Yahoo Search Redirect Virus
OTL.TXT Teil AOTL Logfile: Code:
OTL logfile created on: 21.05.2011 14:22:01 - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\Kargi\Downloads
Starter Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 0000041f | Country: Türkiye | Language: TRK | Date Format: dd.MM.yyyy
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 52,00% Memory free
3,00 Gb Paging File | 2,00 Gb Available in Paging File | 57,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 100,01 Gb Total Space | 25,84 Gb Free Space | 25,84% Space Free | Partition Type: NTFS
Drive D: | 132,78 Gb Total Space | 52,89 Gb Free Space | 39,84% Space Free | Partition Type: NTFS
Drive G: | 100,00 Mb Total Space | 37,77 Mb Free Space | 37,77% Space Free | Partition Type: NTFS
Computer Name: KARGI-EXPER | User Name: Kargi | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Users\Kargi\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Users\Kargi\Downloads\HiJackThis204.exe (Trend Micro Inc.)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Apoint2K\Hidfind.exe (Alps Electric Co., Ltd.)
PRC - C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronic Corp.)
PRC - C:\Program Files\Norton 360\Engine\4.3.0.5\ccsvchst.exe (Symantec Corporation)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - C:\Windows\System32\conhost.exe (Microsoft Corporation)
========== Modules (SafeList) ==========
MOD - C:\Users\Kargi\Downloads\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll (Microsoft Corporation)
========== Win32 Services (SafeList) ==========
SRV - (N360) -- C:\Program Files\Norton 360\Engine\4.3.0.5\ccSvcHst.exe (Symantec Corporation)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
========== Driver Services (SafeList) ==========
DRV - (NAVEX15) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\VirusDefs\20110520.036\NAVEX15.SYS (Symantec Corporation)
DRV - (NAVENG) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\VirusDefs\20110520.036\NAVENG.SYS (Symantec Corporation)
DRV - (eeCtrl) -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (Symantec Corporation)
DRV - (EraserUtilRebootDrv) -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (SymEvent) -- C:\Windows\System32\drivers\SYMEVENT.SYS (Symantec Corporation)
DRV - (BHDrvx86) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\BASHDefs\20110518.001\BHDrvx86.sys (Symantec Corporation)
DRV - (IDSVix86) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\IPSDefs\20110518.001\IDSvix86.sys (Symantec Corporation)
DRV - (ApfiltrService) -- C:\Windows\System32\drivers\Apfiltr.sys (Alps Electric Co., Ltd.)
DRV - (SYMTDIv) -- C:\Windows\System32\Drivers\N360\0403000.005\SYMTDIV.SYS (Symantec Corporation)
DRV - (SymIRON) -- C:\Windows\system32\drivers\N360\0403000.005\Ironx86.SYS (Symantec Corporation)
DRV - (SymEFA) -- C:\Windows\system32\drivers\N360\0403000.005\SYMEFA.SYS (Symantec Corporation)
DRV - (SRTSP) -- C:\Windows\System32\Drivers\N360\0403000.005\SRTSP.SYS (Symantec Corporation)
DRV - (SRTSPX) Symantec Real Time Storage Protection (PEL) -- C:\Windows\system32\drivers\N360\0403000.005\SRTSPX.SYS (Symantec Corporation)
DRV - (ccHP) -- C:\Windows\system32\drivers\N360\0403000.005\ccHPx86.sys (Symantec Corporation)
DRV - (SiS6350) -- C:\Windows\System32\drivers\SISGRKMD.sys (Silicon Integrated Systems Corporation)
DRV - (RTL8187B) -- C:\Windows\System32\drivers\RTL8187B.sys (Realtek Semiconductor Corporation )
DRV - (SymDS) -- C:\Windows\system32\drivers\N360\0403000.005\SYMDS.SYS (Symantec Corporation)
DRV - (uagp35) -- C:\Windows\system32\DRIVERS\sisagpx.sys (Silicon Integrated Systems Corporation)
DRV - (SISAGP) -- C:\Windows\system32\DRIVERS\SISAGPX.sys (Silicon Integrated Systems Corporation)
DRV - (WinUsb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
DRV - (SiSGbeLH) -- C:\Windows\System32\drivers\SiSGB6.sys (Silicon Integrated Systems Corp.)
DRV - (VMUVC) -- C:\Windows\System32\drivers\VMUVC.sys (Vimicro Corporation)
DRV - (vvftUVC) -- C:\Windows\System32\drivers\vvftUVC.sys (Vimicro Corporation)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bigseekpro.com/clipextractor/{1F44E312-6FE2-490D-87E9-5492257F1953}
IE - HKU\S-1-5-21-3260133423-2253578972-2420577606-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.exper.com.tr [binary data]
IE - HKU\S-1-5-21-3260133423-2253578972-2420577606-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
IE - HKU\S-1-5-21-3260133423-2253578972-2420577606-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://tr.msn.com/?ocid=iehp
IE - HKU\S-1-5-21-3260133423-2253578972-2420577606-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = tr
IE - HKU\S-1-5-21-3260133423-2253578972-2420577606-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = E0 90 21 FB C3 01 CC 01 [binary data]
IE - HKU\S-1-5-21-3260133423-2253578972-2420577606-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "hxxp://www.google.de/ig"
FF - prefs.js..keyword.URL: "hxxp://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q="
FF - HKLM\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\IPSFFPlgn\ [2011.04.24 15:43:51 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\coFFPlgn\ [2011.04.23 17:57:43 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011.05.20 11:19:23 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
[2011.04.23 17:46:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kargi\AppData\Roaming\mozilla\Extensions
[2011.05.11 11:21:19 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kargi\AppData\Roaming\mozilla\Firefox\Profiles\sd0pdf2u.default\extensions
[2011.04.23 18:19:44 | 000,000,000 | ---D | M] (Clip Extractor Toolbar) -- C:\Users\Kargi\AppData\Roaming\mozilla\Firefox\Profiles\sd0pdf2u.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}
[2011.04.23 18:20:15 | 000,002,384 | ---- | M] () -- C:\Users\Kargi\AppData\Roaming\Mozilla\Firefox\Profiles\sd0pdf2u.default\searchplugins\search.xml
[2011.05.20 11:19:23 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011.04.23 17:59:52 | 000,000,000 | ---D | M] (Skype extension) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
File not found (No name found) --
[2011.04.24 15:43:51 | 000,000,000 | ---D | M] (Norton IPS) -- C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\IPSFFPLGN
[2011.04.14 19:40:03 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\browsercomps.dll
[2010.01.01 11:00:00 | 000,001,392 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\amazondotcom-de.xml
[2010.01.01 11:00:00 | 000,002,252 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\bing.xml
[2010.01.01 11:00:00 | 000,001,153 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\eBay-de.xml
[2010.01.01 11:00:00 | 000,006,805 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\leo_ende_de.xml
[2010.01.01 11:00:00 | 000,001,178 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-de.xml
[2010.01.01 11:00:00 | 000,001,105 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\yahoo-de.xml
O1 HOSTS File: ([2009.06.11 00:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360\Engine\4.3.0.5\coieplg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360\Engine\4.3.0.5\ipsbho.dll (Symantec Corporation)
O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (SMTTB2009 Class) - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files\Clip Extractor Toolbar\tbcore3.dll ()
O3 - HKLM\..\Toolbar: (Clip Extractor Toolbar) - {338B4DFE-2E2C-4338-9E41-E176D497299E} - C:\Program Files\Clip Extractor Toolbar\tbcore3.dll ()
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\4.3.0.5\coieplg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-3260133423-2253578972-2420577606-1000\..\Toolbar\WebBrowser: (Clip Extractor Toolbar) - {338B4DFE-2E2C-4338-9E41-E176D497299E} - C:\Program Files\Clip Extractor Toolbar\tbcore3.dll ()
O3 - HKU\S-1-5-21-3260133423-2253578972-2420577606-1000\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\4.3.0.5\coieplg.dll (Symantec Corporation)
O4 - HKLM..\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronic Corp.)
O4 - HKLM..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Low Rights present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O13 - gopher Prefix: missing
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (explorer.exe) - explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.11 00:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - File not found
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found
MsConfig - StartUpReg: Skype - hkey= - key= - C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.)
MsConfig - StartUpReg: SMSTray - hkey= - key= - C:\Program Files\Samsung\EmoDio\SMSTray.exe (SAMSUNG ELECTRONICS)
SafeBootMin: AppMgmt - Service
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: NTDS - File not found
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vmms - Service
SafeBootMin: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: AppMgmt - Service
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: NTDS - File not found
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vmms - Service
SafeBootNet: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
Drivers32: msacm.ac3acm - C:\Windows\System32\ac3acm.acm (fccHandler)
Drivers32: msacm.ac3filter - C:\Windows\System32\ac3filter.acm ()
Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lameacm - C:\Windows\System32\lameACM.acm (hxxp://www.mp3dev.org/)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FFDS - C:\Windows\System32\ff_vfw.dll ()
Drivers32: VIDC.XVID - C:\Windows\System32\xvidvfw.dll ()
Drivers32: VIDC.YV12 - C:\Windows\System32\yv12vfw.dll (www.helixcommunity.org)
========== Files/Folders - Created Within 30 Days ==========
[2011.05.21 13:13:41 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Roaming\Malwarebytes
[2011.05.21 13:11:27 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2011.05.21 13:11:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011.05.21 13:11:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2011.05.21 13:11:23 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2011.05.21 13:11:22 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2011.05.21 11:05:55 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{D4506B6D-D739-4DE0-A863-80A8F4FE2362}
[2011.05.20 11:05:17 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{D2BFA828-1465-42A1-A830-3046807AD3BA}
[2011.05.19 02:53:20 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\poqexec.exe
[2011.05.18 18:38:48 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Roaming\Thinstall
[2011.05.18 18:38:48 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\Thinstall
[2011.05.18 09:51:47 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{DBF7905D-70E4-48FE-ADC4-91B1207A9CD3}
[2011.05.17 09:51:09 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{A85A974A-DE4E-480C-A0AB-74E2DF3A6B12}
[2011.05.16 09:50:31 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{B072B2F5-857E-44F5-9890-1881B2874982}
[2011.05.15 09:49:52 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{01151125-C344-4602-88D4-6CC719996FC0}
[2011.05.14 23:11:51 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\Microsoft Games
[2011.05.14 21:21:28 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{4BA3C763-4F83-4492-90EB-F69EE1DE5236}
[2011.05.14 09:21:03 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{BDFC348B-078F-473E-AFE5-D8291F40571D}
[2011.05.13 21:20:50 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{CF42E8DF-A2A3-4CB5-AB32-BDF0D33B5DF6}
[2011.05.13 09:20:38 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{D5B39BEC-E5D5-4093-84CE-E4E51EA38EF0}
[2011.05.12 21:20:26 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{C8D1874B-F359-404B-85E8-695113569A02}
[2011.05.12 09:20:33 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{BDAD932B-C4F4-4336-9C94-FB8BAA2FBDEC}
[2011.05.11 12:18:02 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{154068B3-0299-4C55-9467-0F15DA87A2FA}
[2011.05.11 09:33:38 | 000,000,000 | ---D | C] -- C:\TEMP
[2011.05.11 00:17:36 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{D03C71A8-136A-45B7-A29B-ED02C34FD3DD}
[2011.05.10 22:23:13 | 000,284,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbport.sys
[2011.05.10 22:23:11 | 000,005,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbd.sys
[2011.05.10 22:23:07 | 003,957,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2011.05.10 22:23:07 | 003,901,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2011.05.10 12:17:24 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{078B02EE-5E11-4227-98FD-5A8D3F33E2BC}
[2011.05.10 11:55:55 | 000,000,000 | ---D | C] -- C:\Users\Kargi\Documents\Meine empfangenen Dateien
[2011.05.10 00:17:11 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{6EDB1EA6-BD6F-42DC-8C88-46A5A529EB66}
[2011.05.09 19:53:37 | 014,744,456 | ---- | C] ( ) -- C:\Users\Kargi\Desktop\K-Lite_Codec_Pack_700_Full[1].exe
[2011.05.09 19:22:37 | 000,839,680 | ---- | C] (hxxp://www.mp3dev.org/) -- C:\Windows\System32\lameACM.acm
[2011.05.09 19:12:49 | 014,744,456 | ---- | C] ( ) -- C:\Users\Kargi\Desktop\K-Lite_Codec_Pack_700_Full.exe
[2011.05.09 12:16:45 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{11DEFDEA-C215-4608-9BD9-DEAC69750C2B}
[2011.05.09 00:16:17 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{83D7346F-1CF8-42E4-AD85-05A3BACDF28C}
[2011.05.08 19:50:50 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Joboshare
[2011.05.08 19:50:48 | 000,000,000 | ---D | C] -- C:\Program Files\Joboshare
[2011.05.08 13:12:42 | 000,000,000 | ---D | C] -- C:\Users\Kargi\Documents\Pinnacle VideoSpin
[2011.05.08 13:06:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Pinnacle
[2011.05.08 13:05:51 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\Downloaded Installations
[2011.05.08 12:15:51 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{468072F5-A192-4822-85C3-CB319255A1DB}
[2011.05.08 12:14:22 | 000,000,000 | ---D | C] -- C:\Windows\de
[2011.05.07 00:29:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\3GP Player 2010
[2011.05.07 00:29:45 | 000,000,000 | ---D | C] -- C:\Program Files\3GPplayer2010
[2011.05.07 00:27:10 | 011,525,230 | ---- | C] (Reganam ) -- C:\Users\Kargi\Desktop\3GP-Player.exe
[2011.05.07 00:09:39 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{AE30FFF2-8874-44D4-A4AC-4DA74B2D02AA}
[2011.05.05 11:27:16 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{F29432D2-9FD5-4C63-BCB8-EC0A06957016}
[2011.05.04 23:25:54 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{3C1AA983-3D04-4A38-8911-ED6F8F2822DC}
[2011.05.04 11:25:33 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{F701DB1A-4C75-49BD-ADA5-A4642FE9E0B2}
[2011.05.03 11:24:55 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{E3AD9178-C1AD-4CF5-8418-1C0AF35371F3}
[2011.05.02 15:46:34 | 000,209,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TABCTL32.OCX
[2011.05.02 15:46:34 | 000,125,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VB6DE.DLL
[2011.05.02 15:46:34 | 000,067,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SYSINFO.OCX
[2011.05.02 11:24:16 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{3FD2E5BD-45A9-427C-B713-156A9DC390A0}
[2011.05.01 19:58:57 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Roaming\DivX
[2011.05.01 19:10:26 | 000,000,000 | ---D | C] -- C:\tmp
[2011.05.01 11:16:03 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{481E557A-6411-4F32-B414-2821CD71C9D7}
[2011.04.30 22:06:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\QuickTime
[2011.04.30 21:59:21 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{556D2D6B-30B5-4EF7-A5B5-36A61C82194F}
[2011.04.30 21:37:28 | 000,000,000 | ---D | C] -- C:\Users\Kargi\.thumbnails
[2011.04.30 21:35:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blender Foundation
[2011.04.30 21:35:00 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Roaming\Blender Foundation
[2011.04.30 21:34:55 | 000,000,000 | ---D | C] -- C:\Program Files\Blender Foundation
[2011.04.30 21:07:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\discreet
[2011.04.30 21:07:23 | 000,000,000 | ---D | C] -- C:\Program Files\backburner 2
[2011.04.30 13:37:35 | 000,106,609 | ---- | C] ((주) 마크애니, 컨텐츠 사업실) -- C:\Windows\System32\MaJUtilLib.dll
[2011.04.30 13:37:35 | 000,049,152 | R--- | C] ((주) 마크애니) -- C:\Windows\System32\MaJGUILib.dll
[2011.04.30 13:37:35 | 000,045,056 | ---- | C] ((주) 마크애니) -- C:\Windows\System32\MaXMLProto.dll
[2011.04.30 13:03:59 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Roaming\Foxit Software
[2011.04.30 12:59:48 | 000,373,760 | ---- | C] (Softuarium) -- C:\Windows\System32\xwpdlx20.ocx
[2011.04.30 12:59:48 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Screen Capture Pro
[2011.04.30 12:59:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Screen Capture Pro
[2011.04.30 12:59:47 | 001,066,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Mscomctl.ocx
[2011.04.30 12:59:46 | 001,388,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\temp.000
[2011.04.30 12:42:12 | 000,000,000 | ---D | C] -- C:\Users\Kargi\Documents\Downloads
[2011.04.30 12:41:52 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Roaming\GetRightToGo
[2011.04.30 09:58:55 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{D91D6A0B-9E85-4B3E-9332-38A59EA814A3}
[2011.04.29 21:58:29 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{ECA8F419-AF64-440A-8AD7-22A96A25EACC}
[2011.04.29 19:54:57 | 000,000,000 | ---D | C] -- C:\Users\Kargi\Documents\SelfMV
[2011.04.29 19:53:42 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Roaming\Media Player Classic
[2011.04.29 09:58:17 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{49526C9E-F688-448D-98F8-45D19154AAAC}
[2011.04.28 09:57:39 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{5159AB98-24B2-41D1-A518-8A4AE51D8B87}
[2011.04.27 21:22:36 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{36E17CF9-D92F-44F3-8488-C350197ADDB7}
[2011.04.27 09:22:24 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{64F39B9B-1862-489B-8AC0-79F41CDD3A91}
[2011.04.27 09:15:50 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\prevhost.exe
[2011.04.27 09:15:32 | 001,686,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\esent.dll
[2011.04.27 09:15:32 | 000,146,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\storport.sys
[2011.04.27 09:15:31 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fsutil.exe
[2011.04.27 09:15:24 | 000,442,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll
[2011.04.27 09:15:23 | 002,614,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe
[2011.04.26 21:21:59 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{E24AF082-975F-471F-859E-9539887452D2}
[2011.04.26 11:29:07 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\Adobe
[2011.04.26 09:21:47 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{D600640C-9B53-4D83-86CB-40D0F28E9755}
[2011.04.26 09:21:47 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{634427D8-4CF3-4C10-A26C-0D1545E5EAD9}
[2011.04.25 21:21:21 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{E1742150-E1C7-4C99-A6EB-9F150F826520}
[2011.04.25 09:21:07 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{0E1157D6-E5F4-4D06-839E-FA355EDC77A3}
[2011.04.24 23:51:21 | 000,000,000 | ---D | C] -- C:\Program Files\Opera
[2011.04.24 23:51:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2011.04.24 23:50:30 | 000,000,000 | ---D | C] -- C:\Program Files\Google
[2011.04.24 23:50:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
[2011.04.24 23:50:12 | 000,000,000 | ---D | C] -- C:\Program Files\Foxit Software
[2011.04.24 23:50:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
[2011.04.24 23:50:07 | 000,000,000 | ---D | C] -- C:\Program Files\7-Zip
[2011.04.24 23:49:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
[2011.04.24 23:49:49 | 000,237,568 | ---- | C] (www.helixcommunity.org) -- C:\Windows\System32\yv12vfw.dll
[2011.04.24 23:49:49 | 000,151,552 | ---- | C] (fccHandler) -- C:\Windows\System32\ac3acm.acm
[2011.04.24 23:49:46 | 000,000,000 | ---D | C] -- C:\Program Files\K-Lite Codec Pack
[2011.04.24 23:49:34 | 001,355,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvbvm50.dll
[2011.04.24 23:49:33 | 001,099,776 | ---- | C] (The OpenSSL Project, hxxp://www.openssl.org/) -- C:\Windows\System32\libeay32.dll
[2011.04.24 23:49:33 | 001,017,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc70u.dll
[2011.04.24 23:49:33 | 000,614,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\comctl32.ocx
[2011.04.24 23:49:33 | 000,415,552 | ---- | C] (Microsoft Corporation ) -- C:\Windows\System32\comct332.ocx
[2011.04.24 23:49:33 | 000,222,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dblist32.ocx
[2011.04.24 23:49:33 | 000,215,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mci32.ocx
[2011.04.24 23:49:33 | 000,170,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\comct232.ocx
[2011.04.24 23:49:33 | 000,155,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\comdlg32.ocx
[2011.04.24 23:49:33 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\atl70.dll
[2011.04.24 23:49:33 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc70ita.dll
[2011.04.24 23:49:33 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc70fra.dll
[2011.04.24 23:49:33 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc70esp.dll
[2011.04.24 23:49:33 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc70deu.dll
[2011.04.24 23:49:33 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc70enu.dll
[2011.04.24 23:49:33 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc70kor.dll
[2011.04.24 23:49:33 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc70jpn.dll
[2011.04.24 23:49:33 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc70cht.dll
[2011.04.24 23:49:33 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc70chs.dll
[2011.04.24 23:49:26 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\Yandex
[2011.04.24 23:49:25 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Roaming\Yandex
[2011.04.24 23:49:24 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Roaming\Opera
[2011.04.24 23:49:24 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\Opera
[2011.04.24 23:49:24 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\Google
[2011.04.24 23:49:24 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\Bromium
[2011.04.24 23:48:58 | 000,000,000 | ---D | C] -- C:\Windows\VMUVC
[2011.04.24 23:48:43 | 000,516,096 | ---- | C] (vimicro) -- C:\Windows\System32\VMUVC.ax
[2011.04.24 23:48:43 | 000,188,416 | ---- | C] (Vimicro Corporation) -- C:\Windows\System32\vvftUVC.ax
[2011.04.24 23:48:43 | 000,098,304 | ---- | C] (Vimicro Corporation) -- C:\Windows\System32\VMCtrl.ax
[2011.04.24 23:48:42 | 000,398,720 | ---- | C] (Vimicro Corporation) -- C:\Windows\System32\drivers\vvftUVC.sys
[2011.04.24 23:48:42 | 000,252,416 | ---- | C] (Vimicro Corporation) -- C:\Windows\System32\drivers\VMUVC.sys
[2011.04.24 23:48:42 | 000,073,728 | ---- | C] (Vimicro Corporation) -- C:\Windows\System32\exvmuvc.ax
[2011.04.24 23:48:38 | 000,094,208 | ---- | C] (Vimicro Cooperation) -- C:\Windows\System32\VvFtCtrl.dll
[2011.04.24 23:48:38 | 000,011,776 | ---- | C] (Vimicro Corporation) -- C:\Windows\System32\VMUVC.dll
[2011.04.24 23:48:18 | 000,000,000 | ---D | C] -- C:\Program Files\Apoint2K
[2011.04.24 23:47:58 | 001,461,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WdfCoInstaller01009.dll
[2011.04.24 23:47:58 | 000,255,096 | ---- | C] (Alps Electric Co., Ltd.) -- C:\Windows\System32\drivers\Apfiltr.sys
[2011.04.24 23:47:58 | 000,114,616 | ---- | C] (Alps Electric Co., Ltd.) -- C:\Windows\System32\Vxdif.dll
[2011.04.24 23:47:56 | 000,170,864 | ---- | C] (ALPS Electric Co., Ltd.) -- C:\Windows\System32\ApShellExt.dll
[2011.04.24 23:47:39 | 000,376,832 | ---- | C] (Realtek Semiconductor Corporation ) -- C:\Windows\System32\drivers\RTL8187B.sys
[2011.04.24 23:47:20 | 004,080,128 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\Windows\System32\SiSGlv.dll
[2011.04.24 23:47:20 | 003,653,120 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\Windows\System32\SISGRUMD.dll
[2011.04.24 23:47:20 | 000,655,360 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\Windows\System32\SiSClone.dll
[2011.04.24 23:47:20 | 000,465,920 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\Windows\System32\drivers\SISGRKMD.sys
[2011.04.24 23:47:20 | 000,212,992 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\Windows\System32\SiSFunc.dll
[2011.04.24 23:47:20 | 000,006,656 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\Windows\System32\SiSCo.dll
[2011.04.24 23:47:20 | 000,005,632 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\Windows\System32\SiSKrl.dll
[2011.04.24 23:47:10 | 000,000,000 | ---D | C] -- C:\Program Files\Elantech
[2011.04.24 23:47:03 | 004,543,880 | ---- | C] (ELAN Microelectronics Corp.) -- C:\Windows\System32\ETDUI.cpl
[2011.04.24 23:46:37 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2011.04.24 23:46:36 | 000,000,000 | ---D | C] -- C:\Windows\System32\RTCOM
[2011.04.24 23:46:14 | 002,145,896 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkPgExt.dll
[2011.04.24 23:46:14 | 001,783,056 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\System32\WavesLib.dll
[2011.04.24 23:46:14 | 001,723,536 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\System32\WavesGUILib.dll
[2011.04.24 23:46:14 | 001,084,008 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RTSndMgr.cpl
[2011.04.24 23:46:14 | 000,820,224 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RCoRes.dat
[2011.04.24 23:46:14 | 000,345,328 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSTSXT.dll
[2011.04.24 23:46:14 | 000,214,352 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\System32\SFNHK.dll
[2011.04.24 23:46:14 | 000,185,584 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSTSHD.dll
[2011.04.24 23:46:14 | 000,173,296 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSHP360.dll
[2011.04.24 23:46:14 | 000,140,528 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSWOW.dll
[2011.04.24 23:46:14 | 000,074,064 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\System32\SFCOM.dll
[2011.04.24 23:46:14 | 000,068,944 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\System32\SFAPO.dll
[2011.04.24 23:46:13 | 003,805,288 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkAPO.dll
[2011.04.24 23:46:13 | 001,705,816 | ---- | C] (Dolby Laboratories) -- C:\Windows\System32\R4EEP32A.dll
[2011.04.24 23:46:13 | 000,485,992 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkApoApi.dll
[2011.04.24 23:46:13 | 000,359,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEP32A.dll
[2011.04.24 23:46:13 | 000,341,848 | ---- | C] (Dolby Laboratories) -- C:\Windows\System32\R4EED32A.dll
[2011.04.24 23:46:13 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RP3DHT32.dll
[2011.04.24 23:46:13 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RP3DAA32.dll
[2011.04.24 23:46:13 | 000,170,840 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEED32A.dll
[2011.04.24 23:46:13 | 000,096,600 | ---- | C] (Dolby Laboratories) -- C:\Windows\System32\R4EEL32A.dll
[2011.04.24 23:46:13 | 000,081,240 | ---- | C] (Dolby Laboratories) -- C:\Windows\System32\R4EEA32A.dll
[2011.04.24 23:46:13 | 000,078,680 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEL32A.dll
[2011.04.24 23:46:13 | 000,069,224 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkCoInst.dll
[2011.04.24 23:46:13 | 000,064,856 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEG32A.dll
[2011.04.24 23:46:13 | 000,061,784 | ---- | C] (Dolby Laboratories) -- C:\Windows\System32\R4EEG32A.dll
[2011.04.24 23:46:12 | 001,938,704 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\System32\MaxxAudioEQ.dll
[2011.04.24 23:46:12 | 001,730,112 | ---- | C] (Fortemedia Corporation) -- C:\Windows\System32\FMAPO.dll
[2011.04.24 23:46:12 | 001,439,064 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\System32\MaxxAudioRealtek.dll
[2011.04.24 23:46:12 | 001,132,648 | ---- | C] (DTS) -- C:\Windows\System32\DTSS2SpeakerDLL.dll
[2011.04.24 23:46:12 | 000,962,664 | ---- | C] (DTS) -- C:\Windows\System32\DTSS2HeadphoneDLL.dll
[2011.04.24 23:46:12 | 000,901,224 | ---- | C] (DTS) -- C:\Windows\System32\DTSBoostDLL.dll
[2011.04.24 23:46:12 | 000,448,616 | ---- | C] (DTS) -- C:\Windows\System32\DTSBassEnhancementDLL.dll
[2011.04.24 23:46:12 | 000,429,160 | ---- | C] (DTS) -- C:\Windows\System32\DTSSymmetryDLL.dll
[2011.04.24 23:46:12 | 000,406,120 | ---- | C] (DTS) -- C:\Windows\System32\DTSVoiceClarityDLL.dll
[2011.04.24 23:46:12 | 000,291,432 | ---- | C] (DTS) -- C:\Windows\System32\DTSNeoPCDLL.dll
[2011.04.24 23:46:12 | 000,259,928 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\System32\MaxxAudioAPO30.dll
[2011.04.24 23:46:12 | 000,252,760 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\System32\MaxxVolumeSDAPO.dll
[2011.04.24 23:46:12 | 000,236,648 | ---- | C] (DTS) -- C:\Windows\System32\DTSGainCompensatorDLL.dll
[2011.04.24 23:46:12 | 000,232,792 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\System32\MaxxAudioAPO20.dll
[2011.04.24 23:46:12 | 000,224,360 | ---- | C] (DTS) -- C:\Windows\System32\DTSLimiterDLL.dll
[2011.04.24 23:46:12 | 000,132,368 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\System32\MaxxAudioAPO.dll
[2011.04.24 23:46:12 | 000,107,112 | ---- | C] (DTS) -- C:\Windows\System32\DTSLFXAPO.dll
[2011.04.24 23:46:12 | 000,107,112 | ---- | C] (DTS) -- C:\Windows\System32\DTSGFXAPO.dll
[2011.04.24 23:46:12 | 000,106,600 | ---- | C] (DTS) -- C:\Windows\System32\DTSGFXAPONS.dll
[2011.04.24 23:46:10 | 000,175,200 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\System32\AERTACap.dll
[2011.04.24 23:46:10 | 000,096,160 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\System32\AERTARen.dll
[2011.04.24 23:45:59 | 000,058,400 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\Windows\System32\drivers\sisagpx.sys
[2011.04.24 23:45:54 | 000,014,128 | ---- | C] (VMware, Inc.) -- C:\Windows\System32\drivers\vmmouse.sys
[2011.04.24 15:44:04 | 000,339,504 | ---- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0403000.005\symtdiv.sys
[2011.04.24 15:44:04 | 000,328,752 | R--- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0403000.005\symds.sys
[2011.04.24 15:44:04 | 000,325,680 | ---- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0403000.005\srtsp.sys
[2011.04.24 15:44:04 | 000,173,104 | ---- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0403000.005\symefa.sys
[2011.04.24 15:44:04 | 000,043,696 | ---- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0403000.005\srtspx.sys
[2011.04.24 15:44:03 | 000,501,888 | ---- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0403000.005\cchpx86.sys
[2011.04.24 15:44:03 | 000,116,784 | ---- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0403000.005\ironx86.sys
[2011.04.24 15:43:52 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\N360\0403000.005
[2011.04.24 14:44:45 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\CrashDumps
[2011.04.24 14:08:57 | 000,485,920 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\NVUNINST.EXE
[2011.04.24 14:07:58 | 000,000,000 | ---D | C] -- C:\NVIDIA
[2011.04.24 12:13:16 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHost.exe
[2011.04.24 12:13:16 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHostProxy.dll
[2011.04.24 12:13:16 | 000,049,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netfxperf.dll
[2011.04.24 12:01:25 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ks.sys
[2011.04.24 06:38:19 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{C80F374D-8AF8-4549-AD8A-4B83C7E712DD}
[2011.04.24 03:17:14 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll
[2011.04.24 03:17:14 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vbscript.dll
[2011.04.24 03:17:08 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnscacheugc.exe
[2011.04.24 03:17:03 | 000,294,912 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
[2011.04.24 03:17:03 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
[2011.04.24 03:16:57 | 000,197,632 | ---- | C] (Intel(R) Corporation) -- C:\Windows\System32\ir32_32.dll
[2011.04.24 03:16:57 | 000,082,944 | ---- | C] (Radius Inc.) -- C:\Windows\System32\iccvid.dll
[2011.04.24 03:16:53 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\t2embed.dll
[2011.04.24 03:16:42 | 000,606,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstime.dll
[2011.04.24 03:16:42 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2011.04.24 03:16:42 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2011.04.24 03:16:42 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2011.04.24 03:16:41 | 001,638,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2011.04.24 03:16:41 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2011.04.24 03:16:41 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2011.04.24 03:16:41 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2011.04.24 03:16:41 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2011.04.24 03:16:41 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2011.04.24 03:16:41 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2011.04.24 03:16:33 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
[2011.04.24 03:16:26 | 000,465,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisdecd.dll
[2011.04.24 03:16:26 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSNP.ax
[2011.04.24 03:16:21 | 000,496,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskschd.dll
[2011.04.24 03:16:21 | 000,351,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmicmiplugin.dll
[2011.04.24 03:16:21 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskcomp.dll
[2011.04.24 03:16:21 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\schtasks.exe
[2011.04.24 03:16:17 | 001,037,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lsasrv.dll
[2011.04.24 03:16:15 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rtutils.dll
[2011.04.24 03:16:05 | 001,320,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CertEnroll.dll
[2011.04.24 03:16:05 | 000,507,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winload.exe
[2011.04.24 03:16:05 | 000,442,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winresume.exe
[2011.04.24 03:15:58 | 000,573,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbc32.dll
[2011.04.24 03:15:55 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\asycfilt.dll
[2011.04.24 03:15:41 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc40.dll
[2011.04.24 03:15:41 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc40u.dll
[2011.04.24 03:15:31 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmploc.DLL
[2011.04.24 03:15:29 | 000,026,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\Diskdump.sys
[2011.04.24 03:15:27 | 002,331,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2011.04.24 03:15:26 | 000,191,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSCOVER.exe
[2011.04.24 03:15:24 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fontsub.dll
[2011.04.24 03:15:20 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll
[2011.04.24 03:15:18 | 001,328,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\quartz.dll
[2011.04.24 03:15:18 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\avifil32.dll
[2011.04.24 03:15:18 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mciavi32.dll
[2011.04.24 03:15:16 | 000,850,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sbe.dll
[2011.04.24 03:15:16 | 000,642,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CPFilters.dll
[2011.04.24 03:15:16 | 000,534,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\EncDec.dll
[2011.04.24 03:15:16 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mpg2splt.ax
[2011.04.24 03:15:14 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\webio.dll
[2011.04.24 03:14:50 | 001,170,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll
[2011.04.24 03:14:50 | 000,739,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll
[2011.04.24 03:14:49 | 001,495,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ExplorerFrame.dll
[2011.04.24 03:14:49 | 001,074,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
[2011.04.24 03:14:49 | 000,218,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll
[2011.04.24 03:14:48 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
[2011.04.24 03:14:48 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsRasterService.dll
[2011.04.24 03:14:45 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\upnp.dll
[2011.04.24 03:14:44 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\davclnt.dll
[2011.04.24 03:14:44 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wscapi.dll
[2011.04.24 03:14:44 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\slwga.dll
[2011.04.24 03:14:42 | 000,738,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpmde.dll
[2011.04.24 03:14:41 | 000,101,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\consent.exe
[2011.04.24 03:14:39 | 000,369,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc.dll
[2011.04.24 03:14:39 | 000,365,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_isv.dll
[2011.04.24 03:14:39 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_isv.exe
[2011.04.24 03:14:39 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate.exe
[2011.04.24 03:14:39 | 000,280,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp.exe
[2011.04.24 03:14:39 | 000,277,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp_isv.exe
[2011.04.24 03:14:39 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp_isv.dll
[2011.04.24 03:14:39 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp.dll
[2011.04.24 03:14:37 | 001,164,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42u.dll
[2011.04.24 03:14:37 | 001,137,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42.dll
[2011.04.24 03:08:37 | 000,219,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\dxgmms1.sys
[2011.04.24 03:08:37 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdd.dll
[2011.04.23 23:53:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
[2011.04.23 23:53:21 | 000,000,000 | ---D | C] -- C:\ttt
[2011.04.23 23:52:48 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Roaming\DataCast
[2011.04.23 23:52:32 | 000,000,000 | ---D | C] -- C:\Program Files\MarkAny
[2011.04.23 23:52:18 | 000,000,000 | ---D | C] -- C:\Program Files\InstallShield Installation Information
[2011.04.23 23:52:11 | 000,000,000 | ---D | C] -- C:\Program Files\Samsung
[2011.04.23 19:03:33 | 000,000,000 | ---D | C] -- C:\Users\Kargi\Documents\Alınan Dosyalarım
[2011.04.23 19:01:31 | 000,000,000 | ---D | C] -- C:\Program Files\NVIDIA Corporation
[2011.04.23 19:00:51 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard
[2011.04.23 18:52:21 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Roaming\Uniblue
[2011.04.23 18:47:54 | 000,000,000 | -H-D | C] -- C:\ProgramData\~0
[2011.04.23 18:37:55 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\{76AE79B5-1389-405F-8CC6-245EFEC45B89}
[2011.04.23 18:37:41 | 000,000,000 | ---D | C] -- C:\Users\Kargi\Tracing
[2011.04.23 18:33:17 | 000,000,000 | ---D | C] -- C:\Windows\tr
[2011.04.23 18:31:35 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft SQL Server Compact Edition
[2011.04.23 18:29:39 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH
[2011.04.23 18:28:50 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Live
OTL.TXT Teil B
[2011.04.23 18:27:37 | 000,069,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_3.dll
[2011.04.23 18:27:36 | 000,515,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_5.dll
[2011.04.23 18:27:36 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_42.dll
[2011.04.23 18:26:50 | 003,426,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_32.dll
[2011.04.23 18:26:30 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Roaming\Easeware
[2011.04.23 18:25:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
[2011.04.23 18:24:50 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight
[2011.04.23 18:24:01 | 002,983,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIRibbon.dll
[2011.04.23 18:24:01 | 001,164,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIRibbonRes.dll
[2011.04.23 18:23:01 | 003,181,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mf.dll
[2011.04.23 18:23:01 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfreadwrite.dll
[2011.04.23 18:23:00 | 001,619,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMVDECOD.DLL
[2011.04.23 18:21:15 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\Windows Live
[2011.04.23 18:21:14 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Windows Live
[2011.04.23 18:19:40 | 000,000,000 | ---D | C] -- C:\Program Files\Clip Extractor Toolbar
[2011.04.23 18:19:29 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET
[2011.04.23 18:18:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Clip Extractor
[2011.04.23 18:18:57 | 000,000,000 | ---D | C] -- C:\Program Files\Clip Extractor
[2011.04.23 18:18:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2011.04.23 18:18:28 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2011.04.23 18:16:49 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Roaming\WinRAR
[2011.04.23 18:16:34 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2011.04.23 18:07:59 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Roaming\FileZilla
[2011.04.23 18:01:57 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Roaming\skypePM
[2011.04.23 18:01:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype Extras
[2011.04.23 18:00:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
[2011.04.23 18:00:07 | 000,000,000 | ---D | C] -- C:\Program Files\FileZilla FTP Client
[2011.04.23 18:00:00 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Roaming\Skype
[2011.04.23 17:59:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2011.04.23 17:59:05 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2011.04.23 17:59:03 | 000,000,000 | R--D | C] -- C:\Program Files\Skype
[2011.04.23 17:58:55 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
[2011.04.23 17:58:53 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\Diagnostics
[2011.04.23 17:58:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
[2011.04.23 17:58:08 | 000,000,000 | ---D | C] -- C:\Users\Kargi\Documents\Symantec
[2011.04.23 17:57:11 | 000,107,368 | R--- | C] (GEAR Software Inc.) -- C:\Windows\System32\GEARAspi.dll
[2011.04.23 17:57:11 | 000,000,000 | ---D | C] -- C:\Windows\System32\DRVSTORE
[2011.04.23 17:57:09 | 000,124,976 | ---- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\SYMEVENT.SYS
[2011.04.23 17:57:09 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Symantec Shared
[2011.04.23 17:57:09 | 000,000,000 | ---D | C] -- C:\Program Files\Symantec
[2011.04.23 17:56:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
[2011.04.23 17:56:26 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2011.04.23 17:55:43 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\N360
[2011.04.23 17:55:40 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton 360
[2011.04.23 17:55:40 | 000,000,000 | ---D | C] -- C:\Program Files\Norton 360
[2011.04.23 17:54:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Norton
[2011.04.23 17:50:19 | 000,000,000 | ---D | C] -- C:\ProgramData\NortonInstaller
[2011.04.23 17:50:19 | 000,000,000 | ---D | C] -- C:\Program Files\NortonInstaller
[2011.04.23 17:46:23 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Roaming\Mozilla
[2011.04.23 17:46:23 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\Mozilla
[2011.04.23 17:46:18 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2011.04.23 17:42:04 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Roaming\Macromedia
[2011.04.23 17:42:04 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Roaming\Adobe
[2011.04.23 17:42:00 | 000,000,000 | ---D | C] -- C:\Windows\System32\Macromed
[2011.04.23 17:41:51 | 000,000,000 | -H-D | C] -- C:\Windows\AxInstSV
[2011.04.23 17:33:39 | 000,000,000 | R--D | C] -- C:\Users\Kargi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2011.04.23 17:33:39 | 000,000,000 | R--D | C] -- C:\Users\Kargi\Searches
[2011.04.23 17:33:39 | 000,000,000 | R--D | C] -- C:\Users\Kargi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2011.04.23 17:33:39 | 000,000,000 | -H-D | C] -- C:\Users\Kargi\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned
[2011.04.23 17:33:27 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Roaming\Identities
[2011.04.23 17:33:23 | 000,000,000 | R--D | C] -- C:\Users\Kargi\Contacts
[2011.04.23 17:33:10 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\VirtualStore
[2011.04.23 17:33:06 | 000,000,000 | --SD | C] -- C:\Users\Kargi\AppData\Roaming\Microsoft
[2011.04.23 17:33:06 | 000,000,000 | R--D | C] -- C:\Users\Kargi\Videos
[2011.04.23 17:33:06 | 000,000,000 | R--D | C] -- C:\Users\Kargi\Saved Games
[2011.04.23 17:33:06 | 000,000,000 | R--D | C] -- C:\Users\Kargi\Pictures
[2011.04.23 17:33:06 | 000,000,000 | R--D | C] -- C:\Users\Kargi\Music
[2011.04.23 17:33:06 | 000,000,000 | R--D | C] -- C:\Users\Kargi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2011.04.23 17:33:06 | 000,000,000 | R--D | C] -- C:\Users\Kargi\Links
[2011.04.23 17:33:06 | 000,000,000 | R--D | C] -- C:\Users\Kargi\Favorites
[2011.04.23 17:33:06 | 000,000,000 | R--D | C] -- C:\Users\Kargi\Downloads
[2011.04.23 17:33:06 | 000,000,000 | R--D | C] -- C:\Users\Kargi\Documents
[2011.04.23 17:33:06 | 000,000,000 | R--D | C] -- C:\Users\Kargi\Desktop
[2011.04.23 17:33:06 | 000,000,000 | R--D | C] -- C:\Users\Kargi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2011.04.23 17:33:06 | 000,000,000 | -HSD | C] -- C:\Users\Kargi\Documents\Videolarım
[2011.04.23 17:33:06 | 000,000,000 | -HSD | C] -- C:\Users\Kargi\AppData\Local\Temporary Internet Files
[2011.04.23 17:33:06 | 000,000,000 | -HSD | C] -- C:\Users\Kargi\Templates
[2011.04.23 17:33:06 | 000,000,000 | -HSD | C] -- C:\Users\Kargi\Start Menu
[2011.04.23 17:33:06 | 000,000,000 | -HSD | C] -- C:\Users\Kargi\SendTo
[2011.04.23 17:33:06 | 000,000,000 | -HSD | C] -- C:\Users\Kargi\Documents\Resimlerim
[2011.04.23 17:33:06 | 000,000,000 | -HSD | C] -- C:\Users\Kargi\Recent
[2011.04.23 17:33:06 | 000,000,000 | -HSD | C] -- C:\Users\Kargi\PrintHood
[2011.04.23 17:33:06 | 000,000,000 | -HSD | C] -- C:\Users\Kargi\NetHood
[2011.04.23 17:33:06 | 000,000,000 | -HSD | C] -- C:\Users\Kargi\Documents\Müziğim
[2011.04.23 17:33:06 | 000,000,000 | -HSD | C] -- C:\Users\Kargi\Local Settings
[2011.04.23 17:33:06 | 000,000,000 | -HSD | C] -- C:\Users\Kargi\AppData\Local\History
[2011.04.23 17:33:06 | 000,000,000 | -HSD | C] -- C:\Users\Kargi\Cookies
[2011.04.23 17:33:06 | 000,000,000 | -HSD | C] -- C:\Users\Kargi\Belgelerim
[2011.04.23 17:33:06 | 000,000,000 | -HSD | C] -- C:\Users\Kargi\Application Data
[2011.04.23 17:33:06 | 000,000,000 | -HSD | C] -- C:\Users\Kargi\AppData\Local\Application Data
[2011.04.23 17:33:06 | 000,000,000 | -H-D | C] -- C:\Users\Kargi\AppData
[2011.04.23 17:33:06 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\Temp
[2011.04.23 17:33:06 | 000,000,000 | ---D | C] -- C:\Users\Kargi\AppData\Local\Microsoft
[2011.04.23 17:32:49 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Videolarım
[2011.04.23 17:32:49 | 000,000,000 | -HSD | C] -- C:\ProgramData\Sık Kullanılanlar
[2011.04.23 17:32:49 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Resimlerim
[2011.04.23 17:32:49 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Müziğim
[2011.04.23 17:32:49 | 000,000,000 | -HSD | C] -- C:\ProgramData\Belgeler
[2011.04.23 17:12:50 | 000,000,000 | ---D | C] -- C:\Windows\PANTHER
[2011.04.23 17:12:50 | 000,000,000 | ---D | C] -- C:\Windows\System32\OEM
[2011.04.23 16:52:53 | 000,000,000 | ---D | C] -- C:\Windows.old
[2011.04.23 16:17:46 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2011.04.23 16:14:33 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
========== Files - Modified Within 30 Days ==========
[2011.05.21 14:00:01 | 000,001,008 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011.05.21 13:11:31 | 000,001,076 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011.05.21 12:19:31 | 001,067,228 | ---- | M] () -- C:\Windows\System32\drivers\N360\0403000.005\Cat.DB
[2011.05.21 10:45:12 | 000,010,272 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.05.21 10:45:12 | 000,010,272 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.05.21 10:37:03 | 000,001,004 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011.05.21 10:36:16 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.05.21 10:36:02 | 1407,062,016 | -HS- | M] () -- C:\hiberfil.sys
[2011.05.20 22:16:21 | 000,016,896 | ---- | M] () -- C:\Users\Kargi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.05.20 11:19:29 | 000,001,105 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2011.05.18 22:49:07 | 000,049,999 | ---- | M] () -- C:\Users\Kargi\Desktop\30_laranxas-cazoo.png
[2011.05.17 23:59:34 | 000,000,179 | ---- | M] () -- C:\Users\Kargi\Documents\.burrtools.rc
[2011.05.11 09:33:52 | 000,001,676 | ---- | M] () -- C:\Users\Kargi\Desktop\RPM.exe.lnk
[2011.05.11 09:33:52 | 000,001,012 | ---- | M] () -- C:\Users\Kargi\Desktop\Link to RPM Browser for Windows Website.url.lnk
[2011.05.09 19:55:08 | 014,744,456 | ---- | M] ( ) -- C:\Users\Kargi\Desktop\K-Lite_Codec_Pack_700_Full[1].exe
[2011.05.09 19:14:40 | 014,744,456 | ---- | M] ( ) -- C:\Users\Kargi\Desktop\K-Lite_Codec_Pack_700_Full.exe
[2011.05.08 19:50:52 | 000,001,161 | ---- | M] () -- C:\Users\Kargi\Desktop\Joboshare Video Converter.lnk
[2011.05.08 19:18:13 | 000,261,920 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2011.05.08 17:47:27 | 008,262,273 | ---- | M] () -- C:\Users\Kargi\Desktop\sss.wmv
[2011.05.08 17:11:23 | 000,013,922 | ---- | M] () -- C:\Users\Kargi\Desktop\Filmim.wlmp
[2011.05.08 00:04:17 | 001,762,884 | ---- | M] () -- C:\Users\Kargi\Desktop\BURR.blend
[2011.05.07 23:04:22 | 668,760,404 | ---- | M] () -- C:\Users\Kargi\Desktop\0001-0430.avi
[2011.05.07 14:02:03 | 000,618,332 | ---- | M] () -- C:\Windows\System32\perfh01F.dat
[2011.05.07 14:02:03 | 000,616,008 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011.05.07 14:02:03 | 000,121,670 | ---- | M] () -- C:\Windows\System32\perfc01F.dat
[2011.05.07 14:02:03 | 000,106,388 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011.05.07 00:29:01 | 011,525,230 | ---- | M] (Reganam ) -- C:\Users\Kargi\Desktop\3GP-Player.exe
[2011.05.05 22:23:33 | 000,469,483 | ---- | M] () -- C:\Users\Kargi\Desktop\Filmim2.wmv
[2011.05.05 16:27:51 | 105,759,180 | ---- | M] () -- C:\Users\Kargi\Desktop\0001-0400.avi
[2011.05.04 18:22:57 | 008,179,266 | ---- | M] () -- C:\Users\Kargi\Desktop\Filmim.wmv
[2011.04.30 21:35:46 | 000,002,059 | ---- | M] () -- C:\Users\Public\Desktop\Blender.lnk
[2011.04.30 12:36:54 | 000,002,437 | ---- | M] () -- C:\Users\Kargi\Desktop\Windows Live Messenger.lnk
[2011.04.30 12:29:20 | 000,737,280 | ---- | M] (Indigo Rose Corporation) -- C:\Windows\iun6002.exe
[2011.04.30 10:00:33 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2011.04.25 18:35:20 | 000,001,037 | ---- | M] () -- C:\Users\Kargi\Desktop\burrgui - Kısayol.lnk
[2011.04.24 23:50:13 | 000,001,029 | ---- | M] () -- C:\Users\Public\Desktop\Foxit Reader.lnk
[2011.04.24 23:48:31 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_Apfiltr_01009.Wdf
[2011.04.23 23:53:33 | 000,001,949 | ---- | M] () -- C:\Users\Public\Desktop\EmoDio.lnk
[2011.04.23 23:49:03 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2011.04.23 18:19:00 | 000,001,909 | ---- | M] () -- C:\Users\Public\Desktop\Clip Extractor.lnk
[2011.04.23 18:02:07 | 000,000,056 | -H-- | M] () -- C:\ProgramData\ezsidmv.dat
[2011.04.23 18:00:16 | 000,001,174 | ---- | M] () -- C:\Users\Kargi\Desktop\FileZilla.lnk
[2011.04.23 17:59:07 | 000,002,505 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
[2011.04.23 17:57:09 | 000,124,976 | ---- | M] (Symantec Corporation) -- C:\Windows\System32\drivers\SYMEVENT.SYS
[2011.04.23 17:57:09 | 000,007,443 | ---- | M] () -- C:\Windows\System32\drivers\SYMEVENT.CAT
[2011.04.23 17:57:09 | 000,000,805 | ---- | M] () -- C:\Windows\System32\drivers\SYMEVENT.INF
[2011.04.23 17:56:28 | 000,000,974 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2011.04.23 17:37:29 | 000,001,400 | ---- | M] () -- C:\Users\Kargi\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2011.04.23 17:33:40 | 000,000,877 | ---- | M] () -- C:\Users\Kargi\Desktop\Downloads.lnk
[2011.04.23 16:19:21 | 000,056,758 | ---- | M] () -- C:\Windows\System32\license.rtf
[2011.04.23 15:08:00 | 001,191,671 | ---- | M] () -- C:\Users\Kargi\Desktop\Adsız.png
[2011.04.23 13:02:18 | 000,183,497 | ---- | M] () -- C:\Users\Kargi\Desktop\IMG_2897.JPG
[2011.04.23 13:02:10 | 000,223,161 | ---- | M] () -- C:\Users\Kargi\Desktop\IMG_2896.JPG
[2011.04.22 11:31:36 | 000,207,130 | ---- | M] () -- C:\Users\Kargi\Desktop\IMG_2895.JPG
[2011.04.22 11:31:30 | 000,209,919 | ---- | M] () -- C:\Users\Kargi\Desktop\IMG_2894.JPG
[2011.04.22 11:31:24 | 000,194,246 | ---- | M] () -- C:\Users\Kargi\Desktop\IMG_2893.JPG
[2011.04.22 10:51:58 | 000,278,880 | ---- | M] () -- C:\Users\Kargi\Desktop\IMG_2892.JPG
[2011.04.22 10:51:54 | 000,247,231 | ---- | M] () -- C:\Users\Kargi\Desktop\IMG_2891.JPG
[2011.04.22 10:51:40 | 000,256,655 | ---- | M] () -- C:\Users\Kargi\Desktop\IMG_2890.JPG
========== Files Created - No Company Name ==========
[2011.05.21 13:11:31 | 000,001,076 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011.05.11 09:33:52 | 000,001,676 | ---- | C] () -- C:\Users\Kargi\Desktop\RPM.exe.lnk
[2011.05.11 09:33:52 | 000,001,012 | ---- | C] () -- C:\Users\Kargi\Desktop\Link to RPM Browser for Windows Website.url.lnk
[2011.05.09 19:22:38 | 000,000,414 | ---- | C] () -- C:\Windows\System32\lame_acm.xml
[2011.04.23 23:47:53 | 000,000,179 | ---- | C] () -- C:\Users\Kargi\Documents\.burrtools.rc
[2011.04.23 18:32:17 | 000,001,256 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Movie Maker.lnk
[2011.04.23 18:31:44 | 000,001,325 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Photo Gallery.lnk
[2011.04.23 18:31:06 | 000,002,437 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
[2011.04.23 18:19:00 | 000,001,909 | ---- | C] () -- C:\Users\Public\Desktop\Clip Extractor.lnk
[2011.04.23 18:19:00 | 000,001,065 | ---- | C] () -- C:\Users\Kargi\Application Data\Microsoft\Internet Explorer\Quick Launch\Clip Extractor.lnk
[2011.04.23 18:02:07 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2011.04.23 18:00:15 | 000,001,174 | ---- | C] () -- C:\Users\Kargi\Desktop\FileZilla.lnk
[2011.04.23 17:59:07 | 000,002,505 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk
[2011.04.23 17:58:55 | 001,191,671 | ---- | C] () -- C:\Users\Kargi\Desktop\Adsız.png
[2011.04.23 17:57:09 | 000,007,443 | ---- | C] () -- C:\Windows\System32\drivers\SYMEVENT.CAT
[2011.04.23 17:57:09 | 000,000,805 | ---- | C] () -- C:\Windows\System32\drivers\SYMEVENT.INF
[2011.04.23 17:56:28 | 000,000,974 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2011.04.23 17:46:20 | 000,001,105 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2011.04.23 17:46:19 | 000,001,117 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2011.04.23 17:37:29 | 000,001,400 | ---- | C] () -- C:\Users\Kargi\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2011.04.23 17:33:42 | 000,001,406 | ---- | C] () -- C:\Users\Kargi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2011.04.23 17:33:40 | 000,000,877 | ---- | C] () -- C:\Users\Kargi\Desktop\Downloads.lnk
[2011.04.23 17:33:06 | 000,000,290 | ---- | C] () -- C:\Users\Kargi\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2011.04.23 17:33:06 | 000,000,272 | ---- | C] () -- C:\Users\Kargi\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2011.04.23 16:14:12 | 1407,062,016 | -HS- | C] () -- C:\hiberfil.sys
[2011.04.23 13:02:18 | 000,183,497 | ---- | C] () -- C:\Users\Kargi\Desktop\IMG_2897.JPG
[2011.04.23 13:02:10 | 000,223,161 | ---- | C] () -- C:\Users\Kargi\Desktop\IMG_2896.JPG
[2011.04.22 11:31:36 | 000,207,130 | ---- | C] () -- C:\Users\Kargi\Desktop\IMG_2895.JPG
[2011.04.22 11:31:30 | 000,209,919 | ---- | C] () -- C:\Users\Kargi\Desktop\IMG_2894.JPG
[2011.04.22 11:31:24 | 000,194,246 | ---- | C] () -- C:\Users\Kargi\Desktop\IMG_2893.JPG
[2011.04.22 10:51:58 | 000,278,880 | ---- | C] () -- C:\Users\Kargi\Desktop\IMG_2892.JPG
[2011.04.22 10:51:54 | 000,247,231 | ---- | C] () -- C:\Users\Kargi\Desktop\IMG_2891.JPG
[2011.04.22 10:51:40 | 000,256,655 | ---- | C] () -- C:\Users\Kargi\Desktop\IMG_2890.JPG
[2009.07.14 11:10:26 | 000,618,332 | ---- | C] () -- C:\Windows\System32\perfh01F.dat
[2009.07.14 11:10:26 | 000,285,034 | ---- | C] () -- C:\Windows\System32\perfi01F.dat
[2009.07.14 11:10:26 | 000,121,670 | ---- | C] () -- C:\Windows\System32\perfc01F.dat
[2009.07.14 11:10:26 | 000,037,160 | ---- | C] () -- C:\Windows\System32\perfd01F.dat
[2009.07.14 07:57:37 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 07:33:53 | 000,261,920 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2009.07.14 05:05:48 | 000,616,008 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2009.07.14 05:05:48 | 000,291,294 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2009.07.14 05:05:48 | 000,106,388 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2009.07.14 05:05:48 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2009.07.14 05:05:05 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2009.07.14 05:04:11 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2009.07.14 02:55:01 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 02:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll
[2009.07.14 02:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
[2009.06.11 00:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2009.04.16 13:24:14 | 000,921,600 | ---- | C] () -- C:\Windows\System32\vorbisenc.dll
[2009.04.16 13:24:14 | 000,237,568 | ---- | C] () -- C:\Windows\System32\OggDS.dll
[2009.04.16 13:24:14 | 000,188,416 | ---- | C] () -- C:\Windows\System32\vorbis.dll
[2009.04.16 13:24:14 | 000,045,056 | ---- | C] () -- C:\Windows\System32\Ogg.dll
========== LOP Check ==========
[2011.04.30 12:34:52 | 000,000,000 | ---D | M] -- C:\Users\Kargi\AppData\Roaming\Artweaver Plus
[2011.04.30 21:35:00 | 000,000,000 | ---D | M] -- C:\Users\Kargi\AppData\Roaming\Blender Foundation
[2011.04.23 23:52:48 | 000,000,000 | ---D | M] -- C:\Users\Kargi\AppData\Roaming\DataCast
[2011.04.23 18:26:30 | 000,000,000 | ---D | M] -- C:\Users\Kargi\AppData\Roaming\Easeware
[2011.04.23 18:08:04 | 000,000,000 | ---D | M] -- C:\Users\Kargi\AppData\Roaming\FileZilla
[2011.04.30 13:03:59 | 000,000,000 | ---D | M] -- C:\Users\Kargi\AppData\Roaming\Foxit Software
[2011.04.30 12:59:55 | 000,000,000 | ---D | M] -- C:\Users\Kargi\AppData\Roaming\GetRightToGo
[2011.04.24 23:49:24 | 000,000,000 | ---D | M] -- C:\Users\Kargi\AppData\Roaming\Opera
[2011.05.18 18:38:48 | 000,000,000 | ---D | M] -- C:\Users\Kargi\AppData\Roaming\Thinstall
[2011.04.30 12:44:59 | 000,000,000 | ---D | M] -- C:\Users\Kargi\AppData\Roaming\Uniblue
[2011.05.09 13:47:34 | 000,000,000 | ---D | M] -- C:\Users\Kargi\AppData\Roaming\uTorrent
[2011.04.30 21:12:57 | 000,000,000 | ---D | M] -- C:\Users\Kargi\AppData\Roaming\Yandex
[2009.07.14 07:53:46 | 000,008,862 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
========== Purity Check ==========
========== Custom Scans ==========
< %ALLUSERSPROFILE%\Application Data\*. >
< %ALLUSERSPROFILE%\Application Data\*.exe /s >
< %APPDATA%\*. >
[2011.04.26 11:29:29 | 000,000,000 | ---D | M] -- C:\Users\Kargi\AppData\Roaming\Adobe
[2011.04.30 21:35:00 | 000,000,000 | ---D | M] -- C:\Users\Kargi\AppData\Roaming\Blender Foundation
[2011.04.23 23:52:48 | 000,000,000 | ---D | M] -- C:\Users\Kargi\AppData\Roaming\DataCast
[2011.05.01 19:58:57 | 000,000,000 | ---D | M] -- C:\Users\Kargi\AppData\Roaming\DivX
[2011.04.23 18:26:30 | 000,000,000 | ---D | M] -- C:\Users\Kargi\AppData\Roaming\Easeware
[2011.04.23 18:08:04 | 000,000,000 | ---D | M] -- C:\Users\Kargi\AppData\Roaming\FileZilla
[2011.04.30 13:03:59 | 000,000,000 | ---D | M] -- C:\Users\Kargi\AppData\Roaming\Foxit Software
[2011.04.30 12:59:55 | 000,000,000 | ---D | M] -- C:\Users\Kargi\AppData\Roaming\GetRightToGo
[2011.04.23 17:33:27 | 000,000,000 | ---D | M] -- C:\Users\Kargi\AppData\Roaming\Identities
[2011.04.23 17:42:04 | 000,000,000 | ---D | M] -- C:\Users\Kargi\AppData\Roaming\Macromedia
[2011.05.21 13:13:41 | 000,000,000 | ---D | M] -- C:\Users\Kargi\AppData\Roaming\Malwarebytes
[2011.05.09 19:47:57 | 000,000,000 | ---D | M] -- C:\Users\Kargi\AppData\Roaming\Media Player Classic
[2011.04.24 21:46:58 | 000,000,000 | --SD | M] -- C:\Users\Kargi\AppData\Roaming\Microsoft
[2011.04.23 17:46:32 | 000,000,000 | ---D | M] -- C:\Users\Kargi\AppData\Roaming\Mozilla
[2011.04.24 23:49:24 | 000,000,000 | ---D | M] -- C:\Users\Kargi\AppData\Roaming\Opera
[2011.05.21 13:49:52 | 000,000,000 | ---D | M] -- C:\Users\Kargi\AppData\Roaming\Skype
[2011.05.21 10:37:53 | 000,000,000 | ---D | M] -- C:\Users\Kargi\AppData\Roaming\skypePM
[2011.05.18 18:38:48 | 000,000,000 | ---D | M] -- C:\Users\Kargi\AppData\Roaming\Thinstall
[2011.04.23 18:18:38 | 000,000,000 | ---D | M] -- C:\Users\Kargi\AppData\Roaming\WinRAR
[2011.04.30 21:12:57 | 000,000,000 | ---D | M] -- C:\Users\Kargi\AppData\Roaming\Yandex
< %APPDATA%\*.exe /s >
[2011.04.26 11:29:02 | 012,795,016 | ---- | M] (Adobe Systems Inc.) -- C:\Users\Kargi\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airinstaller2x0\airinstaller2x0.exe
< %SYSTEMDRIVE%\*.exe >
[2008.01.21 05:23:32 | 000,013,312 | R--- | M] (Microsoft Corporation) -- C:\setupSNK.exe
< MD5 for: AGP440.SYS >
[2009.07.14 04:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows.old\Windows\System32\drivers\AGP440.sys
[2009.07.14 04:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows.old\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_65848c2d7375a720\AGP440.sys
[2009.07.14 04:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows.old\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_b9e9435f20046eeb\AGP440.sys
[2009.07.14 04:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\drivers\AGP440.sys
[2009.07.14 04:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_65848c2d7375a720\AGP440.sys
[2009.07.14 04:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_b9e9435f20046eeb\AGP440.sys
< MD5 for: ATAPI.SYS >
[2009.07.14 04:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows.old\Windows\System32\drivers\atapi.sys
[2009.07.14 04:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows.old\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_f64b9c35a3a5be81\atapi.sys
[2009.07.14 04:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows.old\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_dd0e7e3d82dd640d\atapi.sys
[2009.07.14 04:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys
[2009.07.14 04:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_f64b9c35a3a5be81\atapi.sys
[2009.07.14 04:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_dd0e7e3d82dd640d\atapi.sys
< MD5 for: CNGAUDIT.DLL >
[2009.07.14 04:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows.old\Windows\System32\cngaudit.dll
[2009.07.14 04:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows.old\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
[2009.07.14 04:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\System32\cngaudit.dll
[2009.07.14 04:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
< MD5 for: EXPLORER.EXE >
[2011.02.26 08:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_54149f9ef14031fc\explorer.exe
[2009.07.14 04:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows.old\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_518afd35db100430\explorer.exe
[2009.07.14 04:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_518afd35db100430\explorer.exe
[2011.02.26 08:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_525b5180f3f95373\explorer.exe
[2009.10.31 08:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows.old\Windows\explorer.exe
[2009.10.31 08:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows.old\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_51a66d6ddafc2ed1\explorer.exe
[2009.10.31 08:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_51a66d6ddafc2ed1\explorer.exe
[2011.02.26 08:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\explorer.exe
[2011.02.26 08:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_51a3a583dafd0cef\explorer.exe
[2011.02.25 08:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_5389023fd8245f84\explorer.exe
[2009.08.03 08:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows.old\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_526619d4f3f142e6\explorer.exe
[2009.08.03 08:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_526619d4f3f142e6\explorer.exe
[2009.08.03 08:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows.old\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_51e07e31dad00878\explorer.exe
[2009.08.03 08:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_51e07e31dad00878\explorer.exe
[2009.10.31 09:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows.old\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_52283b2af41f3691\explorer.exe
[2009.10.31 09:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_52283b2af41f3691\explorer.exe
< MD5 for: IASTORV.SYS >
[2011.03.11 08:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_b0daddb9e6380745\iaStorV.sys
[2011.03.11 08:43:55 | 000,332,160 | ---- | M] (Intel Corporation) MD5=71F1A494FEDF4B33C02C4A6A28D6D9E9 -- C:\Windows\System32\drivers\iaStorV.sys
[2011.03.11 08:43:55 | 000,332,160 | ---- | M] (Intel Corporation) MD5=71F1A494FEDF4B33C02C4A6A28D6D9E9 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_0033117673c16921\iaStorV.sys
[2011.03.11 08:43:55 | 000,332,160 | ---- | M] (Intel Corporation) MD5=71F1A494FEDF4B33C02C4A6A28D6D9E9 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16778_none_aef580fde910b4b0\iaStorV.sys
[2011.03.11 08:28:00 | 000,332,160 | ---- | M] (Intel Corporation) MD5=778D0E6D7D9EBA0C403BADBAAD41DB20 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_b152a892ff64119f\iaStorV.sys
[2009.07.14 04:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows.old\Windows\System32\drivers\iaStorV.sys
[2009.07.14 04:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows.old\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_18cccb83b34e1453\iaStorV.sys
[2009.07.14 04:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows.old\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_aee7a89be91b9000\iaStorV.sys
[2009.07.14 04:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_18cccb83b34e1453\iaStorV.sys
[2009.07.14 04:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_aee7a89be91b9000\iaStorV.sys
[2011.03.11 08:52:21 | 000,332,160 | ---- | M] (Intel Corporation) MD5=B9039A34C2F8769490DCC494E2402445 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.20921_none_afae2d45020c148b\iaStorV.sys
< MD5 for: NETLOGON.DLL >
[2009.07.14 04:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows.old\Windows\System32\netlogon.dll
[2009.07.14 04:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows.old\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_fd8e0d66994d7dc8\netlogon.dll
[2009.07.14 04:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\System32\netlogon.dll
[2009.07.14 04:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_fd8e0d66994d7dc8\netlogon.dll
< MD5 for: NVSTOR.SYS >
[2011.03.11 08:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_3ba44e691d6eb11d\nvstor.sys
[2011.03.11 08:44:01 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4520B63899E867F354EE012D34E11536 -- C:\Windows\System32\drivers\nvstor.sys
[2011.03.11 08:44:01 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4520B63899E867F354EE012D34E11536 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_38e464dbe521cc7f\nvstor.sys
[2011.03.11 08:44:01 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4520B63899E867F354EE012D34E11536 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16778_none_39bef1ad20475e88\nvstor.sys
[2011.03.11 08:28:10 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=66D468654A58594F5F3BA63D5AD5B1AF -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_3c1c1942369abb77\nvstor.sys
[2011.03.11 08:52:25 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=8A7583A3B58D3EEB28BB26626526BC91 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.20921_none_3a779df43942be63\nvstor.sys
[2009.07.14 04:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows.old\Windows\System32\drivers\nvstor.sys
[2009.07.14 04:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows.old\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_5bde3fe2945bce9e\nvstor.sys
[2009.07.14 04:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows.old\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_39b1194b205239d8\nvstor.sys
[2009.07.14 04:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_5bde3fe2945bce9e\nvstor.sys
[2009.07.14 04:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_39b1194b205239d8\nvstor.sys
< MD5 for: NVSTOR32.SYS >
[2009.08.04 17:44:14 | 000,213,024 | ---- | M] (NVIDIA Corporation) MD5=269DE658DEAF032564E8B6430B5BD170 -- C:\NVIDIA\nForceWinVista\15.49\English\IDE\Win7\sataraid\nvstor32.sys
[2009.08.04 17:44:14 | 000,213,024 | ---- | M] (NVIDIA Corporation) MD5=269DE658DEAF032564E8B6430B5BD170 -- C:\NVIDIA\nForceWinVista\15.49\English\IDE\WinVista\sataraid\nvstor32.sys
[2009.08.04 17:43:40 | 000,213,024 | ---- | M] (NVIDIA Corporation) MD5=3FF57A9A657C9690ECBC8B1E3B6E3979 -- C:\NVIDIA\nForceWinVista\15.49\English\IDE\Win7\sata_ide\nvstor32.sys
[2009.08.04 17:43:40 | 000,213,024 | ---- | M] (NVIDIA Corporation) MD5=3FF57A9A657C9690ECBC8B1E3B6E3979 -- C:\NVIDIA\nForceWinVista\15.49\English\IDE\WinVista\sata_ide\nvstor32.sys
< MD5 for: SCECLI.DLL >
[2009.07.14 04:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows.old\Windows\System32\scecli.dll
[2009.07.14 04:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows.old\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_37e4387f3a6f0483\scecli.dll
[2009.07.14 04:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\System32\scecli.dll
[2009.07.14 04:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_37e4387f3a6f0483\scecli.dll
< MD5 for: USER32.DLL >
[2009.07.14 04:16:17 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=34B7E222E81FAFA885F0C5F2CFA56861 -- C:\Windows.old\Windows\System32\user32.dll
[2009.07.14 04:16:17 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=34B7E222E81FAFA885F0C5F2CFA56861 -- C:\Windows.old\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_cd0ec264ceb014a3\user32.dll
[2009.07.14 04:16:17 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=34B7E222E81FAFA885F0C5F2CFA56861 -- C:\Windows\System32\user32.dll
[2009.07.14 04:16:17 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=34B7E222E81FAFA885F0C5F2CFA56861 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_cd0ec264ceb014a3\user32.dll
< MD5 for: USERINIT.EXE >
[2009.07.14 04:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows.old\Windows\System32\userinit.exe
[2009.07.14 04:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows.old\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009.07.14 04:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\System32\userinit.exe
[2009.07.14 04:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
< MD5 for: WINLOGON.EXE >
[2009.10.28 09:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows.old\Windows\System32\winlogon.exe
[2009.10.28 09:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows.old\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_6fc699643622d177\winlogon.exe
[2009.10.28 09:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\System32\winlogon.exe
[2009.10.28 09:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_6fc699643622d177\winlogon.exe
[2009.10.28 08:52:08 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=3BABE6767C78FBF5FB8435FEED187F30 -- C:\Windows.old\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_703394514f56f7c2\winlogon.exe
[2009.10.28 08:52:08 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=3BABE6767C78FBF5FB8435FEED187F30 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_703394514f56f7c2\winlogon.exe
[2009.07.14 04:14:45 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF -- C:\Windows.old\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166\winlogon.exe
[2009.07.14 04:14:45 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166\winlogon.exe
< MD5 for: WS2IFSL.SYS >
[2009.07.14 02:55:02 | 000,016,384 | ---- | M] (Microsoft Corporation) MD5=6DB3276587B853BF886B69528FDB048C -- C:\Windows.old\Windows\System32\drivers\ws2ifsl.sys
[2009.07.14 02:55:02 | 000,016,384 | ---- | M] (Microsoft Corporation) MD5=6DB3276587B853BF886B69528FDB048C -- C:\Windows.old\Windows\winsxs\x86_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_4f5cf6f829213bb2\ws2ifsl.sys
[2009.07.14 02:55:02 | 000,016,384 | ---- | M] (Microsoft Corporation) MD5=6DB3276587B853BF886B69528FDB048C -- C:\Windows\System32\drivers\ws2ifsl.sys
[2009.07.14 02:55:02 | 000,016,384 | ---- | M] (Microsoft Corporation) MD5=6DB3276587B853BF886B69528FDB048C -- C:\Windows\winsxs\x86_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_4f5cf6f829213bb2\ws2ifsl.sys
< %systemroot%\system32\drivers\*.sys /lockedfiles >
< %systemroot%\System32\config\*.sav >
< %systemroot%\*. /mp /s >
< %systemroot%\system32\*.dll /lockedfiles >
[2009.07.14 04:15:13 | 000,346,112 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\dxtmsft.dll
[2009.07.14 04:15:13 | 000,215,552 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\dxtrans.dll
[2011.02.24 08:29:55 | 000,185,856 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\iepeers.dll
< End of report >
--- --- --- |
