel® Corporation) [File not signed]
S3 Intel® Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel® Corporation)
R2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [22744 2014-10-15] (Microsoft Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [169432 2013-08-08] (Intel Corporation)
R2 Micro Star SCM; C:\Program Files (x86)\SCM\MSIService.exe [160768 2013-09-26] (Micro-Star International Co., Ltd.) [File not signed]
R2 MsDtsServer110; C:\Program Files\Microsoft SQL Server\110\DTS\Binn\MsDtsSrvr.exe [218200 2012-02-11] (Microsoft Corporation)
R3 MSSQLFDLauncher; C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\fdlauncher.exe [49752 2012-02-11] (Microsoft Corporation)
R2 MSSQLSERVER; C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\sqlservr.exe [191064 2012-02-11] (Microsoft Corporation)
R2 MSSQLServerOLAPService; C:\Program Files\Microsoft SQL Server\MSAS11.MSSQLSERVER\OLAP\bin\msmdsrv.exe [61538904 2012-02-11] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1701520 2014-12-13] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19823248 2014-12-13] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910128 2015-01-28] (Electronic Arts)
S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-10-10] (pdfforge GmbH)
R2 PDF Architect 2 Creator; C:\Program Files (x86)\PDF Architect 2\creator-ws.exe [738856 2014-10-10] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-10-10] (pdfforge GmbH)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-11-16] ()
R2 ReportServer; C:\Program Files\Microsoft SQL Server\MSRS11.MSSQLSERVER\Reporting Services\ReportServer\bin\ReportingServicesService.exe [2348632 2012-02-11] (Microsoft Corporation)
S3 SQL Server Distributed Replay Client; C:\Program Files (x86)\Microsoft SQL Server\110\Tools\DReplayClient\DReplayClient.exe [137304 2012-02-11] (Microsoft Corporation)
S3 SQL Server Distributed Replay Controller; C:\Program Files (x86)\Microsoft SQL Server\110\Tools\DReplayController\DReplayController.exe [342104 2012-02-11] (Microsoft Corporation)
S3 SQLSERVERAGENT; C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE [597080 2012-02-11] (Microsoft Corporation)
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation) [File not signed]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5426448 2014-12-15] (TeamViewer GmbH)
R2 vmms; C:\Windows\system32\vmms.exe [13401600 2014-12-23] (Microsoft Corporation)
S3 VsEtwService140; C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\Packages\Debugger\Services\VsEtwService.exe [89240 2014-11-10] (Microsoft Corporation)
S3 VSStandardCollectorService140; C:\Program Files (x86)\Microsoft Visual Studio 14.0\Team Tools\DiagnosticsHub\Collector\StandardCollector.Service.exe [147664 2014-11-10] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 a2acc; C:\PROGRAM FILES (X86)\EMSISOFT INTERNET SECURITY\a2accx64.sys [71472 2014-05-12] (Emsisoft GmbH)
R1 A2DDA; C:\Program Files (x86)\Emsisoft Internet Security\a2ddax64.sys [26176 2013-03-28] (Emsisoft GmbH)
R1 a2injectiondriver; C:\Program Files (x86)\Emsisoft Internet Security\a2dix64.sys [45208 2013-09-30] (Emsisoft GmbH)
R1 a2util; C:\Program Files (x86)\Emsisoft Internet Security\a2util64.sys [23088 2014-05-12] (Emsisoft GmbH)
S3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R3 cleanhlp; C:\Program Files (x86)\Emsisoft Internet Security\cleanhlp64.sys [57024 2013-12-04] (Emsisoft GmbH)
S3 DIRECTIO; C:\Program Files\PerformanceTest\DirectIo64.sys [31160 2014-04-24] ()
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-10-30] (Disc Soft Ltd)
R3 fwndis; C:\Windows\system32\DRIVERS\fwndis64.sys [491632 2015-01-01] ()
R1 fwwfp; C:\Program Files (x86)\Emsisoft Internet Security\fwwfp764.sys [414936 2015-01-01] ()
S3 hid7906; C:\Windows\SysWOW64\drivers\hid7906.sys [34963 2007-12-12] (Compuware Corporation) [File not signed]
S3 hid8101; C:\Windows\SysWOW64\drivers\hid8101.sys [37024 2007-12-03] (Compuware Corporation) [File not signed]
S3 hid8103; C:\Windows\SysWOW64\drivers\hid8103.sys [34587 2007-11-28] (Compuware Corporation) [File not signed]
R1 hvservice; C:\Windows\System32\drivers\hvservice.sys [68960 2014-12-23] (Microsoft Corporation)
S3 lunparser; C:\Windows\System32\drivers\lunparser.sys [19456 2014-12-23] (Microsoft Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-08-08] (Intel Corporation)
S3 NPF; C:\Windows\System32\drivers\NPF.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2014-12-13] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
S3 passthruparser; C:\Windows\System32\drivers\passthruparser.sys [22016 2014-12-23] (Microsoft Corporation)
S3 pvhdparser; C:\Windows\System32\drivers\pvhdparser.sys [27136 2014-12-23] (Microsoft Corporation)
S4 RsFx0200; C:\Windows\System32\DRIVERS\RsFx0200.sys [334936 2012-02-11] (Microsoft Corporation)
R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [547032 2013-07-04] (Realtek Semiconductor Corporation)
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [2944216 2013-08-21] (Realtek Semiconductor Corporation )
R3 SensorsSimulatorDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [227840 2014-05-31] (Microsoft Corporation)
S3 vhdparser; C:\Windows\System32\drivers\vhdparser.sys [18944 2014-12-23] (Microsoft Corporation)
R3 VMSMP; C:\Windows\system32\DRIVERS\vmswitch.sys [690688 2014-08-26] (Microsoft Corporation)
S3 VMSP; C:\Windows\system32\DRIVERS\vmswitch.sys [690688 2014-08-26] (Microsoft Corporation)
S3 VMSVSF; C:\Windows\system32\DRIVERS\vmswitch.sys [690688 2014-08-26] (Microsoft Corporation)
S3 VMSVSP; C:\Windows\system32\DRIVERS\vmswitch.sys [690688 2014-08-26] (Microsoft Corporation)
S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-13] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
S1 BAPIDRV; system32\DRIVERS\BAPIDRV64.sys [X]
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-02-10 01:48 - 2015-02-10 01:49 - 00031427 _____ () C:\Users\ihsan\Desktop\FRST.txt
2015-02-09 02:03 - 2015-02-09 02:05 - 00001588 _____ () C:\Users\ihsan\Desktop\green43.txt
2015-02-09 00:35 - 2015-02-09 03:09 - 00000264 _____ () C:\Users\ihsan\Desktop\cevirikelmeler.txt
2015-02-09 00:18 - 2015-02-09 00:18 - 06999120 _____ (Microsoft Corporation) C:\Users\ihsan\Downloads\proofingtools_tr-tr-x64.exe
2015-02-09 00:18 - 2015-02-09 00:18 - 01738608 _____ (Microsoft Corporation) C:\Users\ihsan\Downloads\screentiplanguage_tr-tr_64bit.exe
2015-02-08 14:16 - 2015-02-08 14:16 - 00000000 ____D () C:\Users\ihsan\AppData\Roaming\Superonline
2015-02-08 14:07 - 2015-02-08 14:07 - 00000000 _____ () C:\Users\ihsan\AppData\Local\{F2DF1386-5DA7-4B6C-87BB-7AEDCFAE3D21}
2015-02-08 00:53 - 2015-02-10 01:36 - 00000392 _____ () C:\Windows\Tasks\updater.job
2015-02-08 00:53 - 2015-02-10 01:36 - 00000338 _____ () C:\Windows\Tasks\SuperDestekStartup.job
2015-02-08 00:53 - 2015-02-08 00:53 - 00002588 _____ () C:\Windows\System32\Tasks\updater
2015-02-08 00:53 - 2015-02-08 00:53 - 00002506 _____ () C:\Windows\System32\Tasks\SuperDestekStartup
2015-02-08 00:53 - 2015-02-08 00:53 - 00001189 _____ () C:\Users\Public\Desktop\SüperDestek.lnk
2015-02-08 00:53 - 2015-02-08 00:53 - 00000000 __SHD () C:\Windows\SysWOW64\AI_RecycleBin
2015-02-08 00:53 - 2015-02-08 00:53 - 00000000 ____D () C:\Users\ihsan\.swt
2015-02-08 00:53 - 2015-02-08 00:53 - 00000000 ____D () C:\Users\ihsan\.superonline
2015-02-08 00:53 - 2015-02-08 00:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Superonline
2015-02-08 00:53 - 2015-02-08 00:53 - 00000000 ____D () C:\Program Files (x86)\Superonline
2015-02-08 00:51 - 2015-02-08 00:51 - 40404872 _____ (Superonline) C:\Users\ihsan\Downloads\superdestek.exe
2015-02-08 00:42 - 2015-02-08 00:42 - 00001476 _____ () C:\Users\ihsan\Downloads\SuperDestek_Web_Starter.jnlp
2015-02-07 18:12 - 2015-02-07 19:20 - 00000000 ____D () C:\Users\ihsan\AppData\Roaming\Tropico 4
2015-02-07 18:12 - 2015-02-07 18:12 - 00000000 ____D () C:\Users\ihsan\AppData\Roaming\Kalypso Media
2015-02-07 18:11 - 2015-02-07 18:12 - 00017513 _____ () C:\Windows\DirectX.log
2015-02-06 23:34 - 2015-02-06 23:34 - 00002155 _____ () C:\Users\Public\Desktop\Google Earth Pro.lnk
2015-02-06 23:34 - 2015-02-06 23:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth Pro
2015-02-06 23:32 - 2015-02-10 01:37 - 00001032 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-06 23:32 - 2015-02-10 01:36 - 00001028 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-06 23:31 - 2015-02-06 23:31 - 00880208 _____ (Google Inc.) C:\Users\ihsan\Downloads\GoogleEarthProSetup.exe
2015-02-06 14:06 - 2015-02-06 14:06 - 00000000 ____D () C:\Users\ihsan\AppData\Local\EMU
2015-02-06 14:00 - 2015-02-06 14:00 - 00001428 _____ () C:\Users\Public\Desktop\Life Is Strange.lnk
2015-02-06 14:00 - 2015-02-06 14:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Life Is Strange
2015-02-06 13:58 - 2015-02-06 14:00 - 00000000 ____D () C:\Program Files (x86)\Life Is Strange
2015-02-06 11:27 - 2015-02-06 11:27 - 00042015 _____ () C:\Users\ihsan\Downloads\[kickass.so]life.is.strange.episode.1.flt.torrent
2015-02-06 02:28 - 2015-02-06 02:28 - 00000626 _____ () C:\Users\ihsan\Desktop\JRT.txt
2015-02-06 02:19 - 2015-02-06 02:19 - 01388274 _____ (Thisisu) C:\Users\ihsan\Downloads\JRT.exe
2015-02-06 02:19 - 2015-02-06 02:19 - 01388274 _____ (Thisisu) C:\Users\ihsan\Desktop\JRT.exe
2015-02-06 01:15 - 2015-02-06 01:15 - 00000238 _____ () C:\Users\ihsan\Downloads\h002.txt
2015-02-06 01:07 - 2015-02-06 01:12 - 00000000 ____D () C:\Users\ihsan\Desktop\xx
2015-02-06 01:05 - 2015-02-06 01:10 - 00000000 ____D () C:\Users\ihsan\AppData\Roaming\OmegaT
2015-02-06 01:03 - 2015-02-06 01:03 - 00000991 _____ () C:\Users\Public\Desktop\OmegaT.lnk
2015-02-06 01:03 - 2015-02-06 01:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OmegaT
2015-02-06 01:02 - 2015-02-06 01:03 - 00000000 ____D () C:\Program Files (x86)\OmegaT
2015-02-06 01:00 - 2015-02-06 01:01 - 108248219 _____ (OmegaT ) C:\Users\ihsan\Downloads\OmegaT_3.1.8_Windows.exe
2015-02-05 21:07 - 2015-02-05 21:07 - 00000199 _____ () C:\Users\ihsan\Desktop\Dota 2.url
2015-02-05 18:36 - 2015-02-05 18:36 - 00018944 ___SH () C:\Users\ihsan\Documents\Thumbs.db
2015-02-05 13:57 - 2015-02-05 13:57 - 00000000 ____D () C:\Users\ihsan\AppData\Local\Introversion
2015-02-05 12:36 - 2015-02-05 12:36 - 00019778 _____ () C:\Users\ihsan\Downloads\[kickass.so]prison.architect.alpha.28.windows.viruz.torrent
2015-02-05 11:27 - 2015-02-05 11:27 - 00002273 _____ () C:\Users\ihsan\Downloads\fixlist.txt
2015-02-05 11:26 - 2015-02-10 01:48 - 02132992 _____ (Farbar) C:\Users\ihsan\Desktop\FRST64.exe
2015-02-05 11:26 - 2015-02-10 01:48 - 00000000 ____D () C:\Users\ihsan\Desktop\FRST-OlderVersion
2015-02-04 13:05 - 2015-02-04 13:05 - 00000000 ____D () C:\Users\ihsan\AppData\Roaming\3909
2015-02-04 13:04 - 2015-02-04 13:04 - 00564886 _____ () C:\Users\ihsan\Downloads\tr.zip
2015-02-04 13:03 - 2015-02-04 13:03 - 00001970 _____ () C:\Users\ihsan\Desktop\Papers Please.lnk
2015-02-04 13:03 - 2015-02-04 13:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Papers Please
2015-02-04 13:03 - 2015-02-04 13:03 - 00000000 ____D () C:\Program Files (x86)\Papers Please
2015-02-04 12:07 - 2015-02-04 12:07 - 00000000 ____D () C:\Users\ihsan\AppData\Roaming\Verimatrix
2015-02-04 12:07 - 2015-02-04 12:07 - 00000000 ____D () C:\Users\ihsan\AppData\Roaming\HWPlugin
2015-02-04 12:07 - 2015-02-04 12:07 - 00000000 ____D () C:\Program Files (x86)\Web_TV
2015-02-04 00:50 - 2015-02-04 00:50 - 10598910 _____ () C:\Users\ihsan\Downloads\TYTWOMTYV100.rar
2015-02-04 00:43 - 2015-02-04 00:43 - 00001296 _____ () C:\Users\ihsan\Desktop\This War of Mine.lnk
2015-02-04 00:43 - 2015-02-04 00:43 - 00000000 ____D () C:\Users\ihsan\AppData\Roaming\This War of Mine
2015-02-04 00:43 - 2015-02-04 00:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Mechanics
2015-02-04 00:42 - 2015-02-04 00:42 - 00000000 ____D () C:\Program Files (x86)\R.G. Mechanics
2015-02-04 00:41 - 2014-12-12 11:10 - 00023752 _____ (360安全中心) C:\Windows\SysWOW64\Drivers\efimon.sys
2015-02-04 00:28 - 2015-02-04 00:28 - 02194432 _____ () C:\Users\ihsan\Downloads\adwcleaner_4.109.exe
2015-02-02 21:59 - 2015-02-02 21:59 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-02-02 15:00 - 2015-02-02 15:00 - 27111830 _____ (Insecure.org) C:\Users\ihsan\Downloads\nmap-6.47-setup.exe
2015-02-02 01:10 - 2015-02-02 01:10 - 00052048 _____ () C:\Users\ihsan\Downloads\Addition.txt
2015-02-01 23:43 - 2015-02-02 01:11 - 00059697 _____ () C:\Users\ihsan\Downloads\FRST.txt
2015-02-01 23:42 - 2015-02-10 01:48 - 00000000 ____D () C:\FRST
2015-02-01 23:41 - 2015-02-01 23:41 - 02131456 _____ (Farbar) C:\Users\ihsan\Downloads\FRST64.exe
2015-02-01 23:08 - 2015-02-01 23:14 - 00205616 _____ () C:\Users\ihsan\Desktop\Extras.Txt
2015-02-01 23:07 - 2015-02-01 23:13 - 00185112 _____ () C:\Users\ihsan\Desktop\OTL.Txt
2015-02-01 22:55 - 2015-02-01 22:55 - 00602112 _____ (OldTimer Tools) C:\Users\ihsan\Downloads\OTL.exe
2015-02-01 22:55 - 2015-02-01 22:55 - 00602112 _____ (OldTimer Tools) C:\Users\ihsan\Desktop\OTL.exe
2015-02-01 22:51 - 2015-02-01 22:51 - 00468480 _____ () C:\Users\ihsan\Downloads\CKScanner.exe
2015-02-01 20:43 - 2015-02-01 20:43 - 05661717 _____ () C:\Users\ihsan\Downloads\chipset_intel_9.4.0.1026_0xb351380a_818700.zip
2015-02-01 20:43 - 2015-02-01 20:43 - 05661717 _____ () C:\Users\ihsan\Downloads\chipset_intel_9.4.0.1026_0xb351380a_818700 (2).zip
2015-02-01 20:43 - 2015-02-01 20:43 - 05661717 _____ () C:\Users\ihsan\Downloads\chipset_intel_9.4.0.1026_0xb351380a_818700 (1).zip
2015-02-01 20:28 - 2015-02-01 20:36 - 00013721 _____ () C:\Users\ihsan\Downloads\hijackthis.log
2015-02-01 20:27 - 2015-02-01 20:27 - 00388608 _____ (Trend Micro Inc.) C:\Users\ihsan\Downloads\HijackThis.exe
2015-01-31 09:00 - 2015-01-31 09:00 - 00030289 _____ () C:\Users\ihsan\Downloads\(336817)Edge_of_Tomorrow_23.976fps_1CD_Turkce_SubRip_DiVXPlanet.rar
2015-01-31 08:56 - 2015-01-31 08:56 - 00031049 _____ () C:\Users\ihsan\Downloads\(336078)Edge_of_Tomorrow_23.976fps_1CD_Turkce_SubRip_DiVXPlanet.rar
2015-01-31 08:42 - 2015-01-31 08:42 - 00034598 _____ () C:\Users\ihsan\Downloads\(328659)Noah_23.976fps_1CD_Turkce_SubRip_DiVXPlanet.rar
2015-01-31 04:30 - 2015-01-31 10:38 - 00000000 ____D () C:\OutputFolder
2015-01-31 04:27 - 2015-01-31 04:29 - 00000000 ____D () C:\Program Files (x86)\Allok Video Converter
2015-01-31 04:27 - 2015-01-31 04:27 - 00001085 _____ () C:\Users\Public\Desktop\Allok Video Converter.lnk
2015-01-31 04:27 - 2015-01-31 04:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Allok Video Converter
2015-01-31 04:27 - 2007-04-12 14:19 - 00129024 _____ () C:\Windows\SysWOW64\AVERM.dll
2015-01-31 04:27 - 2006-09-26 13:57 - 00028672 _____ () C:\Windows\SysWOW64\AVEQT.dll
2015-01-31 04:20 - 2015-01-31 04:20 - 00219648 _____ () C:\Users\ihsan\Downloads\scheduling-05.ppt
2015-01-31 04:00 - 2015-01-31 04:00 - 04882432 _____ () C:\Users\ihsan\Downloads\ch7.ppt
2015-01-31 03:59 - 2015-01-31 03:59 - 03999232 _____ () C:\Users\ihsan\Downloads\ch6.ppt
2015-01-31 03:38 - 2015-01-31 03:38 - 00038632 _____ () C:\Users\ihsan\Downloads\(324302)RoboCop_23.976fps_1CD_Turkce_SubRip_DiVXPlanet.rar
2015-01-31 00:59 - 2015-01-31 01:00 - 00424448 _____ () C:\Users\ihsan\Downloads\csc4320 Chapter 5-2.ppt
2015-01-31 00:48 - 2015-01-31 03:25 - 00000000 ____D () C:\Users\ihsan\Documents\Freemake
2015-01-31 00:48 - 2015-01-31 03:25 - 00000000 ____D () C:\ProgramData\Freemake
2015-01-31 00:48 - 2015-01-31 00:48 - 00001336 _____ () C:\Users\Public\Desktop\Freemake Video Converter.lnk
2015-01-31 00:48 - 2015-01-31 00:48 - 00000000 ____D () C:\Users\ihsan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2015-01-31 00:48 - 2015-01-31 00:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemake
2015-01-31 00:46 - 2015-01-31 00:48 - 00000000 ____D () C:\Program Files (x86)\Freemake
2015-01-31 00:14 - 2015-01-31 00:15 - 01270544 _____ (Ellora Assets Corporation ) C:\Users\ihsan\Downloads\FreemakeVideoConverterSetup.exe
2015-01-31 00:13 - 2015-01-31 00:13 - 00008844 _____ () C:\Users\ihsan\Downloads\Edge_of_Tomorrow_2014_720p.torrent
2015-01-31 00:08 - 2015-01-31 00:08 - 00010011 _____ () C:\Users\ihsan\Downloads\Noah_2014_720p.torrent
2015-01-31 00:08 - 2015-01-31 00:08 - 00009367 _____ () C:\Users\ihsan\Downloads\RoboCop_2014_720p.torrent
2015-01-30 21:50 - 2015-01-30 21:51 - 00850432 _____ () C:\Users\ihsan\Downloads\Scheduling.ppt
2015-01-30 05:07 - 2015-01-30 05:07 - 00000000 ____D () C:\Users\ihsan\Downloads\Video
2015-01-30 04:39 - 2015-02-10 01:37 - 01556924 _____ () C:\Windows\WindowsUpdate.log
2015-01-30 04:37 - 2015-02-10 01:35 - 00004004 _____ () C:\Windows\setupact.log
2015-01-30 04:37 - 2015-01-30 04:37 - 00000000 _____ () C:\Windows\setuperr.log
2015-01-30 04:36 - 2015-02-07 02:16 - 00005140 _____ () C:\Windows\PFRO.log
2015-01-30 04:34 - 2015-01-30 04:34 - 00000000 ____D () C:\ProgramData\Emsisoft
2015-01-30 04:10 - 2015-02-09 18:52 - 00117248 ___SH () C:\Users\ihsan\Desktop\Thumbs.db
2015-01-30 04:10 - 2015-01-30 04:10 - 00001138 _____ () C:\Users\Public\Desktop\Emsisoft Internet Security.lnk
2015-01-30 04:10 - 2015-01-30 04:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Internet Security
2015-01-30 04:09 - 2015-02-10 01:48 - 00000000 ____D () C:\Program Files (x86)\Emsisoft Internet Security
2015-01-30 04:09 - 2015-01-01 21:36 - 00491632 _____ () C:\Windows\system32\Drivers\fwndis64.sys
2015-01-30 03:30 - 2015-01-30 03:45 - 00000000 ____D () C:\Users\ihsan\AppData\Roaming\Wise Registry Cleaner
2015-01-30 03:29 - 2011-07-31 15:14 - 00076565 _____ (RaProducts.org) C:\Users\ihsan\Desktop\PureRa.exe
2015-01-30 03:25 - 2015-02-06 02:42 - 00000878 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2015-01-30 03:25 - 2015-01-30 03:25 - 00002772 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2015-01-30 03:25 - 2015-01-30 03:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-01-30 03:25 - 2015-01-30 03:25 - 00000000 ____D () C:\Program Files\CCleaner
2015-01-30 03:05 - 2015-01-30 03:05 - 00000196 _____ () C:\Users\ihsan\Desktop\ksifre.rar
2015-01-30 03:02 - 2015-01-30 03:11 - 00000000 ____D () C:\Users\ihsan\Desktop\hellsing altyazı
2015-01-30 02:33 - 2015-01-30 02:33 - 00000000 ____D () C:\Users\ihsan\AppData\Local\VS Revo Group
2015-01-30 02:32 - 2015-01-30 02:32 - 00000000 ____D () C:\ProgramData\VS Revo Group
2015-01-30 02:32 - 2015-01-30 02:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2015-01-30 02:32 - 2015-01-30 02:32 - 00000000 ____D () C:\Program Files\VS Revo Group
2015-01-30 02:32 - 2009-12-30 10:21 - 00031800 _____ (VS Revo Group) C:\Windows\system32\Drivers\revoflt.sys
2015-01-29 00:46 - 2015-01-29 05:20 - 00000000 ____D () C:\Users\ihsan\Documents\GenTool
2015-01-28 22:53 - 2015-01-29 03:11 - 00000000 ____D () C:\Users\ihsan\Documents\Command and Conquer Generals Zero Hour Data
2015-01-28 22:53 - 2015-01-29 03:11 - 00000000 ____D () C:\Users\ihsan\Documents\Command and Conquer Generals Data
2015-01-28 22:53 - 2015-01-28 22:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Command and Conquer Generals and Zero Hour
2015-01-26 02:10 - 2015-01-26 02:10 - 00000000 ____D () C:\data_from_forms
2015-01-26 02:09 - 2015-01-26 02:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ETS
2015-01-26 02:09 - 2015-01-26 02:09 - 00000000 ____D () C:\Program Files (x86)\ETS
2015-01-26 02:06 - 2015-01-26 02:06 - 00000000 ____D () C:\Users\ihsan\AppData\Local\Downloaded Installations
2015-01-20 02:29 - 2015-01-20 02:30 - 00000000 ____D () C:\Users\ihsan\AppData\Local\Sublight
2015-01-20 02:29 - 2015-01-20 02:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sublight
2015-01-20 02:29 - 2015-01-20 02:29 - 00000000 ____D () C:\Program Files\Sublight
2015-01-19 14:52 - 2015-01-19 02:17 - 00174624 _____ (EasyAntiCheat Ltd) C:\Windows\SysWOW64\EasyAntiCheat.exe
2015-01-19 01:57 - 2014-11-22 12:46 - 00038032 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2015-01-19 01:57 - 2014-11-22 12:46 - 00032400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2015-01-19 00:42 - 2015-01-19 00:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Command and Conquer Red Alert 2
2015-01-18 23:21 - 2015-01-28 22:51 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2015-01-18 23:04 - 2015-01-28 22:46 - 00000000 ____D () C:\Users\ihsan\AppData\Roaming\Origin
2015-01-18 23:04 - 2015-01-18 23:28 - 00000000 ____D () C:\Users\ihsan\AppData\Local\Origin
2015-01-18 17:50 - 2015-01-20 02:40 - 00121105 _____ () C:\Users\ihsan\Desktop\pk altyazı.srt
2015-01-18 17:36 - 2015-01-18 17:36 - 00000000 ____D () C:\Users\ihsan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\URUSoft
2015-01-18 17:36 - 2015-01-18 17:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\URUSoft
2015-01-18 17:36 - 2015-01-18 17:36 - 00000000 ____D () C:\Program Files (x86)\URUSoft
2015-01-18 14:55 - 2013-07-09 07:58 - 00263896 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RtsUStor.sys
2015-01-18 14:55 - 2013-04-25 12:12 - 09889352 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RtsUStoricon.dll
2015-01-16 00:10 - 2015-01-30 03:30 - 00000000 ____D () C:\Users\ihsan\Desktop\işletimsistemleri
2015-01-14 17:16 - 2014-12-19 08:26 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-01-14 17:16 - 2014-12-12 04:04 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-01-14 17:16 - 2014-12-12 02:51 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ahcache.sys
2015-01-14 17:16 - 2014-12-09 03:50 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-01-14 17:16 - 2014-12-08 21:42 - 00535640 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2015-01-14 17:16 - 2014-12-08 21:42 - 00531616 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2015-01-14 17:16 - 2014-12-08 21:42 - 00448792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2015-01-14 17:16 - 2014-12-08 21:42 - 00413248 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2015-01-14 17:16 - 2014-12-08 21:42 - 00372408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
2015-01-14 17:16 - 2014-12-08 21:42 - 00108944 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-01-14 17:16 - 2014-12-08 21:42 - 00038264 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe
2015-01-14 17:16 - 2014-12-08 21:42 - 00033584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe
2015-01-14 17:16 - 2014-12-06 05:17 - 00360448 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2015-01-14 17:16 - 2014-12-06 03:41 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-01-14 17:16 - 2014-12-06 03:35 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2015-01-14 17:16 - 2014-10-29 06:00 - 00465320 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2015-01-14 17:16 - 2014-10-29 06:00 - 00139984 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
2015-01-14 17:16 - 2014-10-29 05:52 - 00500016 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-01-14 17:16 - 2014-10-29 05:52 - 00482872 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-01-14 17:16 - 2014-10-29 05:52 - 00394120 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-01-14 17:16 - 2014-10-29 05:52 - 00272248 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2015-01-14 17:16 - 2014-10-29 05:12 - 00413136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2015-01-14 17:16 - 2014-10-29 05:12 - 00136296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
2015-01-14 17:16 - 2014-10-29 05:07 - 00424544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-01-14 17:16 - 2014-10-29 05:07 - 00370424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-01-14 17:16 - 2014-10-29 05:07 - 00344536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2015-01-14 17:16 - 2014-10-29 04:44 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll
2015-01-14 17:16 - 2014-10-29 03:59 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werdiagcontroller.dll
2015-01-14 17:16 - 2014-10-29 03:24 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2015-01-14 17:16 - 2014-10-29 03:02 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-01-14 17:16 - 2014-10-29 03:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2015-01-12 21:40 - 2015-01-12 21:40 - 00000000 ____D () C:\Users\ihsan\Documents\Red Alert 3
2015-01-12 21:34 - 2015-01-12 21:34 - 00000000 ____D () C:\Users\ihsan\AppData\Roaming\Red Alert 3
2015-01-12 18:08 - 2015-01-12 18:08 - 00000000 ____D () C:\Users\ihsan\AppData\Roaming\Aegisub
2015-01-12 09:33 - 2015-01-12 09:39 - 00000000 ____D () C:\Users\ihsan\AppData\Roaming\Dev-Cpp
2015-01-12 09:32 - 2015-01-12 09:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bloodshed Dev-C++
2015-01-12 09:32 - 2015-01-12 09:32 - 00000000 ____D () C:\Dev-Cpp
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-02-10 01:44 - 2014-12-23 16:49 - 27590656 _____ () C:\Windows\system32\vmguest.iso
2015-02-10 01:36 - 2014-09-28 15:06 - 00046575 _____ () C:\Users\ihsan\AppData\Local\BTServer.log
2015-02-10 01:36 - 2014-09-28 12:52 - 00000000 __RDO () C:\Users\ihsan\SkyDrive
2015-02-10 01:34 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-10 01:34 - 2013-08-22 15:25 - 00524288 ___SH () C:\Windows\system32\config\BBI
2015-02-10 01:33 - 2014-12-29 00:49 - 00000000 ____D () C:\Windows\pss
2015-02-10 01:18 - 2015-01-09 13:44 - 00000814 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-10 01:02 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru
2015-02-09 03:15 - 2014-09-28 12:49 - 00000000 ____D () C:\Users\ihsan
2015-02-09 01:09 - 2014-10-17 01:01 - 00000000 ____D () C:\Temp
2015-02-09 00:20 - 2014-12-18 01:59 - 00000000 ____D () C:\Program Files (x86)\MSECache
2015-02-08 16:39 - 2014-09-28 12:55 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3051402733-4133393625-984315149-1001
2015-02-08 14:15 - 2014-11-28 23:06 - 05184552 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-08 14:15 - 2014-10-21 10:04 - 00000000 ____D () C:\Users\ReportServer
2015-02-08 14:15 - 2014-10-21 10:04 - 00000000 ____D () C:\Users\MSSQLServerOLAPService
2015-02-08 14:15 - 2014-10-21 10:03 - 00000000 ____D () C:\Users\MSSQLSERVER
2015-02-08 14:15 - 2014-10-21 10:03 - 00000000 ____D () C:\Users\MSSQLFDLauncher
2015-02-08 14:15 - 2014-10-21 10:03 - 00000000 ____D () C:\Users\MsDtsServer110
2015-02-08 14:11 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\LiveKernelReports
2015-02-07 20:11 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness
2015-02-07 11:54 - 2014-09-28 15:06 - 00000000 ____D () C:\Users\ihsan\Documents\My Bluetooth
2015-02-07 02:22 - 2014-12-23 17:31 - 00007639 _____ () C:\Users\ihsan\AppData\Local\Resmon.ResmonCfg
2015-02-07 02:15 - 2014-09-28 19:59 - 00000000 ____D () C:\Users\ihsan\AppData\Roaming\tixati
2015-02-07 02:15 - 2014-09-28 12:59 - 00000000 ____D () C:\Users\ihsan\AppData\Roaming\DMCache
2015-02-07 01:27 - 2014-11-16 23:41 - 00281688 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2015-02-07 01:27 - 2014-11-16 16:28 - 00281688 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2015-02-06 23:34 - 2014-09-28 12:54 - 00000000 ____D () C:\Program Files (x86)\Google
2015-02-06 23:32 - 2014-09-28 12:54 - 00004004 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-06 23:32 - 2014-09-28 12:54 - 00003768 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-06 14:06 - 2014-09-28 16:34 - 00000000 ____D () C:\Users\ihsan\Documents\My Games
2015-02-05 21:23 - 2014-11-16 16:28 - 00281688 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2015-02-05 21:16 - 2014-09-28 14:38 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-02-05 02:09 - 2015-01-04 15:03 - 00000000 ____D () C:\Users\ihsan\AppData\Roaming\TeamViewer
2015-02-04 21:19 - 2015-01-09 13:44 - 00003702 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-02-04 13:03 - 2014-09-28 16:36 - 00000000 ___HD () C:\Windows\msdownld.tmp
2015-02-04 13:03 - 2014-09-28 16:35 - 00000000 ____D () C:\Windows\SysWOW64\directx
2015-02-04 00:52 - 2014-09-28 21:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oyun Çeviri
2015-02-04 00:34 - 2014-06-26 08:24 - 00000000 ____D () C:\AdwCleaner
2015-02-02 23:49 - 2014-09-28 15:04 - 00000000 ____D () C:\ProgramData\Realtek
2015-02-02 15:13 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\NDF
2015-02-02 15:07 - 2014-12-23 16:32 - 00000000 ____D () C:\Users\ihsan\Documents\Visual Studio 2015
2015-02-02 15:03 - 2014-11-26 12:47 - 00000000 ____D () C:\ProgramData\Origin
2015-02-02 15:02 - 2014-11-26 12:47 - 00000000 ____D () C:\Program Files (x86)\Origin
2015-02-02 15:02 - 2014-10-20 22:03 - 00000000 ____D () C:\Users\ihsan\Desktop\Oyun
2015-02-02 00:56 - 2014-10-21 12:09 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2015-02-02 00:56 - 2014-10-21 12:07 - 00000000 ____D () C:\ProgramData\Adobe
2015-02-02 00:56 - 2014-10-21 12:04 - 00000000 ____D () C:\Program Files\Adobe
2015-02-02 00:56 - 2014-09-28 12:50 - 00000000 ____D () C:\Users\ihsan\AppData\Roaming\Adobe
2015-02-02 00:50 - 2014-10-21 12:13 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe
2015-02-01 23:43 - 2014-09-28 12:52 - 02230282 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-01 23:43 - 2013-08-23 00:53 - 00896376 _____ () C:\Windows\system32\perfh01F.dat
2015-02-01 23:43 - 2013-08-23 00:53 - 00224000 _____ () C:\Windows\system32\perfc01F.dat
2015-01-31 11:40 - 2014-09-28 12:50 - 00000000 ____D () C:\Users\ihsan\AppData\Local\Packages
2015-01-30 17:50 - 2014-09-28 12:59 - 00000000 ____D () C:\Users\ihsan\AppData\Roaming\IDM
2015-01-30 08:38 - 2014-10-20 22:03 - 00000000 ___RD () C:\Users\ihsan\Desktop\program
2015-01-30 03:40 - 2014-10-19 01:46 - 00000000 ____D () C:\Users\ihsan\AppData\Local\0ad
2015-01-30 03:35 - 2014-09-28 20:12 - 00000000 __SHD () C:\ProgramData\360Quarant
2015-01-30 03:35 - 2014-09-11 16:00 - 00000000 __SHD () C:\$360Section
2015-01-30 03:35 - 2014-09-02 12:13 - 00033432 _____ () C:\PureRa.txt
2015-01-30 03:30 - 2014-11-13 21:54 - 00000000 ____D () C:\Users\ihsan\Desktop\Ders Notları
2015-01-30 03:30 - 2014-10-02 20:15 - 00000000 ____D () C:\Users\ihsan\.WebIde80
2015-01-30 03:30 - 2014-09-28 19:39 - 00000000 ___RD () C:\Users\ihsan\Downloads\Microsoft.SkypeApp_kzf8qxf38zg5c!App
2015-01-30 03:30 - 2014-09-28 13:00 - 00000000 ____D () C:\Users\ihsan\Downloads\Compressed
2015-01-30 03:29 - 2014-10-30 20:00 - 00000000 ____D () C:\Users\ihsan\AppData\Roaming\DAEMON Tools Lite
2015-01-30 03:29 - 2014-10-27 00:54 - 00000000 ____D () C:\Users\ihsan\AppData\Roaming\FileZilla
2015-01-30 03:01 - 2014-12-17 20:08 - 00000000 ____D () C:\Users\Public\Documents\DevExpress Demos 14.2
2015-01-30 03:01 - 2014-12-17 20:07 - 00000000 ____D () C:\Program Files (x86)\DevExpress 14.2
2015-01-30 03:00 - 2014-12-17 20:34 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DevExpress 14.2
2015-01-30 02:59 - 2014-10-20 22:03 - 00000000 ____D () C:\Users\ihsan\Desktop\yazlım p
2015-01-30 02:45 - 2014-10-02 16:28 - 00000000 ____D () C:\Users\ihsan\AppData\Roaming\RenPy
2015-01-30 02:39 - 2014-12-04 09:39 - 00000000 ____D () C:\Program Files (x86)\Nuance
2015-01-30 02:24 - 2014-09-28 19:44 - 00000000 ____D () C:\Program Files (x86)\StarCraft II
2015-01-28 23:22 - 2014-09-28 19:36 - 00000000 ____D () C:\Windows\system32\appmgmt
2015-01-28 02:14 - 2014-10-21 10:03 - 00000000 ____D () C:\Users\ihsan\Documents\SQL Server Management Studio
2015-01-27 21:06 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp
2015-01-26 02:10 - 2014-09-28 12:53 - 00000000 ____D () C:\Users\ihsan\AppData\Roaming\Macromedia
2015-01-24 22:20 - 2013-08-22 17:38 - 00714720 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-01-24 22:20 - 2013-08-22 17:38 - 00106976 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-24 00:13 - 2014-10-20 20:53 - 00000000 ____D () C:\Users\ihsan\Documents\Visual Studio 2012
2015-01-23 13:36 - 2014-11-22 15:22 - 00000000 ____D () C:\Users\ihsan\AppData\Roaming\.ACEStream
2015-01-23 13:29 - 2014-11-22 15:22 - 00000000 ___HD () C:\_acestream_cache_
2015-01-21 03:09 - 2014-10-30 21:25 - 00000396 __RSH () C:\ProgramData\ntuser.pol
2015-01-18 14:55 - 2014-09-28 15:20 - 00000000 ____D () C:\Windows\SysWOW64\sda
2015-01-18 14:55 - 2014-09-28 14:38 - 00000000 ____D () C:\Program Files (x86)\Realtek
2015-01-14 21:12 - 2015-01-08 20:32 - 00000000 ____D () C:\Users\ihsan\AppData\Roaming\vlc
2015-01-14 17:29 - 2014-09-28 19:32 - 00000000 ____D () C:\Windows\system32\MRT
2015-01-14 17:21 - 2014-09-28 19:32 - 113365784 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-01-12 21:30 - 2014-09-12 17:38 - 00000000 ____D () C:\Games
2015-01-12 18:08 - 2014-10-21 07:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-01-12 18:08 - 2014-10-21 07:49 - 00000000 ____D () C:\ProgramData\Microsoft Help
==================== Files in the root of some directories =======
2014-11-22 12:42 - 2014-11-22 12:42 - 0000132 _____ () C:\Users\ihsan\AppData\Roaming\Adobe PNG Format CC Prefs
2014-09-28 15:06 - 2015-02-10 01:36 - 0046575 _____ () C:\Users\ihsan\AppData\Local\BTServer.log
2014-11-24 23:55 - 2014-11-25 16:37 - 0000600 _____ () C:\Users\ihsan\AppData\Local\PUTTY.RND
2014-12-23 17:31 - 2015-02-07 02:22 - 0007639 _____ () C:\Users\ihsan\AppData\Local\Resmon.ResmonCfg
2015-02-08 14:07 - 2015-02-08 14:07 - 0000000 _____ () C:\Users\ihsan\AppData\Local\{F2DF1386-5DA7-4B6C-87BB-7AEDCFAE3D21}
Some content of TEMP:
====================
C:\Users\ihsan\AppData\Local\Temp\drm_dyndata_7380014.dll
C:\Users\ihsan\AppData\Local\Temp\drm_dyndata_7410004.dll
C:\Users\ihsan\AppData\Local\Temp\_is806A.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-02-08 16:39
==================== End Of Log ============================
Hello again,
Thanks for the note, and once again I apologize! It is certainly not my intention to make you wait. I promise to be more attentive from here on out!
Okay, let's run these next and let me know how the machine is running after:
Step 1:
We need to run a fix with FRST:
==========
Step 2:
ESET Online Scanner:
Note: You can use either Internet Explorer or Mozilla FireFox for this scan. You will however need to disable your currently installed Anti-Virus, how to do so can be read here.
Vista/Windows 7 users: You will need to right-click on either the IE or FF icon in the Start Menu or Quick Launch Bar on the Taskbar and select Run as Administrator from the context menu.
Note: If using Mozilla Firefox you will need to download esetsmartinstaller_enu.exe when prompted then double click on it to install.
All of the below instructions are compatible with either Internet Explorer or Mozilla FireFox.
Note: Do not forget to re-enable your Anti-Virus application after running the above scan!
==========
In addition to the above logs, let me know how the machine is running now, and also please let me know if the automatic maintenance issue is still occurring!
bloopie
sory for late.
here eset log i forgot uncheck.
Hello again,
You have nothing to be sorry for!
Thankfully, running ESET to remove everything automatically didn't harm your computer. We can take care of any leftovers later on, but let's see if we can get the below issue resolved.
==========
Could you please verify that you completely followed the steps in this link (and you've also read the other link that is present on how to change the automatic maintenance settings)?
After those steps are followed (and you have rebooted the machine), you should not have the automatic maintenance always running.
Please retry the steps in those links, and let me know if that changes anything after you rebooted the machine!
bloopie
Thanks the Maintenance issue is solved.
Edited by ihocan, 15 February 2015 - 06:33 PM.
Hello again,
Glad to hear that, well done!
==========
Okay at this point, is there anything else you'd like to bring to my attention with this computer? If not, then we'll go ahead with the final steps to remove our tools and clean up our mess.
bloopie
0 members, 0 guests, 0 anonymous users
Community Forum Software by IP.Board
Licensed to: Geeks to Go, Inc.