Extras.txt Logum - ReadBull.net

19-09-2019, 12:31:24

#1
MI6

Açık Profil bilgileri

Özel Mesaj Gönder

MI6 tarafından gönderilen tüm mesajları bul

MI6'ı arkadaş olarak ekle

Kayıtlı Üye
OTL Extras logfile created on: 24.04.2013 20:34:16 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\HAKAN\Desktop
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16540)
Locale: 0000041f | Country: Turkiye | Language: TRK | Date Format: dd.MM.yyyy

7,96 Gb Total Physical Memory | 6,89 Gb Available Physical Memory | 86,52% Memory free
15,93 Gb Paging File | 14,77 Gb Available in Paging File | 92,71% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 119,24 Gb Total Space | 89,60 Gb Free Space | 75,14% Space Free | Partition Type: NTFS
Drive D: | 1863,01 Gb Total Space | 1850,70 Gb Free Space | 99,34% Space Free | Partition Type: NTFS

Computer Name: HAKANCAN | User Name: HAKAN | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (All) ==========

========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.chm[@ = chm.file] -- C:\Windows\hh.exe (Microsoft Corporation)
.cpl[@ = cplfile] -- C:\Windows\SysNative\control.exe (Microsoft Corporation)
.hlp[@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.hta[@ = htafile] -- C:\Windows\SysWOW64\mshta.exe (Microsoft Corporation)
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.inf[@ = inffile] -- C:\Windows\SysNative\NOTEPAD.EXE (Microsoft Corporation)
.ini[@ = inifile] -- C:\Windows\SysNative\NOTEPAD.EXE (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
.js[@ = JSFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
.jse[@ = JSEFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
.reg[@ = regfile] -- C:\Windows\regedit.exe (Microsoft Corporation)
.txt[@ = txtfile] -- C:\Windows\SysNative\NOTEPAD.EXE (Microsoft Corporation)
.vbe[@ = VBEFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
.vbs[@ = VBSFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
.wsf[@ = WSFFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
.wsh[@ = WSHFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.bat [@ = batfile] -- "%1" %*
.chm [@ = chm.file] -- C:\Windows\hh.exe (Microsoft Corporation)
.cmd [@ = cmdfile] -- "%1" %*
.com [@ = ComFile] -- "%1" %*
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.exe [@ = exefile] -- "%1" %*
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.hta [@ = htafile] -- C:\Windows\SysWOW64\mshta.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.inf [@ = inffile] -- C:\Windows\SysWow64\NOTEPAD.EXE (Microsoft Corporation)
.ini [@ = inifile] -- C:\Windows\SysWow64\NOTEPAD.EXE (Microsoft Corporation)
.url [@ = InternetShortcut] -- C:\Windows\SysWow64\rundll32.exe (Microsoft Corporation)
.js [@ = JSFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation)
.jse [@ = JSEFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation)
.pif [@ = piffile] -- "%1" %*
.reg [@ = regfile] -- C:\Windows\SysWow64\regedit.exe (Microsoft Corporation)
.scr [@ = scrfile] -- "%1" /S
.txt [@ = txtfile] -- C:\Windows\SysWow64\NOTEPAD.EXE (Microsoft Corporation)
.vbe [@ = VBEFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation)
.vbs [@ = VBSFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation)
.wsf [@ = WSFFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation)
.wsh [@ = WSHFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-931720473-2086657933-1607969013-1000\SOFTWARE\Classes\]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
batfile [open] -- "%1" %*
batfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
chm.file [open] -- "%SystemRoot%\hh.exe" %1 (Microsoft Corporation)
cmdfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
cmdfile [open] -- "%1" %*
cmdfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htafile [open] -- C:\Windows\SysWOW64\mshta.exe "%1" %* (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- rundll32.exe %SystemRoot%\system32\mshtml.dll,PrintHTML "%1" (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
inffile [open] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
inffile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
inifile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
inifile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
jsfile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation)
jsfile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
jsfile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation)
jsefile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation)
jsefile [open] -- C:\Windows\System32\WScript.exe "%1" %* (Microsoft Corporation)
jsefile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [edit] -- %SystemRoot%\system32\notepad.exe "%1" (Microsoft Corporation)
regfile [open] -- regedit.exe "%1" (Microsoft Corporation)
regfile [merge] -- Reg Error: Key error.
regfile [print] -- %SystemRoot%\system32\notepad.exe /p "%1" (Microsoft Corporation)
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
txtfile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
txtfile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
txtfile [printto] -- %SystemRoot%\system32\notepad.exe /pt "%1" "%2" "%3" "%4" (Microsoft Corporation)
vbefile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
vbefile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
vbefile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
vbsfile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
vbsfile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
vbsfile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
wsffile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
wsffile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
wsffile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
wshfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\ [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
batfile [open] -- "%1" %*
batfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
chm.file [open] -- "%SystemRoot%\hh.exe" %1 (Microsoft Corporation)
cmdfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
cmdfile [open] -- "%1" %*
cmdfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htafile [open] -- C:\Windows\SysWOW64\mshta.exe "%1" %* (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- rundll32.exe %SystemRoot%\system32\mshtml.dll,PrintHTML "%1" (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
inffile [open] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
inffile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
inifile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
inifile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
jsfile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation)
jsfile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
jsfile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation)
jsefile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation)
jsefile [open] -- C:\Windows\System32\WScript.exe "%1" %* (Microsoft Corporation)
jsefile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [edit] -- %SystemRoot%\system32\notepad.exe "%1" (Microsoft Corporation)
regfile [open] -- regedit.exe "%1" (Microsoft Corporation)
regfile [merge] -- Reg Error: Key error.
regfile [print] -- %SystemRoot%\system32\notepad.exe /p "%1" (Microsoft Corporation)
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
txtfile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
txtfile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
txtfile [printto] -- %SystemRoot%\system32\notepad.exe /pt "%1" "%2" "%3" "%4" (Microsoft Corporation)
vbefile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
vbefile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
vbefile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
vbsfile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
vbsfile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
vbsfile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
wsffile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
wsffile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
wsffile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
wshfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\ [OpenHomePage] -- Reg Error: Value error.

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dowsFirewall]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dowsFirewall\DomainProfile]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\DomainPr ofile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\Standard Profile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\Standard Profile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\PublicPr ofile]
"EnableFirewall" = 1
"DisableNotifications" = 0

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\DomainPr ofile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\Standard Profile\AuthorizedApplications\List]

========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\Firewall Rules]

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\Firewall Rules]
"" = protocol=6 | dir=in | app=d:\oyunlar\electronic arts\bioware\star wars-the old republic\launcher.exe |
"" = protocol=17 | dir=in | app=d:\oyunlar\electronic arts\bioware\star wars-the old republic\launcher.exe |
"" = protocol=17 | dir=in | app=d:\oyunlar\electronic arts\bioware\star wars-the old republic\launcher.exe |
"" = protocol=6 | dir=in | app=d:\oyunlar\electronic arts\bioware\star wars-the old republic\launcher.exe |
"TCP Query UserC:\users\hakan\appdata\local\apps\2.0 \5d7d1z4d.jg6\bg0vgrv8.j8a\laun...app_59711684aa47 878d_0001.0020_384afeaa435ce4d0\launcher.exe" = protocol=6 | dir=in | app=c:\users\hakan\appdata\local\apps\2.0\5d7d1z4d .jg6\bg0vgrv8.j8a\laun...app_59711684aa47878d_0001 .0020_384afeaa435ce4d0\launcher.exe |
"TCP Query UserC:\users\hakan\appdata\local\apps\2.0 \zegj5op0.yv3\co9vpvh4.cc1\laun...app_59711684aa47 878d_0001.0020_384afeaa435ce4d0\launcher.exe" = protocol=6 | dir=in | app=c:\users\hakan\appdata\local\apps\2.0\zegj5op0 .yv3\co9vpvh4.cc1\laun...app_59711684aa47878d_0001 .0020_384afeaa435ce4d0\launcher.exe |
"UDP Query UserC:\users\hakan\appdata\local\apps\2.0 \zegj5op0.yv3\co9vpvh4.cc1\laun...app_59711684aa47 878d_0001.0020_384afeaa435ce4d0\launcher.exe" = protocol=17 | dir=in | app=c:\users\hakan\appdata\local\apps\2.0\zegj5op0 .yv3\co9vpvh4.cc1\laun...app_59711684aa47878d_0001 .0020_384afeaa435ce4d0\launcher.exe |
"UDP Query UserC:\users\hakan\appdata\local\apps\2.0 \5d7d1z4d.jg6\bg0vgrv8.j8a\laun...app_59711684aa47 878d_0001.0020_384afeaa435ce4d0\launcher.exe" = protocol=17 | dir=in | app=c:\users\hakan\appdata\local\apps\2.0\5d7d1z4d .jg6\bg0vgrv8.j8a\laun...app_59711684aa47878d_0001 .0020_384afeaa435ce4d0\launcher.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall]
"" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729
"" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"" = Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.51106
"" = Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.51106
"" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6313
"" = Microsoft Visual C++ 2005 Redistributable (x64)
"_Display.3DVision" = NVIDIA 3D Vision Surucusu 320.00
"_Display.ControlPanel" = NVIDIA Denetim Masası 320.00
"_Display.Driver" = NVIDIA Grafik Surucusu 320.00
"_Display.NVIRUSB" = NVIDIA 3D Vision Denetleyici Surucusu 320.00
"_Display.PhysX" = NVIDIA PhysX Sistem Yazılımı 9.12.1031
"_Display.Update" = NVIDIA Guncelleştirmeleri 1.14.17
"_HDAudio.Driver" = NVIDIA HD Ses Surucusu 1.3.24.2
"_installer" = NVIDIA Install Application
"_NVIDIA.Update" = NVIDIA Update Components
"" = Vista Shortcut Manager x64
"WinRAR archiver" = WinRAR 4.20 (64-bit)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall]
"" = Java 7 Update 21
"" = Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver
"" = Star Wars: The Old Republic
"" = Java Auto Updater
"" = swMSM
"" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106
"" = Microsoft Visual C++ 2005 Redistributable
"" = Microsoft Visual F# 2.0 Runtime
"" = NVIDIA PhysX
"" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6313
"" = Google Update Helper
"" = Etron USB3.0 Host Controller
"" = System Requirements Lab CYRI
"" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106
"" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 12.0
"CCleaner" = CCleaner [Eklentili]
"Google Chrome" = Google Chrome
"HijackThis" = HijackThis 2.0.2
"InstallShield_" = Etron USB3.0 Host Controller
"Internet Download Manager" = Internet Download Manager
"Nero" = Nero Lite 12.0.28001 TR [SilentAll Team]
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"UltraISO_is1" = UltraISO Premium V9.53
"Uplay" = Uplay

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-931720473-2086657933-1607969013-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uni nstall]
"d8be6c3f847d7d92" = Ghost Recon Online (EU)

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 24.04.2013 13:25:40 | Computer Name = HAKANCAN | Source = Windows Search Service | ID = 9000
Description =

Error - 24.04.2013 13:25:40 | Computer Name = HAKANCAN | Source = Windows Search Service | ID = 7040
Description =

Error - 24.04.2013 13:25:40 | Computer Name = HAKANCAN | Source = Windows Search Service | ID = 7042
Description =

Error - 24.04.2013 13:25:40 | Computer Name = HAKANCAN | Source = Windows Search Service | ID = 9002
Description =

Error - 24.04.2013 13:25:40 | Computer Name = HAKANCAN | Source = Windows Search Service | ID = 3029
Description =

Error - 24.04.2013 13:25:40 | Computer Name = HAKANCAN | Source = Windows Search Service | ID = 3029
Description =

Error - 24.04.2013 13:25:40 | Computer Name = HAKANCAN | Source = Windows Search Service | ID = 3028
Description =

Error - 24.04.2013 13:25:40 | Computer Name = HAKANCAN | Source = Windows Search Service | ID = 3058
Description =

Error - 24.04.2013 13:25:40 | Computer Name = HAKANCAN | Source = Windows Search Service | ID = 7010
Description =

Error - 24.04.2013 13:27:19 | Computer Name = HAKANCAN | Source = WinMgmt | ID = 10
Description =

[ System Events ]
Error - 24.04.2013 13:09:19 | Computer Name = HAKANCAN | Source = Service Control Manager | ID = 7030
Description = PEVSystemStart hizmeti, etkileşimli bir hizmet olarak işaretli. Ancak
sistem, etkileşimli hizmetlere izin vermeyecek şekilde yapılandırıldı. Bu hizmet
duzgun calışmayabilir.

Error - 24.04.2013 13:10:00 | Computer Name = HAKANCAN | Source = Application Popup | ID = 1060
Description = Bu sistemle uyumlu olmadığından \??\C:\ComboFix\catchme.sys surucusunun
yuklenmesi engellendi. Surucunun uyumlu surumu icin lutfen yazılım satıcınıza başvurun.

Error - 24.04.2013 13:10:23 | Computer Name = HAKANCAN | Source = Service Control Manager | ID = 7030
Description = PEVSystemStart hizmeti, etkileşimli bir hizmet olarak işaretli. Ancak
sistem, etkileşimli hizmetlere izin vermeyecek şekilde yapılandırıldı. Bu hizmet
duzgun calışmayabilir.

Error - 24.04.2013 13:17:53 | Computer Name = HAKANCAN | Source = Service Control Manager | ID = 7030
Description = PEVSystemStart hizmeti, etkileşimli bir hizmet olarak işaretli. Ancak
sistem, etkileşimli hizmetlere izin vermeyecek şekilde yapılandırıldı. Bu hizmet
duzgun calışmayabilir.

Error - 24.04.2013 13:18:44 | Computer Name = HAKANCAN | Source = Service Control Manager | ID = 7030
Description = PEVSystemStart hizmeti, etkileşimli bir hizmet olarak işaretli. Ancak
sistem, etkileşimli hizmetlere izin vermeyecek şekilde yapılandırıldı. Bu hizmet
duzgun calışmayabilir.

Error - 24.04.2013 13:22:53 | Computer Name = HAKANCAN | Source = nvlddmkm | ID = 11141134
Description =

Error - 24.04.2013 13:25:31 | Computer Name = HAKANCAN | Source = EventLog | ID = 6008
Description = 20:23:56, ?24.?04.?2013 tarihinde gercekleşen onceki sistem kapanışı
beklenmiyordu.

Error - 24.04.2013 13:25:40 | Computer Name = HAKANCAN | Source = Service Control Manager | ID = 7024
Description = Windows Search hizmeti, hizmete ozgu %%-1073473535 hatası ile sona
erdi.

Error - 24.04.2013 13:25:40 | Computer Name = HAKANCAN | Source = Service Control Manager | ID = 7031
Description = Windows Search hizmeti beklenmedik şekilde sona erdi. Bu durum 1
defa oluştu. 30000 milisaniye icinde şu duzeltme eylemi uygulanacak: Hizmeti yeniden
başlat.

Error - 24.04.2013 13:26:10 | Computer Name = HAKANCAN | Source = Service Control Manager | ID = 7032
Description = Hizmet Denetimi Yoneticisi, Windows Search hizmetinin beklenmedik
şekilde sonlanmasından sonra, bir duzeltme eylemi (Hizmeti yeniden başlat) uygulamayı
denedi, ancak bu eylem şu hatayla başarısız oldu: %%1056

< End of report >
__________________