Kod:
Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 13:49:50, on 02.09.2013 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v10.0 (10.00.9200.16660) Boot mode: Normal Running processes: C:\Program Files (x86)\Internet Download Manager\IDMan.exe C:\Users\ugler1st\AppData\Roaming\Dropbox\bin\Drop box.exe C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe D:\Downloads\Programs\OTL.exe D:\Program Files\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe D:\Program Files\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0. 177\deploy\LoLLauncher.exe D:\Program Files\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0. 1.38\deploy\LolClient.exe C:\Program Files (x86)\Mozilla Firefox\firefox.exe D:\Program Files\Riot Games\League of Legends\RADS\solutions\lol_game_client_sln\release s\0.0.0.240\deploy\League of Legends.exe D:\Downloads\Programs\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://atama.meb.gov.tr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: IDM Helper - - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll O2 - BHO: Canon Easy-WebPrint EX BHO - - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll O2 - BHO: URLRedirectionBHO - - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL O3 - Toolbar: Canon Easy-WebPrint EX - - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun O4 - HKCU\..\Run: [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'Local Service') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'Local Service') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - Startup: Dropbox.lnk = C:\Users\ugler1st\AppData\Roaming\Dropbox\bin\Drop box.exe O8 - Extra context menu item: Butun linkleri IDM ile indir - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000 O8 - Extra context menu item: IDM ile indir - C:\Program Files (x86)\Internet Download Manager\IEExt.htm O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O17 - HKLM\System\CCS\Services\Tcpip\..\: NameServer = 8.8.8.8,8.8.4.4 O18 - Filter hijack: text/xml - - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL O18 - Filter: video/mp4 - - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll O18 - Filter: video/x-flv - - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll O23 - Service: ABBYY FineReader 11 PE Licensing Service (ABBYY.Licensing.FineReader.Professional.11.0) - ABBYY InfoPoisk LLC - C:\Program Files (x86)\ABBYY FineReader 11\NetworkLicenseServer.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpda teService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing) O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: Google Guncelleme Hizmeti (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Guncelleme Hizmeti (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 8062 bytes
HTML Code:
OTL logfile created on: 02.09.2013 13:05:42 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = D:\Downloads\Programs 64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.10.9200.16660) Locale: 0000041f | Country: Turkiye | Language: TRK | Date Format: dd.MM.yyyy 4,00 Gb Total Physical Memory | 2,61 Gb Available Physical Memory | 65,39% Memory free 7,99 Gb Paging File | 6,48 Gb Available in Paging File | 81,04% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 99,90 Gb Total Space | 54,66 Gb Free Space | 54,72% Space Free | Partition Type: NTFS Drive D: | 365,76 Gb Total Space | 158,40 Gb Free Space | 43,31% Space Free | Partition Type: NTFS Computer Name: UGLER1ST-UGLER | User Name: ugler1st | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (All) ========== PRC - [2013.09.02 12:52:11 | 000,602,112 | ---- | M] (OldTimer Tools) -- D:\Downloads\Programs\OTL.exe PRC - [2013.09.01 21:25:56 | 000,274,840 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2013.09.01 21:25:55 | 000,017,816 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe PRC - [2013.08.23 14:09:58 | 001,861,512 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlug in_11_8_800_94.exe PRC - [2013.08.07 12:42:30 | 004,308,320 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe PRC - [2013.08.06 15:02:54 | 003,665,488 | ---- | M] (Tonec Inc.) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe PRC - [2013.06.17 11:44:04 | 000,821,048 | ---- | M] (ABBYY InfoPoisk LLC) -- C:\Program Files (x86)\ABBYY FineReader 11\NetworkLicenseServer.exe PRC - [2013.05.25 03:47:30 | 027,776,968 | ---- | M] (Dropbox, Inc.) -- C:\Users\ugler1st\AppData\Roaming\Dropbox\bin\Drop box.exe PRC - [2013.03.21 15:19:46 | 001,341,664 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe PRC - [2012.12.12 16:44:48 | 000,268,248 | ---- | M] (Tonec Inc.) -- C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe PRC - [2010.11.21 06:24:27 | 000,257,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wbem\WmiPrvSE.exe ========== Modules (No Company Name) ========== MOD - [2013.09.01 21:25:56 | 003,290,520 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll MOD - [2013.08.23 14:09:58 | 016,166,280 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_80 0_94.dll MOD - [2013.03.13 23:48:52 | 024,978,944 | ---- | M] () -- C:\Users\ugler1st\AppData\Roaming\Dropbox\bin\libc ef.dll MOD - [2012.11.14 02:32:50 | 003,558,400 | ---- | M] () -- C:\Users\ugler1st\AppData\Roaming\Dropbox\bin\wxms w28uh_vc.dll ========== Services (SafeList) ========== SRV:64bit: - [2013.07.24 02:40:52 | 000,239,616 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV:64bit: - [2013.07.23 19:47:02 | 000,344,064 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Stopped] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service) SRV:64bit: - [2013.05.27 08:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:64bit: - [2013.03.21 15:19:46 | 001,341,664 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe -- (ekrn) SRV:64bit: - [2009.07.14 04:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV - [2013.09.01 21:25:56 | 000,118,680 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2013.08.23 17:01:25 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpda teService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2013.08.07 12:42:30 | 004,308,320 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe -- (TeamViewer8) SRV - [2013.06.17 11:44:04 | 000,821,048 | ---- | M] (ABBYY InfoPoisk LLC) [Auto | Running] -- C:\Program Files (x86)\ABBYY FineReader 11\NetworkLicenseServer.exe -- (ABBYY.Licensing.FineReader.Professional.11.0) SRV - [2012.07.09 00:40:10 | 000,104,912 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\msco rsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2009.06.11 00:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\msco rsvw.exe -- (clr_optimization_v2.0.50727_32) ========== Driver Services (SafeList) ========== DRV:64bit: - [2013.07.24 03:36:40 | 012,721,664 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag) DRV:64bit: - [2013.07.24 02:10:26 | 000,617,472 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap) DRV:64bit: - [2013.07.05 11:40:38 | 000,096,256 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService) DRV:64bit: - [2013.06.27 12:57:42 | 000,172,920 | ---- | M] (Tonec Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\idmwfp.sys -- (IDMWFP) DRV:64bit: - [2013.02.14 12:21:06 | 000,058,416 | ---- | M] (ESET) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\epfwwfp.sys -- (epfwwfp) DRV:64bit: - [2013.02.14 12:21:04 | 000,213,416 | ---- | M] (ESET) [File_System | System | Running] -- C:\Windows\SysNative\drivers\eamonm.sys -- (eamonm) DRV:64bit: - [2013.01.10 09:25:22 | 000,190,232 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\epfw.sys -- (epfw) DRV:64bit: - [2013.01.10 09:25:22 | 000,059,440 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\EpfwLWF.sys -- (EpfwLWF) DRV:64bit: - [2013.01.10 09:25:20 | 000,150,616 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ehdrv.sys -- (ehdrv) DRV:64bit: - [2012.11.20 13:55:42 | 000,057,512 | ---- | M] (Advanced Micro Devices) [Kernel | Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys -- (AODDriver4.2) DRV:64bit: - [2012.08.23 17:12:16 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt) DRV:64bit: - [2012.08.23 17:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV:64bit: - [2012.08.23 17:08:26 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD) DRV:64bit: - [2012.08.23 17:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:64bit: - [2012.03.01 09:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:64bit: - [2011.03.11 09:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:64bit: - [2011.03.11 09:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:64bit: - [2010.11.21 06:23:48 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tsusbhub.sys -- (tsusbhub) DRV:64bit: - [2010.11.21 06:23:48 | 000,088,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc) DRV:64bit: - [2010.11.21 06:23:48 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc) DRV:64bit: - [2010.11.21 06:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:64bit: - [2010.04.12 11:55:00 | 000,091,568 | ---- | M] (PowerISO Computing, Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\scdemu.sys -- (SCDEmu) DRV:64bit: - [2009.07.14 04:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:64bit: - [2009.07.14 04:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:64bit: - [2009.07.14 04:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:64bit: - [2009.06.10 23:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:64bit: - [2009.06.10 23:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:64bit: - [2009.06.10 23:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:64bit: - [2009.06.10 23:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:64bit: - [2009.04.08 14:28:46 | 000,068,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xusb21.sys -- (xusb21) DRV:64bit: - [2009.03.01 23:05:32 | 000,187,392 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV - [2009.07.14 04:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) ========== Standard Registry (All) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141 IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data] IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141 IE:64bit: - HKLM\..\SearchScopes,DefaultScope = IE:64bit: - HKLM\..\SearchScopes\: "URL" = http://www.bing.com/search?q=&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141 IE - HKLM\..\SearchScopes,DefaultScope = IE - HKLM\..\SearchScopes\: "URL" = http://www.bing.com/search?q=&FORM=IE8SRC IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://atama.meb.gov.tr/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://tr.msn.com/?ocid=iehp IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = tr IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 7D F7 DA BF DB 9D CE 01 [binary data] IE - HKCU\..\URLSearchHook: - C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation) IE - HKCU\..\SearchScopes,DefaultScope = IE - HKCU\..\SearchScopes\: "URL" = http://www.bing.com/search?q=&src=IE-SearchBox&FORM=IE10SR IE - HKCU\..\SearchScopes\: "URL" = http://www.google.com/search?hl=en&q= IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..browser.startup.homepage: "https://www.google.com.tr" FF - prefs.js..extensions.enabledAddons: testpilot%40labs.mozilla.com:1.2.2 FF - prefs.js..extensions.enabledAddons: mozilla_cc%40internetdownloadmanager.com:7.3.58 FF - prefs.js..extensions.enabledAddons: alldebrid%40alldebrid.com:4.0.4 FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:24.0 FF - user.js - File not found FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_80 0_94.dll File not found FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_80 0_94.dll () FF - HKLM\Software\MozillaPlugins\@canon.com/EPPEX: C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) 64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Ex tensions\\[email protected]: C:\PROGRAM FILES\ESET\ESET SMART SECURITY\MOZILLA THUNDERBIRD [2013.08.21 00:03:03 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 24.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 24.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Ex tensions\\[email protected]: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2013.08.21 00:03:03 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensi ons\\[email protected]: C:\Users\ugler1st\AppData\Roaming\IDM\idmmzcc5 [2013.08.20 23:26:25 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Exten sions\\[email protected]com: C:\Users\ugler1st\AppData\Roaming\IDM\idmmzcc5 [2013.08.20 23:26:25 | 000,000,000 | ---D | M] [2013.08.20 22:37:03 | 000,000,000 | ---D | M] (No name found) -- C:\Users\ugler1st\AppData\Roaming\mozilla\Extensio ns [2013.08.20 23:31:15 | 000,000,000 | ---D | M] (No name found) -- C:\Users\ugler1st\AppData\Roaming\mozilla\Firefox\ Profiles\3ceavzwx.default\extensions [2013.08.20 23:31:15 | 000,064,351 | ---- | M] () (No name found) -- C:\Users\ugler1st\AppData\Roaming\mozilla\firefox\ profiles\3ceavzwx.default\extensions\[email protected] [2013.08.20 22:56:08 | 000,621,521 | ---- | M] () (No name found) -- C:\Users\ugler1st\AppData\Roaming\mozilla\firefox\ profiles\3ceavzwx.default\extensions\[email protected] [2013.08.20 23:30:18 | 000,824,302 | ---- | M] () (No name found) -- C:\Users\ugler1st\AppData\Roaming\mozilla\firefox\ profiles\3ceavzwx.default\extensions\.xpi [2013.09.01 21:25:49 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions [2013.09.01 21:25:49 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\mozilla firefox\extensions\ [2013.09.01 21:25:49 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions [2013.09.01 21:25:49 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\ [2013.08.20 23:26:25 | 000,000,000 | ---D | M] (IDM CC) -- C:\USERS\UGLER1ST\APPDATA\ROAMING\IDM\IDMMZCC5 ========== Chrome ========== CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = search?q=&ie= CHR - default_search_provider: suggest_url = search?client=&q=&sugkey= CHR - homepage: http://www.google.com/ CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.62\ppGoo gleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.62\pdf.d ll CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.62\gcswf 32.dll CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll CHR - plugin: Default Plug-in (Enabled) = default_plugin CHR - Extension: IDM Integration Module = C:\Users\ugler1st\AppData\Local\Google\Chrome\User Data\Default\Extensions\jeaohhlajejodfjadcponpnjgk iikocn\6.17.7_0\ CHR - Extension: Google Wallet Service = C:\Users\ugler1st\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccm gmieda\0.0.4.9_0\ O1 HOSTS File: ([2013.08.23 14:16:05 | 000,003,201 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 activate.adobe.com O1 - Hosts: 127.0.0.1 tonec.com O1 - Hosts: 127.0.0.1 www.tonec.com O1 - Hosts: 127.0.0.1 registeridm.com O1 - Hosts: 127.0.0.1 www.registeridm.com O1 - Hosts: 127.0.0.1 secure.registeridm.com O1 - Hosts: 127.0.0.1 internetdownloadmanager.com O1 - Hosts: 127.0.0.1 www.internetdownloadmanager.com O1 - Hosts: 127.0.0.1 secure.internetdownloadmanager.com O1 - Hosts: 127.0.0.1 mirror.internetdownloadmanager.com O1 - Hosts: 127.0.0.1 mirror2.internetdownloadmanager.com O1 - Hosts: 127.0.0.1 192.150.14.69 O1 - Hosts: 127.0.0.1 192.150.18.101 O1 - Hosts: 127.0.0.1 192.150.18.108 O1 - Hosts: 127.0.0.1 192.150.22.40 O1 - Hosts: 127.0.0.1 192.150.8.100 O1 - Hosts: 127.0.0.1 192.150.8.118 O1 - Hosts: 127.0.0.1 209-34-83-73.ood.opsource.net O1 - Hosts: 127.0.0.1 3dns-1.adobe.com O1 - Hosts: 127.0.0.1 3dns-2.adobe.com O1 - Hosts: 127.0.0.1 3dns-2.adobe.com O1 - Hosts: 127.0.0.1 3dns-3.adobe.com O1 - Hosts: 127.0.0.1 3dns-3.adobe.com O1 - Hosts: 127.0.0.1 3dns-4.adobe.com O1 - Hosts: 127.0.0.1 3dns.adobe.com O1 - Hosts: 51 more lines... O2:64bit: - BHO: (IDM integration (IDMIEHlprObj Class)) - - C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll (Internet Download Manager, Tonec Inc.) O2:64bit: - BHO: (SteadyVideoBHO Class) - - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices) O2:64bit: - BHO: (Groove GFS Browser Helper) - - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) O2:64bit: - BHO: (Office Document Cache Handler) - - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) O2 - BHO: (IDM integration (IDMIEHlprObj Class)) - - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.) O2 - BHO: (Canon Easy-WebPrint EX BHO) - - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.) O2 - BHO: (Office Document Cache Handler) - - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation) O3 - HKLM\..\Toolbar: (Canon Easy-WebPrint EX) - - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.) O3 - HKCU\..\Toolbar\WebBrowser: (Canon Easy-WebPrint EX) - - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.) O4:64bit: - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET) O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKCU..\Run: [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe (Tonec Inc.) O4 - Startup: C:\Users\ugler1st\AppData\Roaming\Microsoft\Window s\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\ugler1st\AppData\Roaming\Dropbox\bin\Drop box.exe (Dropbox, Inc.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\Explorer: ForceActiveDesktopOn = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: EnableInstallerDetection = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: EnableSecureUIAPaths = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: EnableUIADesktopToggle = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: EnableVirtualization = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: PromptOnSecureDesktop = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: ValidateAdminCodeSignatures = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: dontdisplaylastusername = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: scforceoption = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: shutdownwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: undockwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: FilterAdministratorToken = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\Explorer: NoDriveTypeAutoRun = 145 O8:64bit: - Extra context menu item: Butun linkleri IDM ile indir - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm () O8:64bit: - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation) O8:64bit: - Extra context menu item: IDM ile indir - C:\Program Files (x86)\Internet Download Manager\IEExt.htm () O8 - Extra context menu item: Butun linkleri IDM ile indir - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm () O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: IDM ile indir - C:\Program Files (x86)\Internet Download Manager\IEExt.htm () O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000001 [] - C:\Windows\SysNative\nlaapi.dll (Microsoft Corporation) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000002 [] - C:\Windows\SysNative\NapiNSP.dll (Microsoft Corporation) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000003 [] - C:\Windows\SysNative\pnrpnsp.dll (Microsoft Corporation) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000004 [] - C:\Windows\SysNative\pnrpnsp.dll (Microsoft Corporation) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000005 [] - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000006 [] - C:\Windows\SysNative\winrnr.dll (Microsoft Corporation) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000005 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000006 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000007 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000008 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000009 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000010 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Windows\SysWOW64\nlaapi.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\Windows\SysWOW64\NapiNSP.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\Windows\SysWOW64\pnrpnsp.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Windows\SysWOW64\pnrpnsp.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Windows\SysWOW64\winrnr.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O1364bit: - gopher Prefix: missing O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfac es\: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfac es\: NameServer = 8.8.8.8,8.8.4.4 O18:64bit: - Protocol\Handler\about - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation) O18:64bit: - Protocol\Handler\cdl - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation) O18:64bit: - Protocol\Handler\dvd - C:\Windows\SysNative\MSVidCtl.dll (Microsoft Corporation) O18:64bit: - Protocol\Handler\file - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation) O18:64bit: - Protocol\Handler\ftp - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation) O18:64bit: - Protocol\Handler\http - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation) O18:64bit: - Protocol\Handler\https - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation) O18:64bit: - Protocol\Handler\its - C:\Windows\SysNative\itss.dll (Microsoft Corporation) O18:64bit: - Protocol\Handler\javascript - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation) O18:64bit: - Protocol\Handler\local - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation) O18:64bit: - Protocol\Handler\mailto - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation) O18:64bit: - Protocol\Handler\mhtml - C:\Windows\SysNative\inetcomm.dll (Microsoft Corporation) O18:64bit: - Protocol\Handler\mk - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation) O18:64bit: - Protocol\Handler\ms-help - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18:64bit: - Protocol\Handler\ms-its - C:\Windows\SysNative\itss.dll (Microsoft Corporation) O18:64bit: - Protocol\Handler\res - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation) O18:64bit: - Protocol\Handler\tv - C:\Windows\SysNative\MSVidCtl.dll (Microsoft Corporation) O18:64bit: - Protocol\Handler\vbscript - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\about - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\cdl - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\dvd - C:\Windows\SysWOW64\MSVidCtl.dll (Microsoft Corporation) O18 - Protocol\Handler\file - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\ftp - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\http - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\https - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\its - C:\Windows\SysWOW64\itss.dll (Microsoft Corporation) O18 - Protocol\Handler\javascript - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\local - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\mailto - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\mhtml - C:\Windows\SysWOW64\inetcomm.dll (Microsoft Corporation) O18 - Protocol\Handler\mk - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-help - No CLSID value found O18 - Protocol\Handler\ms-its - C:\Windows\SysWOW64\itss.dll (Microsoft Corporation) O18 - Protocol\Handler\res - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\tv - C:\Windows\SysWOW64\MSVidCtl.dll (Microsoft Corporation) O18 - Protocol\Handler\vbscript - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation) O18:64bit: - Protocol\Filter\application/octet-stream - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation) O18:64bit: - Protocol\Filter\application/x-complus - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation) O18:64bit: - Protocol\Filter\application/x-msdownload - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation) O18:64bit: - Protocol\Filter\text/xml - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation) O18:64bit: - Protocol\Filter\video/mp4 - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) O18:64bit: - Protocol\Filter\video/x-flv - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) O18 - Protocol\Filter\application/octet-stream - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-complus - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-msdownload - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\text/xml - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation) O18 - Protocol\Filter\video/mp4 - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) O18 - Protocol\Filter\video/x-flv - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.e xe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.ex e (Microsoft Corporation) O21:64bit: - SSODL: WebCheck - - No CLSID value found. O21 - SSODL: WebCheck - - No CLSID value found. O28:64bit: - HKLM ShellExecuteHooks: - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) O29:64bit: - HKLM SecurityProviders - (credssp.dll) - C:\Windows\SysWow64\credssp.dll (Microsoft Corporation) O29 - HKLM SecurityProviders - (credssp.dll) - C:\Windows\SysWow64\credssp.dll (Microsoft Corporation) O30:64bit: - LSA: Authentication Packages - (msv1_0) - C:\Windows\SysNative\msv1_0.dll (Microsoft Corporation) O30 - LSA: Authentication Packages - (msv1_0) - C:\Windows\SysWow64\msv1_0.dll (Microsoft Corporation) O30:64bit: - LSA: Security Packages - (kerberos) - C:\Windows\SysNative\kerberos.dll (Microsoft Corporation) O30:64bit: - LSA: Security Packages - (msv1_0) - C:\Windows\SysNative\msv1_0.dll (Microsoft Corporation) O30:64bit: - LSA: Security Packages - (schannel) - C:\Windows\SysNative\schannel.dll (Microsoft Corporation) O30:64bit: - LSA: Security Packages - (wdigest) - C:\Windows\SysNative\wdigest.dll (Microsoft Corporation) O30:64bit: - LSA: Security Packages - (tspkg) - C:\Windows\SysNative\tspkg.dll (Microsoft Corporation) O30:64bit: - LSA: Security Packages - (pku2u) - C:\Windows\SysNative\pku2u.dll (Microsoft Corporation) O30 - LSA: Security Packages - (kerberos) - C:\Windows\SysWow64\kerberos.dll (Microsoft Corporation) O30 - LSA: Security Packages - (msv1_0) - C:\Windows\SysWow64\msv1_0.dll (Microsoft Corporation) O30 - LSA: Security Packages - (schannel) - C:\Windows\SysWow64\schannel.dll (Microsoft Corporation) O30 - LSA: Security Packages - (wdigest) - C:\Windows\SysWow64\wdigest.dll (Microsoft Corporation) O30 - LSA: Security Packages - (tspkg) - C:\Windows\SysWow64\tspkg.dll (Microsoft Corporation) O30 - LSA: Security Packages - (pku2u) - C:\Windows\SysWow64\pku2u.dll (Microsoft Corporation) O31 - SafeBoot: AlternateShell - cmd.exe O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\H\Shell - "" = AutoRun O33 - MountPoints2\H\Shell\AutoRun\command - "" = H:\SETUP.EXE O33 - MountPoints2\H\Shell\configure\command - "" = H:\SETUP.EXE O33 - MountPoints2\H\Shell\install\command - "" = H:\SETUP.EXE O34 - HKLM BootExecute: (autocheck autochk *) O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) ========== Files/Folders - Created Within 30 Days ========== [2013.09.01 21:25:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox [2013.09.01 08:59:33 | 000,000,000 | R--D | C] -- C:\Users\ugler1st\Documents\Scanned Documents [2013.09.01 08:59:33 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\Documents\Fax [2013.08.28 17:55:38 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Roaming\TeamViewer [2013.08.25 21:34:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe [2013.08.25 21:34:32 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Roaming\ABBYY [2013.08.25 21:32:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABBYY FineReader 11 [2013.08.25 21:28:35 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Local\ABBYY [2013.08.25 21:28:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ABBYY FineReader 11 [2013.08.25 21:28:34 | 000,000,000 | ---D | C] -- C:\ProgramData\ABBYY [2013.08.25 21:23:15 | 000,000,000 | ---D | C] -- C:\Temp [2013.08.24 15:58:24 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Roaming\Leadertech [2013.08.23 16:39:24 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\appmgmt [2013.08.23 15:17:41 | 000,000,000 | -HSD | C] -- C:\Users\ugler1st\AppData\Local\.# [2013.08.23 14:03:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MaxKO Expansion [2013.08.22 19:43:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe [2013.08.22 19:42:27 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Local\Adobe [2013.08.22 16:01:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PESEdit.com 2013 Patch [2013.08.22 16:00:57 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\Documents\KONAMI [2013.08.22 15:32:45 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Roaming\Yandex [2013.08.22 15:32:37 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Local\Yandex [2013.08.22 15:00:14 | 000,000,000 | ---D | C] -- C:\ProgramData\KONAMI [2013.08.22 15:00:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\KONAMI [2013.08.21 23:28:40 | 000,564,736 | ---- | C] (Daniel Codres) -- C:\Users\ugler1st\gms_v1_0_3.exe [2013.08.21 15:58:05 | 000,000,000 | -H-D | C] -- C:\ProgramData\CanonBJ [2013.08.21 15:58:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG2100 series [2013.08.21 15:27:29 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Local\Canon Easy-PhotoPrint EX [2013.08.21 15:26:56 | 000,000,000 | -H-D | C] -- C:\ProgramData\CanonIJEPPEX2 [2013.08.21 15:26:56 | 000,000,000 | -H-D | C] -- C:\ProgramData\CanonEPP [2013.08.21 15:26:56 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Roaming\Canon [2013.08.21 15:24:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG2100 series Kullanıcı Kaydı [2013.08.21 15:23:52 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\CANON [2013.08.21 15:23:42 | 000,000,000 | ---D | C] -- C:\ProgramData\CanonIJWSpt [2013.08.21 15:23:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities [2013.08.21 15:23:19 | 000,000,000 | ---D | C] -- C:\Program Files\Canon [2013.08.21 15:23:07 | 000,000,000 | -H-D | C] -- C:\Windows\SysNative\CanonIJ Uninstaller Information [2013.08.21 15:22:39 | 000,000,000 | -H-D | C] -- C:\Program Files\CanonBJ [2013.08.21 15:21:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Canon [2013.08.21 11:24:23 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Wat [2013.08.21 11:24:23 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Wat [2013.08.21 10:56:45 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\MRT [2013.08.21 00:17:32 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Roaming\ACD Systems [2013.08.21 00:17:32 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Local\ACD Systems [2013.08.21 00:16:14 | 000,000,000 | ---D | C] -- C:\Windows\AutoKMS [2013.08.21 00:13:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACD Systems [2013.08.21 00:13:41 | 000,000,000 | ---D | C] -- C:\ProgramData\ACD Systems [2013.08.21 00:13:33 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ACD Systems [2013.08.21 00:13:33 | 000,000,000 | ---D | C] -- C:\Program Files\ACD Systems [2013.08.21 00:12:25 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Local\Downloaded Installations [2013.08.21 00:02:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET [2013.08.21 00:02:45 | 000,000,000 | ---D | C] -- C:\ProgramData\ESET [2013.08.21 00:02:45 | 000,000,000 | ---D | C] -- C:\Program Files\ESET [2013.08.20 23:57:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office [2013.08.20 23:57:28 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER [2013.08.20 23:57:02 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH [2013.08.20 23:55:41 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Analysis Services [2013.08.20 23:55:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Analysis Services [2013.08.20 23:55:12 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Local\Microsoft Help [2013.08.20 23:55:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office [2013.08.20 23:55:07 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office [2013.08.20 23:55:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help [2013.08.20 23:54:57 | 000,000,000 | RH-D | C] -- C:\MSOCache [2013.08.20 23:49:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AIMP3 [2013.08.20 23:49:23 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Roaming\LolClient [2013.08.20 23:33:26 | 000,353,792 | ---- | C] (NewSoftwares.net,Inc.) -- C:\Windows\PromptService64.exe [2013.08.20 23:33:26 | 000,266,240 | ---- | C] (NewSoftwares.net,Inc.) -- C:\Windows\PromptService.exe [2013.08.20 23:29:51 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Local\Macromedia [2013.08.20 23:28:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YeniOzellik1 [2013.08.20 23:28:16 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information [2013.08.20 23:26:07 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Roaming\IDM [2013.08.20 23:26:07 | 000,000,000 | ---D | C] -- C:\ProgramData\IDM [2013.08.20 23:26:07 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Roaming\DMCache [2013.08.20 23:26:05 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Roaming\Microsoft\Window s\Start Menu\Programs\Internet Download Manager [2013.08.20 23:26:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager [2013.08.20 23:26:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Internet Download Manager [2013.08.20 23:22:59 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed [2013.08.20 23:22:57 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Macromed [2013.08.20 23:22:53 | 000,000,000 | ---D | C] -- C:\Windows\Panther [2013.08.20 23:15:53 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Local\AMD [2013.08.20 23:15:23 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Roaming\ATI [2013.08.20 23:15:23 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Local\ATI [2013.08.20 23:15:23 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI [2013.08.20 23:12:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD AVT [2013.08.20 23:12:02 | 000,000,000 | ---D | C] -- C:\Program Files\AMD [2013.08.20 23:12:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD [2013.08.20 23:11:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\ATI Technologies [2013.08.20 23:11:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerISO [2013.08.20 23:11:40 | 000,091,568 | ---- | C] (PowerISO Computing, Inc.) -- C:\Windows\SysNative\drivers\scdemu.sys [2013.08.20 23:11:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PowerISO [2013.08.20 23:11:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center [2013.08.20 23:11:01 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Roaming\Microsoft\Window s\Start Menu\Programs\Folder Protect [2013.08.20 23:10:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Folder Protect [2013.08.20 23:10:33 | 000,000,000 | ---D | C] -- C:\ProgramData\AMD [2013.08.20 23:08:43 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ATI Technologies [2013.08.20 23:08:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ATI Technologies [2013.08.20 23:07:48 | 000,000,000 | R--D | C] -- C:\Users\ugler1st\Dropbox [2013.08.20 23:06:02 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Roaming\Macromedia [2013.08.20 23:05:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET [2013.08.20 23:05:17 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Roaming\ESET [2013.08.20 23:05:17 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Local\ESET [2013.08.20 23:04:37 | 000,000,000 | ---D | C] -- C:\Program Files\ATI [2013.08.20 23:03:59 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Roaming\Microsoft\Window s\Start Menu\Programs\Dropbox [2013.08.20 23:03:56 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies [2013.08.20 23:03:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\uTorrent [2013.08.20 23:02:44 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Roaming\uTorrent [2013.08.20 22:54:41 | 000,000,000 | ---D | C] -- C:\AMD [2013.08.20 22:52:51 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Adobe [2013.08.20 22:52:13 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Roaming\AIMP3 [2013.08.20 22:52:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AIMP3 [2013.08.20 22:50:47 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Roaming\Dropbox [2013.08.20 22:50:37 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Roaming\Microsoft\Window s\Start Menu\Programs\WinRAR [2013.08.20 22:50:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR [2013.08.20 22:45:39 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Local\ElevatedDiagnostic s [2013.08.20 22:43:47 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Roaming\Adobe [2013.08.20 22:40:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MozBackup [2013.08.20 22:40:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MozBackup [2013.08.20 22:37:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TeamViewer [2013.08.20 22:36:58 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Roaming\Mozilla [2013.08.20 22:36:58 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Local\Mozilla [2013.08.20 22:36:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla [2013.08.20 22:36:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service [2013.08.20 22:36:41 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Roaming\Media Player Classic [2013.08.20 22:35:56 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Roaming\WinRAR [2013.08.20 22:35:53 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR [2013.08.20 22:35:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC-HC x64 [2013.08.20 22:35:50 | 000,000,000 | ---D | C] -- C:\Program Files\MPC-HC [2013.08.20 22:35:43 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Local\Programs [2013.08.20 22:35:16 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Roaming\NetSpeedMonitor [2013.08.20 22:34:26 | 000,000,000 | ---D | C] -- C:\Program Files\NetSpeedMonitor [2013.08.20 22:34:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome [2013.08.20 22:33:45 | 000,000,000 | -HSD | C] -- C:\Windows\Installer [2013.08.20 22:33:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google [2013.08.20 22:33:41 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Local\Google [2013.08.20 22:29:29 | 000,000,000 | R--D | C] -- C:\Users\ugler1st\AppData\Roaming\Microsoft\Window s\Start Menu\Programs\Startup [2013.08.20 22:29:29 | 000,000,000 | R--D | C] -- C:\Users\ugler1st\Searches [2013.08.20 22:29:29 | 000,000,000 | R--D | C] -- C:\Users\ugler1st\AppData\Roaming\Microsoft\Window s\Start Menu\Programs\Administrative Tools [2013.08.20 22:29:29 | 000,000,000 | -H-D | C] -- C:\Users\ugler1st\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned [2013.08.20 22:29:18 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Roaming\Identities [2013.08.20 22:29:15 | 000,000,000 | R--D | C] -- C:\Users\ugler1st\Contacts [2013.08.20 22:29:13 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Local\VirtualStore [2013.08.20 22:29:05 | 000,000,000 | --SD | C] -- C:\Users\ugler1st\AppData\Roaming\Microsoft [2013.08.20 22:29:05 | 000,000,000 | R--D | C] -- C:\Users\ugler1st\Videos [2013.08.20 22:29:05 | 000,000,000 | R--D | C] -- C:\Users\ugler1st\Saved Games [2013.08.20 22:29:05 | 000,000,000 | R--D | C] -- C:\Users\ugler1st\Pictures [2013.08.20 22:29:05 | 000,000,000 | R--D | C] -- C:\Users\ugler1st\Music [2013.08.20 22:29:05 | 000,000,000 | R--D | C] -- C:\Users\ugler1st\AppData\Roaming\Microsoft\Window s\Start Menu\Programs\Maintenance [2013.08.20 22:29:05 | 000,000,000 | R--D | C] -- C:\Users\ugler1st\Links [2013.08.20 22:29:05 | 000,000,000 | R--D | C] -- C:\Users\ugler1st\Favorites [2013.08.20 22:29:05 | 000,000,000 | R--D | C] -- C:\Users\ugler1st\Downloads [2013.08.20 22:29:05 | 000,000,000 | R--D | C] -- C:\Users\ugler1st\Documents [2013.08.20 22:29:05 | 000,000,000 | R--D | C] -- C:\Users\ugler1st\Desktop [2013.08.20 22:29:05 | 000,000,000 | R--D | C] -- C:\Users\ugler1st\AppData\Roaming\Microsoft\Window s\Start Menu\Programs\Accessories [2013.08.20 22:29:05 | 000,000,000 | -HSD | C] -- C:\Users\ugler1st\Documents\Videolarım [2013.08.20 22:29:05 | 000,000,000 | -HSD | C] -- C:\Users\ugler1st\AppData\Local\Temporary Internet Files [2013.08.20 22:29:05 | 000,000,000 | -HSD | C] -- C:\Users\ugler1st\Templates [2013.08.20 22:29:05 | 000,000,000 | -HSD | C] -- C:\Users\ugler1st\Start Menu [2013.08.20 22:29:05 | 000,000,000 | -HSD | C] -- C:\Users\ugler1st\SendTo [2013.08.20 22:29:05 | 000,000,000 | -HSD | C] -- C:\Users\ugler1st\Documents\Resimlerim [2013.08.20 22:29:05 | 000,000,000 | -HSD | C] -- C:\Users\ugler1st\Recent [2013.08.20 22:29:05 | 000,000,000 | -HSD | C] -- C:\Users\ugler1st\PrintHood [2013.08.20 22:29:05 | 000,000,000 | -HSD | C] -- C:\Users\ugler1st\NetHood [2013.08.20 22:29:05 | 000,000,000 | -HSD | C] -- C:\Users\ugler1st\Documents\Muziğim [2013.08.20 22:29:05 | 000,000,000 | -HSD | C] -- C:\Users\ugler1st\Local Settings [2013.08.20 22:29:05 | 000,000,000 | -HSD | C] -- C:\Users\ugler1st\AppData\Local\History [2013.08.20 22:29:05 | 000,000,000 | -HSD | C] -- C:\Users\ugler1st\Cookies [2013.08.20 22:29:05 | 000,000,000 | -HSD | C] -- C:\Users\ugler1st\Belgelerim [2013.08.20 22:29:05 | 000,000,000 | -HSD | C] -- C:\Users\ugler1st\Application Data [2013.08.20 22:29:05 | 000,000,000 | -HSD | C] -- C:\Users\ugler1st\AppData\Local\Application Data [2013.08.20 22:29:05 | 000,000,000 | -H-D | C] -- C:\Users\ugler1st\AppData [2013.08.20 22:29:05 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Local\Temp [2013.08.20 22:29:05 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Local\Microsoft [2013.08.20 22:29:05 | 000,000,000 | ---D | C] -- C:\Users\ugler1st\AppData\Roaming\Media Center Programs [2013.08.20 22:28:54 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Videolarım [2013.08.20 22:28:54 | 000,000,000 | -HSD | C] -- C:\ProgramData\Sık Kullanılanlar [2013.08.20 22:28:54 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Resimlerim [2013.08.20 22:28:54 | 000,000,000 | -HSD | C] -- C:\Recovery [2013.08.20 22:28:54 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Muziğim [2013.08.20 22:28:54 | 000,000,000 | -HSD | C] -- C:\ProgramData\Belgeler [2013.08.20 22:28:50 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution [2013.08.20 22:24:06 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch [2013.08.20 22:23:33 | 000,000,000 | -HSD | C] -- C:\System Volume Information [2013.08.17 11:49:32 | 000,172,920 | ---- | C] (Tonec Inc.) -- C:\Windows\SysNative\drivers\idmwfp.sys ========== Files - Modified Within 30 Days ========== [2013.09.02 13:04:47 | 000,000,266 | ---- | M] () -- C:\Windows\tasks\AutoKMS.job [2013.09.02 13:04:10 | 000,001,020 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2013.09.02 13:03:28 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2013.09.02 13:03:19 | 3219,300,352 | -HS- | M] () -- C:\hiberfil.sys [2013.09.02 13:02:48 | 000,026,576 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2013.09.02 13:02:48 | 000,026,576 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2013.09.02 12:43:00 | 000,001,024 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2013.09.02 12:31:00 | 000,000,814 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2013.09.02 10:39:50 | 001,571,170 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2013.09.02 10:39:50 | 000,656,736 | ---- | M] () -- C:\Windows\SysNative\perfh01F.dat [2013.09.02 10:39:50 | 000,654,300 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2013.09.02 10:39:50 | 000,140,164 | ---- | M] () -- C:\Windows\SysNative\perfc01F.dat [2013.09.02 10:39:50 | 000,122,172 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2013.08.25 21:32:26 | 000,002,863 | ---- | M] () -- C:\Users\Public\Desktop\ABBYY FineReader 11.lnk [2013.08.25 18:26:56 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01 _09_00.Wdf [2013.08.25 14:18:01 | 000,001,187 | ---- | M] () -- C:\Users\ugler1st\Launcher - Kısayol (2).lnk [2013.08.24 15:51:16 | 000,000,000 | -HS- | M] () -- C:\Windows\SysWow64\win_fp_app.dat [2013.08.24 08:09:27 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_xusb21_01 007.Wdf [2013.08.24 03:06:40 | 001,545,804 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2013.08.23 17:10:07 | 000,001,116 | ---- | M] () -- C:\Users\ugler1st\Launcher - Kısayol.lnk [2013.08.23 14:16:05 | 000,003,201 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts [2013.08.22 16:08:18 | 000,001,753 | ---- | M] () -- C:\Users\ugler1st\Desktop\pes2013.lnk [2013.08.21 23:28:38 | 000,564,736 | ---- | M] (Daniel Codres) -- C:\Users\ugler1st\gms_v1_0_3.exe [2013.08.21 11:26:31 | 000,287,912 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2013.08.21 00:28:10 | 000,353,792 | ---- | M] (NewSoftwares.net,Inc.) -- C:\Windows\PromptService64.exe [2013.08.21 00:28:10 | 000,266,240 | ---- | M] (NewSoftwares.net,Inc.) -- C:\Windows\PromptService.exe [2013.08.21 00:27:16 | 000,004,384 | -H