OTL

OTL logfile created on: 13.11.
2010 20:07:11 - Run 2

OTL by OldTimer - Version 3.2.17.3 Folder = C:\Documents and Settings\UĞUR\Des
ktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTW
orkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 0000041F | Country: Türkiye | Language: TRK | Date Format: dd.MM.yyyy
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 61,00% Memor
y free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 84,00% Paging File free
Paging file location(s): c:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Fil
es
Drive C: | 110,98 Gb Total Space | 43,82 Gb Free Space | 39,49% Space Free | Par
tition Type: NTFS
Drive D: | 110,98 Gb Total Space | 2,86 Gb Free Space | 2,58% Space Free | Parti
tion Type: NTFS
Drive E: | 76,13 Gb Total Space | 36,58 Gb Free Space | 48,06% Space Free | Part
ition Type: NTFS
Computer Name: WWW-F3BB5EAC9FE | User Name: UĞUR | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitel
ist: On | File Age = 90 Days
[color=#E56717]========== Processes (All) ==========[/color]
PRC - [2010.11.13 20:05:49 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Docu
ments and Settings\UĞUR\Desktop\OTL.exe
PRC - [2010.11.03 19:12:09 | 000,135,336 | ---- | M] (Avira GmbH) -- C:\Program
Files\Avira\AntiVir Desktop\sched.exe
PRC - [2010.11.03 19:12:08 | 000,281,768 | ---- | M] (Avira GmbH) -- C:\Program
Files\Avira\AntiVir Desktop\avgnt.exe
PRC - [2010.09.15 04:50:54 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) --
C:\Program Files\Java\jre6\bin\jqs.exe
PRC - [2010.08.17 15:17:06 | 000,058,880 | ---- | M] (Microsoft Corporation) --
C:\WINDOWS\system32\spoolsv.exe
PRC - [2010.08.09 00:21:30 | 000,824,224 | ---- | M] (Zbshareware Lab) -- C:\Pro
gram Files\USB Disk Security\USBGuard.exe
PRC - [2010.07.06 17:26:42 | 019,556,968 | ---- | M] (Realtek Semiconductor Corp
.) -- C:\WINDOWS\RTHDCPL.EXE
PRC - [2010.05.14 11:44:46 | 000,248,552 | ---- | M] (Sun Microsystems, Inc.) --
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
PRC - [2009.09.11 07:24:32 | 000,735,960 | ---- | M] (ESET) -- C:\Program Files\
ESET\ESET NOD32 Antivirus\ekrn.exe
PRC - [2009.09.11 07:23:46 | 002,054,360 | ---- | M] (ESET) -- C:\Program Files\
ESET\ESET NOD32 Antivirus\egui.exe
PRC - [2009.08.10 21:21:10 | 000,181,312 | ---- | M] () -- C:\Program Files\Phot
odex\ProShowGold\scsiaccess.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
PRC - [2009.03.05 16:07:20 | 002,260,480 | RHS- | M] (Safer-Networking Ltd.) --
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\smss.exe
C:\WINDOWS\system32\svchost.exe [RPCSS]
C:\WINDOWS\system32\svchost.exe [NETWORKSERVICE]
C:\WINDOWS\system32\svchost.exe [NETSVCS]
C:\WINDOWS\system32\svchost.exe [LOCALSERVICE]
C:\WINDOWS\system32\svchost.exe [LOCALSERVICE]
C:\WINDOWS\system32\svchost.exe [IMGSVC]
C:\WINDOWS\system32\svchost.exe [DCOMLAUNCH]
C:\WINDOWS\system32\svchost.exe [BTHSVCS]
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\alg.exe
PRC - [2007.02.28 13:01:06 | 000,407,408 | ---- | M] (DigitalPeers) -- C:\Progra
m Files\DigitalPeers\CamTrack\camtrack.exe
PRC - [2007.02.12 13:50:40 | 000,020,480 | ---- | M] () -- C:\WINDOWS\FixCamera.
exe
PRC - [2006.11.29 15:11:30 | 000,258,048 | ---- | M] (SONIX) -- C:\WINDOWS\tsnp2
std.exe
PRC - [2006.09.15 12:21:54 | 000,675,840 | ---- | M] (Sonix) -- C:\WINDOWS\vsnp2
std.exe
PRC - [2005.10.11 16:52:28 | 000,233,472 | ---- | M] () -- C:\WINDOWS\system32\d
ns\bin\named.exe
PRC - [2005.08.04 05:02:58 | 000,380,928 | ---- | M] (ATI Technologies Inc.) --
C:\WINDOWS\system32\ati2evxx.exe
PRC - [2005.04.06 15:03:28 | 000,110,592 | ---- | M] () -- C:\Program Files\IVT
Corporation\BlueSoleil\BTNtService.exe
[color=#E56717]========== Modules (All) ==========[/color]

MOD - [2010.11.13 20:05:49 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Docu
ments and Settings\UĞUR\Desktop\OTL.exe
MOD - [2010.08.23 18:12:28 | 001,054,208 | ---- | M] (Microsoft Corporation) --
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.260
0.6028_x-ww_61e65202\comctl32.dll
C:\WINDOWS\system32\rpcrt4.dll
C:\WINDOWS\system32\shell32.dll
C:\WINDOWS\system32\ole32.dll
C:\WINDOWS\system32\usp10.dll
C:\WINDOWS\system32\shlwapi.dll
C:\WINDOWS\system32\secur32.dll
C:\WINDOWS\system32\kernel32.dll
C:\WINDOWS\system32\msctfime.ime
C:\WINDOWS\system32\ntdll.dll
C:\WINDOWS\system32\advapi32.dll
C:\WINDOWS\system32\gdi32.dll
C:\WINDOWS\system32\winspool.drv
C:\WINDOWS\system32\userenv.dll
C:\WINDOWS\system32\user32.dll
C:\WINDOWS\system32\uxtheme.dll
C:\WINDOWS\system32\version.dll
C:\WINDOWS\system32\srclient.dll
C:\WINDOWS\system32\oleaut32.dll
C:\WINDOWS\system32\olepro32.dll
C:\WINDOWS\system32\psapi.dll
C:\WINDOWS\system32\msvcrt.dll
C:\WINDOWS\system32\msctf.dll
C:\WINDOWS\system32\imm32.dll
C:\WINDOWS\system32\lpk.dll
C:\WINDOWS\system32\wbem\framedyn.dll
C:\WINDOWS\system32\comres.dll
C:\WINDOWS\system32\clbcatq.dll
C:\WINDOWS\system32\comdlg32.dll
C:\WINDOWS\system32\apphelp.dll
C:\WINDOWS\system32\msscript.ocx
C:\WINDOWS\system32\setupapi.dll
[color=#E56717]========== Win32 Services (All) ==========[/color]
SRV - [2010.11.03 19:12:09 | 000,135,336 | ---- | M] (Avira GmbH) [Auto | Runnin
g] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerServi
ce)
SRV - [2010.11.03 19:12:08 | 000,267,944 | ---- | M] (Avira GmbH) [Disabled | St
opped] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2010.09.15 04:50:54 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) [A
uto | Running] -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterSer
vice)
SRV - [2010.08.27 07:58:35 | 000,099,840 | ---- | M] (Microsoft Corporation) [Au
to | Running] -- C:\WINDOWS\system32\srvsvc.dll -- (lanmanserver)
to | Running] -- C:\WINDOWS\system32\spoolsv.exe -- (Spooler)
SRV - [2010.01.08 00:51:02 | 000,380,928 | ---- | M] (Spigot, Inc.) [Disabled |
Stopped] -- C:\Program Files\Application Updater\ApplicationUpdater.exe -- (Appl
ication Updater)
SRV - [2009.09.11 07:33:18 | 000,020,680 | ---- | M] (ESET) [On_Demand | Stopped
] -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe -- (EhttpSrv)
SRV - [2009.09.11 07:24:32 | 000,735,960 | ---- | M] (ESET) [Auto | Running] --
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -- (ekrn)
SRV - [2009.08.30 01:06:24 | 000,133,104 | ---- | M] (Google Inc.) [Auto | Stopp
ed] -- C:\Program Files\Google\Update\GoogleUpdate.exe -- (gupdate) Google Updat
e Service (gupdate)
SRV - [2009.08.10 21:21:10 | 000,181,312 | ---- | M] () [Auto | Running] -- C:\P
rogram Files\Photodex\ProShowGold\scsiaccess.exe -- (ScsiAccess)
SRV - [2009.08.09 10:43:35 | 000,072,704 | ---- | M] (Adobe Systems) [On_Demand
| Stopped] -- C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelm
svc.exe -- (Adobe LM Service)
to | Running] -- C:\WINDOWS\system32\wkssvc.dll -- (lanmanworkstation)
to | Running] -- C:\WINDOWS\system32\services.exe -- (PlugPlay)
to | Running] -- C:\WINDOWS\system32\services.exe -- (Eventlog)
SRV - [2009.02.09 12:52:35 | 000,682,496 | ---- | M] (Microsoft Corporation) [On
_Demand | Stopped] -- C:\WINDOWS\system32\advapi32.dll -- (Wmi)
to | Running] -- C:\WINDOWS\system32\rpcss.dll -- (RpcSs) Uzaktan Yordam Çağrısı (RPC)
to | Running] -- C:\WINDOWS\system32\rpcss.dll -- (DcomLaunch)
_Demand | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFo
ntCache.exe -- (FontCache3.0.0.0)
SRV - [2008.07.29 18:24:50 | 000,881,664 | ---- | M] (Microsoft Corporation) [Un
known | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communicatio
n Foundation\infocard.exe -- (idsvc)
SRV - [2008.07.29 18:16:38 | 000,132,096 | ---- | M] (Microsoft Corporation) [Di
sabled | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communicati
on Foundation\SMSvcHost.exe -- (NetTcpPortSharing)
_Demand | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
-- (clr_optimization_v2.0.50727_32)
_Demand | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state
.exe -- (aspnet_state)
_Demand | Running] -- C:\WINDOWS\system32\es.dll -- (EventSystem)
_Demand | Running] -- C:\WINDOWS\system32\mswsock.dll -- (Nla) Ağ Konumu Tanıma (NLA
)
_Demand | Stopped] -- C:\WINDOWS\system32\wbem\wmiapsrv.exe -- (WmiApSrv)
_Demand | Stopped] -- C:\WINDOWS\system32\vssvc.exe -- (VSS)
_Demand | Stopped] -- C:\WINDOWS\system32\tlntsvr.exe -- (TlntSvr)
_Demand | Stopped] -- C:\WINDOWS\system32\ups.exe -- (UPS)
_Demand | Stopped] -- C:\WINDOWS\system32\smlogsvc.exe -- (SysmonLog)
_Demand | Stopped] -- C:\WINDOWS\system32\sessmgr.exe -- (RDSessMgr)
_Demand | Stopped] -- C:\WINDOWS\system32\scardsvr.exe -- (SCardSvr)
sabled | Stopped] -- C:\WINDOWS\system32\netdde.exe -- (NetDDEdsdm)
sabled | Stopped] -- C:\WINDOWS\system32\netdde.exe -- (NetDDE)
_Demand | Stopped] -- C:\WINDOWS\System32\msiexec.exe -- (MSIServer)
_Demand | Stopped] -- C:\WINDOWS\system32\msdtc.exe -- (MSDTC)
_Demand | Stopped] -- C:\WINDOWS\system32\mnmsrvc.exe -- (mnmsrvc)
_Demand | Stopped] -- C:\WINDOWS\system32\locator.exe -- (RpcLocator) Uzaktan Yo
rdam Çağrısı (RPC)
to | Running] -- C:\WINDOWS\system32\lsass.exe -- (SamSs)
to | Running] -- C:\WINDOWS\system32\lsass.exe -- (ProtectedStorage)
to | Running] -- C:\WINDOWS\system32\lsass.exe -- (PolicyAgent)
_Demand | Stopped] -- C:\WINDOWS\system32\lsass.exe -- (NtLmSsp)
_Demand | Stopped] -- C:\WINDOWS\system32\lsass.exe -- (Netlogon)
_Demand | Stopped] -- C:\WINDOWS\system32\imapi.exe -- (ImapiService)
SRV - [2008.04.14 18:00:36 | 000,224,768 | ---- | M] (Microsoft Corp., Veritas S
oftware) [On_Demand | Stopped] -- C:\WINDOWS\System32\dmadmin.exe -- (dmadmin)
_Demand | Stopped] -- C:\WINDOWS\System32\dllhost.exe -- (SwPrv)
_Demand | Stopped] -- C:\WINDOWS\System32\dllhost.exe -- (COMSysApp)
_Demand | Stopped] -- C:\WINDOWS\system32\clipsrv.exe -- (ClipSrv)
_Demand | Stopped] -- C:\WINDOWS\system32\cisvc.exe -- (CiSvc)
to | Running] -- C:\WINDOWS\system32\wzcsvc.dll -- (WZCSVC)
_Demand | Stopped] -- C:\WINDOWS\system32\xmlprov.dll -- (xmlprov)
_Demand | Running] -- C:\WINDOWS\system32\alg.exe -- (ALG)
to | Running] -- C:\WINDOWS\system32\wuauserv.dll -- (wuauserv)
to | Running] -- C:\WINDOWS\system32\wiaservc.dll -- (stisvc) Windows Image Acqu
isition (WIA)
_Demand | Stopped] -- C:\WINDOWS\system32\upnphost.dll -- (upnphost)
to | Running] -- C:\WINDOWS\system32\w32time.dll -- (W32Time)
to | Running] -- C:\WINDOWS\system32\wbem\wmisvc.dll -- (winmgmt)
to | Running] -- C:\WINDOWS\system32\wscsvc.dll -- (wscsvc)
to | Stop_Pending] -- C:\WINDOWS\system32\webclnt.dll -- (WebClient)
_Demand | Stopped] -- C:\WINDOWS\system32\w3ssl.dll -- (HTTPFilter)
_Demand | Running] -- C:\WINDOWS\system32\termsrv.dll -- (TermService)
_Demand | Running] -- C:\WINDOWS\system32\tapisrv.dll -- (TapiSrv)
to | Running] -- C:\WINDOWS\system32\trkwks.dll -- (TrkWks)
_Demand | Running] -- C:\WINDOWS\system32\ssdpsrv.dll -- (SSDPSRV)
to | Running] -- C:\WINDOWS\system32\srsvc.dll -- (srservice)
to | Running] -- C:\WINDOWS\system32\schedsvc.dll -- (Schedule)
to | Running] -- C:\WINDOWS\system32\shsvcs.dll -- (Themes)
to | Running] -- C:\WINDOWS\system32\shsvcs.dll -- (ShellHWDetection)
_Demand | Stopped] -- C:\WINDOWS\system32\shsvcs.dll -- (FastUserSwitchingCompat
ibility)
to | Running] -- C:\WINDOWS\system32\sens.dll -- (SENS)
to | Running] -- C:\WINDOWS\system32\seclogon.dll -- (seclogon)
_Demand | Stopped] -- C:\WINDOWS\system32\ntmssvc.dll -- (NtmsSvc)
to | Running] -- C:\WINDOWS\system32\qmgr.dll -- (BITS)
_Demand | Stopped] -- C:\WINDOWS\system32\qagentrt.dll -- (napagent)
_Demand | Running] -- C:\WINDOWS\system32\netman.dll -- (Netman)
_Demand | Running] -- C:\WINDOWS\system32\rasmans.dll -- (RasMan)
_Demand | Stopped] -- C:\WINDOWS\system32\rasauto.dll -- (RasAuto)
to | Running] -- C:\WINDOWS\system32\regsvc.dll -- (RemoteRegistry)
to | Running] -- C:\WINDOWS\pchealth\helpctr\binaries\pchsvc.dll -- (helpsvc)
sabled | Stopped] -- C:\WINDOWS\system32\msgsvc.dll -- (Messenger)
to | Running] -- C:\WINDOWS\system32\ipnathlp.dll -- (SharedAccess) Windows Güvenl
ik Duvarı/Internet Bağlantı Paylaşımı (ICS)
_Demand | Stopped] -- C:\WINDOWS\system32\kmsvc.dll -- (hkmsvc)
sabled | Stopped] -- C:\WINDOWS\system32\mprdim.dll -- (RemoteAccess)
to | Running] -- C:\WINDOWS\system32\lmhsvc.dll -- (LmHosts)
to | Running] -- C:\WINDOWS\system32\ersvc.dll -- (ERSvc)
to | Running] -- C:\WINDOWS\system32\hidserv.dll -- (HidServ)
_Demand | Stopped] -- C:\WINDOWS\system32\dot3svc.dll -- (Dot3svc)
to | Running] -- C:\WINDOWS\system32\dnsrslvr.dll -- (Dnscache)
_Demand | Stopped] -- C:\WINDOWS\system32\eapsvc.dll -- (EapHost)
to | Running] -- C:\WINDOWS\system32\dhcpcsvc.dll -- (Dhcp)
to | Running] -- C:\WINDOWS\system32\cryptsvc.dll -- (CryptSvc)
SRV - [2008.04.14 18:00:17 | 000,023,040 | ---- | M] (Microsoft Corp.) [Auto | R
unning] -- C:\WINDOWS\system32\dmserver.dll -- (dmserver)
_Demand | Stopped] -- C:\WINDOWS\system32\appmgmts.dll -- (AppMgmt)
to | Stopped] -- C:\WINDOWS\system32\browser.dll -- (Browser)
to | Running] -- C:\WINDOWS\system32\audiosrv.dll -- (AudioSrv)
to | Running] -- C:\WINDOWS\system32\bthserv.dll -- (BthServ)
sabled | Stopped] -- C:\WINDOWS\system32\alrsvc.dll -- (Alerter)
_Demand | Stopped] -- C:\Program Files\Windows Media Player\WMPNetwk.exe -- (WMP
NetworkSvc)
_Demand | Stopped] -- C:\WINDOWS\system32\mspmsnsv.dll -- (WmdmPmSN)
_Demand | Stopped] -- C:\WINDOWS\system32\WudfSvc.dll -- (WudfSvc)
SRV - [2006.06.05 12:59:18 | 000,174,080 | ---- | M] (Nokia.) [On_Demand | Stopp
ed] -- C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe -- (Servi
ceLayer)
SRV - [2005.10.11 16:52:28 | 000,233,472 | ---- | M] () [Auto | Running] -- C:\W
INDOWS\system32\dns\bin\named.exe -- (twdns)
SRV - [2005.08.05 20:05:00 | 000,516,096 | ---- | M] () [Auto | Stopped] -- C:\W
INDOWS\system32\ati2sgag.exe -- (ATI Smart)
SRV - [2005.08.04 05:02:58 | 000,380,928 | ---- | M] (ATI Technologies Inc.) [Au
to | Running] -- C:\WINDOWS\system32\ati2evxx.exe -- (Ati HotKey Poller)
SRV - [2005.04.06 15:03:28 | 000,110,592 | ---- | M] () [Auto | Running] -- C:\P
rogram Files\IVT Corporation\BlueSoleil\BTNtService.exe -- (BlueSoleil Hid Servi
ce)
_Demand | Stopped] -- C:\WINDOWS\system32\rsvp.exe -- (RSVP)
[color=#E56717]========== Driver Services (All) ==========[/color]

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (ultra)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (TosIde)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (symc8xx)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (symc810)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (sym_u3)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (sym_hi)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\Drive
rs\Capt930b.sys -- (SQTECH930B)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (Sparrow)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (Simbad)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (ql1280)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (Ql10wnt)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (perc2hib)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (perc2)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (mraid35x)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (IntelIde)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (ini910u)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (i2omp)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (hpn)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (dpti2o)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (dac960nt)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (Cpqarray)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (CmdIde)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (cd20xrnt)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\ComboFix\catchme.sys -
- (catchme)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (Atdisk)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (asc3550)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (asc3350p)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (asc)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (amsint)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (AliIde)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (aic78xx)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (aic78u2)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (Aha154x)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (adpu160m)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (abp480n5)
DRV - File not found [Kernel | Disabled | Stopped] -- -- (Abiosdsk)
DRV - [2010.11.03 19:12:10 | 000,126,856 | ---- | M] (Avira GmbH) [Kernel | Syst
em | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2010.08.26 15:39:50 | 000,357,248 | ---- | M] (Microsoft Corporation) [Fi
le_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\srv.sys -- (Srv)
DRV - [2010.07.16 19:51:48 | 000,691,696 | ---- | M] (Duplex Secure Ltd.) [Kerne
l | Disabled | Stopped] -- C:\WINDOWS\system32\drivers\sptd.sys -- (sptd)
DRV - [2010.07.06 17:26:54 | 006,088,296 | ---- | M] (Realtek Semiconductor Corp
.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys --
(IntcAzAudAddService) Service for Realtek HD Audio (WDM)
le_System | System | Running] -- C:\WINDOWS\system32\drivers\mrxsmb.sys -- (MRxS
mb)
DRV - [2009.12.16 16:27:00 | 000,007,408 | R--- | M] ( SUPERAdBlocker.com and SU
PERAntiSpyware.com) [Kernel | On_Demand | Stopped] -- C:\Program Files\SUPERAnti
Spyware\SASENUM.SYS -- (SASENUM)
DRV - [2009.12.16 16:26:58 | 000,009,968 | ---- | M] (SUPERAdBlocker.com and SUP
ERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyw
are\sasdifsv.sys -- (SASDIFSV)
DRV - [2009.12.16 16:26:56 | 000,074,480 | ---- | M] (SUPERAdBlocker.com and SUP
ERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyw
are\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2009.11.18 06:17:00 | 001,395,800 | ---- | M] (Creative Technology Ltd.)
[Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Monfilt.sys -- (Mo
nfilt)
DRV - [2009.11.18 06:16:00 | 001,691,480 | ---- | M] (Creative) [Kernel | On_Dem
and | Stopped] -- C:\WINDOWS\system32\drivers\Ambfilt.sys -- (Ambfilt)
DRV - [2009.10.20 18:20:16 | 000,265,728 | ---- | M] (Microsoft Corporation) [Ke
rnel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\http.sys -- (HTTP)
DRV - [2009.09.11 07:26:26 | 000,096,408 | ---- | M] (ESET) [Kernel | System | R
unning] -- C:\WINDOWS\system32\drivers\epfwtdir.sys -- (epfwtdir)
DRV - [2009.09.11 07:23:50 | 000,108,792 | ---- | M] (ESET) [Kernel | System | R
unning] -- C:\WINDOWS\system32\drivers\ehdrv.sys -- (ehdrv)
DRV - [2009.09.11 07:17:16 | 000,116,008 | ---- | M] (ESET) [File_System | Auto
| Running] -- C:\WINDOWS\system32\drivers\eamon.sys -- (eamon)
rnel | Boot | Running] -- C:\WINDOWS\System32\drivers\ksecdd.sys -- (KSecDD)
DRV - [2009.05.11 10:12:49 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | Syst
em | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
rnel | System | Running] -- C:\WINDOWS\System32\drivers\afd.sys -- (AFD)
rnel | System | Running] -- C:\WINDOWS\system32\drivers\tcpip.sys -- (Tcpip)
rnel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\bthport.sys -- (BTHPO
RT)
rnel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\rdpwd.sys -- (RDPWD)
rnel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\tdtcp.sys -- (TDTCP)
rnel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\tdpipe.sys -- (TDPIPE
)
rnel | System | Running] -- C:\WINDOWS\system32\drivers\termdd.sys -- (TermDD)
rnel | Disabled | Stopped] -- C:\WINDOWS\System32\drivers\pcmcia.sys -- (Pcmcia)
le_System | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\sr.sys -- (sr)
rnel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\parport.sys -- (Parpo
rt)
DRV - [2008.04.14 17:42:18 | 000,154,112 | ---- | M] (Microsoft Corp., Veritas S
oftware) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\dmio.sys -- (d
mio)
oftware) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\drivers\dmboot.sys
-- (dmboot)
rnel | System | Running] -- C:\WINDOWS\system32\drivers\kbdhid.sys -- (kbdhid)
rnel | System | Running] -- C:\WINDOWS\system32\drivers\kbdclass.sys -- (Kbdclas
s)
rnel | System | Running] -- C:\WINDOWS\system32\drivers\serial.sys -- (Serial)
rnel | System | Stopped] -- C:\WINDOWS\system32\drivers\i8042prt.sys -- (i8042pr
t)
rnel | System | Running] -- C:\WINDOWS\system32\drivers\redbook.sys -- (redbook)
rnel | Boot | Running] -- C:\WINDOWS\System32\drivers\volsnap.sys -- (VolSnap)
rnel | System | Running] -- C:\WINDOWS\System32\drivers\fips.sys -- (Fips)
rnel | System | Stopped] -- C:\WINDOWS\system32\drivers\processr.sys -- (Process
or)
rnel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\ACPI.sys -- (ACPI)
rnel | System | Running] -- C:\WINDOWS\system32\drivers\mouclass.sys -- (Mouclas
s)
rnel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\modem.sys -- (Modem)
rnel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\pci.sys -- (PCI)
rnel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\isapnp.sys -- (isapnp)
le_System | System | Running] -- C:\WINDOWS\system32\drivers\rdbss.sys -- (Rdbss
)
rnel | System | Running] -- C:\WINDOWS\system32\drivers\netbt.sys -- (NetBT)
rnel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ndiswan.sys -- (NdisW
an)
rnel | Boot | Running] -- C:\WINDOWS\System32\drivers\ndis.sys -- (NDIS)
rnel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\raspptp.sys -- (PptpM
iniport) WAN Miniport (PPTP)
rnel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rasl2tp.sys -- (Rasl2
tp) WAN Miniport (L2TP)
rnel | System | Running] -- C:\WINDOWS\system32\drivers\ipsec.sys -- (IPSec)
rnel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wdmaud.sys -- (wdmaud
)
le_System | Boot | Running] -- C:\WINDOWS\System32\drivers\mup.sys -- (Mup)
rnel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\sysaudio.sys -- (sysa
udio)
le_System | Disabled | Running] -- C:\WINDOWS\System32\drivers\ntfs.sys -- (Ntfs
)
le_System | Disabled | Stopped] -- C:\WINDOWS\System32\drivers\fastfat.sys -- (F
astfat)
le_System | Disabled | Running] -- C:\WINDOWS\System32\drivers\cdfs.sys -- (Cdfs
)
rnel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\raspppoe.sys -- (RasP
ppoe)
rnel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\ndproxy.sys -- (NDPro
xy)
rnel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\asyncmac.sys -- (Asyn
cMac)
rnel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ndistapi.sys -- (Ndis
Tapi)
rnel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wanarp.sys -- (Wanarp
)
rnel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ipnat.sys -- (IpNat)
rnel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ipinip.sys -- (IpInIp
)
rnel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\psched.sys -- (PSched
)
rnel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\msgpc.sys -- (Gpc)
le_System | System | Running] -- C:\WINDOWS\system32\drivers\netbios.sys -- (Net
BIOS)
rnel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ndisuio.sys -- (Ndisu
io)
rnel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\irenum.sys -- (IRENUM
)
rnel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ip6fw.sys -- (Ip6Fw)
rnel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmnt.sys -- (nm)
rnel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\bthpan.sys -- (BthPan
) Bluetooth Device (Personal Area Network)
rnel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\atmarpc.sys -- (Atmar
pc)
rnel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbprint.sys -- (usbp
rint)
rnel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\bthenum.sys -- (BthEn
um)
rnel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\rfcomm.sys -- (RFCOMM
) Bluetooth Aygıtı (RFCOMM Protokol TDI)
rnel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\bthusb.sys -- (BTHUSB
)
rnel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nabtsfec.sys -- (NABT
SFEC)
rnel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\wstcodec.sys -- (WSTC
ODEC)
rnel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdecode.sys -- (CCDE
CODE)
rnel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\slip.sys -- (SLIP)
rnel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ndisip.sys -- (NdisIP
)
rnel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\streamip.sys -- (stre
amip)
rnel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbvideo.sys -- (usbv
ideo) USB Video Aygıtı (WDM)
rnel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\usbccgp.sys -- (usbcc
gp)
rnel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbstor.sys -- (USBST
OR)
rnel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\usbhub.sys -- (usbhub
)
rnel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\usbehci.sys -- (usbeh
ci)
rnel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\usbuhci.sys -- (usbuh
ci)
rnel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbscan.sys -- (usbsc
an)
rnel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hidusb.sys -- (hidusb
)
rnel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\drmkaud.sys -- (drmka
ud)
rnel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\kmixer.sys -- (kmixer
)
rnel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\swmidi.sys -- (swmidi
)
rnel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\splitter.sys -- (spli
tter)
rnel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\dmusic.sys -- (DMusic
)
rnel | System | Running] -- C:\WINDOWS\System32\drivers\vga.sys -- (VgaSave)
rnel | System | Running] -- C:\WINDOWS\system32\drivers\imapi.sys -- (Imapi)
rnel | Boot | Running] -- C:\WINDOWS\System32\drivers\partmgr.sys -- (PartMgr)
rnel | System | Stopped] -- C:\WINDOWS\System32\drivers\sfloppy.sys -- (Sfloppy)
rnel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\disk.sys -- (Disk)
rnel | System | Running] -- C:\WINDOWS\system32\drivers\cdrom.sys -- (Cdrom)
rnel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\viaide.sys -- (ViaIde)
rnel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\atapi.sys -- (atapi)
rnel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\fdc.sys -- (Fdc)
rnel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\flpydisk.sys -- (Flpy
disk)
rnel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\serenum.sys -- (seren
um)
rnel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\swenum.sys -- (swenum
)
rnel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mskssrv.sys -- (MSKSS
RV)
rnel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mspqm.sys -- (MSPQM)
rnel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mstee.sys -- (MSTEE)
rnel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mspclock.sys -- (MSPC
LOCK)
rnel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\update.sys -- (Update
)
rnel | Boot | Running] -- C:\WINDOWS\System32\drivers\mountmgr.sys -- (MountMgr)
rnel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mssmbios.sys -- (mssm
bios)
rnel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\gagp30kx.sys -- (gagp30kx)
le_System | Boot | Running] -- C:\WINDOWS\system32\drivers\fltmgr.sys -- (FltMgr
)
rnel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rdpdr.sys -- (rdpdr)
le_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mrxdav.sys -- (M
RxDAV)
le_System | System | Running] -- C:\WINDOWS\System32\drivers\npfs.sys -- (Npfs)
le_System | System | Running] -- C:\WINDOWS\System32\drivers\msfs.sys -- (Msfs)
le_System | Disabled | Stopped] -- C:\WINDOWS\System32\drivers\udfs.sys -- (Udfs
)
rnel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\USBAUDIO.sys -- (usba
udio) USB Ses Sürücüsü (WDM)
rnel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\aec.sys -- (aec)
DRV - [2008.04.13 18:39:17 | 000,020,480 | ---- | M] (Macrovision Corporation, M
acrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Kernel | On_Dem
and | Stopped] -- C:\WINDOWS\system32\drivers\secdrv.sys -- (Secdrv)
DRV - [2008.04.13 18:36:05 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DD
K provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudb
us.sys -- (HDAudBus)
DRV - [2007.03.16 17:33:40 | 012,075,776 | ---- | M] () [Kernel | On_Demand | St
opped] -- C:\WINDOWS\system32\drivers\snp2sxp.sys -- (SNP2STD) USB2.0 PC Camera
(SNP2STD)
DRV - [2007.02.28 13:00:12 | 000,108,752 | ---- | M] (DigitalPeers) [Kernel | On
_Demand | Stopped] -- C:\WINDOWS\system32\drivers\dptrackerd.sys -- (dptrackerd)
DRV - [2006.11.02 15:57:04 | 000,036,624 | ---- | M] (Sonic Solutions) [Kernel |
Boot | Running] -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20)
DRV - [2006.10.18 16:39:58 | 000,017,920 | R--- | M] (VIA Technologies,Inc) [Ker
nel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\xfilt.sys -- (xfilt)
DRV - [2006.10.17 19:22:26 | 000,009,216 | R--- | M] (VIA Technologies, Inc.) [K
ernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\videX32.sys -- (videX32)
rnel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WudfRd.sys -- (WudfRd
)
rnel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WudfPf.sys -- (WudfPf
)
DRV - [2006.05.29 07:26:38 | 000,127,488 | ---- | M] (Nokia) [Kernel | On_Demand
| Stopped] -- C:\WINDOWS\system32\drivers\nmwcd.sys -- (Nokia USB Phone Parent)
| Stopped] -- C:\WINDOWS\system32\drivers\nmwcdcj.sys -- (Nokia USB Port)
| Stopped] -- C:\WINDOWS\system32\drivers\nmwcdcm.sys -- (Nokia USB Modem)
| Stopped] -- C:\WINDOWS\system32\drivers\nmwcdc.sys -- (Nokia USB Generic)
opped] -- C:\WINDOWS\system32\drivers\SIVX32.SYS -- (SIVDRIVER)
DRV - [2005.08.04 05:10:18 | 001,273,344 | ---- | M] (ATI Technologies Inc.) [Ke
rnel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2
mtag)
DRV - [2005.05.31 14:40:20 | 000,020,480 | ---- | M] (IVT Corporation) [Kernel |
On_Demand | Running] -- C:\WINDOWS\system32\drivers\blueletaudio.sys -- (Bluele
tAudio)
On_Demand | Running] -- C:\WINDOWS\system32\drivers\btcusb.sys -- (Btcsrusb)
DRV - [2005.04.30 13:50:20 | 000,011,860 | ---- | M] () [Kernel | On_Demand | Ru
nning] -- C:\WINDOWS\system32\drivers\vbtenum.sys -- (BTHidEnum)
Boot | Running] -- C:\WINDOWS\System32\Drivers\BTHidMgr.sys -- (BTHidMgr)
On_Demand | Running] -- C:\WINDOWS\system32\drivers\BtNetDrv.sys -- (BT)
On_Demand | Running] -- C:\WINDOWS\system32\drivers\VcommMgr.sys -- (VcommMgr)
DRV - [2005.03.09 14:53:00 | 000,042,496 | ---- | M] (Advanced Micro Devices) [K
ernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8)
opped] -- C:\WINDOWS\system32\drivers\BTNetFilter.sys -- (BTNetFilter)
On_Demand | Running] -- C:\WINDOWS\system32\drivers\VComm.sys -- (VComm)
DRV - [2004.08.03 21:31:20 | 000,036,224 | ---- | M] (ADMtek Incorporated.) [Ker
nel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\an983.sys -- (AN983)
DRV - [2004.04.15 04:57:20 | 000,042,496 | ---- | M] (VIA Technologies, Inc.
) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\fetnd5
b.sys -- (FETNDISB)
rnel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ipfltdrv.sys -- (IpFi
lterDriver)
rnel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nwlnkfwd.sys -- (Nwln
kFwd)
rnel | System | Stopped] -- C:\WINDOWS\System32\drivers\cdaudio.sys -- (Cdaudio)
DRV - [2001.11.22 13:00:00 | 000,017,792 | ---- | M] (Parallel Technologies, Inc
.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ptilink.sys --
(Ptilink)
rnel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\raspti.sys -- (Raspti
)
rnel | Disabled | Stopped] -- C:\WINDOWS\System32\drivers\cbidf2k.sys -- (cbidf2
k)
rnel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nwlnkflt.sys -- (Nwln
kFlt)
rnel | System | Running] -- C:\WINDOWS\System32\drivers\ws2ifsl.sys -- (WS2IFSL)
rnel | Disabled | Stopped] -- C:\WINDOWS\System32\drivers\acpiec.sys -- (ACPIEC)
rnel | System | Running] -- C:\WINDOWS\system32\drivers\rasacd.sys -- (RasAcd)
rnel | Auto | Running] -- C:\WINDOWS\System32\drivers\parvdm.sys -- (ParVdm)
rnel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rootmdm.sys -- (ROOTM
ODEM)
oftware.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\dmload.sys --
(dmload)
rnel | System | Running] -- C:\WINDOWS\system32\drivers\rdpcdd.sys -- (RDPCDD)
rnel | System | Running] -- C:\WINDOWS\System32\drivers\mnmdd.sys -- (mnmdd)
rnel | System | Running] -- C:\WINDOWS\System32\drivers\beep.sys -- (Beep)
rnel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\pciide.sys -- (PCIIde)
rnel | System | Running] -- C:\WINDOWS\System32\drivers\null.sys -- (Null)
rnel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\ftdisk.sys -- (Ftdisk)
rnel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mouhid.sys -- (mouhid
)
rnel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\audstub.sys -- (audst
ub)
DRV - [2001.08.17 19:13:08 | 000,027,165 | ---- | M] (VIA Technologies, Inc.
) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\fetnd5
.sys -- (FETNDIS)
DRV - [2001.08.16 06:00:00 | 000,213,975 | R--- | M] (Conexant Systems, Inc.) [K
ernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\BT848.sys -- (BT848)
ernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\bttuner.sys -- (BTTU
NER)
ernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btxbar.sys -- (BTXBA
R)
[color=#E56717]========== Standard Registry (All) ==========[/color]
[color=#E56717]========== Internet Explorer ==========[/color]

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go
.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://
go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL =
[binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:
NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Page_Transitions = 1
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.micr
osoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:S
ecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.micr
osoft.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://i
e.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://i
e.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Page_Transitions = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.mic
rosoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache =
http://tr.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache Ac
ceptLangs = tr
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TI
MESTAMP = 9C 79 F1 DC 59 7C CB 01 [binary data]
IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\
system32\ieframe.dll (Microsoft Corporation)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEna
ble" = 0
[color=#E56717]========== FireFox ==========[/color]
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=302398"
FF - prefs.js..extensions.enabledItems: {43c35458-c907-439b-bcfd-07d373834689}:2
.2.1
FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0
.8.20100408.6
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {20a82645-c095-46ed-80e3-08825760534b}:1
.2.1
FF - prefs.js..extensions.enabledItems: moveplayer@movenetworks.com:7
FF - prefs.js..extensions.enabledItems: pdfforge@mybrowserbar.com:1.1.2
FF - prefs.js..extensions.enabledItems: searchsettings@spigot.com:1.2.3
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6
.0.22
FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3
.5.15
FF - prefs.js..network.proxy.autoconfig_url: "http://go.navige.com/"
FF - prefs.js..network.proxy.ftp: "127.0.0.1"
FF - prefs.js..network.proxy.ftp_port: 20069
FF - prefs.js..network.proxy.http: "127.0.0.1"
FF - prefs.js..network.proxy.http_port: 20069
FF - prefs.js..network.proxy.socks: "127.0.0.1"
FF - prefs.js..network.proxy.socks_port: 20069
FF - prefs.js..network.proxy.ssl: "127.0.0.1"
FF - prefs.js..network.proxy.ssl_port: 20069
FF - prefs.js..network.proxy.type: 2
FF - HKLM\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760
534b}: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\D
otNetAssistantExtension\ [2009.10.18 19:04:57 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\jqs@sun.com: C:\Program Files\Jav
a\jre6\lib\deploy\jqs\ff [2009.12.12 23:34:21 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.15\extensions\\Components: C:\Pro
gram Files\Mozilla Firefox\components [2010.10.31 10:12:08 | 000,000,000 | ---D
| M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.15\extensions\\Plugins: C:\Progra
m Files\Mozilla Firefox\plugins [2010.10.31 10:12:08 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program F
iles\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2010.02.06 21:55:38 | 000,00
0,000 | ---D | M]
[2009.08.09 14:06:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\UĞUR\A
pplication Data\Mozilla\Extensions
[2009.08.09 14:06:47 | 000,000,000 | ---D | M] (No name found) -- C:\Documents a
nd Settings\UĞUR\Application Data\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3
a9e97384}
pplication Data\Mozilla\Firefox\Profiles\uxzovs03.default\extensions
[2010.07.06 22:47:34 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assista
nt) -- C:\Documents and Settings\UĞUR\Application Data\Mozilla\Firefox\Profiles\ux
zovs03.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010.07.06 22:47:34 | 000,000,000 | ---D | M] (No name found) -- C:\Documents a
nd Settings\UĞUR\Application Data\Mozilla\Firefox\Profiles\uxzovs03.default\extens
ions\{43c35458-c907-439b-bcfd-07d373834689}
[2010.04.11 14:15:50 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Documents an
d Settings\UĞUR\Application Data\Mozilla\Firefox\Profiles\uxzovs03.default\extensi
ons\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2010.11.13 12:55:42 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firef
ox\extensions
[2010.10.31 10:12:08 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Moz
illa Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2010.11.05 23:45:22 | 000,000,000 | ---D | M] (Java Console) -- C:\Program File
s\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2010.10.31 10:12:02 | 000,025,048 | ---- | M] (Mozilla Foundation) -- C:\Progra
m Files\Mozilla Firefox\components\browserdirprovider.dll
[2010.10.31 10:12:02 | 000,138,712 | ---- | M] (Mozilla Foundation) -- C:\Progra
m Files\Mozilla Firefox\components\brwsrcmp.dll
[2010.09.15 04:50:38 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Pr
ogram Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2009.10.14 19:30:21 | 001,447,344 | ---- | M] (1 mal 1 Software GmbH) -- C:\Pro
gram Files\Mozilla Firefox\plugins\NpFv522.dll
[2010.10.31 10:12:05 | 000,066,520 | ---- | M] (mozilla.org) -- C:\Program Files
\Mozilla Firefox\plugins\npnul32.dll
[2004.12.14 11:19:18 | 000,057,344 | R--- | M] (Adobe Systems Inc.) -- C:\Progra
m Files\Mozilla Firefox\plugins\nppdf32.dll
[2010.10.25 18:01:36 | 000,001,394 | ---- | M] () -- C:\Program Files\Mozilla Fi
refox\searchplugins\amazondotcom.xml
refox\searchplugins\answers.xml
refox\searchplugins\creativecommons.xml
refox\searchplugins\eBay.xml
refox\searchplugins\google.xml
refox\searchplugins\wikipedia-tr.xml
refox\searchplugins\yahoo.xml
O1 HOSTS File: ([2010.11.11 17:28:52 | 000,000,098 | ---- | M]) - C:\WINDOWS\sys
tem32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Pr
ogram Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporat
ed)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} -
C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limite
d)
O2 - BHO: (Windows Live Oturum Açma Yardım Aracı) - {9030D464-4C02-4ABF-8ECC-516476086
3C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLo
gin.dll (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A
9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C
} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystem
s, Inc.)
O2 - BHO: (EpsonToolBandKicker Class) - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} -
C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON COR
PORATION)
O3 - HKLM\..\Toolbar: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6
D} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON
CORPORATION)
O3 - HKCU\..\Toolbar\ShellBrowser: (&Adres) - {01E04581-4EEE-11D0-BFE9-00AA005B4
383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (&Adres) - {01E04581-4EEE-11D0-BFE9-00AA005B438
3} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (&Bağlantılar) - {0E5CBF21-D15F-11D0-8301-00AA005B4
383} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-
C6B60AAEBA6D} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (
SEIKO EPSON CORPORATION)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira
GmbH)
O4 - HKLM..\Run: [BluetoothAuthenticationAgent] C:\WINDOWS\System32\bthprops.cpl
(Microsoft Corporation)
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESE
T)
O4 - HKLM..\Run: [FixCamera] C:\WINDOWS\FixCamera.exe ()
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Soft
ware Gmbh)
O4 - HKLM..\Run: [QuickTime Task] C:\Program Files\QuickTime\qttask.exe (Apple I
nc.)
O4 - HKLM..\Run: [RTHDCPL] C:\WINDOWS\RTHDCPL.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [snp2std] C:\WINDOWS\vsnp2std.exe (Sonix)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Common Files\Java\Java Up
date\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [tsnp2std] C:\WINDOWS\tsnp2std.exe (SONIX)
O4 - HKLM..\Run: [USB Antivirus] C:\Program Files\USB Disk Security\USBGuard.exe
(Zbshareware Lab)
O4 - HKCU..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (Microsoft Corporat
ion)
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\
TeaTimer.exe (Safer-Networking Ltd.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programlar\Başlangıç\Adob
e Reader Hızlı Çalıştırma.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe (Ad
be Systems Incorporated)
O4 - Startup: C:\Documents and Settings\UĞUR\Start Menu\Programlar\Başlangıç\CamTrack.ln
k = C:\Program Files\DigitalPeers\CamTrack\camtrack.exe (DigitalPeers)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAuto
RunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAu
toRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTy
peAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives
= 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplay
lastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnotice
caption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnotice
text =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwit
houtlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwitho
utlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegi
stryTools = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTy
peAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAu
toRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives
= 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegi
stryTools = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTask
mgr = 0
O9 - Extra Button: Bunu Bloga Al - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\P
rogram Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporati
on)
O9 - Extra 'Tools' menuitem : Windows Live Writer içinde &Bunu Web Günlüğüne Al - {219C341
6-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrow
serExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A
3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHe
lper.dll (Safer Networking Limited)
O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2
ba38496583} - C:\WINDOWS\network diagnostic\xpnetdiag.exe (Microsoft Corporation
)
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Progr
am Files\Messenger\msmsgs.exe (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04
F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\WINDOWS\system32\m
swsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\WINDOWS\system32\w
inrnr.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\WINDOWS\system32\m
swsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\system32\w
shbth.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\WINDOWS\system32\mswso
ck.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\system32\rsvps
p.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\system32\rsvps
p.dll (Microsoft Corporation)
O15 - HKCU\..Trusted Domains: com.tw ([asia.msi] http in Güvenilen siteler)
O15 - HKCU\..Trusted Domains: com.tw ([global.msi] http in Güvenilen siteler)
O15 - HKCU\..Trusted Domains: com.tw ([www.msi] http in Güvenilen siteler)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com
/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {45830FF9-D9E6-4F41-86ED-B266933D8E90} Reg Error: Value error. (Reg E
rror: Key error.)
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} http://upload.facebook.com/con
trols/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab (Facebook Photo Uploader 5
Control)
O16 - DPF: {8167C273-DF59-4416-B647-C8BB2C7EE83E} http://liveupdate.msi.com.tw/a
utobios/LOnline/install.cab (WebSDev Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6
.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6
O16 - DPF: {D5D17C21-1719-4640-B0B2-4F3262419920} https://www.isbank.com.tr/Inte
rnet/lib/JaguarEdit4ISBv27.CAB (JaguarEditControl-ISBANK)
O16 - DPF: {E55FD215-A32E-43FE-A777-A7E8F165F560} Reg Error: Value error. (Reg E
rror: Key error.)
O16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6} http://pdl.stream.aol.com/down
loads/aol/unagi/ampx_en_dl.cab (IWinAmpActiveX Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS
\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\WINDOWS\s
ystem32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\s
ystem32\msvidctl.dll (Microsoft Corporation)
O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\
system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\s
O18 - Protocol\Handler\gopher {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOW
S\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\
system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} -
C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Pr
ogram Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS
\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} -
C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\P
rogram Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp - No CLSID value found
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C
:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\s
ystem32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WI
NDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Prog
ram Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporati
on)
O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS
\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOW
S\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\WINDOWS
\system32\inetcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\sy
stem32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61}
- C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporatio
n)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:
\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOW
S\system32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program
Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Pr
ogram Files\Common Files\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft
Corporation)
O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\s
ystem32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\sysimage {76E67A63-06E9-11D2-A840-006008059382} - C:\WIND
OWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\sy
stem32\msvidctl.dll (Microsoft Corporation)
O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WIND
OWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\wia {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\s
ystem32\wiascr.dll (Microsoft Corporation)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Pr
ogram Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79
ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0
D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79
ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\Class Install Handler {32B533BB-EDAE-11d0-BD5A-00AA00B92AF
1} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\deflate {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOW
O18 - Protocol\Filter\gzip {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\s
O18 - Protocol\Filter\lzdhtml {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOW
O18 - Protocol\Filter\text/webviewhtml {733AC4CB-F1A4-11d0-B951-00A0C90312E1} -
C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft
Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\
system32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UIHost - (logonui.exe) - C:\WINDOWS\System32\logonui.exe (M
icrosoft Corporation)
O20 - HKLM Winlogon: VMApplet - (rundll32 shell32) - C:\WINDOWS\System32\shell32
.dll (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (Control_RunDLL "sysdm.cpl") - C:\WINDOWS\System
32\sysdm.cpl (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\
SASWINLO.dll - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll (SUPERAntiSpyware.
com)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\
ati2evxx.dll (ATI Technologies Inc.)
O20 - Winlogon\Notify\crypt32chain: DllName - crypt32.dll - C:\WINDOWS\System32\
crypt32.dll (Microsoft Corporation)
O20 - Winlogon\Notify\cryptnet: DllName - cryptnet.dll - C:\WINDOWS\System32\cry
ptnet.dll (Microsoft Corporation)
O20 - Winlogon\Notify\cscdll: DllName - cscdll.dll - C:\WINDOWS\System32\cscdll.
dll (Microsoft Corporation)
O20 - Winlogon\Notify\dimsntfy: DllName - %SystemRoot%\System32\dimsntfy.dll - C
:\WINDOWS\system32\dimsntfy.dll (Microsoft Corporation)
O20 - Winlogon\Notify\ScCertProp: DllName - wlnotify.dll - C:\WINDOWS\System32\w
lnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\Schedule: DllName - wlnotify.dll - C:\WINDOWS\System32\wln
otify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\sclgntfy: DllName - sclgntfy.dll - C:\WINDOWS\System32\scl
gntfy.dll (Microsoft Corporation)
O20 - Winlogon\Notify\SensLogn: DllName - WlNotify.dll - C:\WINDOWS\System32\wln
otify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\termsrv: DllName - wlnotify.dll - C:\WINDOWS\System32\wlno
tify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\wlballoon: DllName - wlnotify.dll - C:\WINDOWS\System32\wl
notify.dll (Microsoft Corporation)
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - C:\WINDOWS\system
32\shell32.dll (Microsoft Corporation)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} - C:\WIND
OWS\system32\shell32.dll (Microsoft Corporation)
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - C:\WINDOWS\syste
m32\stobject.dll (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\WINDOWS\syst
em32\webcheck.dll (Microsoft Corporation)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDO
WS\system32\WPDShServiceObj.dll (Microsoft Corporation)
O22 - SharedTaskScheduler: {438755C2-A8BA-11D1-B96B-00A0C90312E1} - Browseui önced
en yükleyicisi - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
O22 - SharedTaskScheduler: {8C7461EF-2B13-11d2-BE35-3078302C2030} - Bileşen Katerg
orileri önbellek daemon - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
O24 - Desktop Components:0 (Geçerli Giriş Sayfam) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\UĞUR\Local Settings\Application
Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\UĞUR\Local Settings\Appli
cation Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Progra
m Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - C:\WINDOW
S\System32\shell32.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (msapsspc.dll) - C:\WINDOWS\System32\msapsspc.dll
O29 - HKLM SecurityProviders - (schannel.dll) - C:\WINDOWS\System32\schannel.dll
O29 - HKLM SecurityProviders - (digest.dll) - C:\WINDOWS\System32\digest.dll (Mi
crosoft Corporation)
O29 - HKLM SecurityProviders - (msnsspc.dll) - C:\WINDOWS\System32\msnsspc.dll (
Microsoft Corporation)
O30 - LSA: Authentication Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (
Microsoft Corporation)
O30 - LSA: Security Packages - (kerberos) - C:\WINDOWS\System32\kerberos.dll (Mi
O30 - LSA: Security Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Micros
oft Corporation)
O30 - LSA: Security Packages - (schannel) - C:\WINDOWS\System32\schannel.dll (Mi
O30 - LSA: Security Packages - (wdigest) - C:\WINDOWS\System32\wdigest.dll (Micr
osoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.07.28 19:55:48 | 000,000,000 | ---- | M] () - C:\AUTO
EXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
[color=#E56717]========== Files/Folders - Created Within 90 Days ==========[/col
or]
[2010.11.13 18:08:01 | 000,000,000 | ---D | C] -- C:\Rooter$
[2010.11.13 18:05:42 | 000,173,119 | ---- | C] (Eric_71) -- C:\Documents and Set
tings\UĞUR\Desktop\Rooter.exe
[2010.11.13 12:53:33 | 000,000,000 | ---D | C] -- C:\Program Files\mIRC
[2010.11.12 19:34:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\UĞUR\A
pplication Data\VDownloader
[2010.11.12 19:34:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\UĞUR\L
ocal Settings\Application Data\VDownloader
[2010.11.12 19:33:57 | 000,000,000 | ---D | C] -- C:\ProgramData
[2010.11.11 17:28:51 | 000,000,000 | ---D | C] -- C:\_OTM
[2010.11.11 00:04:56 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2010.11.11 00:04:55 | 000,000,000 | ---D | C] -- C:\rsit
[2010.11.08 18:23:00 | 000,000,000 | ---D | C] -- C:\_OTL
[2010.11.07 18:17:26 | 000,000,000 | ---D | C] -- C:\Program Files\mIRCTurk.Com
[2010.11.06 11:16:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\UĞUR\B
elgelerim\JDownloader 0.8.821
[2010.11.05 23:45:42 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\
Java
[2010.11.05 23:45:21 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\WI
NDOWS\System32\javaws.exe
NDOWS\System32\javaw.exe
NDOWS\System32\java.exe
[2010.11.04 22:03:19 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Documents
and Settings\UĞUR\Desktop\OTL.exe
[2010.11.04 21:52:25 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2010.11.04 21:43:54 | 000,000,000 | ---D | C] -- C:\WINDOWS\temp
pplication Data\Avira
[2010.11.01 19:53:47 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System
32\drivers\ssmdrv.sys
32\drivers\avipbb.sys
32\drivers\avgntflt.sys
32\drivers\avgntdd.sys
32\drivers\avgntmgr.sys
[2010.11.01 19:53:44 | 000,000,000 | ---D | C] -- C:\Program Files\Avira
[2010.11.01 19:53:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All
Users\Application Data\Avira
[2010.10.31 14:58:42 | 000,000,000 | ---D | C] -- C:\Program Files\JDownloader
[2010.10.24 12:37:24 | 000,000,000 | ---D | C] -- C:\Program Files\AMD
[2010.10.24 12:30:59 | 000,017,920 | R--- | C] (VIA Technologies,Inc) -- C:\WIND
OWS\System32\drivers\xfilt.sys
[2010.10.24 12:30:59 | 000,009,216 | R--- | C] (VIA Technologies, Inc.) -- C:\WI
NDOWS\System32\drivers\videX32.sys
[2010.10.23 12:53:19 | 000,349,472 | ---- | C] (Microsoft Corporation) -- C:\WIN
DOWS\WindowsXP-KB822603-x86.exe
[2010.10.23 12:53:15 | 000,675,840 | ---- | C] (Sonix) -- C:\WINDOWS\vsnp2std.ex
e
[2010.10.23 12:53:15 | 000,258,048 | ---- | C] (SONIX) -- C:\WINDOWS\tsnp2std.ex
e
[2010.10.23 12:53:04 | 000,249,856 | ---- | C] (Sonix) -- C:\WINDOWS\System32\vs
np2std.dll
[2010.10.23 12:53:04 | 000,151,552 | ---- | C] ( ) -- C:\WINDOWS\System32\rsnp2s
td.dll
[2010.10.23 12:53:04 | 000,077,824 | ---- | C] ( ) -- C:\WINDOWS\System32\csnp2s
td.dll
snp2std
elgelerim\sakıncalı
[2010.10.19 00:55:53 | 000,000,000 | ---D | C] -- C:\Program Files\TTNET
[2010.10.18 22:45:13 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACL
S.exe
[2010.10.18 22:45:13 | 000,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.e
xe
[2010.10.18 22:45:13 | 000,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.ex
e
[2010.10.18 22:45:13 | 000,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.ex
e
[2010.10.18 22:44:53 | 000,000,000 | ---D | C] -- C:\ComboFix-131010
[2010.10.18 22:30:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\IC-3562 USB2.0 Came
ra
[2010.10.18 22:30:44 | 000,000,000 | ---D | C] -- C:\Program Files\IC-3562 USB2.
0 Camera
DOWS\System32\d3d10.dll
DOWS\System32\msvcr90.dll
DOWS\System32\msvcrtnew.dll
DOWS\System32\dwmapi.dll
DOWS\System32\msvcr80d.dll
DOWS\System32\msvcp90.dll
DOWS\System32\msvcm90.dll
[2010.10.18 22:03:20 | 000,602,112 | ---- | C] (NVIDIA Corporation) -- C:\WINDOW
S\System32\nvapi.dll
DOWS\System32\msvcm80.dll
[2010.10.18 22:03:20 | 000,061,440 | ---- | C] (Rafael & ZoRoNaX) -- C:\WINDOWS\
System32\Vista.Emulation.dll
DOWS\System32\d2d1.dll
DOWS\System32\D3DX10d_39.dll
DOWS\System32\d3dx10.dll
DOWS\System32\D3D10SDKLayers.DLL
DOWS\System32\avrt.dll
[2010.10.18 21:09:45 | 000,064,104 | ---- | C] (Realtek Semiconductor Corp.) --
C:\WINDOWS\ALCMTR.EXE
Users\Application Data\NOS
snp2std(2)
[2010.10.15 18:56:15 | 000,000,000 | ---D | C] -- C:\RECYCLER(2)
[2010.10.15 18:11:55 | 000,000,000 | ---D | C] -- C:\ComboFixyeni
elgelerim\Downloads
Java(2)
pplication Data\Opera
[2010.09.04 18:15:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\UĞUR\I
ncomplete
elgelerim\National Teams
[2010.08.28 11:25:32 | 000,000,000 | ---D | C] -- C:\Program Files\VDownloader
elgelerim\Karşıdan Yüklenenler
[2010.08.22 21:08:05 | 000,000,000 | ---D | C] -- C:\Program Files\Veetle
Users\Application Data\Readon
[2010.08.15 23:07:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\UĞUR\L
ocal Settings\Application Data\Readon_Technology
elgelerim\Readon Player
[2010.08.15 22:59:47 | 000,000,000 | ---D | C] -- C:\Program Files\Readon Techno
logy
[2009.10.03 16:41:26 | 007,758,840 | ---- | C] (http://cryptload.info) -- C:\Doc
uments and Settings\UĞUR\Application Data\CryptLoad.exe
[color=#E56717]========== Files - Modified Within 90 Days ==========[/color]

[2010.11.13 20:05:49 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents
and Settings\UĞUR\Desktop\OTL.exe
[2010.11.13 20:03:00 | 000,000,982 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpda
teTaskMachineUA.job
[2010.11.13 18:57:14 | 000,000,978 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpda
teTaskMachineCore.job
[2010.11.13 18:57:08 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010.11.13 18:44:16 | 000,630,272 | ---- | M] () -- C:\Documents and Settings\UĞU
R\Desktop\dds.scr
[2010.11.13 18:06:15 | 000,173,119 | ---- | M] (Eric_71) -- C:\Documents and Set
tings\UĞUR\Desktop\Rooter.exe
[2010.11.13 15:48:49 | 000,000,450 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_
Synchronization-{908451BE-9471-498E-8073-82C9F1B2983A}.job
[2010.11.13 15:45:15 | 000,002,411 | ---- | M] () -- C:\Documents and Settings\A
ll Users\Desktop\Tivibu TV Player.lnk
[2010.11.13 14:52:46 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
R\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
R\Application Data\Microsoft\Internet Explorer\Quick Launch\mIRC.lnk
R\Desktop\ultraslan - seni yıkacak dozerin.mpeg
R\Desktop\ultraslan - çocukluk aşkımsın galatasaray.mpeg
R\Desktop\ultraslan - sen var ya sen.mpeg
R\Belgelerim\kasQashqai_women_spinning.jpg
R\Desktop\youtube - kamera karşısında mala bağlayan adam.mpeg
R\Desktop\youtube - break dance 1991 yılında bu evde doğdu.mpeg
R\Desktop\notre damme de paris - esmeralda.mpeg
[2010.11.13 09:25:08 | 000,054,156 | -H-- | M] () -- C:\WINDOWS\QTFont.qfn
[2010.11.13 09:25:08 | 000,001,409 | ---- | M] () -- C:\WINDOWS\QTFont.for
R\Desktop\youtube - fener için opera kızlarla.avi
R\Desktop\youtube - ibrahim tatlıses - bir kulunu çok sevdim.mpeg
ll Users\Desktop\VDownloader.lnk
R\Belgelerim\blo19_420539967499_802167499_4591419_7787725_n.jpg
R\Belgelerim\askeri malzeme.jpg
[2010.11.11 17:28:52 | 000,000,098 | ---- | M] () -- C:\WINDOWS\System32\drivers
\etc\Hosts
ll Users\Desktop\DivX Movies.lnk
ll Users\Desktop\DivX Player.lnk
R\Start Menu\Programlar\Başlangıç\CamTrack.lnk
R\Belgelerim\mfg09-20.jpg
R\Desktop\Readon TV Movie Radio Player.lnk
[2010.11.07 18:21:49 | 000,046,040 | -H-- | M] () -- C:\WINDOWS\System32\mlfcach
e.dat
R\Belgelerim\iskVe_Isci_Bulma_Kurumu_Genel_Mudurlugu-logo-61DFBB4E09-seeklogo_co
m.gif
R\Belgelerim\iskIKUR_1~1.jpg
R\Desktop\dunya_lideri.doc
R\Desktop\JDownloader.lnk
R\Belgelerim\dok25_447443581455_17900841455_6020583_6247100_n.jpg
R\Belgelerim\asker.jpg
R\Belgelerim\smis10.gif
R\Desktop\CKScanner.exe
[2010.11.04 21:29:15 | 003,902,849 | R--- | M] () -- C:\Documents and Settings\UĞU
R\Desktop\ComboFix.exe
R\Belgelerim\askerdusu.jpg
ll Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.11.03 19:12:10 | 000,126,856 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System
32\drivers\avipbb.sys
[2010.11.03 19:12:10 | 000,060,936 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System
32\drivers\avgntflt.sys
[2010.11.03 19:03:27 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010.11.03 18:36:29 | 000,088,064 | ---- | M] () -- C:\WINDOWS\MBR.exe
R\Belgelerim\para.jpg
R\Belgelerim\ask15_470301806753_784106753_6640761_3983666_n.jpg
R\Desktop\335. Dönem Sınıflandırma Ekranı.xls
R\Belgelerim\askrfdz_8dv77zjdm_b.jpg
R\Desktop\Avira AntiVir Personal Profile Local Drives.LNK
ll Users\Desktop\Avira AntiVir Control Center.lnk
R\Desktop\avira_antivir_personal_en.exe
[2010.10.31 13:18:05 | 000,471,068 | ---- | M] () -- C:\WINDOWS\System32\perfh00
9.dat
[2010.10.31 13:18:05 | 000,458,414 | ---- | M] () -- C:\WINDOWS\System32\perfh01
F.dat
[2010.10.31 13:18:05 | 000,095,342 | ---- | M] () -- C:\WINDOWS\System32\perfc01
F.dat
[2010.10.31 13:18:05 | 000,083,044 | ---- | M] () -- C:\WINDOWS\System32\perfc00
9.dat
R\Belgelerim\dokSuperMario.jpg
R\Belgelerim\gooturkey10-hp.jpg
[2010.10.28 17:03:57 | 000,000,067 | ---- | M] () -- C:\WINDOWS\#1 Video Convert
er.INI
R\Belgelerim\e36b64dfa3f4d7f5d1702f1768081fd3.jpg
R\Desktop\Bilgilendirme_Brosuru.doc
R\Belgelerim\fil55_158898174142995_121178761248270_334133_403148_n.jpg
[2010.10.24 12:35:19 | 000,000,168 | ---- | M] () -- C:\WINDOWS\UChromeP.uns
R\Belgelerim\smiLaie_4.gif
R\Belgelerim\smi140nh8.gif
R\Belgelerim\smi173er2.gif
R\Belgelerim\incblr_kwtbz5hZ1y1qzkt07o1_400
R\Belgelerim\nfk90_159465917419554_121178761248270_335945_1115047_n.jpg
R\Belgelerim\ozghayatj.jpg
R\Belgelerim\41763_100000404270016_1169_n.jpg
ll Users\Desktop\Google Earth.lnk
R\Belgelerim\inca3562.jpg
R\Desktop\Inca Video Power.lnk
[2010.10.18 22:13:03 | 000,306,008 | ---- | M] () -- C:\WINDOWS\System32\FNTCACH
E.DAT
[2010.10.18 22:03:23 | 000,003,013 | ---- | M] () -- C:\Program Files\Common Fil
es\unins000.dat
[2010.10.18 22:03:00 | 000,728,858 | ---- | M] () -- C:\Program Files\Common Fil
es\unins000.exe
R\Desktop\Veryansin_30.05.09.part2.rar.part
R\Desktop\CK25temOUcar.part4.rar.part
R\Desktop\CK25temOUcar.part1.rar
R\Desktop\CK25temOzbek.part3.rar
R\Desktop\Winamp.m3u
R\Desktop\tatlı sert.m3u
[2010.10.16 11:45:55 | 000,691,696 | ---- | M] (Duplex Secure Ltd.) -- C:\WINDOW
S\System32\drivers\sptd(2).sys
R\Belgelerim\incmtsglt.jpg
R\Belgelerim\o6brdf.jpg
R\Belgelerim\inco6brdf.jpg
R\Belgelerim\kir76382_9bebd85e05_o.jpg
R\Belgelerim\sar673536727_1030012_6261.jpg
R\Belgelerim\askanya_da_zorunlu_askerlige_veda_ediyor.jpg
R\Belgelerim\aske28736236.jpg
R\Belgelerim\ask11trbzl.jpg
R\Belgelerim\ask1_SugMS0y8r6QiloYBe2bZHg4_t0gQw.jpg
R\Belgelerim\ask28736236.jpg
R\Belgelerim\meb044139268_1026762_4562.jpg
R\Desktop\Anayasa değişikliği karşılaştırmalı teklif tablosu.pdf
R\Desktop\kemal sunal film müzikleri.m3u
R\Belgelerim\ydpe_Dirilis_Partisi.png
R\Belgelerim\karakoc.jpg
R\Belgelerim\bekfile.jpg
R\Belgelerim\msnHagi028.jpg
R\Belgelerim\ozbfile.jpg
R\Belgelerim\chpim144637_2.jpg
R\Belgelerim\ders mode on.m3u
R\Belgelerim\incimg88890.jpg
R\Desktop\mazi kalbimde.m3u
R\Desktop\yeni.m3u
R\Desktop\resitaller 1.m3u
R\Desktop\her şey yolunda.m3u
R\Desktop\bir yaz daha bitiyor.m3u
R\Desktop\ay karanlık.m3u
R\Desktop\kağıt evler.m3u
R\Belgelerim\fan_tt.JPG
R\Belgelerim\tt.jpg
R\Belgelerim\fan_ziy.JPG
R\Belgelerim\ziy.jpg
R\Belgelerim\fan_ata.JPG
R\Belgelerim\ata.jpg
R\Belgelerim\fan_nej.JPG
R\Belgelerim\nej.jpg
R\Belgelerim\fan_yus.JPG
R\Belgelerim\yus.jpg
R\Belgelerim\fan_ism.JPG
R\Belgelerim\ism.jpg
R\Belgelerim\fan_osm.JPG
R\Belgelerim\osm.jpg
R\Belgelerim\fan_rau.JPG
R\Belgelerim\rau.jpg
R\Belgelerim\fan_env.jpg
R\Belgelerim\env.jpg
R\Belgelerim\fan_ats.jpg
R\Belgelerim\fan_bar.jpg
R\Belgelerim\incfvb38h.gif
R\Belgelerim\isi96_103673482997414_100000642872550_100023_6450153_n.jpg
R\Belgelerim\fm2010_002.jpg
[2010.09.18 11:23:24 | 000,974,848 | ---- | M] (Microsoft Corporation) -- C:\WIN
DOWS\System32\mfc42u.dll
DOWS\System32\dllcache\mfc42u.dll
DOWS\System32\mfc42.dll
DOWS\System32\dllcache\mfc42.dll
DOWS\System32\mfc40.dll
DOWS\System32\dllcache\mfc40.dll
DOWS\System32\mfc40u.dll
DOWS\System32\dllcache\mfc40u.dll
[2010.09.15 04:50:52 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\WI
NDOWS\System32\javaws.exe
NDOWS\System32\javaw.exe
NDOWS\System32\java.exe
NDOWS\System32\deployJava1.dll
NDOWS\System32\javacpl.cpl
R\Belgelerim\59881_432746936247_535671247_4866089_4897735_n.jpg
R\Belgelerim\incan-inci-sözlük-capsleri_47083.jpg
R\Belgelerim\abd6filoa.jpg
R\Belgelerim\ref63_460206249679_555134679_6557056_7827444_n.jpg
DOWS\System32\dllcache\urlmon.dll
DOWS\System32\dllcache\wininet.dll
DOWS\System32\mstime.dll
DOWS\System32\dllcache\mstime.dll
DOWS\System32\dllcache\occache.dll
DOWS\System32\dllcache\mshtml.dll
DOWS\System32\dllcache\mshtmled.dll
DOWS\System32\inetcpl.cpl
DOWS\System32\dllcache\inetcpl.cpl
DOWS\System32\msfeeds.dll
DOWS\System32\dllcache\msfeeds.dll
DOWS\System32\msfeedsbs.dll
DOWS\System32\dllcache\msfeedsbs.dll
DOWS\System32\licmgr10.dll
DOWS\System32\dllcache\licmgr10.dll
DOWS\System32\jsproxy.dll
DOWS\System32\dllcache\jsproxy.dll
DOWS\System32\dllcache\iertutil.dll
DOWS\System32\dllcache\ieframe.dll
DOWS\System32\iepeers.dll
DOWS\System32\dllcache\iepeers.dll
DOWS\System32\dllcache\iedvtool.dll
DOWS\System32\iedkcs32.dll
DOWS\System32\dllcache\iedkcs32.dll
R\Belgelerim\eve91_1490605478073_1622070020_1122681_1350899_n.jpg
R\Belgelerim\eve75_548458694_6874_n.jpg
R\Belgelerim\KİRALIK.doc
R\Belgelerim\senmisak-imilli.jpg
R\Desktop\LimeWire 5.5.14.lnk
R\Belgelerim\incan-inci-sözlük-capsleri_31017.gif
R\Belgelerim\TvFm.xls
R\Desktop\umay6.pdf
R\Belgelerim\fm2010_001.JPG
R\Belgelerim\ozd244842_2.jpg
R\Belgelerim\fon.JPG
R\Belgelerim\chpIMG_0016_.jpg
R\Belgelerim\CHP_eski_afishler-7.jpg
R\Belgelerim\chpafis_b09.jpg
R\Belgelerim\chphex2.gif
R\Belgelerim\CHP-Logo-Dikey.jpg
R\Belgelerim\oro61.jpg
[2010.09.01 13:51:35 | 000,285,824 | ---- | M] (Adobe Systems Incorporated) -- C
:\WINDOWS\System32\dllcache\atmfd.dll
[2010.09.01 13:51:35 | 000,285,824 | ---- | M] (Adobe Systems Incorporated) -- C
:\WINDOWS\System32\atmfd.dll
DOWS\System32\win32k.sys
DOWS\System32\dllcache\win32k.sys
R\Desktop\yeni müzik.m3u
R\Belgelerim\ata_bar10982076.jpg
R\Desktop\FM2010_v10.2.0_PC_Patch.exe
R\Belgelerim\Vakıf Bireysel_Emeklilik.pdf
R\Belgelerim\hay63_10150261596240253_295592860252_14377482_8024633_n.jpg
R\Belgelerim\artbg.gif
R\Belgelerim\forspot_as.jpg
R\Belgelerim\fortulpar_fc_ozbekistan.jpg
R\Belgelerim\for1250_2237.jpg
R\Belgelerim\hay42416912687069316053.jpg
DOWS\System32\t2embed.dll
DOWS\System32\dllcache\t2embed.dll
DOWS\System32\dllcache\srvsvc.dll
R\Belgelerim\uma28_149709228389940_100000525912127_362722_8336066_n.jpg
R\Belgelerim\dar01_141104375917092_100000525912127_315430_2358260_n.jpg
R\Desktop\BES.rtf
DOWS\System32\dllcache\srv.sys
DOWS\System32\ie4uinit.exe
DOWS\System32\dllcache\ie4uinit.exe
DOWS\System32\dllcache\wmp.dll
DOWS\System32\dllcache\comctl32.dll
R\Belgelerim\pau5665.jpg
R\Belgelerim\sar5455.jpg
R\Belgelerim\sur00_458159168833_14972983833_6299610_7623296_n.jpg
R\Belgelerim\artback.gif
R\Belgelerim\artback_cizgi.gif
R\Belgelerim\hayminnelli_logo.png
R\Belgelerim\umay5.jpg
R\Desktop\hareketli.m3u
R\Desktop\Ayna.lnk
R\Belgelerim\artmain_bg.jpg
R\Desktop\umay5.pdf
DOWS\System32\dllcache\spoolsv.exe
R\Belgelerim\msnimage008.png
DOWS\System32\dllcache\rpcrt4.dll
R\Belgelerim\yet4761508_325513_7096.jpg
R\Belgelerim\chp27188341_30109222_6549.jpg
[color=#E56717]========== Files Created - No Company Name ==========[/color]
[2010.11.13 18:44:08 | 000,630,272 | ---- | C] () -- C:\Documents and Settings\UĞU
R\Desktop\dds.scr
R\Desktop\ultraslan - seni yıkacak dozerin.mpeg
R\Desktop\ultraslan - çocukluk aşkımsın galatasaray.mpeg
R\Desktop\ultraslan - sen var ya sen.mpeg
R\Belgelerim\kasQashqai_women_spinning.jpg
R\Desktop\youtube - kamera karşısında mala bağlayan adam.mpeg
R\Desktop\youtube - break dance 1991 yılında bu evde doğdu.mpeg
R\Desktop\notre damme de paris - esmeralda.mpeg
[2010.11.13 09:25:08 | 000,054,156 | -H-- | C] () -- C:\WINDOWS\QTFont.qfn
[2010.11.13 09:25:08 | 000,001,409 | ---- | C] () -- C:\WINDOWS\QTFont.for
R\Desktop\youtube - fener için opera kızlarla.avi
R\Desktop\youtube - ibrahim tatlıses - bir kulunu çok sevdim.mpeg
[2010.11.12 19:33:58 | 000,001,538 | ---- | C] () -- C:\Documents and Settings\A
ll Users\Desktop\VDownloader.lnk
R\Belgelerim\askeri malzeme.jpg
R\Belgelerim\mfg09-20.jpg
[2010.11.07 18:21:49 | 000,046,040 | -H-- | C] () -- C:\WINDOWS\System32\mlfcach
e.dat
R\Belgelerim\iskVe_Isci_Bulma_Kurumu_Genel_Mudurlugu-logo-61DFBB4E09-seeklogo_co
m.gif
R\Belgelerim\iskIKUR_1~1.jpg
R\Desktop\JDownloader.lnk
R\Belgelerim\asker.jpg
R\Belgelerim\smis10.gif
R\Desktop\CKScanner.exe
[2010.11.04 21:29:08 | 003,902,849 | R--- | C] () -- C:\Documents and Settings\UĞU
R\Desktop\ComboFix.exe
R\Belgelerim\para.jpg
R\Belgelerim\askerdusu.jpg
R\Desktop\335. Dönem Sınıflandırma Ekranı.xls
R\Belgelerim\askrfdz_8dv77zjdm_b.jpg
R\Desktop\Avira AntiVir Personal Profile Local Drives.LNK
ll Users\Desktop\Avira AntiVir Control Center.lnk
R\Desktop\avira_antivir_personal_en.exe
R\Belgelerim\dokSuperMario.jpg
R\Belgelerim\gooturkey10-hp.jpg
R\Belgelerim\e36b64dfa3f4d7f5d1702f1768081fd3.jpg
R\Desktop\Bilgilendirme_Brosuru.doc
R\Belgelerim\fil55_158898174142995_121178761248270_334133_403148_n.jpg
[2010.10.24 12:35:18 | 000,000,168 | ---- | C] () -- C:\WINDOWS\UChromeP.uns
R\Belgelerim\smi173er2.gif
R\Belgelerim\smi140nh8.gif
R\Belgelerim\smiLaie_4.gif
[2010.10.23 12:53:20 | 000,020,480 | ---- | C] () -- C:\WINDOWS\FixCamera.exe
[2010.10.23 12:53:12 | 000,015,497 | ---- | C] () -- C:\WINDOWS\snp2std.ini
[2010.10.23 12:53:12 | 000,013,022 | ---- | C] () -- C:\WINDOWS\snp2std.src
[2010.10.23 12:53:11 | 000,025,472 | ---- | C] () -- C:\WINDOWS\System32\drivers
\sncamd.sys
\snp2sxp.sys
ll Users\Desktop\DivX Movies.lnk
ll Users\Desktop\DivX Player.lnk
R\Belgelerim\incblr_kwtbz5hZ1y1qzkt07o1_400
R\Belgelerim\nfk90_159465917419554_121178761248270_335945_1115047_n.jpg
R\Belgelerim\ozghayatj.jpg
R\Belgelerim\41763_100000404270016_1169_n.jpg
ll Users\Desktop\Google Earth.lnk
ll Users\Desktop\Tivibu TV Player.lnk
[2010.10.18 22:45:13 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2010.10.18 22:45:13 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2010.10.18 22:45:13 | 000,088,064 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2010.10.18 22:45:13 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2010.10.18 22:45:13 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
R\Belgelerim\inca3562.jpg
R\Desktop\Inca Video Power.lnk
[2010.10.18 22:03:19 | 000,376,832 | ---- | C] () -- C:\WINDOWS\System32\M2000Tw
n.dll
[2010.10.18 22:03:17 | 000,728,858 | ---- | C] () -- C:\Program Files\Common Fil
es\unins000.exe
[2010.10.18 22:03:17 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\Compres
sATI2.dll
[2010.10.18 22:03:17 | 000,003,013 | ---- | C] () -- C:\Program Files\Common Fil
es\unins000.dat
R\Desktop\CK25temOUcar.part4.rar.part
R\Desktop\CK25temOUcar.part1.rar
R\Desktop\CK25temOzbek.part3.rar
R\Desktop\Veryansin_30.05.09.part2.rar.part
R\Desktop\Veryansın - 2009 - 05 - 16.avi
R\Desktop\tatlı sert.m3u
R\Belgelerim\incmtsglt.jpg
R\Belgelerim\inco6brdf.jpg
R\Belgelerim\o6brdf.jpg
R\Belgelerim\kir76382_9bebd85e05_o.jpg
R\Belgelerim\askanya_da_zorunlu_askerlige_veda_ediyor.jpg
R\Belgelerim\aske28736236.jpg
R\Belgelerim\ask11trbzl.jpg
R\Belgelerim\ask1_SugMS0y8r6QiloYBe2bZHg4_t0gQw.jpg
R\Belgelerim\ask28736236.jpg
R\Belgelerim\meb044139268_1026762_4562.jpg
R\Desktop\Anayasa değişikliği karşılaştırmalı teklif tablosu.pdf
R\Desktop\kemal sunal film müzikleri.m3u
R\Belgelerim\ydpe_Dirilis_Partisi.png
R\Belgelerim\karakoc.jpg
R\Belgelerim\bekfile.jpg
R\Belgelerim\msnHagi028.jpg
R\Belgelerim\ozbfile.jpg
R\Belgelerim\chpim144637_2.jpg
R\Belgelerim\incimg88890.jpg
R\Desktop\mazi kalbimde.m3u
R\Desktop\yeni.m3u
R\Desktop\resitaller 1.m3u
R\Desktop\her şey yolunda.m3u
R\Desktop\bir yaz daha bitiyor.m3u
R\Desktop\ay karanlık.m3u
R\Desktop\kağıt evler.m3u
R\Belgelerim\fan_tt.JPG
R\Belgelerim\tt.jpg
R\Belgelerim\fan_ziy.JPG
R\Belgelerim\ziy.jpg
R\Belgelerim\fan_ata.JPG
R\Belgelerim\ata.jpg
R\Belgelerim\fan_nej.JPG
R\Belgelerim\nej.jpg
R\Belgelerim\fan_yus.JPG
R\Belgelerim\yus.jpg
R\Belgelerim\fan_ism.JPG
R\Belgelerim\ism.jpg
R\Belgelerim\fan_osm.JPG
R\Belgelerim\osm.jpg
R\Belgelerim\fan_rau.JPG
R\Belgelerim\rau.jpg
R\Belgelerim\fan_env.jpg
R\Belgelerim\env.jpg
R\Belgelerim\fan_ats.jpg
R\Belgelerim\fan_bar.jpg
R\Belgelerim\incfvb38h.gif
R\Belgelerim\isi96_103673482997414_100000642872550_100023_6450153_n.jpg
R\Belgelerim\fm2010_002.jpg
R\Belgelerim\59881_432746936247_535671247_4866089_4897735_n.jpg
R\Belgelerim\abd6filoa.jpg
R\Belgelerim\ref63_460206249679_555134679_6557056_7827444_n.jpg
R\Belgelerim\eve75_548458694_6874_n.jpg
R\Belgelerim\KİRALIK.doc
R\Belgelerim\senmisak-imilli.jpg
R\Desktop\LimeWire 5.5.14.lnk
R\Belgelerim\incan-inci-sözlük-capsleri_31017.gif
R\Desktop\umay6.pdf
R\Belgelerim\fm2010_001.JPG
R\Belgelerim\ozd244842_2.jpg
R\Belgelerim\fon.JPG
R\Belgelerim\chpIMG_0016_.jpg
R\Belgelerim\chpafis_b09.jpg
R\Belgelerim\chphex2.gif
R\Belgelerim\CHP-Logo-Dikey.jpg
R\Belgelerim\oro61.jpg
R\Belgelerim\ata_bar10982076.jpg
R\Desktop\FM2010_v10.2.0_PC_Patch.exe
R\Belgelerim\Vakıf Bireysel_Emeklilik.pdf
R\Belgelerim\hay63_10150261596240253_295592860252_14377482_8024633_n.jpg
[2010.08.28 15:24:04 | 000,450,936 | ---- | C] () -- C:\Documents and Settings\L
ocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
R\Belgelerim\artbg.gif
R\Belgelerim\forspot_as.jpg
R\Belgelerim\fortulpar_fc_ozbekistan.jpg
R\Belgelerim\for1250_2237.jpg
R\Belgelerim\hay42416912687069316053.jpg
R\Belgelerim\uma28_149709228389940_100000525912127_362722_8336066_n.jpg
R\Belgelerim\dar01_141104375917092_100000525912127_315430_2358260_n.jpg
R\Desktop\BES.rtf
R\Desktop\2eylul-Mart06.doc
R\Belgelerim\pau5665.jpg
R\Belgelerim\sar5455.jpg
R\Belgelerim\sur00_458159168833_14972983833_6299610_7623296_n.jpg
R\Belgelerim\artback.gif
R\Belgelerim\artback_cizgi.gif
R\Belgelerim\hayminnelli_logo.png
R\Belgelerim\umay5.jpg
R\Desktop\hareketli.m3u
R\Desktop\Ayna.lnk
R\Belgelerim\artmain_bg.jpg
R\Belgelerim\yet4761508_325513_7096.jpg
R\Belgelerim\chp27188341_30109222_6549.jpg
R\Desktop\Readon TV Movie Radio Player.lnk
[2010.03.14 23:26:38 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnn
t.dll
[2009.12.30 00:03:46 | 000,000,029 | ---- | C] () -- C:\WINDOWS\DEBUGSM.INI
[2009.12.26 14:44:09 | 000,000,067 | ---- | C] () -- C:\WINDOWS\#1 Video Convert
er.INI
[2009.11.07 18:35:39 | 000,000,075 | ---- | C] () -- C:\WINDOWS\System32\ANTISA~
1.ini
R\Application Data\NMM-MetaData.db
[2009.10.24 17:49:10 | 000,000,075 | ---- | C] () -- C:\WINDOWS\WININIT.INI
R\Application Data\ntlog.sys
[2009.08.29 11:13:53 | 000,000,256 | ---- | C] () -- C:\WINDOWS\onlineeye.INI
[2009.08.20 11:04:58 | 000,000,795 | ---- | C] () -- C:\WINDOWS\gnuchess.ini
\BTNetFilter.sys
\vbtenum.sys
[2009.08.13 10:43:44 | 000,000,097 | ---- | C] () -- C:\WINDOWS\System32\PICSDK.
ini
[2009.08.13 10:40:25 | 000,000,026 | ---- | C] () -- C:\WINDOWS\CDE SX400EXPORT.
ini
[2009.08.11 23:06:41 | 000,000,000 | ---- | C] () -- C:\WINDOWS\PestPatrol5.INI
ll Users\Application Data\QTSBandwidthCache
\Sonyhcp.dll
[2009.08.07 02:04:50 | 000,000,000 | ---- | C] () -- C:\WINDOWS\PROTOCOL.INI
[2009.08.06 14:51:05 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2009.08.06 09:24:24 | 000,000,498 | ---- | C] () -- C:\WINDOWS\ODBC.INI
\SIVX32.SYS
[2009.08.05 22:55:13 | 000,164,352 | ---- | C] () -- C:\WINDOWS\System32\unrar.d
ll
[2009.08.05 22:55:12 | 000,755,027 | ---- | C] () -- C:\WINDOWS\System32\xvidcor
e.dll
R\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009.07.28 22:32:11 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
R\Local Settings\Application Data\fusioncache.dat
\FlashSys.sys
[2005.12.07 11:31:00 | 000,202,752 | R--- | C] () -- C:\WINDOWS\System32\CddbCdd
a.dll
[2005.10.11 16:39:44 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\bindevt
.dll
[2005.08.12 23:57:09 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx33
1.dll
[2001.08.16 06:00:00 | 000,122,880 | ---- | C] () -- C:\WINDOWS\System32\HMPG12.
DLL
[2001.08.16 06:00:00 | 000,118,784 | ---- | C] () -- C:\WINDOWS\System32\HMPV2_E
NC_MMX.dll
[2001.08.16 06:00:00 | 000,099,672 | ---- | C] () -- C:\WINDOWS\System32\DIBAPI3
2.DLL
[2001.08.16 06:00:00 | 000,014,072 | ---- | C] () -- C:\WINDOWS\TWACKER.INI
[color=#E56717]========== LOP Check ==========[/color]
[2009.08.14 10:06:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All
Users\Application Data\Bluetooth
Users\Application Data\CA
Users\Application Data\DAEMON Tools Lite
Users\Application Data\Downloaded Installations
Users\Application Data\EPSON
Users\Application Data\ESET
Users\Application Data\Iomatic
Users\Application Data\Messenger Plus!
Users\Application Data\PC Suite
Users\Application Data\Readon
Users\Application Data\Sports Interactive
Users\Application Data\TEMP
Users\Application Data\UDL
Users\Application Data\WindowsLiveInstaller
Users\Application Data\Zbshareware Lab
pplication Data\Camfrog
pplication Data\CamTrack
pplication Data\DAEMON Tools
pplication Data\DAEMON Tools Lite
pplication Data\DAEMON Tools Pro
pplication Data\Datalayer
pplication Data\EPSON
pplication Data\LimeWire
pplication Data\log
pplication Data\Netscape
pplication Data\Nokia
pplication Data\Nokia Multimedia Player
pplication Data\Opera
pplication Data\PC Suite
pplication Data\pdfforge
pplication Data\Photodex
pplication Data\Search Settings
pplication Data\settings
pplication Data\Shenturk
pplication Data\Sports Interactive
pplication Data\URSoft
pplication Data\VDownloader
[2010.11.13 15:48:49 | 000,000,450 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_
Synchronization-{908451BE-9471-498E-8073-82C9F1B2983A}.job
[color=#E56717]========== Purity Check ==========[/color]
[color=#E56717]========== Alternate Data Streams ==========[/color]

@Alternate Data Stream - 101 bytes -> C:\Documents and Settings\All Users\Applic
ation Data\TEMP:B3D74A13
< End of report >

OTL

Uploaded by

Copyright:

Available Formats

OTL

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

OTL

Uploaded by

Copyright:

Available Formats

OTL logfile created on: 13.11.

2010 20:07:11 - Run 2

Computer Name: WWW-F3BB5EAC9FE | User Name: UĞUR | Logged in as Administrator.

[color=#E56717]========== Modules (All) ==========[/color]

[color=#E56717]========== Driver Services (All) ==========[/color]

[color=#E56717]========== Internet Explorer ==========[/color]

[color=#E56717]========== Files - Modified Within 90 Days ==========[/color]

[color=#E56717]========== Purity Check ==========[/color]

[color=#E56717]========== Alternate Data Streams ==========[/color]

You might also like

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.