WiredWX Christian Hobby Weather Tools
Would you like to react to this message? Create an account in a few clicks or log in to continue.

WiredWX Christian Hobby Weather ToolsLog in

 


Something slows down the machine + occasional blue screens

3 posters

descriptionSomething slows down the machine + occasional blue screens - Page 2 EmptyRe: Something slows down the machine + occasional blue screens

more_horiz
i think i have succeded to upgrade to SP3..

i will monitor the situation of my PC for a couple of days and if i encounter any disturbance i will run "chkdsk and sfc /scannow" as your advice..

i am really grateful for your precious help... Thank You!

may i be sure that the topic won't be closed so that i can inform you with possible problems? Honored

descriptionSomething slows down the machine + occasional blue screens - Page 2 EmptyRe: Something slows down the machine + occasional blue screens

more_horiz
Hi,

Great news! Smile...

We don't close topics here unless they violate rules.

If it BSODs again please upload the latest minidump and I will be happy to assist.

............................................................................................

I'm livin' life in the fast lane.

descriptionSomething slows down the machine + occasional blue screens - Page 2 EmptyRe: Something slows down the machine + occasional blue screens

more_horiz
hi, this is the latest unwanted bluescreen related restart issue..
this occured after upgrading to SP3 and all high priority updates with it..
http://www.mediafire.com/?gjbvczj5dla5b2k

descriptionSomething slows down the machine + occasional blue screens - Page 2 EmptyRe: Something slows down the machine + occasional blue screens

more_horiz
Hi,

Please go into Command Prompt and type CHKDSK and hit enter.

............................................................................................

I'm livin' life in the fast lane.

descriptionSomething slows down the machine + occasional blue screens - Page 2 EmptyRe: Something slows down the machine + occasional blue screens

more_horiz
Microsoft Windows XP [Sürüm 5.1.2600]
(C) Telif Hakkı 1985-2001 Microsoft Corp.

C:\Documents and Settings\Owner>CHKDSK
Dosya sistemi türü NTFS.

UYARI! F parametresi belirtilmemis.
CHKDSK salt okunur modda çalıstırılıyor.

CHKDSK dosyaları dogruluyor (asama 1 / 3)...
Dosya dogrulama tamamlandı.
CHKDSK dizinleri dogruluyor (asama 2 / 3)...
45419 dosyası $I30 dizini Local State dizin girdisi siliniyor.
45419 dosyası $I30 dizini LOCALS~1 dizin girdisi siliniyor.
Dizin dogrulama tamamlandı.

Hatalar bulundu. CHKDSK salt okunur modda devam edemiyor.

C:\Documents and Settings\Owner>

descriptionSomething slows down the machine + occasional blue screens - Page 2 EmptyRe: Something slows down the machine + occasional blue screens

more_horiz
The last sentence says: errors found. CHKDSK can't continue in read only mode..

descriptionSomething slows down the machine + occasional blue screens - Page 2 EmptyRe: Something slows down the machine + occasional blue screens

more_horiz
Hi,

Please type chkdsk /r and reboot.

............................................................................................

I'm livin' life in the fast lane.

descriptionSomething slows down the machine + occasional blue screens - Page 2 EmptyRe: Something slows down the machine + occasional blue screens

more_horiz
hi, i did it .. it was a little bit long process, and i can't find anything to copy&paste.. again thank you very much..
i will inform you if any problem occurs.. Thank You!

descriptionSomething slows down the machine + occasional blue screens - Page 2 EmptyRe: Something slows down the machine + occasional blue screens

more_horiz
Hi,

Great, let me know how it goes. Smile...

............................................................................................

I'm livin' life in the fast lane.

descriptionSomething slows down the machine + occasional blue screens - Page 2 EmptyRe: Something slows down the machine + occasional blue screens

more_horiz
no problem since chkdsk is done.. more fluid performance is also noticed.. thank you for evreything you've done for me..

will continue to monitor the situation..

descriptionSomething slows down the machine + occasional blue screens - Page 2 EmptyRe: Something slows down the machine + occasional blue screens

more_horiz
Hi,

You're welcome, glad to help. Smile...

Let me know if it BSODs again.

............................................................................................

I'm livin' life in the fast lane.

descriptionSomething slows down the machine + occasional blue screens - Page 2 EmptyRe: Something slows down the machine + occasional blue screens

more_horiz
Hi Sneakyone, i haven't encountered any problem for few days but today when i tired to open my pc; while choosing my owner account at the acount choosing screen, after clicking my account it freezed for nearly 30 seconds than forced itself to get past but couldN't because blue screen occured which resulted with a unwanted reboot..

i couldn't understand this situation persisting too much eventhough we tried so much things to mend..

i will post the minidump file in my next post so that you can anylsye.. if you have anymore instructions to give i am looking forward to it..

descriptionSomething slows down the machine + occasional blue screens - Page 2 EmptyRe: Something slows down the machine + occasional blue screens

more_horiz
http://www.mediafire.com/?6mka0mguy32n0ul

descriptionSomething slows down the machine + occasional blue screens - Page 2 EmptyRe: Something slows down the machine + occasional blue screens

more_horiz
Hi,

I will get back to you with the results. I may have to ask for a little help on this one.

............................................................................................

I'm livin' life in the fast lane.

descriptionSomething slows down the machine + occasional blue screens - Page 2 EmptyRe: Something slows down the machine + occasional blue screens

more_horiz
hi, i have noticed that i am usually confronting this issue when i try to open my pc..

for example today i tryed to open and in just went on till the acoount choosing page however i couldn't choose my owner account and the screen freezed again.. i could move the mouse though but can't interact with anything.. the freezing situation didn't last for nearly 5 minutes this time so i turned off power button and made a restart manually..

i also noticed that while this freezing situation the cpu seems to be working with full power.. other than that noticed that while surfing or trying to do things fast, sometimes cpu fan accelerates itself to full power and for a while everything hesitates, similar to moving mouse and not interacting with anything..

descriptionSomething slows down the machine + occasional blue screens - Page 2 EmptyRe: Something slows down the machine + occasional blue screens

more_horiz
Hi,

Download MBRCheck to your desktop.
  • Double click MBRCheck.exe to run (Vista and Windows 7 users, right click and select Run as Administrator).
  • It will show a black screen with some data on it.
  • A report called MBRcheckxxxx.txt will be on your desktop
  • Open this report and post its content in your next reply.

............................................................................................

I'm livin' life in the fast lane.

descriptionSomething slows down the machine + occasional blue screens - Page 2 EmptyRe: Something slows down the machine + occasional blue screens

more_horiz
MBRCheck, version 1.2.3
(c) 2010, AD

Command-line:
Windows Version: Windows XP Home Edition
Windows Information: Service Pack 3 (build 2600)
Logical Drives Mask: 0x0000001c

Kernel Drivers (total 129):
0x804D7000 \WINDOWS\system32\ntoskrnl.exe
0x806EF000 \WINDOWS\system32\hal.dll
0xF7987000 \WINDOWS\system32\KDCOM.DLL
0xF7897000 \WINDOWS\system32\BOOTVID.dll
0xF75A8000 ACPI.sys
0xF7989000 \WINDOWS\system32\DRIVERS\WMILIB.SYS
0xF7597000 pci.sys
0xF75F7000 isapnp.sys
0xF7607000 ohci1394.sys
0xF7617000 \WINDOWS\system32\DRIVERS\1394BUS.SYS
0xF789B000 compbatt.sys
0xF789F000 \WINDOWS\system32\DRIVERS\BATTC.SYS
0xF7A4F000 PCIIde.sys
0xF7707000 \WINDOWS\System32\Drivers\PCIIDEX.SYS
0xF798B000 intelide.sys
0xF74D9000 pcmcia.sys
0xF7627000 MountMgr.sys
0xF74BA000 ftdisk.sys
0xF78A3000 ACPIEC.sys
0xF7A50000 \WINDOWS\system32\DRIVERS\OPRGHDLR.SYS
0xF770F000 PartMgr.sys
0xF7637000 VolSnap.sys
0xF74A2000 atapi.sys
0xF7647000 disk.sys
0xF7657000 \WINDOWS\system32\DRIVERS\CLASSPNP.SYS
0xF7482000 fltmgr.sys
0xF7470000 sr.sys
0xF7459000 KSecDD.sys
0xF7B52000 Ntfs.sys
0xF742C000 NDIS.sys
0xF7412000 Mup.sys
0xF76E7000 \SystemRoot\system32\DRIVERS\nic1394.sys
0xF7547000 \SystemRoot\system32\DRIVERS\intelppm.sys
0xB9EED000 \SystemRoot\system32\DRIVERS\nv4_mini.sys
0xB9ED9000 \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS
0xB9EB1000 \SystemRoot\system32\DRIVERS\HDAudBus.sys
0xF7777000 \SystemRoot\system32\DRIVERS\usbuhci.sys
0xB9E8D000 \SystemRoot\system32\DRIVERS\USBPORT.SYS
0xF777F000 \SystemRoot\system32\DRIVERS\usbehci.sys
0xB9E7B000 \SystemRoot\system32\DRIVERS\Rtlnicxp.sys
0xB9B68000 \SystemRoot\system32\DRIVERS\w29n51.sys
0xB9B41000 \SystemRoot\system32\drivers\tifm21.sys
0xF7537000 \SystemRoot\system32\DRIVERS\smcirda.sys
0xF7947000 \SystemRoot\system32\DRIVERS\irenum.sys
0xF7527000 \SystemRoot\system32\DRIVERS\i8042prt.sys
0xF7787000 \SystemRoot\system32\drivers\qkbfiltr.sys
0xF778F000 \SystemRoot\system32\DRIVERS\kbdclass.sys
0xB9B13000 \SystemRoot\system32\DRIVERS\SynTP.sys
0xF799D000 \SystemRoot\system32\DRIVERS\USBD.SYS
0xF7797000 \SystemRoot\system32\DRIVERS\mouclass.sys
0xF7517000 \SystemRoot\system32\DRIVERS\imapi.sys
0xF7507000 \SystemRoot\system32\DRIVERS\cdrom.sys
0xF74F7000 \SystemRoot\system32\DRIVERS\redbook.sys
0xB9AF0000 \SystemRoot\system32\DRIVERS\ks.sys
0xBA7F8000 \SystemRoot\system32\DRIVERS\CmBatt.sys
0xBA7F4000 \SystemRoot\system32\DRIVERS\wmiacpi.sys
0xBA7A0000 \SystemRoot\system32\DRIVERS\Epfwndis.sys
0xF7AA2000 \SystemRoot\system32\DRIVERS\audstub.sys
0xF779F000 \SystemRoot\system32\DRIVERS\rasirda.sys
0xF77A7000 \SystemRoot\system32\DRIVERS\TDI.SYS
0xBA790000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
0xBA7EC000 \SystemRoot\system32\DRIVERS\ndistapi.sys
0xB9AD9000 \SystemRoot\system32\DRIVERS\ndiswan.sys
0xBA780000 \SystemRoot\system32\DRIVERS\raspppoe.sys
0xBA770000 \SystemRoot\system32\DRIVERS\raspptp.sys
0xB9A28000 \SystemRoot\system32\DRIVERS\psched.sys
0xBA760000 \SystemRoot\system32\DRIVERS\msgpc.sys
0xF77AF000 \SystemRoot\system32\DRIVERS\ptilink.sys
0xF77B7000 \SystemRoot\system32\DRIVERS\raspti.sys
0xBA750000 \SystemRoot\system32\DRIVERS\termdd.sys
0xF799F000 \SystemRoot\system32\DRIVERS\swenum.sys
0xB99CA000 \SystemRoot\system32\DRIVERS\update.sys
0xBA7DC000 \SystemRoot\system32\DRIVERS\mssmbios.sys
0xBA730000 \SystemRoot\System32\Drivers\NDProxy.SYS
0xB7729000 \SystemRoot\system32\drivers\RtkHDAud.sys
0xB7705000 \SystemRoot\system32\drivers\portcls.sys
0xBA720000 \SystemRoot\system32\drivers\drmk.sys
0xB7638000 \SystemRoot\system32\DRIVERS\smserial.sys
0xF77BF000 \SystemRoot\System32\Drivers\Modem.SYS
0xBA710000 \SystemRoot\system32\DRIVERS\usbhub.sys
0xF79A5000 \SystemRoot\System32\Drivers\Fs_Rec.SYS
0xF7A84000 \SystemRoot\System32\Drivers\Null.SYS
0xF79A7000 \SystemRoot\System32\Drivers\Beep.SYS
0xF77DF000 \SystemRoot\System32\drivers\vga.sys
0xF79A9000 \SystemRoot\System32\Drivers\mnmdd.SYS
0xF79AB000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
0xF77E7000 \SystemRoot\System32\Drivers\Msfs.SYS
0xF77EF000 \SystemRoot\System32\Drivers\Npfs.SYS
0xBA2B7000 \SystemRoot\system32\DRIVERS\rasacd.sys
0xB74ED000 \SystemRoot\system32\DRIVERS\ipsec.sys
0xB7494000 \SystemRoot\system32\DRIVERS\tcpip.sys
0xB7482000 \SystemRoot\system32\DRIVERS\epfwtdi.sys
0xB745A000 \SystemRoot\system32\DRIVERS\netbt.sys
0xB7438000 \SystemRoot\System32\drivers\afd.sys
0xF76C7000 \SystemRoot\system32\DRIVERS\netbios.sys
0xB740D000 \SystemRoot\system32\DRIVERS\rdbss.sys
0xB739D000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
0xF76D7000 \SystemRoot\System32\Drivers\Fips.SYS
0xB7377000 \SystemRoot\system32\DRIVERS\ipnat.sys
0xF76F7000 \SystemRoot\system32\DRIVERS\wanarp.sys
0xF7587000 \SystemRoot\system32\DRIVERS\arp1394.sys
0xF77F7000 \SystemRoot\system32\DRIVERS\usbccgp.sys
0xF792F000 \SystemRoot\system32\DRIVERS\hidusb.sys
0xF7567000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
0xF77FF000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
0xF7933000 \SystemRoot\system32\DRIVERS\mouhid.sys
0xB9AC9000 \SystemRoot\system32\DRIVERS\easdrv.sys
0xB9A79000 \SystemRoot\System32\Drivers\Cdfs.SYS
0xB730F000 \SystemRoot\System32\Drivers\dump_atapi.sys
0xF79B9000 \SystemRoot\System32\Drivers\dump_WMILIB.SYS
0xBF800000 \SystemRoot\System32\win32k.sys
0xBA7BC000 \SystemRoot\System32\drivers\Dxapi.sys
0xF781F000 \SystemRoot\System32\watchdog.sys
0xBF000000 \SystemRoot\System32\drivers\dxg.sys
0xB7336000 \SystemRoot\System32\drivers\dxgthk.sys
0xBF012000 \SystemRoot\System32\nv4_disp.dll
0xBFFA0000 \SystemRoot\System32\ATMFD.DLL
0xB53A6000 \SystemRoot\system32\DRIVERS\epfw.sys
0xB7628000 \SystemRoot\system32\DRIVERS\fssfltr_tdi.sys
0xB5340000 \SystemRoot\system32\DRIVERS\irda.sys
0xB53EA000 \SystemRoot\system32\DRIVERS\ndisuio.sys
0xB5197000 \SystemRoot\system32\DRIVERS\mrxdav.sys
0xB5082000 \SystemRoot\system32\DRIVERS\eamon.sys
0xB5002000 \SystemRoot\system32\DRIVERS\srv.sys
0xB4C7D000 \SystemRoot\system32\drivers\wdmaud.sys
0xB4E72000 \SystemRoot\system32\drivers\sysaudio.sys
0xB493A000 \SystemRoot\System32\Drivers\HTTP.sys
0xB3E58000
0x7C8F0000 \WINDOWS\system32\ntdll.dll

Processes (total 36):
0 System Idle Process
4 System
1092 C:\WINDOWS\system32\smss.exe
1212 csrss.exe
1236 C:\WINDOWS\system32\winlogon.exe
1280 C:\WINDOWS\system32\services.exe
1292 C:\WINDOWS\system32\lsass.exe
1440 C:\WINDOWS\system32\svchost.exe
1540 svchost.exe
1576 C:\WINDOWS\system32\svchost.exe
1628 svchost.exe
1756 svchost.exe
200 C:\WINDOWS\system32\spoolsv.exe
284 svchost.exe
324 C:\Program Files\ESET\ESET Smart Security\ekrn.exe
356 C:\Program Files\Java\jre6\bin\jqs.exe
416 C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
452 C:\WINDOWS\system32\nvsvc32.exe
628 C:\WINDOWS\system32\wuauclt.exe
1168 alg.exe
160 C:\WINDOWS\explorer.exe
1604 C:\WINDOWS\system32\wbem\wmiapsrv.exe
1828 wmiprvse.exe
1980 C:\WINDOWS\SOUNDMAN.EXE
352 C:\WINDOWS\sm56hlpr.exe
520 C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
1392 C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
884 C:\Program Files\Common Files\Java\Java Update\jusched.exe
936 C:\Program Files\ESET\ESET Smart Security\egui.exe
980 C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
992 C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe
1052 C:\WINDOWS\system32\ctfmon.exe
1196 C:\Documents and Settings\Owner\Local Settings\Application Data\Google\Update\1.2.183.39\GoogleCrashHandler.exe
3060 C:\Program Files\Mozilla Firefox\firefox.exe
1912 C:\Program Files\Mozilla Firefox\plugin-container.exe
4012 C:\Documents and Settings\Owner\Desktop\MBRCheck.exe

\\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000`00007e00 (NTFS)
\\.\D: --> \\.\PhysicalDrive0 at offset 0x00000009`c3dcd400 (NTFS)

PhysicalDrive0 Model Number: FUJITSUMHV2060AH, Rev: 00000096

Size Device Name MBR Status
--------------------------------------------
55 GB \\.\PhysicalDrive0 Windows XP MBR code detected
SHA1: 73E2252DF569CAE13F347084E7E68B1A4FA09A9B


Done!

descriptionSomething slows down the machine + occasional blue screens - Page 2 EmptyRe: Something slows down the machine + occasional blue screens

more_horiz
Hi,

Could you please re-run OTL?

............................................................................................

I'm livin' life in the fast lane.

descriptionSomething slows down the machine + occasional blue screens - Page 2 EmptyRe: Something slows down the machine + occasional blue screens

more_horiz
do you want me to copy paste anything to custom/scans fix box?

i am about to repeat exactly what you said at post no 2..

descriptionSomething slows down the machine + occasional blue screens - Page 2 EmptyRe: Something slows down the machine + occasional blue screens

more_horiz
OTL logfile created on: 12/11/2010 11:25:34 - Run 1
OTL by OldTimer - Version 3.2.17.3 Folder = C:\Documents and Settings\Owner\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000809 | Country: İngiltere | Language: ENG | Date Format: dd/MM/yyyy

2.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 76.00% Memory free
4.00 Gb Paging File | 4.00 Gb Available in Paging File | 91.00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 39.06 Gb Total Space | 0.62 Gb Free Space | 1.60% Space Free | Partition Type: NTFS
Drive D: | 16.82 Gb Total Space | 9.25 Gb Free Space | 54.99% Space Free | Partition Type: NTFS

Computer Name: PC-C521DA8688CE | User Name: Owner | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2010/11/12 11:21:15 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Owner\Desktop\OTL.com
PRC - [2010/11/01 23:36:03 | 000,974,904 | ---- | M] (Google Inc.) -- C:\Documents and Settings\Owner\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
PRC - [2010/10/29 13:06:33 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2010/10/20 20:24:39 | 000,134,808 | ---- | M] (Google Inc.) -- C:\Documents and Settings\Owner\Local Settings\Application Data\Google\Update\1.2.183.39\GoogleCrashHandler.exe
PRC - [2008/04/14 18:00:38 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2008/03/01 03:54:52 | 001,443,072 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\egui.exe
PRC - [2007/12/21 07:21:16 | 000,468,224 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe
PRC - [2004/11/02 08:53:06 | 000,077,824 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SOUNDMAN.EXE
PRC - [2004/10/21 16:19:00 | 000,585,728 | ---- | M] (Motorola Inc.) -- C:\WINDOWS\sm56hlpr.exe
PRC - [2004/08/17 08:11:14 | 000,102,400 | ---- | M] (Synaptics, Inc.) -- C:\Program Files\Synaptics\SynTP\SynTPLpr.exe


========== Modules (SafeList) ==========

MOD - [2010/11/12 11:21:15 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Owner\Desktop\OTL.com
MOD - [2010/08/23 18:12:28 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
MOD - [2004/08/17 08:11:10 | 000,066,048 | ---- | M] (Synaptics, Inc.) -- C:\WINDOWS\system32\SynTPFcs.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [On_Demand | Stopped] -- C:\WINDOWS\System32\appmgmts.dll -- (AppMgmt)
SRV - [2010/04/28 06:44:02 | 000,704,872 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Live\Family Safety\fsssvc.exe -- (fsssvc)
SRV - [2008/03/01 03:58:08 | 000,019,200 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe -- (EhttpSrv)
SRV - [2007/12/21 07:21:16 | 000,468,224 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe -- (ekrn)


========== Driver Services (SafeList) ==========

DRV - [2010/04/28 06:44:02 | 000,054,760 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\fssfltr_tdi.sys -- (fssfltr)
DRV - [2008/04/13 18:36:05 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2008/03/01 03:56:36 | 000,054,280 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\epfwtdi.sys -- (epfwtdi)
DRV - [2008/03/01 03:56:34 | 000,030,728 | ---- | M] (ESET) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\epfwndis.sys -- (Epfwndis)
DRV - [2008/03/01 03:56:30 | 000,071,176 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\epfw.sys -- (epfw)
DRV - [2008/03/01 03:53:16 | 000,029,704 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\easdrv.sys -- (easdrv)
DRV - [2008/03/01 03:52:30 | 000,039,944 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\eamon.sys -- (eamon)
DRV - [2005/03/17 12:21:18 | 000,157,056 | ---- | M] (Texas Instruments) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\tifm21.sys -- (tifm21)
DRV - [2004/11/29 10:42:54 | 002,319,808 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2004/11/10 16:02:00 | 002,842,208 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)
DRV - [2004/10/29 12:48:10 | 003,222,784 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\w29n51.sys -- (w29n51) Intel(R)
DRV - [2004/10/21 16:20:00 | 000,836,338 | ---- | M] (Motorola Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\smserial.sys -- (smserial)
DRV - [2004/09/23 15:51:40 | 000,029,312 | ---- | M] (Quanta Computer, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\qkbfiltr.sys -- (qkbfiltr)
DRV - [2004/08/18 16:02:26 | 000,007,552 | ---- | M] (Quanta Computer, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\qmofiltr.sys -- (qmofiltr)
DRV - [2004/08/17 08:06:34 | 000,185,664 | ---- | M] (Synaptics, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SynTP.sys -- (SynTP)
DRV - [2004/08/09 08:27:18 | 000,070,144 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtlnicxp.sys -- (RTL8023xp)
DRV - [2001/11/21 23:03:24 | 000,035,913 | ---- | M] (SMC) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\smcirda.sys -- (SMCIRDA)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========


IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.1
FF - prefs.js..extensions.enabledItems: {73a6fe31-595d-460b-a920-fcc0f8843232}:2.0.4
FF - prefs.js..network.proxy.autoconfig_url: "http://go.navige.com/"
FF - prefs.js..network.proxy.type: 2

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/10/29 13:06:46 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/10/31 12:35:02 | 000,000,000 | ---D | M]

[2010/10/17 10:36:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Mozilla\Extensions
[2010/11/11 18:20:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\0wncy7a7.default\extensions
[2010/10/29 17:32:11 | 000,000,000 | ---D | M] (NoScript) -- C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\0wncy7a7.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}
[2010/11/03 20:36:07 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\0wncy7a7.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010/10/17 10:34:49 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2010/09/14 23:21:23 | 000,001,182 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-tr.xml

O1 HOSTS File: ([2010/10/29 19:40:51 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O4 - HKLM..\Run: [AlcWzrd] C:\WINDOWS\ALCWZRD.EXE (RealTek Semicoductor Corp.)
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe (NVIDIA Corporation)
O4 - HKLM..\Run: [SMSERIAL] C:\WINDOWS\sm56hlpr.exe (Motorola Inc.)
O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe (Synaptics, Inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O9 - Extra Button: Bunu Bloga Al - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Windows Live Writer içinde &Bunu Web Günlüğüne Al - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} http://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab (System Requirements Lab Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Geçerli Giriş Sayfam) - About:Home
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Manzara.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Manzara.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/10/16 09:10:57 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: AppMgmt - C:\WINDOWS\System32\appmgmts.dll File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

MsConfig - StartUpReg: Keyboard Manager Utility - hkey= - key= - C:\Program Files\Keyboard Manager\Manager Utility\KeyboardManager.exe (Quanta Computer Inc.)
MsConfig - StartUpReg: msnmsgr - hkey= - key= - C:\Program Files\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation)
MsConfig - StartUpReg: Steam - hkey= - key= - C:\Program Files\Steam\Steam.exe (Valve Corporation)
MsConfig - State: "system.ini" - 0
MsConfig - State: "win.ini" - 0
MsConfig - State: "bootini" - 0
MsConfig - State: "services" - 0
MsConfig - State: "startup" - 2

SafeBootMin: AppMgmt - C:\WINDOWS\System32\appmgmts.dll File not found
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: sermouse.sys - Driver
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vds - Service
SafeBootMin: vga.sys - Driver
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

SafeBootNet: AppMgmt - C:\WINDOWS\System32\appmgmts.dll File not found
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: sermouse.sys - Driver
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vga.sys - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {10072CEC-8CC1-11D1-986E-00A0C955B42F} - Vector Graphics Rendering (VML)
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 6.4
ActiveX: {283807B5-2C60-11D0-A31D-00AA00B92C03} - DirectAnimation
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {36f8ec70-c29a-11d1-b5c7-0000f8051515} - Java için Dinamik HTML Veri Baglantisi
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3bf42070-b3b1-11d1-b5c5-0000f8051515} - Uniscribe
ActiveX: {4278c270-a269-11d1-b5bf-0000f8051515} - Ileri Düzey Gelistirme
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install
ActiveX: {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f216970-c90c-11d1-b5c7-0000f8051515} - DirectAnimation Java Siniflari
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser
ActiveX: {5A8D6EE0-3E18-11D0-821E-444553540000} - ICW
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7131646D-CD3C-40F4-97B9-CD9E4E6262EF} - .NET Framework
ActiveX: {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - Web Klasörleri
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\WINDOWS\system32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} - .NET Framework
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CC2A9BA0-3BDD-11D0-821E-444553540000} - Görev Zamanlayıcı
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {D27CDB6E-AE6D-11cf-96B8-444553540000} - Macromedia Shockwave Flash
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - C:\WINDOWS\system32\ieudinit.exe
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\WINDOWS\system32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
ActiveX: >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE

Drivers32: msacm.ac3acm - C:\WINDOWS\System32\ac3acm.acm (fccHandler)
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3fhg - C:\WINDOWS\System32\mp3fhg.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FFDS - C:\WINDOWS\System32\ff_vfw.dll ()
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: VIDC.XVID - C:\WINDOWS\System32\xvidvfw.dll ()
Drivers32: VIDC.YV12 - C:\WINDOWS\System32\yv12vfw.dll (www.helixcommunity.org)

descriptionSomething slows down the machine + occasional blue screens - Page 2 EmptyRe: Something slows down the machine + occasional blue screens

more_horiz
CREATERESTOREPOINT
Restore point Set: OTL Restore Point (16902109354000384)

========== Files/Folders - Created Within 30 Days ==========

[2010/11/12 11:20:47 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Owner\Desktop\OTL.com
[2010/11/11 00:55:40 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2010/11/09 12:24:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Desktop\Manager11 cracking
[2010/11/08 19:02:28 | 000,000,000 | ---D | C] -- C:\Program Files\BitTorrent
[2010/11/08 19:01:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\BitTorrent
[2010/11/03 18:48:35 | 000,442,368 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\NVUNINST.EXE
[2010/11/02 21:01:06 | 000,000,000 | ---D | C] -- C:\NVIDIA
[2010/11/02 19:15:01 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Owner\PrivacIE
[2010/11/02 19:08:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\XPSViewer
[2010/11/02 19:08:45 | 000,000,000 | ---D | C] -- C:\Program Files\MSBuild
[2010/11/02 19:08:43 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\en-US
[2010/11/02 19:08:35 | 000,000,000 | ---D | C] -- C:\Program Files\Reference Assemblies
[2010/11/02 19:08:05 | 000,597,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\printfilterpipelinesvc.exe
[2010/11/02 19:08:05 | 000,117,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\prntvpt.dll
[2010/11/02 19:08:05 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\filterpipelineprintproc.dll
[2010/11/02 19:08:04 | 001,676,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xpssvcs.dll
[2010/11/02 19:08:04 | 001,676,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\xpssvcs.dll
[2010/11/02 19:08:04 | 000,575,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\xpsshhdr.dll
[2010/11/02 19:01:54 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Owner\IETldCache
[2010/11/02 16:39:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\ie8updates
[2010/11/02 16:39:08 | 000,602,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeeds.dll
[2010/11/02 16:39:08 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeedsbs.dll
[2010/11/02 16:39:07 | 001,986,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iertutil.dll
[2010/11/02 16:39:06 | 011,080,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieframe.dll
[2010/11/02 16:39:06 | 000,743,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iedvtool.dll
[2010/11/02 16:38:54 | 000,000,000 | ---D | C] -- C:\WINDOWS\WBEM
[2010/11/02 16:37:37 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ie8
[2010/11/02 16:17:58 | 000,953,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mfc40u.dll
[2010/11/02 16:17:57 | 000,974,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mfc42.dll
[2010/11/02 16:17:29 | 000,617,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comctl32.dll
[2010/11/02 16:12:57 | 000,726,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jscript.dll
[2010/11/02 16:05:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\Favorites
[2010/11/02 16:05:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Favorites
[2010/11/02 16:04:04 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
[2010/11/02 15:54:11 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\tr-tr
[2010/11/02 15:54:10 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\tr
[2010/11/02 15:54:10 | 000,000,000 | ---D | C] -- C:\WINDOWS\l2schemas
[2010/11/02 15:54:09 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\bits
[2010/11/02 15:50:12 | 000,000,000 | ---D | C] -- C:\WINDOWS\network diagnostic
[2010/11/02 15:46:07 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$NtServicePackUninstall$
[2010/11/02 15:46:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\EHome
[2010/11/02 15:41:10 | 000,025,471 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\watv10nt.sys
[2010/11/02 15:41:10 | 000,022,271 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\watv06nt.sys
[2010/11/02 15:41:10 | 000,011,935 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv11nt.sys
[2010/11/02 15:41:10 | 000,011,871 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv09nt.sys
[2010/11/02 15:41:10 | 000,011,807 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv07nt.sys
[2010/11/02 15:41:10 | 000,011,295 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv08nt.sys
[2010/11/02 15:41:06 | 000,404,990 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slntamr.sys
[2010/11/02 15:41:06 | 000,129,535 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slnt7554.sys
[2010/11/02 15:41:06 | 000,095,424 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slnthal.sys
[2010/11/02 15:41:06 | 000,013,240 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slwdmsup.sys
[2010/11/02 15:41:05 | 000,166,912 | ---- | C] (S3 Graphics, Inc.) -- C:\WINDOWS\System32\drivers\s3gnbm.sys
[2010/11/02 15:41:05 | 000,013,776 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\recagent.sys
[2010/11/02 15:41:04 | 001,309,184 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\mtlstrm.sys
[2010/11/02 15:41:04 | 000,452,736 | ---- | C] (Matrox Graphics Inc.) -- C:\WINDOWS\System32\drivers\mtxparhm.sys
[2010/11/02 15:41:04 | 000,180,360 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\ntmtlfax.sys
[2010/11/02 15:41:04 | 000,126,686 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\mtlmnt5.sys
[2010/11/02 15:40:14 | 000,701,440 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati2mtag.sys
[2010/11/02 15:40:14 | 000,327,040 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati2mtaa.sys
[2010/11/02 15:40:14 | 000,104,960 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinrvxx.sys
[2010/11/02 15:40:14 | 000,073,216 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atintuxx.sys
[2010/11/02 15:40:14 | 000,063,663 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1rvxx.sys
[2010/11/02 15:40:14 | 000,063,488 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinxsxx.sys
[2010/11/02 15:40:14 | 000,057,856 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinbtxx.sys
[2010/11/02 15:40:14 | 000,056,623 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1btxx.sys
[2010/11/02 15:40:14 | 000,052,224 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinraxx.sys
[2010/11/02 15:40:14 | 000,036,463 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1tuxx.sys
[2010/11/02 15:40:14 | 000,034,735 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1xsxx.sys
[2010/11/02 15:40:14 | 000,031,744 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinxbxx.sys
[2010/11/02 15:40:14 | 000,030,671 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1raxx.sys
[2010/11/02 15:40:14 | 000,029,455 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1xbxx.sys
[2010/11/02 15:40:14 | 000,028,672 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinsnxx.sys
[2010/11/02 15:40:14 | 000,026,367 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1snxx.sys
[2010/11/02 15:40:14 | 000,021,343 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1ttxx.sys
[2010/11/02 15:40:14 | 000,014,336 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinpdxx.sys
[2010/11/02 15:40:14 | 000,013,824 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinttxx.sys
[2010/11/02 15:40:14 | 000,013,824 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinmdxx.sys
[2010/11/02 15:40:14 | 000,012,047 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1pdxx.sys
[2010/11/02 15:40:14 | 000,011,615 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1mdxx.sys
[2010/10/31 12:34:00 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
[2010/10/31 12:33:58 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe AIR
[2010/10/31 12:24:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Belgelerim\Updater5
[2010/10/31 12:24:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Local Settings\Application Data\Adobe
[2010/10/31 12:03:53 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2010/10/30 10:12:57 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Belgeler\Videolarım
[2010/10/30 00:25:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\Malwarebytes
[2010/10/30 00:24:51 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010/10/30 00:24:50 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010/10/30 00:24:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2010/10/30 00:24:49 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010/10/29 19:31:19 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2010/10/29 19:29:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2010/10/29 19:27:49 | 000,000,000 | ---D | C] -- C:\Qoobox
[2010/10/29 15:21:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
[2010/10/29 15:09:41 | 000,016,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsg.dll
[2010/10/29 15:09:28 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Media Connect 2
[2010/10/29 15:08:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\UMDF
[2010/10/29 15:08:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\LogFiles
[2010/10/26 15:56:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\SystemRequirementsLab
[2010/10/22 14:13:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Local Settings\Application Data\eSupport.com
[2010/10/22 14:03:20 | 000,000,000 | ---D | C] -- C:\Program Files\SystemRequirementsLab
[2010/10/21 10:49:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Local Settings\Application Data\Sports Interactive
[2010/10/20 20:26:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Local Settings\Application Data\Temp
[2010/10/20 20:24:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Local Settings\Application Data\Google
[2010/10/20 20:24:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Local Settings\Application Data\Deployment
[2010/10/20 18:23:58 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Owner\UserData
[2010/10/20 15:49:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\Minidump
[2010/10/19 11:51:35 | 000,000,000 | ---D | C] -- C:\WINDOWS\Sun
[2010/10/18 10:41:29 | 000,274,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mucltui.dll
[2010/10/18 10:41:29 | 000,017,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mucltui.dll.mui
[2010/10/17 21:20:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss
[2010/10/17 14:49:50 | 000,000,000 | ---D | C] -- C:\Program Files\Steam
[2010/10/17 14:49:25 | 000,000,000 | ---D | C] -- C:\Program Files\Sports Interactive
[2010/10/17 14:40:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Sports Interactive
[2010/10/17 14:39:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Belgelerim\Sports Interactive
[2010/10/17 14:39:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Belgeler\Sports Interactive
[2010/10/17 14:39:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\Sports Interactive
[2010/10/17 14:36:12 | 001,846,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_41.dll
[2010/10/17 14:36:12 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_41.dll
[2010/10/17 14:36:11 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_41.dll
[2010/10/17 14:36:10 | 000,517,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_4.dll
[2010/10/17 14:36:10 | 000,069,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFX1_3.dll
[2010/10/17 14:36:09 | 000,235,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_4.dll
[2010/10/17 14:36:09 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_6.dll
[2010/10/17 14:36:08 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_40.dll
[2010/10/17 14:36:08 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_40.dll
[2010/10/17 14:36:07 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_40.dll
[2010/10/17 14:36:06 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_3.dll
[2010/10/17 14:36:06 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFX1_2.dll
[2010/10/17 14:36:05 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_3.dll
[2010/10/17 14:36:05 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_5.dll
[2010/10/17 14:36:04 | 000,509,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_2.dll
[2010/10/17 14:36:04 | 000,068,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFX1_1.dll
[2010/10/17 14:36:03 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_2.dll
[2010/10/17 14:36:02 | 001,493,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_39.dll
[2010/10/17 14:36:02 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_39.dll
[2010/10/17 14:36:00 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_39.dll
[2010/10/17 14:35:59 | 000,507,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_1.dll
[2010/10/17 14:35:59 | 000,065,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFX1_0.dll
[2010/10/17 14:35:58 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_1.dll
[2010/10/17 14:35:57 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_4.dll
[2010/10/17 14:35:56 | 001,491,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_38.dll
[2010/10/17 14:35:56 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_38.dll
[2010/10/17 14:35:55 | 003,850,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_38.dll
[2010/10/17 14:35:55 | 000,479,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_0.dll
[2010/10/17 14:35:54 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_0.dll
[2010/10/17 14:35:53 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_3.dll
[2010/10/17 14:35:52 | 003,786,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_37.dll
[2010/10/17 14:35:52 | 001,420,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_37.dll
[2010/10/17 14:35:52 | 000,462,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_37.dll
[2010/10/17 14:35:51 | 000,267,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_10.dll
[2010/10/17 14:35:49 | 001,374,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_36.dll
[2010/10/17 14:35:49 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_36.dll
[2010/10/17 14:35:48 | 003,734,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_36.dll
[2010/10/17 14:35:47 | 000,267,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_9.dll
[2010/10/17 14:35:46 | 003,727,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_35.dll
[2010/10/17 14:35:46 | 001,358,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_35.dll
[2010/10/17 14:35:46 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_35.dll
[2010/10/17 14:35:45 | 000,266,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_8.dll
[2010/10/17 14:35:45 | 000,017,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_2.dll
[2010/10/17 14:35:44 | 001,124,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_34.dll
[2010/10/17 14:35:44 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_34.dll
[2010/10/17 14:35:43 | 003,497,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_34.dll
[2010/10/17 14:35:43 | 000,081,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xinput1_3.dll
[2010/10/17 14:35:42 | 000,261,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_7.dll
[2010/10/17 14:35:41 | 001,123,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_33.dll
[2010/10/17 14:35:41 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_33.dll
[2010/10/17 14:35:38 | 003,495,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_33.dll
[2010/10/17 14:35:38 | 000,255,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_6.dll
[2010/10/17 14:35:37 | 000,251,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_5.dll
[2010/10/17 14:35:36 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_31.dll
[2010/10/17 14:35:36 | 000,237,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_4.dll
[2010/10/17 14:35:36 | 000,236,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_3.dll
[2010/10/17 14:35:36 | 000,015,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\x3daudio1_1.dll
[2010/10/17 14:35:35 | 000,230,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_2.dll
[2010/10/17 14:35:35 | 000,229,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_1.dll
[2010/10/17 14:35:35 | 000,062,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xinput1_2.dll
[2010/10/17 14:35:35 | 000,062,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xinput1_1.dll
[2010/10/17 14:35:24 | 002,388,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_30.dll
[2010/10/17 14:35:24 | 000,230,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_0.dll
[2010/10/17 14:35:24 | 000,014,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\x3daudio1_0.dll
[2010/10/17 14:35:23 | 002,332,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_29.dll
[2010/10/17 14:35:23 | 002,323,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_28.dll
[2010/10/17 14:35:23 | 000,061,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xinput9_1_0.dll
[2010/10/17 14:35:22 | 002,337,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_25.dll
[2010/10/17 14:35:22 | 002,319,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_27.dll
[2010/10/17 14:35:22 | 002,297,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_26.dll
[2010/10/17 14:35:20 | 002,222,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_24.dll
[2010/10/17 14:35:00 | 000,000,000 | ---D | C] -- C:\WINDOWS\Logs
[2010/10/17 14:29:28 | 000,000,000 | -H-D | C] -- C:\Program Files\Zero G Registry
[2010/10/17 14:28:31 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Owner\InstallAnywhere
[2010/10/17 13:51:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\Media Player Classic
[2010/10/17 12:28:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Tracing
[2010/10/17 12:18:36 | 000,054,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fssfltr_tdi.sys
[2010/10/17 12:18:36 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\DRVSTORE
[2010/10/17 12:16:32 | 000,000,000 | R-SD | C] -- C:\WINDOWS\assembly
[2010/10/17 12:16:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\Microsoft.NET
[2010/10/17 12:15:23 | 003,426,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_32.dll
[2010/10/17 12:15:16 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft SQL Server Compact Edition
[2010/10/17 12:14:02 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft
[2010/10/17 12:13:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Belgeler\microsoft
[2010/10/17 12:13:44 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Live SkyDrive
[2010/10/17 12:13:20 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Live
[2010/10/17 11:55:25 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Windows Live
[2010/10/17 11:33:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Local Settings\Application Data\Identities
[2010/10/17 10:35:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Local Settings\Application Data\Mozilla
[2010/10/17 10:35:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\Mozilla
[2010/10/17 10:34:47 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2010/10/17 10:26:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Local Settings\Application Data\ESET
[2010/10/17 01:55:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\Macromedia
[2010/10/17 01:32:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\nView_Profiles
[2010/10/17 01:18:39 | 000,012,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mouhid.sys
[2010/10/16 16:14:13 | 000,000,000 | ---D | C] -- C:\WINDOWS\ServicePackFiles
[2010/10/16 15:44:48 | 000,000,000 | ---D | C] -- C:\Capitalism II
[2010/10/16 15:11:11 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Owner\Belgelerim\Videolarım
[2010/10/16 14:27:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Belgelerim\My eBooks
[2010/10/16 14:22:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Belgelerim\Karşıdan Yüklenenler
[2010/10/16 14:22:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Belgelerim\İndirilenler
[2010/10/16 12:38:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Belgelerim\Downloads
[2010/10/16 12:36:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Belgelerim\Alınan Dosyalarım
[2010/10/16 12:23:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Desktop\Black&Silver
[2010/10/16 12:05:57 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\t2embed.dll
[2010/10/16 12:05:57 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fontsub.dll
[2010/10/16 12:02:34 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\irftp.exe
[2010/10/16 12:02:34 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wshirda.dll
[2010/10/16 12:02:29 | 000,035,913 | ---- | C] (SMC) -- C:\WINDOWS\System32\drivers\smcirda.sys
[2010/10/16 12:02:01 | 000,006,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\enum1394.sys
[2010/10/16 12:01:31 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\usbui.dll
[2010/10/16 12:01:18 | 000,014,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\battc.sys
[2010/10/16 12:00:25 | 000,000,000 | -HSD | C] -- C:\WINDOWS\Installer
[2010/10/16 12:00:24 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ODBC
[2010/10/16 12:00:23 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\spcommon.dll
[2010/10/16 12:00:23 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\spcplui.dll
[2010/10/16 12:00:22 | 000,774,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\spttseng.dll
[2010/10/16 12:00:21 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sapisvr.exe
[2010/10/16 12:00:21 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\SpeechEngines
[2010/10/16 12:00:20 | 000,000,000 | R--D | C] -- C:\Program Files
[2010/10/16 12:00:20 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Microsoft Shared
[2010/10/16 12:00:20 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files
[2010/10/16 12:00:17 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdycc.dll
[2010/10/16 12:00:17 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbduzb.dll
[2010/10/16 12:00:17 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdur.dll
[2010/10/16 12:00:17 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdtat.dll
[2010/10/16 12:00:17 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdru1.dll
[2010/10/16 12:00:17 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdru.dll
[2010/10/16 12:00:17 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdmon.dll
[2010/10/16 12:00:17 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdkyr.dll
[2010/10/16 12:00:17 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdkaz.dll
[2010/10/16 12:00:17 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdbu.dll
[2010/10/16 12:00:17 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdblr.dll
[2010/10/16 12:00:17 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdaze.dll
[2010/10/16 12:00:17 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdycc.dll
[2010/10/16 12:00:17 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbduzb.dll
[2010/10/16 12:00:17 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdur.dll
[2010/10/16 12:00:17 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdtat.dll
[2010/10/16 12:00:17 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdru1.dll
[2010/10/16 12:00:17 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdru.dll
[2010/10/16 12:00:17 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdmon.dll
[2010/10/16 12:00:17 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdkyr.dll
[2010/10/16 12:00:17 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdkaz.dll
[2010/10/16 12:00:17 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdbu.dll
[2010/10/16 12:00:17 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdblr.dll
[2010/10/16 12:00:17 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdaze.dll
[2010/10/16 12:00:15 | 000,008,192 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhept.dll
[2010/10/16 12:00:15 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhept.dll
[2010/10/16 12:00:15 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhela3.dll
[2010/10/16 12:00:15 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhela3.dll
[2010/10/16 12:00:15 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhela2.dll
[2010/10/16 12:00:15 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdgkl.dll
[2010/10/16 12:00:15 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhela2.dll
[2010/10/16 12:00:15 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdgkl.dll
[2010/10/16 12:00:15 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhe319.dll
[2010/10/16 12:00:15 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhe220.dll
[2010/10/16 12:00:15 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhe.dll
[2010/10/16 12:00:15 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhe319.dll
[2010/10/16 12:00:15 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhe220.dll
[2010/10/16 12:00:15 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhe.dll
[2010/10/16 12:00:13 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlv1.dll
[2010/10/16 12:00:13 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlv.dll
[2010/10/16 12:00:13 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdest.dll
[2010/10/16 12:00:13 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlv1.dll
[2010/10/16 12:00:13 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlv.dll
[2010/10/16 12:00:13 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdest.dll
[2010/10/16 12:00:13 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlt1.dll
[2010/10/16 12:00:13 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlt.dll
[2010/10/16 12:00:13 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlt1.dll
[2010/10/16 12:00:13 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlt.dll
[2010/10/16 12:00:11 | 000,007,168 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcz.dll
[2010/10/16 12:00:11 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdcz.dll
[2010/10/16 12:00:11 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdycl.dll
[2010/10/16 12:00:11 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdsl1.dll
[2010/10/16 12:00:11 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdsl.dll
[2010/10/16 12:00:11 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdpl.dll
[2010/10/16 12:00:11 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhu.dll
[2010/10/16 12:00:11 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcz2.dll
[2010/10/16 12:00:11 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcz1.dll
[2010/10/16 12:00:11 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcr.dll
[2010/10/16 12:00:11 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDAL.DLL
[2010/10/16 12:00:11 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdycl.dll
[2010/10/16 12:00:11 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsl1.dll
[2010/10/16 12:00:11 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsl.dll
[2010/10/16 12:00:11 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdpl.dll
[2010/10/16 12:00:11 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhu.dll
[2010/10/16 12:00:11 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdcz2.dll
[2010/10/16 12:00:11 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdcz1.dll
[2010/10/16 12:00:11 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdcr.dll
[2010/10/16 12:00:11 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdal.dll
[2010/10/16 12:00:11 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdro.dll
[2010/10/16 12:00:11 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdpl1.dll
[2010/10/16 12:00:11 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhu1.dll
[2010/10/16 12:00:11 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdro.dll
[2010/10/16 12:00:11 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdpl1.dll
[2010/10/16 12:00:11 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhu1.dll
[2010/10/16 12:00:08 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdazel.dll
[2010/10/16 12:00:08 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdazel.dll
[2010/10/16 12:00:07 | 000,176,157 | ---- | C] (Digi International, Inc.) -- C:\WINDOWS\System32\dllcache\dgrpsetu.dll
[2010/10/16 12:00:07 | 000,176,157 | ---- | C] (Digi International, Inc.) -- C:\WINDOWS\System32\dgrpsetu.dll
[2010/10/16 12:00:07 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\irclass.dll
[2010/10/16 12:00:07 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\irclass.dll
[2010/10/16 12:00:06 | 000,103,424 | ---- | C] (Equinox Systems Inc.) -- C:\WINDOWS\System32\EqnClass.Dll
[2010/10/16 12:00:06 | 000,103,424 | ---- | C] (Equinox Systems Inc.) -- C:\WINDOWS\System32\dllcache\eqnclass.dll
[2010/10/16 12:00:06 | 000,085,020 | ---- | C] (Uluslararası) -- C:\WINDOWS\System32\dllcache\dgsetup.dll
[2010/10/16 12:00:06 | 000,085,020 | ---- | C] (Uluslararası) -- C:\WINDOWS\System32\dgsetup.dll
[2010/10/16 12:00:06 | 000,024,661 | ---- | C] (Perle Systems Ltd.) -- C:\WINDOWS\System32\spxcoins.dll
[2010/10/16 12:00:06 | 000,024,661 | ---- | C] (Perle Systems Ltd.) -- C:\WINDOWS\System32\dllcache\spxcoins.dll
[2010/10/16 12:00:06 | 000,019,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\TAPI.DLL
[2010/10/16 12:00:06 | 000,013,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\WFWNET.DRV
[2010/10/16 12:00:06 | 000,009,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\VER.DLL
[2010/10/16 12:00:06 | 000,004,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\TIMER.DRV
[2010/10/16 12:00:06 | 000,002,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\VGA.DRV
[2010/10/16 12:00:05 | 000,126,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MSVIDEO.DLL
[2010/10/16 12:00:05 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLECLI.DLL
[2010/10/16 12:00:05 | 000,073,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MCIAVI.DRV
[2010/10/16 12:00:05 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MCIWAVE.DRV
[2010/10/16 12:00:05 | 000,025,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MCISEQ.DRV
[2010/10/16 12:00:05 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLESVR.DLL
[2010/10/16 12:00:05 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SHELL.DLL
[2010/10/16 12:00:05 | 000,003,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SYSTEM.DRV
[2010/10/16 12:00:05 | 000,002,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MOUSE.DRV
[2010/10/16 12:00:05 | 000,002,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\KEYBOARD.DRV
[2010/10/16 12:00:05 | 000,001,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SOUND.DRV
[2010/10/16 12:00:05 | 000,001,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MMTASK.TSK
[2010/10/16 12:00:04 | 000,109,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\AVIFILE.DLL
[2010/10/16 12:00:04 | 000,069,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\AVICAP.DLL
[2010/10/16 12:00:04 | 000,033,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\COMMDLG.DLL
[2010/10/16 12:00:04 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\TASKMAN.EXE
[2010/10/16 12:00:04 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\taskman.exe
[2010/10/16 12:00:04 | 000,009,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\LZEXPAND.DLL
[2010/10/16 12:00:03 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\winspool.drv
[2010/10/16 12:00:03 | 000,068,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MMSYSTEM.DLL
[2010/10/16 12:00:03 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\batt.dll
[2010/10/16 12:00:02 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\storprop.dll
[2010/10/16 11:59:53 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Start Menu
[2010/10/16 11:59:53 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Belgeler
[2010/10/16 11:59:53 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Templates
[2010/10/16 11:59:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Sık Kullanılanlar
[2010/10/16 11:59:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Desktop
[2010/10/16 11:59:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot2
[2010/10/16 11:59:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot
[2010/10/16 11:59:33 | 000,000,000 | --SD | C] -- C:\Documents and Settings\All Users\Application Data\Microsoft
[2010/10/16 11:59:33 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\All Users\Application Data
[2010/10/16 11:59:05 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[2010/10/16 11:59:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings
[2010/10/16 11:53:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Desktop\KısaYollar
[2010/10/16 11:53:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Desktop\Torrents
[2010/10/16 11:51:42 | 000,000,000 | R-SD | C] -- C:\WINDOWS\Fonts
[2010/10/16 11:51:42 | 000,000,000 | RHSD | C] -- C:\WINDOWS\System32\dllcache
[2010/10/16 11:51:42 | 000,000,000 | R--D | C] -- C:\WINDOWS\Web
[2010/10/16 11:51:42 | 000,000,000 | -H-D | C] -- C:\WINDOWS\inf
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\WinSxS
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\wins
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\wbem
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\usmt
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\twain_32
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\Temp
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\system32
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\system
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\spool
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ShellExt
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Setup
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\security
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\Resources
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\repair
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ras
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\Provisioning
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\PeerNet
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\pchealth
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\oobe
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\npp
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\mui
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\mui
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\msapps
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\msagent
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\Media
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\java
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\inetsrv
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\IME
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\ime
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\icsxml
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ias
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\Help
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\export
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\etc
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\Driver Cache
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\disdn
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\dhcp
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\Debug
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\Cursors
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\Connection Wizard
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\config
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\Config
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\AppPatch
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\addins
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\3com_dmi
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\3076
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\2052
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1055
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1054
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1042
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1041
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1037
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1033
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1031
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1028
[2010/10/16 11:51:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1025
[2010/10/16 11:48:55 | 000,203,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rmcast.sys
[2010/10/16 11:41:26 | 000,272,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bthport.sys
[2010/10/16 11:40:14 | 000,455,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mrxsmb.sys
[2010/10/16 11:40:05 | 000,357,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srv.sys
[2010/10/16 11:39:51 | 002,191,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntoskrnl.exe
[2010/10/16 11:39:49 | 000,729,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lsasrv.dll
[2010/10/16 11:39:48 | 002,148,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrnlmp.exe
[2010/10/16 11:39:47 | 002,026,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrpamp.exe
[2010/10/16 11:34:57 | 000,744,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\helpsvc.exe
[2010/10/16 11:32:37 | 000,471,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aclayers.dll
[2010/10/16 11:26:19 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\netapi32.dll
[2010/10/16 11:24:26 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2010/10/16 11:24:26 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2010/10/16 11:24:26 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2010/10/16 11:22:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\Sun
[2010/10/16 11:13:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\ESET
[2010/10/16 11:13:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\Adobe
[2010/10/16 11:10:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\CyberLink
[2010/10/16 11:10:55 | 000,000,000 | ---D | C] -- C:\Program Files\CyberLink
[2010/10/16 11:01:30 | 000,127,488 | ---- | C] (Ahead Software AG) -- C:\WINDOWS\System32\drivers\imagesrv.sys
[2010/10/16 11:01:30 | 000,005,888 | ---- | C] (Ahead Software AG) -- C:\WINDOWS\System32\drivers\imagedrv.sys
[2010/10/16 11:01:12 | 001,568,768 | ---- | C] (Pegasus Imaging Corp.) -- C:\WINDOWS\System32\ImagX7.dll
[2010/10/16 11:01:12 | 000,476,320 | ---- | C] (Pegasus Imaging Corp.) -- C:\WINDOWS\System32\ImagXpr7.dll
[2010/10/16 11:01:12 | 000,471,040 | ---- | C] (Pegasus Imaging Corp.) -- C:\WINDOWS\System32\ImagXRA7.dll
[2010/10/16 11:01:12 | 000,364,544 | ---- | C] (Pegasus Imaging Corp.) -- C:\WINDOWS\System32\TwnLib4.dll
[2010/10/16 11:01:12 | 000,262,144 | ---- | C] (Pegasus Imaging Corp.) -- C:\WINDOWS\System32\ImagXR7.dll
[2010/10/16 11:01:12 | 000,106,496 | ---- | C] (Pegasus Software) -- C:\WINDOWS\System32\TwnLib20.dll
[2010/10/16 11:01:06 | 000,155,648 | ---- | C] (Ahead Software Gmbh) -- C:\WINDOWS\System32\NeroCheck.exe
[2010/10/16 11:00:43 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Ahead
[2010/10/16 11:00:43 | 000,000,000 | ---D | C] -- C:\Program Files\Ahead
[2010/10/16 10:57:51 | 000,000,000 | ---D | C] -- C:\Program Files\MSECache
[2010/10/16 10:52:01 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
[2010/10/16 10:52:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\ESET
[2010/10/16 10:48:43 | 000,028,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mdimon.dll
[2010/10/16 10:48:13 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET
[2010/10/16 10:47:49 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER
[2010/10/16 10:47:46 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Works
[2010/10/16 10:47:39 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Visual Studio
[2010/10/16 10:47:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\SHELLNEW
[2010/10/16 10:45:15 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office

descriptionSomething slows down the machine + occasional blue screens - Page 2 EmptyRe: Something slows down the machine + occasional blue screens

more_horiz
[2010/10/16 10:31:13 | 000,000,000 | R--D | C] -- C:\MSOCache
[2010/10/16 10:20:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Adobe
[2010/10/16 10:20:40 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2010/10/16 10:15:04 | 000,232,448 | ---- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) -- C:\WINDOWS\System32\mp3fhg.acm
[2010/10/16 10:15:04 | 000,151,552 | ---- | C] (fccHandler) -- C:\WINDOWS\System32\ac3acm.acm
[2010/10/16 10:15:03 | 000,217,088 | ---- | C] (www.helixcommunity.org) -- C:\WINDOWS\System32\yv12vfw.dll
[2010/10/16 10:14:56 | 000,000,000 | ---D | C] -- C:\Program Files\K-Lite Codec Pack
[2010/10/16 10:14:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Sun
[2010/10/16 10:14:30 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2010/10/16 10:14:07 | 000,472,808 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll
[2010/10/16 10:14:07 | 000,073,728 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl
[2010/10/16 10:13:53 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2010/10/16 10:11:25 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
[2010/10/16 10:11:10 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\PreInstall
[2010/10/16 10:11:09 | 000,026,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spupdsvc.exe
[2010/10/16 10:11:08 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$hf_mig$
[2010/10/16 10:06:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\SoftwareDistribution
[2010/10/16 10:05:33 | 001,654,784 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\W29MLRES.dll
[2010/10/16 10:01:26 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ReinstallBackups
[2010/10/16 10:01:23 | 000,066,048 | ---- | C] (Synaptics, Inc.) -- C:\WINDOWS\System32\SynTPFcs.dll
[2010/10/16 10:01:22 | 000,185,664 | ---- | C] (Synaptics, Inc.) -- C:\WINDOWS\System32\drivers\SynTP.sys
[2010/10/16 10:01:22 | 000,114,688 | ---- | C] (Synaptics, Inc.) -- C:\WINDOWS\System32\SynCtrl.dll
[2010/10/16 10:01:22 | 000,090,112 | ---- | C] (Synaptics, Inc.) -- C:\WINDOWS\System32\SynTPAPI.dll
[2010/10/16 10:01:22 | 000,077,824 | ---- | C] (Synaptics, Inc.) -- C:\WINDOWS\System32\SynCOM.dll
[2010/10/16 10:01:22 | 000,000,000 | ---D | C] -- C:\Program Files\Synaptics
[2010/10/16 10:01:14 | 003,222,784 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\drivers\w29n51.sys
[2010/10/16 10:01:14 | 000,458,752 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\w29NCPA.dll
[2010/10/16 09:59:32 | 000,000,000 | ---D | C] -- C:\Program Files\Keyboard Manager
[2010/10/16 09:57:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\Motorola
[2010/10/16 09:56:43 | 000,000,000 | ---D | C] -- C:\WINDOWS\tiinst
[2010/10/16 09:56:02 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Lang
[2010/10/16 09:52:02 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\RTCOM
[2010/10/16 09:51:55 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksproxy.ax
[2010/10/16 09:51:55 | 000,060,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\drmk.sys
[2010/10/16 09:51:55 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksuser.dll
[2010/10/16 09:47:01 | 002,748,928 | ---- | C] (RealTek Semicoductor Corp.) -- C:\WINDOWS\ALCWZRD.EXE
[2010/10/16 09:47:01 | 000,077,824 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SOUNDMAN.EXE
[2010/10/16 09:46:59 | 009,766,400 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\RTLCPL.EXE
[2010/10/16 09:46:59 | 000,278,528 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\ALSNDMGR.CPL
[2010/10/16 09:46:58 | 002,319,808 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\drivers\RtkHDAud.sys
[2010/10/16 09:46:58 | 000,057,344 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\ALCMTR.EXE
[2010/10/16 09:46:58 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2010/10/16 09:45:42 | 000,070,144 | ---- | C] (Realtek Semiconductor Corporation ) -- C:\WINDOWS\System32\drivers\Rtlnicxp.sys
[2010/10/16 09:45:42 | 000,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information
[2010/10/16 09:45:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\OPTIONS
[2010/10/16 09:45:02 | 000,176,128 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvudisp.exe
[2010/10/16 09:45:02 | 000,000,000 | ---D | C] -- C:\WINDOWS\nview
[2010/10/16 09:44:28 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield
[2010/10/16 09:44:03 | 005,304,320 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvoglnt.dll
[2010/10/16 09:44:03 | 004,636,672 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcpl.dll
[2010/10/16 09:44:03 | 004,636,672 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcpl(2).dll
[2010/10/16 09:44:03 | 003,754,496 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nv4_disp.dll
[2010/10/16 09:44:03 | 003,754,496 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\dllcache\nv4_disp.dll
[2010/10/16 09:44:03 | 003,754,496 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nv4_disp(3).dll
[2010/10/16 09:44:03 | 002,842,208 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\drivers\nv4_mini.sys
[2010/10/16 09:44:03 | 002,842,208 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\dllcache\nv4_mini.sys
[2010/10/16 09:44:03 | 001,650,688 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwdmcpl.dll
[2010/10/16 09:44:03 | 001,441,792 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nview.dll
[2010/10/16 09:44:03 | 001,339,392 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvdspsch.exe
[2010/10/16 09:44:03 | 001,019,904 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwimg.dll
[2010/10/16 09:44:03 | 000,921,600 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nwiz.exe
[2010/10/16 09:44:03 | 000,462,848 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvshell.dll
[2010/10/16 09:44:03 | 000,442,368 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvappbar.exe
[2010/10/16 09:44:03 | 000,311,296 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrses.dll
[2010/10/16 09:44:03 | 000,299,008 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrsit.dll
[2010/10/16 09:44:03 | 000,299,008 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrsfr.dll
[2010/10/16 09:44:03 | 000,294,912 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrsnl.dll
[2010/10/16 09:44:03 | 000,290,816 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrsru.dll
[2010/10/16 09:44:03 | 000,282,624 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrsde.dll
[2010/10/16 09:44:03 | 000,274,432 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrssv.dll
[2010/10/16 09:44:03 | 000,274,432 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrsda.dll
[2010/10/16 09:44:03 | 000,262,144 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrseng.dll
[2010/10/16 09:44:03 | 000,262,144 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsit.dll
[2010/10/16 09:44:03 | 000,262,144 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsfr.dll
[2010/10/16 09:44:03 | 000,258,048 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrses.dll
[2010/10/16 09:44:03 | 000,258,048 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsde.dll
[2010/10/16 09:44:03 | 000,253,952 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsnl.dll
[2010/10/16 09:44:03 | 000,249,856 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsru.dll
[2010/10/16 09:44:03 | 000,241,664 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsko.dll
[2010/10/16 09:44:03 | 000,241,664 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsja.dll
[2010/10/16 09:44:03 | 000,237,568 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsda.dll
[2010/10/16 09:44:03 | 000,233,472 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrssv.dll
[2010/10/16 09:44:03 | 000,225,280 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrseng.dll
[2010/10/16 09:44:03 | 000,204,800 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrszhc.dll
[2010/10/16 09:44:03 | 000,196,608 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrsja.dll
[2010/10/16 09:44:03 | 000,184,320 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrsko.dll
[2010/10/16 09:44:03 | 000,155,648 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrszht.dll
[2010/10/16 09:44:03 | 000,151,552 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwrszhc.dll
[2010/10/16 09:44:03 | 000,127,042 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvsvc32(2).exe
[2010/10/16 09:44:03 | 000,114,688 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrszht.dll
[2010/10/16 09:44:03 | 000,086,016 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvmctray.dll
[2010/10/16 09:44:03 | 000,081,920 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwddi.dll
[2010/10/16 09:44:03 | 000,081,920 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvmctray(2).dll
[2010/10/16 09:44:03 | 000,073,728 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvtuicpl.cpl
[2010/10/16 09:44:03 | 000,032,256 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcodins.dll
[2010/10/16 09:44:03 | 000,032,256 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcod.dll
[2010/10/16 09:44:03 | 000,032,256 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcod(2).dll
[2010/10/16 09:43:46 | 000,836,338 | ---- | C] (Motorola Inc.) -- C:\WINDOWS\System32\drivers\smserial.sys
[2010/10/16 09:43:46 | 000,585,728 | ---- | C] (Motorola Inc.) -- C:\WINDOWS\sm56hlpr.exe
[2010/10/16 09:43:46 | 000,073,728 | ---- | C] (Motorola Inc.) -- C:\WINDOWS\System32\sm56co.dll
[2010/10/16 09:42:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\WinRAR
[2010/10/16 09:42:11 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2010/10/16 09:17:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\Identities
[2010/10/16 09:17:53 | 000,000,000 | -H-D | C] -- C:\Program Files\Uninstall Information
[2010/10/16 09:17:50 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Owner\Belgelerim\Resimlerim
[2010/10/16 09:17:50 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Owner\Belgelerim\Müziğim
[2010/10/16 09:17:48 | 000,000,000 | --SD | C] -- C:\Documents and Settings\Owner\Application Data\Microsoft
[2010/10/16 09:17:48 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Owner\Application Data
[2010/10/16 09:17:48 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Owner\Belgelerim
[2010/10/16 09:17:48 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Owner\Cookies
[2010/10/16 09:17:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Desktop
[2010/10/16 09:17:47 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Owner\SendTo
[2010/10/16 09:17:47 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Owner\Recent
[2010/10/16 09:17:47 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Owner\Start Menu
[2010/10/16 09:17:47 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Owner\Sık Kullanılanlar
[2010/10/16 09:17:47 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Owner\Templates
[2010/10/16 09:17:47 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Owner\PrintHood
[2010/10/16 09:17:47 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Owner\NetHood
[2010/10/16 09:17:47 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Owner\Local Settings
[2010/10/16 09:17:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft
[2010/10/16 09:16:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\SoftwareDistribution
[2010/10/16 09:16:12 | 000,000,000 | --SD | C] -- C:\WINDOWS\System32\Microsoft
[2010/10/16 09:16:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
[2010/10/16 09:16:10 | 000,000,000 | --SD | C] -- C:\Documents and Settings\LocalService\Application Data\Microsoft
[2010/10/16 09:13:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft
[2010/10/16 09:13:56 | 000,000,000 | --SD | C] -- C:\Documents and Settings\NetworkService\Application Data\Microsoft
[2010/10/16 09:12:56 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winzm.ime
[2010/10/16 09:12:56 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winsp.ime
[2010/10/16 09:12:55 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winpy.ime
[2010/10/16 09:12:55 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winar30.ime
[2010/10/16 09:12:55 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wingb.ime
[2010/10/16 09:12:55 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winime.ime
[2010/10/16 09:12:54 | 000,041,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\weitekp9.dll
[2010/10/16 09:12:54 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\weitekp9.sys
[2010/10/16 09:12:53 | 000,426,041 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\voicepad.dll
[2010/10/16 09:12:53 | 000,086,073 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\voicesub.dll
[2010/10/16 09:12:53 | 000,048,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w32.dll
[2010/10/16 09:12:51 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\uniime.dll
[2010/10/16 09:12:51 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\unicdime.ime
[2010/10/16 09:12:50 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tsprof.exe
[2010/10/16 09:12:50 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tmigrate.dll
[2010/10/16 09:12:49 | 000,571,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tintlgnt.ime
[2010/10/16 09:12:49 | 000,455,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tintsetp.exe
[2010/10/16 09:12:49 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\thawbrkr.dll
[2010/10/16 09:12:49 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tintlphr.exe
[2010/10/16 09:12:49 | 000,019,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdspx.sys
[2010/10/16 09:12:48 | 000,021,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdipx.sys
[2010/10/16 09:12:48 | 000,013,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdasync.sys
[2010/10/16 09:12:47 | 000,101,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srusbusd.dll
[2010/10/16 09:12:46 | 000,143,422 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\softkey.dll
[2010/10/16 09:12:45 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpstup.dll
[2010/10/16 09:12:45 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_snprfdll.dll
[2010/10/16 09:12:43 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm9aw.dll
[2010/10/16 09:12:43 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smb6w.dll
[2010/10/16 09:12:43 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sma3w.dll
[2010/10/16 09:12:43 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm93w.dll
[2010/10/16 09:12:43 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm92w.dll
[2010/10/16 09:12:43 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smierrsm.dll
[2010/10/16 09:12:43 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_smtpctrs.dll
[2010/10/16 09:12:43 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smimsgif.dll
[2010/10/16 09:12:43 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smierrsy.dll
[2010/10/16 09:12:42 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm87w.dll
[2010/10/16 09:12:42 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm81w.dll
[2010/10/16 09:12:42 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8cw.dll
[2010/10/16 09:12:42 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm90w.dll
[2010/10/16 09:12:42 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8dw.dll
[2010/10/16 09:12:42 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8aw.dll
[2010/10/16 09:12:42 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm89w.dll
[2010/10/16 09:12:42 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm59w.dll
[2010/10/16 09:12:42 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\simptcp.dll
[2010/10/16 09:12:39 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_scripto.dll
[2010/10/16 09:12:39 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_seos.dll
[2010/10/16 09:12:38 | 000,079,872 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia330.dll
[2010/10/16 09:12:38 | 000,079,872 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia001.dll
[2010/10/16 09:12:37 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\romanime.ime
[2010/10/16 09:12:37 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_regtrace.exe
[2010/10/16 09:12:36 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\register.exe
[2010/10/16 09:12:35 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\quick.ime
[2010/10/16 09:12:35 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\quser.exe
[2010/10/16 09:12:35 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\query.exe
[2010/10/16 09:12:33 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxviceo.dll
[2010/10/16 09:12:33 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxmcro.dll
[2010/10/16 09:12:33 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxgl.dll
[2010/10/16 09:12:32 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pintlcsd.dll
[2010/10/16 09:12:31 | 000,036,927 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs411.dll
[2010/10/16 09:12:31 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs404.dll
[2010/10/16 09:12:31 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs412.dll
[2010/10/16 09:12:29 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_ntfsdrv.dll
[2010/10/16 09:12:20 | 000,092,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mga.sys
[2010/10/16 09:12:20 | 000,092,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mga.dll
[2010/10/16 09:12:19 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_mailmsg.dll
[2010/10/16 09:12:16 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth3.dll
[2010/10/16 09:12:16 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth2.dll
[2010/10/16 09:12:16 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdvntc.dll
[2010/10/16 09:12:16 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdusa.dll
[2010/10/16 09:12:16 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdurdu.dll
[2010/10/16 09:12:16 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth1.dll
[2010/10/16 09:12:16 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth0.dll
[2010/10/16 09:12:16 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsyr2.dll
[2010/10/16 09:12:16 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsyr1.dll
[2010/10/16 09:12:15 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnecat.dll
[2010/10/16 09:12:15 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnecnt.dll
[2010/10/16 09:12:15 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnec95.dll
[2010/10/16 09:12:15 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinpun.dll
[2010/10/16 09:12:15 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdintel.dll
[2010/10/16 09:12:15 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdintam.dll
[2010/10/16 09:12:15 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinmar.dll
[2010/10/16 09:12:15 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinkan.dll
[2010/10/16 09:12:15 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinhin.dll
[2010/10/16 09:12:15 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinguj.dll
[2010/10/16 09:12:14 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdindev.dll
[2010/10/16 09:12:14 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdheb.dll
[2010/10/16 09:12:14 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdfa.dll
[2010/10/16 09:12:14 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbddiv2.dll
[2010/10/16 09:12:14 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbddiv1.dll
[2010/10/16 09:12:14 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdgeo.dll
[2010/10/16 09:12:13 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jupiw.dll
[2010/10/16 09:12:13 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd101a.dll
[2010/10/16 09:12:13 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbda3.dll
[2010/10/16 09:12:13 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbda2.dll
[2010/10/16 09:12:13 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbda1.dll
[2010/10/16 09:12:13 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdarmw.dll
[2010/10/16 09:12:13 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdarme.dll
[2010/10/16 09:12:11 | 000,102,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imlang.dll
[2010/10/16 09:12:11 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imkrinst.exe
[2010/10/16 09:12:10 | 000,274,489 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjputyc.dll
[2010/10/16 09:12:10 | 000,262,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjputy.exe
[2010/10/16 09:12:10 | 000,233,527 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjprw.exe
[2010/10/16 09:12:10 | 000,208,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpmig.exe
[2010/10/16 09:12:10 | 000,155,705 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdsvr.exe
[2010/10/16 09:12:10 | 000,045,109 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpuex.exe
[2010/10/16 09:12:09 | 000,811,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjp81k.dll
[2010/10/16 09:12:09 | 000,716,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpcus.dll
[2010/10/16 09:12:09 | 000,368,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpcic.dll
[2010/10/16 09:12:09 | 000,307,257 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdct.exe
[2010/10/16 09:12:09 | 000,081,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdct.dll
[2010/10/16 09:12:09 | 000,057,398 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdadm.exe
[2010/10/16 09:12:08 | 000,340,023 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjp81.ime
[2010/10/16 09:12:08 | 000,311,359 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imepadsv.exe
[2010/10/16 09:12:08 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekrcic.dll
[2010/10/16 09:12:08 | 000,102,463 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imepadsm.dll
[2010/10/16 09:12:08 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekr61.ime
[2010/10/16 09:12:08 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekrmbx.dll
[2010/10/16 09:12:08 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekrmig.exe
[2010/10/16 09:12:02 | 010,129,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hwxkor.dll
[2010/10/16 09:11:52 | 010,096,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hwxcht.dll
[2010/10/16 09:11:51 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hanjadic.dll
[2010/10/16 09:11:49 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsroute.dll
[2010/10/16 09:11:49 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxssend.exe
[2010/10/16 09:11:48 | 000,134,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsclntr.dll
[2010/10/16 09:11:48 | 000,111,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxscfgwz.dll
[2010/10/16 09:11:47 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ftlx041e.dll
[2010/10/16 09:11:46 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\flattemp.exe
[2010/10/16 09:11:45 | 000,057,856 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esuimgd.dll
[2010/10/16 09:11:45 | 000,045,056 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esunid.dll
[2010/10/16 09:11:45 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_fcachdll.dll
[2010/10/16 09:11:45 | 000,025,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\et4000.sys
[2010/10/16 09:11:44 | 000,514,587 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\edb500.dll
[2010/10/16 09:11:44 | 000,031,744 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esucmd.dll
[2010/10/16 09:11:40 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dayi.ime
[2010/10/16 09:11:39 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cprofile.exe
[2010/10/16 09:11:38 | 000,057,399 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cplexe.exe
[2010/10/16 09:11:37 | 000,480,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cintsetp.exe
[2010/10/16 09:11:37 | 000,198,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cintime.dll
[2010/10/16 09:11:37 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chtskdic.dll
[2010/10/16 09:11:37 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cintlgnt.ime
[2010/10/16 09:11:36 | 000,838,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chtbrkr.dll
[2010/10/16 09:11:36 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chtmbx.dll
[2010/10/16 09:11:35 | 001,677,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chsbrkr.dll
[2010/10/16 09:11:35 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chajei.ime
[2010/10/16 09:11:35 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chgport.exe
[2010/10/16 09:11:35 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chgusr.exe
[2010/10/16 09:11:35 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chglogon.exe
[2010/10/16 09:11:35 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\change.exe
[2010/10/16 09:11:34 | 000,054,528 | ---- | C] (Philips Semiconductors GmbH) -- C:\WINDOWS\System32\dllcache\cap7146.sys
[2010/10/16 09:11:33 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\c_iscii.dll
[2010/10/16 09:11:33 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\c_is2022.dll
[2010/10/16 09:11:25 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_aqadmin.dll
[2010/10/16 09:11:24 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_adsiisex.dll
[2010/10/16 09:11:21 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tcptsat.dll
[2010/10/16 09:11:17 | 000,208,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpmmcsat.dll
[2010/10/16 09:11:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\xircom
[2010/10/16 09:11:07 | 000,000,000 | ---D | C] -- C:\Program Files\xerox
[2010/10/16 09:11:07 | 000,000,000 | ---D | C] -- C:\Program Files\microsoft frontpage
[2010/10/16 09:10:31 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mapi32.dll
[2010/10/16 09:09:56 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\All Users\DRM
[2010/10/16 09:09:47 | 000,000,000 | --SD | C] -- C:\WINDOWS\Downloaded Program Files
[2010/10/16 09:09:47 | 000,000,000 | R--D | C] -- C:\WINDOWS\Offline Web Pages
[2010/10/16 09:09:36 | 000,000,000 | -H-D | C] -- C:\Program Files\WindowsUpdate
[2010/10/16 09:09:31 | 000,000,000 | ---D | C] -- C:\Program Files\Online Services
[2010/10/16 09:09:15 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\DirectX
[2010/10/16 09:08:53 | 000,099,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\helphost.exe
[2010/10/16 09:08:53 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\notiflag.exe
[2010/10/16 09:08:53 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\brpinfo.dll
[2010/10/16 09:08:53 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\atrace.dll
[2010/10/16 09:08:53 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\atrace.dll
[2010/10/16 09:08:53 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hcappres.dll
[2010/10/16 09:08:44 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srdiag.exe
[2010/10/16 09:08:43 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wb32.exe
[2010/10/16 09:08:43 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nmevtmsg.dll
[2010/10/16 09:08:43 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nmevtmsg.dll
[2010/10/16 09:08:43 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cb32.exe
[2010/10/16 09:08:42 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\acctres.dll
[2010/10/16 09:08:42 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\acctres.dll
[2010/10/16 09:08:42 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msinfo32.exe
[2010/10/16 09:08:41 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Services
[2010/10/16 09:08:39 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icfgnt5.dll
[2010/10/16 09:08:39 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icfgnt5.dll
[2010/10/16 09:08:39 | 000,000,000 | --SD | C] -- C:\WINDOWS\Tasks
[2010/10/16 09:08:38 | 000,235,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mssoap1.dll
[2010/10/16 09:08:38 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwtutor.exe
[2010/10/16 09:08:38 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwres.dll
[2010/10/16 09:08:38 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\trialoc.dll
[2010/10/16 09:08:38 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wisc10.dll
[2010/10/16 09:08:38 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mssoapr.dll
[2010/10/16 09:08:38 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\isignup.exe
[2010/10/16 09:08:38 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\MSSoap
[2010/10/16 09:08:37 | 000,093,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieinfo5.ocx
[2010/10/16 09:08:33 | 000,000,000 | ---D | C] -- C:\WINDOWS\srchasst
[2010/10/16 09:08:32 | 000,096,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmpband.dll
[2010/10/16 09:08:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Macromed
[2010/10/16 09:08:31 | 001,672,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\setup_wm.exe
[2010/10/16 09:08:31 | 000,244,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mpvis.dll
[2010/10/16 09:08:31 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmpns.dll
[2010/10/16 09:08:31 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\custsat.dll
[2010/10/16 09:08:30 | 000,786,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\migrate.exe
[2010/10/16 09:08:30 | 000,364,544 | ---- | C] (Microsoft Corporation (written by Digital Renaissance Inc.)) -- C:\WINDOWS\System32\dllcache\npdsplay.dll
[2010/10/16 09:08:30 | 000,226,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\npdrmv2.dll
[2010/10/16 09:08:30 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmplayer.exe
[2010/10/16 09:08:30 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\npwmsdrm.dll
[2010/10/16 09:08:30 | 000,004,639 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mplayer2.exe
[2010/10/16 09:08:29 | 000,327,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wucltui.dll
[2010/10/16 09:08:29 | 000,327,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wucltui.dll
[2010/10/16 09:08:29 | 000,209,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuweb.dll
[2010/10/16 09:08:29 | 000,183,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuaueng1.dll
[2010/10/16 09:08:28 | 001,929,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuaueng.dll
[2010/10/16 09:08:28 | 000,575,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuapi.dll
[2010/10/16 09:08:28 | 000,575,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuapi.dll
[2010/10/16 09:08:28 | 000,217,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuaucpl.cpl
[2010/10/16 09:08:28 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuauclt1.exe
[2010/10/16 09:08:28 | 000,053,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuauclt.exe
[2010/10/16 09:08:28 | 000,035,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wups.dll
[2010/10/16 09:08:28 | 000,035,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wups.dll
[2010/10/16 09:08:28 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qmgrprxy.dll
[2010/10/16 09:08:28 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx2.dll
[2010/10/16 09:08:28 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx3.dll
[2010/10/16 09:08:23 | 003,558,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\moviemk.exe
[2010/10/16 09:08:23 | 000,000,000 | ---D | C] -- C:\Program Files\Movie Maker
[2010/10/16 09:08:19 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrslv.dll
[2010/10/16 09:08:19 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrcdlg.dll
[2010/10/16 09:08:19 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\racpldlg.dll
[2010/10/16 09:08:19 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrdm.dll
[2010/10/16 09:08:15 | 000,239,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srrstr.dll
[2010/10/16 09:08:15 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fltmc.exe
[2010/10/16 09:08:15 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Restore
[2010/10/16 09:08:14 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ils.dll
[2010/10/16 09:08:14 | 000,034,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mnmdd.dll
[2010/10/16 09:08:14 | 000,032,768 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\isrdbg32.dll
[2010/10/16 09:08:13 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msconf.dll
[2010/10/16 09:08:13 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nmmkcert.dll
[2010/10/16 09:08:10 | 000,252,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msoeacct.dll
[2010/10/16 09:08:10 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msoert2.dll
[2010/10/16 09:08:10 | 000,000,000 | ---D | C] -- C:\Program Files\NetMeeting
[2010/10/16 09:08:09 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetres.dll
[2010/10/16 09:08:07 | 000,000,000 | ---D | C] -- C:\Program Files\Outlook Express
[2010/10/16 09:08:06 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\isign32.dll
[2010/10/16 09:08:06 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icwdial.dll
[2010/10/16 09:08:06 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icwphbk.dll
[2010/10/16 09:08:06 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mstinit.exe
[2010/10/16 09:08:05 | 000,274,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetcfg.dll
[2010/10/16 09:08:04 | 000,554,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dao360.dll
[2010/10/16 09:08:00 | 000,331,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadce.dll
[2010/10/16 09:08:00 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\System
[2010/10/16 09:07:54 | 000,000,000 | ---D | C] -- C:\Program Files\Internet Explorer
[2010/10/16 09:07:53 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Belgeler\Resimlerim
[2010/10/16 09:07:39 | 000,000,000 | ---D | C] -- C:\Program Files\ComPlus Applications
[2010/10/16 09:07:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\Registration
[2010/10/16 09:06:59 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Belgeler\Müziğim
[2010/10/16 09:06:59 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Media Player
[2010/10/16 09:06:54 | 000,000,000 | ---D | C] -- C:\Program Files\Messenger
[2010/10/16 09:06:53 | 001,817,687 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bckgres.dll
[2010/10/16 09:06:53 | 000,753,236 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rvseres.dll
[2010/10/16 09:06:53 | 000,082,501 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bckg.dll
[2010/10/16 09:06:53 | 000,048,706 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rvse.dll
[2010/10/16 09:06:53 | 000,042,577 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bckgzm.exe
[2010/10/16 09:06:53 | 000,042,574 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rvsezm.exe
[2010/10/16 09:06:52 | 002,178,131 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shvlres.dll
[2010/10/16 09:06:52 | 001,175,635 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hrtzres.dll
[2010/10/16 09:06:52 | 000,781,397 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chkrres.dll
[2010/10/16 09:06:52 | 000,066,113 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shvl.dll
[2010/10/16 09:06:52 | 000,057,409 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hrtz.dll
[2010/10/16 09:06:52 | 000,042,575 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chkrzm.exe
[2010/10/16 09:06:52 | 000,042,573 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shvlzm.exe
[2010/10/16 09:06:52 | 000,042,573 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hrtzzm.exe
[2010/10/16 09:06:52 | 000,040,515 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chkr.dll
[2010/10/16 09:06:51 | 001,040,467 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cmnresm.dll
[2010/10/16 09:06:51 | 000,113,222 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\zoneclim.dll
[2010/10/16 09:06:51 | 000,041,029 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\zcorem.dll
[2010/10/16 09:06:51 | 000,032,339 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\uniansi.dll
[2010/10/16 09:06:51 | 000,013,894 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\zonelibm.dll
[2010/10/16 09:06:51 | 000,004,677 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\zeeverm.dll
[2010/10/16 09:06:50 | 000,217,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cmnclim.dll
[2010/10/16 09:06:50 | 000,036,937 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\zclientm.exe
[2010/10/16 09:06:50 | 000,029,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\znetm.dll
[2010/10/16 09:06:50 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\write.exe
[2010/10/16 09:06:50 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\write.exe
[2010/10/16 09:06:50 | 000,000,000 | ---D | C] -- C:\Program Files\MSN Gaming Zone
[2010/10/16 09:06:41 | 000,138,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sndvol32.exe
[2010/10/16 09:06:41 | 000,138,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sndvol32.exe
[2010/10/16 09:06:41 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\avwav.dll
[2010/10/16 09:06:41 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avwav.dll
[2010/10/16 09:06:41 | 000,044,544 | ---- | C] (Hilgraeve, Inc.) -- C:\WINDOWS\System32\hticons.dll
[2010/10/16 09:06:41 | 000,013,312 | ---- | C] (Hilgraeve, Inc.) -- C:\WINDOWS\System32\dllcache\htrn_jis.dll
[2010/10/16 09:06:40 | 000,227,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\avtapi.dll
[2010/10/16 09:06:40 | 000,227,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avtapi.dll
[2010/10/16 09:06:40 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winchat.exe
[2010/10/16 09:06:40 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winchat.exe
[2010/10/16 09:06:40 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\avmeter.dll
[2010/10/16 09:06:40 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avmeter.dll
[2010/10/16 09:06:33 | 000,605,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\getuname.dll
[2010/10/16 09:06:33 | 000,605,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\getuname.dll
[2010/10/16 09:06:33 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\calc.exe
[2010/10/16 09:06:33 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\calc.exe
[2010/10/16 09:06:33 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\charmap.exe
[2010/10/16 09:06:33 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\charmap.exe
[2010/10/16 09:06:32 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mshearts.exe
[2010/10/16 09:06:32 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mshearts.exe
[2010/10/16 09:06:32 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winmine.exe
[2010/10/16 09:06:32 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winmine.exe
[2010/10/16 09:06:32 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sol.exe
[2010/10/16 09:06:32 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sol.exe
[2010/10/16 09:06:32 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\freecell.exe
[2010/10/16 09:06:32 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\freecell.exe
[2010/10/16 09:06:31 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\regini.exe
[2010/10/16 09:06:31 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\regini.exe
[2010/10/16 09:06:31 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qwinsta.exe
[2010/10/16 09:06:31 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qwinsta.exe
[2010/10/16 09:06:31 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsshutdn.exe
[2010/10/16 09:06:31 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tsshutdn.exe
[2010/10/16 09:06:31 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qappsrv.exe
[2010/10/16 09:06:31 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qappsrv.exe
[2010/10/16 09:06:31 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tskill.exe
[2010/10/16 09:06:31 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tskill.exe
[2010/10/16 09:06:31 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rwinsta.exe
[2010/10/16 09:06:31 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rwinsta.exe
[2010/10/16 09:06:31 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsdiscon.exe
[2010/10/16 09:06:31 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tsdiscon.exe
[2010/10/16 09:06:31 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tscon.exe
[2010/10/16 09:06:31 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tscon.exe
[2010/10/16 09:06:31 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\shadow.exe
[2010/10/16 09:06:31 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shadow.exe
[2010/10/16 09:06:31 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\reset.exe
[2010/10/16 09:06:31 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\reset.exe
[2010/10/16 09:06:31 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpcfgex.dll
[2010/10/16 09:06:31 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rdpcfgex.dll
[2010/10/16 09:06:30 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msg.exe
[2010/10/16 09:06:30 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msg.exe
[2010/10/16 09:06:30 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mtsadmin.tlb
[2010/10/16 09:06:30 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cdmodem.dll
[2010/10/16 09:06:30 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cdmodem.dll
[2010/10/16 09:06:30 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\logoff.exe
[2010/10/16 09:06:30 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\logoff.exe
[2010/10/16 09:06:29 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comrepl.dll
[2010/10/16 09:06:29 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\stclient.dll
[2010/10/16 09:06:29 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxlegih.dll
[2010/10/16 09:06:29 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxdm.dll
[2010/10/16 09:06:29 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comaddin.dll
[2010/10/16 09:06:29 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dcomcnfg.exe
[2010/10/16 09:06:29 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxex.dll
[2010/10/16 09:06:28 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comsnap.dll
[2010/10/16 09:06:28 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmi2xml.dll
[2010/10/16 09:06:25 | 000,116,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\updprov.dll
[2010/10/16 09:06:25 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmipicmp.dll
[2010/10/16 09:06:25 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tmplprov.dll
[2010/10/16 09:06:25 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmimsg.dll
[2010/10/16 09:06:25 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemdisp.tlb
[2010/10/16 09:06:25 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\trnsprov.dll
[2010/10/16 09:06:25 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmitimep.dll
[2010/10/16 09:06:25 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemads.tlb
[2010/10/16 09:06:25 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\unsecapp.exe
[2010/10/16 09:06:25 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winmgmtr.dll
[2010/10/16 09:06:25 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winmgmt.exe
[2010/10/16 09:06:25 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemads.dll
[2010/10/16 09:06:24 | 000,273,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msiprov.dll
[2010/10/16 09:06:24 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dsprov.dll
[2010/10/16 09:06:24 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fwdprov.dll
[2010/10/16 09:06:24 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smtpcons.dll
[2010/10/16 09:06:23 | 000,186,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\accwiz.exe
[2010/10/16 09:06:23 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\access.cpl
[2010/10/16 09:06:22 | 000,348,160 | ---- | C] (Hilgraeve, Inc.) -- C:\WINDOWS\System32\hypertrm.dll
[2010/10/16 09:06:22 | 000,132,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sndrec32.exe
[2010/10/16 09:06:22 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mplay32.exe
[2010/10/16 09:06:22 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mplay32.exe
[2010/10/16 09:06:22 | 000,000,000 | ---D | C] -- C:\Program Files\Windows NT
[2010/10/16 09:06:21 | 000,538,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spider.exe
[2010/10/16 09:06:21 | 000,343,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mspaint.exe
[2010/10/16 09:06:21 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\clipbrd.exe
[2010/10/16 09:06:20 | 002,066,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstscax.dll
[2010/10/16 09:06:20 | 000,406,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstsc.exe
[2010/10/16 09:06:20 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tscfgwmi.dll
[2010/10/16 09:06:20 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdshost.exe
[2010/10/16 09:06:20 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdsaddin.exe
[2010/10/16 09:06:19 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdchost.dll
[2010/10/16 09:06:19 | 000,087,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpwsx.dll
[2010/10/16 09:06:19 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpclip.exe
[2010/10/16 09:06:19 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tscupgrd.exe
[2010/10/16 09:06:19 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tscupgrd.exe
[2010/10/16 09:06:19 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cfgbkend.dll
[2010/10/16 09:06:19 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qprocess.exe
[2010/10/16 09:06:19 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpsnd.dll
[2010/10/16 09:06:19 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icaapi.dll
[2010/10/16 09:06:18 | 000,956,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtctm.dll
[2010/10/16 09:06:18 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtcprx.dll
[2010/10/16 09:06:18 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtcuiu.dll
[2010/10/16 09:06:18 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxoci.dll
[2010/10/16 09:06:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\MsDtc
[2010/10/16 09:06:17 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtclog.dll
[2010/10/16 09:06:17 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xolehlp.dll
[2010/10/16 09:06:16 | 000,625,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrvut.dll
[2010/10/16 09:06:16 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrv.dll
[2010/10/16 09:06:16 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\clbcatex.dll
[2010/10/16 09:06:16 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrvps.dll
[2010/10/16 09:06:16 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\colbact.dll
[2010/10/16 09:06:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Com
[2010/10/16 09:06:15 | 001,267,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comsvcs.dll
[2010/10/16 09:06:15 | 000,539,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comuid.dll
[2010/10/16 09:06:10 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\servdeps.dll
[2010/10/16 09:06:10 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmfutil.dll
[2010/10/16 09:06:09 | 000,186,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cmprops.dll
[2010/10/16 09:06:09 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\licwmi.dll
[5 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

descriptionSomething slows down the machine + occasional blue screens - Page 2 EmptyRe: Something slows down the machine + occasional blue screens

more_horiz
========== Files - Modified Within 30 Days ==========

[2010/11/12 11:21:15 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Owner\Desktop\OTL.com
[2010/11/12 11:17:42 | 000,020,988 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2010/11/12 11:14:46 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/11/12 01:30:01 | 000,001,078 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-583907252-790525478-682003330-1003UA.job
[2010/11/11 21:30:01 | 000,001,026 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-583907252-790525478-682003330-1003Core.job
[2010/11/10 16:33:21 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010/11/09 12:00:46 | 000,000,760 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Football Manager 2011.lnk
[2010/11/08 23:04:27 | 000,055,547 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\[MONOVA.ORG] Football Manager 2011 PROPER-RELOADED.torrent
[2010/11/06 09:34:54 | 000,002,284 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\Google Chrome.lnk
[2010/11/06 09:34:54 | 000,002,262 | ---- | M] () -- C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2010/11/05 18:20:07 | 000,000,327 | RHS- | M] () -- C:\boot.ini
[2010/11/03 16:19:55 | 000,434,300 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010/11/03 16:19:55 | 000,421,428 | ---- | M] () -- C:\WINDOWS\System32\perfh01F.dat
[2010/11/03 16:19:55 | 000,078,100 | ---- | M] () -- C:\WINDOWS\System32\perfc01F.dat
[2010/11/03 16:19:55 | 000,068,840 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010/11/02 19:37:23 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2010/11/02 19:12:26 | 000,267,800 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010/11/02 19:01:57 | 000,000,815 | ---- | M] () -- C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Internet Explorer Tarayıcısı'nı Başlat.lnk
[2010/11/02 15:49:54 | 000,250,560 | RHS- | M] () -- C:\ntldr
[2010/10/29 19:40:51 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2010/10/29 17:30:19 | 000,000,211 | ---- | M] () -- C:\Boot.bak
[2010/10/29 17:28:53 | 000,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb
[2010/10/29 17:28:53 | 000,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb
[2010/10/29 15:22:36 | 000,000,800 | ---- | M] () -- C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2010/10/29 15:08:51 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx
[2010/10/29 15:08:19 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\UMDF\MsftWdf_user_01_00_00.Wdf
[2010/10/17 10:35:46 | 000,000,000 | ---- | M] () -- C:\WINDOWS\nsreg.dat
[2010/10/17 10:34:52 | 000,001,620 | ---- | M] () -- C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2010/10/17 10:34:52 | 000,001,602 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2010/10/17 01:22:39 | 000,013,312 | ---- | M] () -- C:\Documents and Settings\Owner\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/10/16 10:48:49 | 000,000,396 | ---- | M] () -- C:\WINDOWS\ODBC.INI
[2010/10/16 10:09:05 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.bak
[2010/10/16 09:18:02 | 000,000,079 | ---- | M] () -- C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Masaüstünü Göster.scf
[2010/10/16 09:14:00 | 000,008,192 | ---- | M] () -- C:\WINDOWS\REGLOCS.OLD
[2010/10/16 09:13:05 | 000,000,261 | ---- | M] () -- C:\WINDOWS\System32\$winnt$.inf
[2010/10/16 09:10:57 | 000,002,577 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2010/10/16 09:10:57 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2010/10/16 09:10:57 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2010/10/16 09:10:57 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2010/10/16 09:10:57 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2010/10/16 09:10:31 | 000,004,161 | ---- | M] () -- C:\WINDOWS\ODBCINST.INI
[2010/10/16 09:07:52 | 000,021,736 | ---- | M] () -- C:\WINDOWS\System32\emptyregdb.dat
[5 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010/11/09 12:00:46 | 000,000,760 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Football Manager 2011.lnk
[2010/11/08 23:04:19 | 000,055,547 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\[MONOVA.ORG] Football Manager 2011 PROPER-RELOADED.torrent
[2010/11/02 15:41:04 | 000,067,866 | ---- | C] () -- C:\WINDOWS\System32\drivers\netwlan5.img
[2010/11/02 15:40:55 | 000,129,045 | ---- | C] () -- C:\WINDOWS\System32\drivers\cxthsfs2.cty
[2010/11/02 15:40:14 | 000,064,352 | ---- | C] () -- C:\WINDOWS\System32\drivers\ativmc20.cod
[2010/10/29 19:31:28 | 000,000,211 | ---- | C] () -- C:\Boot.bak
[2010/10/29 19:31:24 | 000,260,272 | RHS- | C] () -- C:\cmldr
[2010/10/29 15:08:19 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\UMDF\MsftWdf_user_01_00_00.Wdf
[2010/10/26 16:43:26 | 000,128,532 | ---- | C] () -- C:\WINDOWS\System32\nvapps.nvb
[2010/10/20 20:29:21 | 000,002,284 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\Google Chrome.lnk
[2010/10/20 20:29:21 | 000,002,262 | ---- | C] () -- C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2010/10/20 20:25:12 | 000,001,078 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-583907252-790525478-682003330-1003UA.job
[2010/10/20 20:25:11 | 000,001,026 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-583907252-790525478-682003330-1003Core.job
[2010/10/20 11:30:38 | 000,000,800 | ---- | C] () -- C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2010/10/17 10:35:46 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2010/10/17 10:34:52 | 000,001,620 | ---- | C] () -- C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2010/10/17 10:34:52 | 000,001,602 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2010/10/16 16:06:10 | 000,013,312 | ---- | C] () -- C:\Documents and Settings\Owner\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/10/16 12:00:28 | 000,001,374 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2010/10/16 12:00:24 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2010/10/16 12:00:22 | 001,685,606 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.spd
[2010/10/16 12:00:22 | 000,605,050 | ---- | C] () -- C:\WINDOWS\System32\dllcache\r1033tts.lxa
[2010/10/16 12:00:22 | 000,000,888 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.sdf
[2010/10/16 12:00:21 | 000,643,717 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ltts1033.lxa
[2010/10/16 12:00:04 | 000,001,688 | ---- | C] () -- C:\WINDOWS\System32\AUTOEXEC.NT
[2010/10/16 11:59:52 | 001,014,537 | ---- | C] () -- C:\WINDOWS\System32\dllcache\SP2.CAT
[2010/10/16 11:59:52 | 000,809,974 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5IIS.CAT
[2010/10/16 11:59:52 | 000,399,670 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MAPIMIG.CAT
[2010/10/16 11:59:52 | 000,037,509 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MW770.CAT
[2010/10/16 11:59:52 | 000,013,497 | ---- | C] () -- C:\WINDOWS\System32\dllcache\HPCRDP.CAT
[2010/10/16 11:59:52 | 000,008,599 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IASNT4.CAT
[2010/10/16 11:59:52 | 000,007,407 | ---- | C] () -- C:\WINDOWS\System32\dllcache\OEMBIOS.CAT
[2010/10/16 11:59:52 | 000,007,334 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmerrenu.cat
[2010/10/16 11:59:04 | 000,267,800 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010/10/16 11:58:24 | 000,000,327 | RHS- | C] () -- C:\boot.ini
[2010/10/16 11:58:19 | 000,000,261 | ---- | C] () -- C:\WINDOWS\System32\$winnt$.inf
[2010/10/16 10:48:49 | 000,000,396 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2010/10/16 10:15:07 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2010/10/16 10:15:06 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2010/10/16 10:15:03 | 000,790,528 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2010/10/16 10:15:03 | 000,134,144 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2010/10/16 10:15:02 | 000,108,032 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2010/10/16 10:09:07 | 000,013,646 | ---- | C] () -- C:\WINDOWS\System32\wpa.bak
[2010/10/16 10:05:34 | 000,000,013 | ---- | C] () -- C:\WINDOWS\System32\drivers\verfile.tic
[2010/10/16 10:01:22 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\SynTPCoI.dll
[2010/10/16 09:46:59 | 000,156,672 | ---- | C] () -- C:\WINDOWS\System32\RTLCPAPI.dll
[2010/10/16 09:46:59 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2010/10/16 09:45:02 | 000,017,463 | ---- | C] () -- C:\WINDOWS\System32\nvdisp.nvu
[2010/10/16 09:44:03 | 000,020,988 | ---- | C] () -- C:\WINDOWS\System32\nvapps.xml
[2010/10/16 09:18:02 | 000,000,079 | ---- | C] () -- C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Masaüstünü Göster.scf
[2010/10/16 09:17:53 | 000,000,815 | ---- | C] () -- C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Internet Explorer Tarayıcısı'nı Başlat.lnk
[2010/10/16 09:14:00 | 000,008,192 | ---- | C] () -- C:\WINDOWS\REGLOCS.OLD
[2010/10/16 09:13:05 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2010/10/16 09:12:10 | 000,196,665 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imjpinst.exe
[2010/10/16 09:12:07 | 000,134,339 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imekr.lex
[2010/10/16 09:11:56 | 013,463,552 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hwxjpn.dll
[2010/10/16 09:11:50 | 000,108,827 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hanja.lex
[2010/10/16 09:11:37 | 000,173,568 | ---- | C] () -- C:\WINDOWS\System32\dllcache\chtskf.dll
[2010/10/16 09:10:57 | 000,002,577 | ---- | C] () -- C:\WINDOWS\System32\CONFIG.NT
[2010/10/16 09:10:57 | 000,000,000 | RHS- | C] () -- C:\MSDOS.SYS
[2010/10/16 09:10:57 | 000,000,000 | RHS- | C] () -- C:\IO.SYS
[2010/10/16 09:10:57 | 000,000,000 | ---- | C] () -- C:\CONFIG.SYS
[2010/10/16 09:10:57 | 000,000,000 | ---- | C] () -- C:\AUTOEXEC.BAT
[2010/10/16 09:10:43 | 000,023,392 | ---- | C] () -- C:\WINDOWS\System32\nscompat.tlb
[2010/10/16 09:10:43 | 000,016,832 | ---- | C] () -- C:\WINDOWS\System32\amcompat.tlb
[2010/10/16 09:10:42 | 000,316,640 | ---- | C] () -- C:\WINDOWS\WMSysPr9.prx
[2010/10/16 09:09:22 | 004,399,505 | ---- | C] () -- C:\WINDOWS\System32\dllcache\nls302en.lex
[2010/10/16 09:08:51 | 000,048,680 | -HS- | C] () -- C:\WINDOWS\winnt256.bmp
[2010/10/16 09:08:51 | 000,048,680 | -HS- | C] () -- C:\WINDOWS\winnt.bmp
[2010/10/16 09:08:44 | 000,000,984 | ---- | C] () -- C:\WINDOWS\System32\dllcache\srframe.mmf
[2010/10/16 09:07:52 | 000,021,736 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2010/10/16 09:06:35 | 000,065,954 | ---- | C] () -- C:\WINDOWS\Prairie Wind.bmp
[2010/10/16 09:06:35 | 000,065,832 | ---- | C] () -- C:\WINDOWS\Santa Fe Stucco.bmp
[2010/10/16 09:06:35 | 000,026,680 | ---- | C] () -- C:\WINDOWS\River Sumida.bmp
[2010/10/16 09:06:35 | 000,026,582 | ---- | C] () -- C:\WINDOWS\Greenstone.bmp
[2010/10/16 09:06:35 | 000,017,362 | ---- | C] () -- C:\WINDOWS\Rhododendron.bmp
[2010/10/16 09:06:35 | 000,017,336 | ---- | C] () -- C:\WINDOWS\Gone Fishing.bmp
[2010/10/16 09:06:35 | 000,009,522 | ---- | C] () -- C:\WINDOWS\Zapotec.bmp
[2010/10/16 09:06:34 | 000,065,978 | ---- | C] () -- C:\WINDOWS\Sabun Köpükleri.bmp
[2010/10/16 09:06:34 | 000,017,062 | ---- | C] () -- C:\WINDOWS\Kahve Çekirdeği.bmp
[2010/10/16 09:06:34 | 000,016,730 | ---- | C] () -- C:\WINDOWS\TüylüYüzey.bmp
[2010/10/16 09:06:34 | 000,001,272 | ---- | C] () -- C:\WINDOWS\Mavi Oya İşi 16.bmp
[2010/10/16 09:06:31 | 000,003,286 | ---- | C] () -- C:\WINDOWS\System32\tslabels.h
[2010/10/16 09:06:31 | 000,001,161 | ---- | C] () -- C:\WINDOWS\System32\usrlogon.cmd
[2010/10/16 09:06:30 | 000,000,768 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.h
[2010/10/16 09:06:24 | 000,063,488 | ---- | C] () -- C:\WINDOWS\System32\wmimgmt.msc
[2003/04/09 13:05:14 | 000,005,341 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI

========== Custom Scans ==========


< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[5 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\system32\*.exe /lockedfiles >
[5 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >
[2010/10/16 11:58:22 | 000,094,208 | ---- | M] () -- C:\WINDOWS\system32\config\default.sav
[2010/10/16 11:58:22 | 000,638,976 | ---- | M] () -- C:\WINDOWS\system32\config\software.sav
[2010/10/16 11:58:22 | 000,425,984 | ---- | M] () -- C:\WINDOWS\system32\config\system.sav

< %systemroot%\system32\*.sys >
[2004/08/04 14:00:00 | 000,009,026 | ---- | M] () -- C:\WINDOWS\system32\ansi.sys
[2004/08/04 14:00:00 | 000,027,097 | ---- | M] () -- C:\WINDOWS\system32\country.sys
[2004/08/04 14:00:00 | 000,004,752 | ---- | M] () -- C:\WINDOWS\system32\himem.sys
[2004/08/04 14:00:00 | 000,042,809 | ---- | M] () -- C:\WINDOWS\system32\key01.sys
[2004/08/04 14:00:00 | 000,042,537 | ---- | M] () -- C:\WINDOWS\system32\keyboard.sys
[2004/08/04 14:00:00 | 000,027,882 | ---- | M] () -- C:\WINDOWS\system32\ntdos.sys
[2004/08/04 14:00:00 | 000,029,146 | ---- | M] () -- C:\WINDOWS\system32\ntdos404.sys
[2004/08/04 14:00:00 | 000,029,370 | ---- | M] () -- C:\WINDOWS\system32\ntdos411.sys
[2004/08/04 14:00:00 | 000,029,274 | ---- | M] () -- C:\WINDOWS\system32\ntdos412.sys
[2004/08/04 14:00:00 | 000,029,146 | ---- | M] () -- C:\WINDOWS\system32\ntdos804.sys
[2004/08/04 14:00:00 | 000,033,856 | ---- | M] () -- C:\WINDOWS\system32\ntio.sys
[2004/08/04 14:00:00 | 000,034,560 | ---- | M] () -- C:\WINDOWS\system32\ntio404.sys
[2004/08/04 14:00:00 | 000,035,648 | ---- | M] () -- C:\WINDOWS\system32\ntio411.sys
[2004/08/04 14:00:00 | 000,035,424 | ---- | M] () -- C:\WINDOWS\system32\ntio412.sys
[2004/08/04 14:00:00 | 000,034,560 | ---- | M] () -- C:\WINDOWS\system32\ntio804.sys
[2008/04/13 20:44:59 | 000,017,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\watchdog.sys
[2010/09/01 09:54:52 | 001,852,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\win32k.sys
[5 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\system32\drivers\*.dll >
[2008/04/14 18:00:16 | 000,004,255 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv01nt5.dll
[2008/04/14 18:00:16 | 000,003,967 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv02nt5.dll
[2008/04/14 18:00:16 | 000,003,615 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv05nt5.dll
[2008/04/14 18:00:16 | 000,003,647 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv07nt5.dll
[2008/04/14 18:00:16 | 000,003,135 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv08nt5.dll
[2008/04/14 18:00:16 | 000,003,711 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv09nt5.dll
[2008/04/14 18:00:16 | 000,003,775 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv11nt5.dll
[2008/04/14 18:00:16 | 000,021,183 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv01nt5.dll
[2008/04/14 18:00:16 | 000,011,359 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv02nt5.dll
[2008/04/14 18:00:16 | 000,025,471 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv04nt5.dll
[2008/04/14 18:00:16 | 000,014,143 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv06nt5.dll
[2008/04/14 18:00:16 | 000,017,279 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv10nt5.dll
[2008/04/14 18:00:17 | 000,015,423 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\ch7xxnt5.dll
[2008/04/14 18:00:24 | 000,003,901 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\siint5.dll
[2008/04/14 18:00:27 | 000,011,325 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\vchnt5.dll

< %systemroot%\system32\drivers\*.ini >

< %systemroot%\system32\drivers\*.exe >

< %SYSTEMDRIVE%\*.* >
[2010/10/16 09:10:57 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2010/10/29 17:30:19 | 000,000,211 | ---- | M] () -- C:\Boot.bak
[2010/11/05 18:20:07 | 000,000,327 | RHS- | M] () -- C:\boot.ini
[2004/08/04 14:00:00 | 000,004,952 | RHS- | M] () -- C:\Bootfont.bin
[2004/08/03 22:00:00 | 000,260,272 | RHS- | M] () -- C:\cmldr
[2010/10/16 09:10:57 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2010/10/16 09:10:57 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2010/10/16 09:10:57 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2004/08/04 14:00:00 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM
[2010/11/02 15:49:54 | 000,250,560 | RHS- | M] () -- C:\ntldr
[2010/11/12 11:14:45 | 2145,386,496 | -HS- | M] () -- C:\pagefile.sys

< %PROGRAMFILES%\*. >
[2010/10/31 12:34:37 | 000,000,000 | ---D | M] -- C:\Program Files\Adobe
[2010/10/16 11:01:13 | 000,000,000 | ---D | M] -- C:\Program Files\Ahead
[2010/11/08 19:02:28 | 000,000,000 | ---D | M] -- C:\Program Files\BitTorrent
[2010/10/31 12:33:58 | 000,000,000 | ---D | M] -- C:\Program Files\Common Files
[2010/10/16 09:07:39 | 000,000,000 | ---D | M] -- C:\Program Files\ComPlus Applications
[2010/10/16 11:10:58 | 000,000,000 | ---D | M] -- C:\Program Files\CyberLink
[2010/10/30 10:26:18 | 000,000,000 | ---D | M] -- C:\Program Files\ESET
[2010/10/16 11:10:56 | 000,000,000 | -H-D | M] -- C:\Program Files\InstallShield Installation Information
[2010/11/02 19:06:32 | 000,000,000 | ---D | M] -- C:\Program Files\Internet Explorer
[2010/10/16 11:24:18 | 000,000,000 | ---D | M] -- C:\Program Files\Java
[2010/10/16 10:19:16 | 000,000,000 | ---D | M] -- C:\Program Files\K-Lite Codec Pack
[2010/10/16 09:59:32 | 000,000,000 | ---D | M] -- C:\Program Files\Keyboard Manager
[2010/10/30 00:24:54 | 000,000,000 | ---D | M] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010/11/02 15:56:23 | 000,000,000 | ---D | M] -- C:\Program Files\Messenger
[2010/10/17 12:18:47 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft
[2010/10/16 09:11:07 | 000,000,000 | ---D | M] -- C:\Program Files\microsoft frontpage
[2010/10/16 10:58:01 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Office
[2010/10/17 12:15:16 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft SQL Server Compact Edition
[2010/10/16 10:47:39 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Visual Studio
[2010/10/19 11:57:45 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Works
[2010/10/16 10:48:13 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft.NET
[2010/11/02 16:31:50 | 000,000,000 | ---D | M] -- C:\Program Files\Movie Maker
[2010/10/29 13:06:55 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox
[2010/11/02 19:08:45 | 000,000,000 | ---D | M] -- C:\Program Files\MSBuild
[2010/10/16 10:57:51 | 000,000,000 | ---D | M] -- C:\Program Files\MSECache
[2010/10/16 09:06:50 | 000,000,000 | ---D | M] -- C:\Program Files\MSN Gaming Zone
[2010/11/02 15:52:23 | 000,000,000 | ---D | M] -- C:\Program Files\NetMeeting
[2010/10/16 09:09:31 | 000,000,000 | ---D | M] -- C:\Program Files\Online Services
[2010/11/02 16:00:42 | 000,000,000 | ---D | M] -- C:\Program Files\Outlook Express
[2010/10/16 09:46:58 | 000,000,000 | ---D | M] -- C:\Program Files\Realtek
[2010/11/02 19:08:35 | 000,000,000 | ---D | M] -- C:\Program Files\Reference Assemblies
[2010/10/17 14:49:25 | 000,000,000 | ---D | M] -- C:\Program Files\Sports Interactive
[2010/11/06 14:39:11 | 000,000,000 | ---D | M] -- C:\Program Files\Steam
[2010/10/16 10:01:22 | 000,000,000 | ---D | M] -- C:\Program Files\Synaptics
[2010/10/22 14:03:20 | 000,000,000 | ---D | M] -- C:\Program Files\SystemRequirementsLab
[2010/10/16 09:17:53 | 000,000,000 | -H-D | M] -- C:\Program Files\Uninstall Information
[2010/10/17 12:18:34 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Live
[2010/10/17 12:13:44 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Live SkyDrive
[2010/10/29 15:09:29 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Media Connect 2
[2010/11/02 15:52:18 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Media Player
[2010/11/02 15:52:18 | 000,000,000 | ---D | M] -- C:\Program Files\Windows NT
[2010/10/16 09:09:36 | 000,000,000 | -H-D | M] -- C:\Program Files\WindowsUpdate
[2010/10/16 09:42:16 | 000,000,000 | ---D | M] -- C:\Program Files\WinRAR
[2010/10/16 09:11:07 | 000,000,000 | ---D | M] -- C:\Program Files\xerox
[2010/10/17 14:34:58 | 000,000,000 | -H-D | M] -- C:\Program Files\Zero G Registry

< %appdata%\*.* >
[2010/10/16 11:59:53 | 000,000,062 | -HS- | M] () -- C:\Documents and Settings\Owner\Application Data\desktop.ini


< MD5 for: AGP440.SYS >
[2004/08/04 14:00:00 | 018,781,683 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
[2010/11/02 15:46:04 | 023,888,254 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
[2010/11/02 15:46:04 | 023,888,254 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys
[2010/11/02 15:46:04 | 023,888,254 | ---- | M] () .cab file -- C:\WINDOWS\SoftwareDistribution\Download\7967ea10e135cbe2c175c5648b36ae99\sp3.cab:AGP440.sys
[2008/04/13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys
[2008/04/13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\SoftwareDistribution\Download\7967ea10e135cbe2c175c5648b36ae99\agp440.sys
[2008/04/13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys

< MD5 for: ATAPI.SYS >
[2004/08/04 14:00:00 | 018,781,683 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2010/11/02 15:46:04 | 023,888,254 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2010/11/02 15:46:04 | 023,888,254 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2010/11/02 15:46:04 | 023,888,254 | ---- | M] () .cab file -- C:\WINDOWS\SoftwareDistribution\Download\7967ea10e135cbe2c175c5648b36ae99\sp3.cab:atapi.sys
[2008/04/13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008/04/13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\SoftwareDistribution\Download\7967ea10e135cbe2c175c5648b36ae99\atapi.sys
[2008/04/13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2004/08/04 14:00:00 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys
[2004/08/04 14:00:00 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\ERDNT\cache\atapi.sys

< MD5 for: DISK.SYS >
[2004/08/04 14:00:00 | 018,781,683 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:disk.sys
[2010/11/02 15:46:04 | 023,888,254 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:disk.sys
[2010/11/02 15:46:04 | 023,888,254 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:disk.sys
[2010/11/02 15:46:04 | 023,888,254 | ---- | M] () .cab file -- C:\WINDOWS\SoftwareDistribution\Download\7967ea10e135cbe2c175c5648b36ae99\sp3.cab:disk.sys
[2004/08/04 14:00:00 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=00CA44E4534865F8A3B64F7C0984BFF0 -- C:\WINDOWS\$NtServicePackUninstall$\disk.sys
[2008/04/13 20:40:47 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=044452051F3E02E7963599FC8F4F3E25 -- C:\WINDOWS\ServicePackFiles\i386\disk.sys
[2008/04/13 20:40:47 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=044452051F3E02E7963599FC8F4F3E25 -- C:\WINDOWS\SoftwareDistribution\Download\7967ea10e135cbe2c175c5648b36ae99\disk.sys
[2008/04/13 20:40:47 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=044452051F3E02E7963599FC8F4F3E25 -- C:\WINDOWS\system32\drivers\disk.sys

< MD5 for: EVENTLOG.DLL >
[2008/04/14 18:00:19 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=67947DF32E767DFC1FC082D94C7AAABF -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
[2008/04/14 18:00:19 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=67947DF32E767DFC1FC082D94C7AAABF -- C:\WINDOWS\SoftwareDistribution\Download\7967ea10e135cbe2c175c5648b36ae99\eventlog.dll
[2008/04/14 18:00:19 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=67947DF32E767DFC1FC082D94C7AAABF -- C:\WINDOWS\system32\eventlog.dll
[2004/08/04 14:00:00 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=EA0FAACA07B1D817B9FA101F13938F25 -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll
[2004/08/04 14:00:00 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=EA0FAACA07B1D817B9FA101F13938F25 -- C:\WINDOWS\ERDNT\cache\eventlog.dll

< MD5 for: NETLOGON.DLL >
[2009/02/06 20:46:45 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=53EDD9F091F72668A2197807FA3BD7C8 -- C:\WINDOWS\$hf_mig$\KB968389\SP2QFE\netlogon.dll
[2009/02/06 20:46:45 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=53EDD9F091F72668A2197807FA3BD7C8 -- C:\WINDOWS\$hf_mig$\KB975467\SP2QFE\netlogon.dll
[2004/08/04 14:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=B40EABE18E3C44B24C137F94A2486B0E -- C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll
[2004/08/04 14:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=B40EABE18E3C44B24C137F94A2486B0E -- C:\WINDOWS\ERDNT\cache\netlogon.dll
[2008/04/14 18:00:23 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=E6EEC37B4758387E8692F2F29F5F0353 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll
[2008/04/14 18:00:23 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=E6EEC37B4758387E8692F2F29F5F0353 -- C:\WINDOWS\SoftwareDistribution\Download\7967ea10e135cbe2c175c5648b36ae99\netlogon.dll
[2008/04/14 18:00:23 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=E6EEC37B4758387E8692F2F29F5F0353 -- C:\WINDOWS\system32\netlogon.dll

< MD5 for: SCECLI.DLL >
[2004/08/04 14:00:00 | 000,182,272 | ---- | M] (Microsoft Corporation) MD5=16D75258B934F6A9F68A89F42034AD93 -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll
[2004/08/04 14:00:00 | 000,182,272 | ---- | M] (Microsoft Corporation) MD5=16D75258B934F6A9F68A89F42034AD93 -- C:\WINDOWS\ERDNT\cache\scecli.dll
[2008/04/14 18:00:24 | 000,183,296 | ---- | M] (Microsoft Corporation) MD5=7DCCF5FA7C0249B187B4679A0253B0CD -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008/04/14 18:00:24 | 000,183,296 | ---- | M] (Microsoft Corporation) MD5=7DCCF5FA7C0249B187B4679A0253B0CD -- C:\WINDOWS\SoftwareDistribution\Download\7967ea10e135cbe2c175c5648b36ae99\scecli.dll
[2008/04/14 18:00:24 | 000,183,296 | ---- | M] (Microsoft Corporation) MD5=7DCCF5FA7C0249B187B4679A0253B0CD -- C:\WINDOWS\system32\scecli.dll

< MD5 for: USBSTOR.SYS >
[2004/08/04 14:00:00 | 018,781,683 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:usbstor.sys
[2010/11/02 15:46:04 | 023,888,254 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:usbstor.sys
[2010/11/02 15:46:04 | 023,888,254 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:usbstor.sys
[2010/11/02 15:46:04 | 023,888,254 | ---- | M] () .cab file -- C:\WINDOWS\SoftwareDistribution\Download\7967ea10e135cbe2c175c5648b36ae99\sp3.cab:usbstor.sys
[2004/08/03 22:08:48 | 000,026,496 | ---- | M] (Microsoft Corporation) MD5=6CD7B22193718F1D17A47A1CD6D37E75 -- C:\WINDOWS\$NtServicePackUninstall$\usbstor.sys
[2008/04/13 20:45:38 | 000,026,368 | ---- | M] (Microsoft Corporation) MD5=A32426D9B14A089EAA1D922E0C5801A9 -- C:\WINDOWS\ServicePackFiles\i386\usbstor.sys
[2008/04/13 20:45:38 | 000,026,368 | ---- | M] (Microsoft Corporation) MD5=A32426D9B14A089EAA1D922E0C5801A9 -- C:\WINDOWS\SoftwareDistribution\Download\7967ea10e135cbe2c175c5648b36ae99\usbstor.sys
[2008/04/13 20:45:38 | 000,026,368 | ---- | M] (Microsoft Corporation) MD5=A32426D9B14A089EAA1D922E0C5801A9 -- C:\WINDOWS\system32\drivers\usbstor.sys

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2010-11-10 22:55:59

< End of report >

descriptionSomething slows down the machine + occasional blue screens - Page 2 EmptyRe: Something slows down the machine + occasional blue screens

more_horiz
OTL Extras logfile created on: 12/11/2010 11:25:34 - Run 1
OTL by OldTimer - Version 3.2.17.3 Folder = C:\Documents and Settings\Owner\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000809 | Country: İngiltere | Language: ENG | Date Format: dd/MM/yyyy

2.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 76.00% Memory free
4.00 Gb Paging File | 4.00 Gb Available in Paging File | 91.00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 39.06 Gb Total Space | 0.62 Gb Free Space | 1.60% Space Free | Partition Type: NTFS
Drive D: | 16.82 Gb Total Space | 9.25 Gb Free Space | 54.99% Space Free | Partition Type: NTFS

Computer Name: PC-C521DA8688CE | User Name: Owner | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe" = C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync -- (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe" = C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync -- (Microsoft Corporation)
"C:\Program Files\Steam\SteamApps\common\football manager 2010\fm.exe" = C:\Program Files\Steam\SteamApps\common\football manager 2010\fm.exe:*:Enabled:Football Manager 2010 -- (Sports Interactive)
"C:\Program Files\Steam\SteamApps\common\football manager 2011 demo\fm.exe" = C:\Program Files\Steam\SteamApps\common\football manager 2011 demo\fm.exe:*:Enabled:Football Manager 2011 Demo -- (Sports Interactive)
"C:\Program Files\BitTorrent\BitTorrent.exe" = C:\Program Files\BitTorrent\BitTorrent.exe:*:Enabled:BitTorrent -- (BitTorrent, Inc.)
"D:\Program Files\Sports Interactive\Football Manager 2011\fm.exe" = D:\Program Files\Sports Interactive\Football Manager 2011\fm.exe:*:Enabled:Football Manager 2011 -- (Sports Interactive)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{126EE960-8590-4D2A-AF52-DB3C4940572C}" = Windows Live Aile Koruması
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Karşıya Yükleme Aracı
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{26A24AE4-039D-4CA4-87B4-2F83216021FF}" = Java(TM) 6 Update 22
"{30EDE085-7423-41A3-9FE9-4956AA61985D}" = Windows Live Writer
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{350C941f-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}" = Adobe AIR
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}" = Microsoft Office Live Add-in 1.3
"{5F25BBF0-8CBA-47CB-8E7B-EEE29C434FD3}" = Windows Live Call
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{6ECB944F-D027-4E8A-9906-70E77C005AD5}" = ESET Smart Security
"{8E50332B-772C-4AEA-BF56-94DE6A1D5F10}" = TIxx21
"{8E5233E1-7495-44FB-8DEB-4BE906D59619}" = Junk Mail filter update
"{8F7BC615-A7E3-4309-B60E-BC8BF3DEAE83}" = Windows Live Mail
"{9011041F-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{90120000-0020-041F-0000-0000000FF1CE}" = 2007 Office sistemi için Uyumluluk Paketi
"{94FB906A-CF42-4128-A509-D353026A607E}" = REALTEK Gigabit and Fast Ethernet NIC Driver
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9E7A5227-18B5-4C85-8926-D08BE2F8FC3A}" = Windows Live Fotoğraf Galerisi
"{A1DA00CE-AA3E-45BC-91D6-66739D9E16F1}" = Windows Live Sync
"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{AC76BA86-7AD7-1033-7B44-A94000000001}" = Adobe Reader 9.4.0
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C99EF05C-A49C-4C8C-902B-BD4B96A6F3A8}" = Keyboard Manager Utility
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D71AC256-FA83-45EA-9F14-1B20BB5105C9}" = TIxx21/x515
"{D926BF53-9A73-4B58-90E0-A1B48FFC3913}" = Windows Live Messenger
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F8BFDEB8-9D2A-40CF-9E2C-FCA68FFAD959}" = Windows Live Oturum Açma Yardımcısı
"{FEED61F5-C811-42D2-B924-E8AE01B335E1}" = Windows Live Temel Parçalar
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"BitTorrent" = BitTorrent
"ESET Online Scanner" = ESET Online Scanner v3
"Football Manager 2011" = Football Manager 2011
"ie8" = Windows Internet Explorer 8
"InstallShield_{8E50332B-772C-4AEA-BF56-94DE6A1D5F10}" = Texas Instruments PCIxx21/x515 drivers.
"InstallShield_{C99EF05C-A49C-4C8C-902B-BD4B96A6F3A8}" = Keyboard Manager Utility
"InstallShield_{D71AC256-FA83-45EA-9F14-1B20BB5105C9}" = Texas Instruments PCIxx21/x515 drivers.
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 6.4.0
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox (3.6.12)" = Mozilla Firefox (3.6.12)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"Nero - Burning Rom!UninstallKey" = Nero 6 Ultra Edition
"NVIDIA Drivers" = NVIDIA Drivers
"SMSERIAL" = Motorola SM56 Data Fax Modem
"Steam App 34000" = Football Manager 2010
"Steam App 34390" = Football Manager 2011 Demo
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"SystemRequirementsLab" = System Requirements Lab
"WIC" = Windows Imaging Component
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinLiveSuite_Wave3" = Windows Live Temel Parçalar
"WinRAR archiver" = WinRAR arşiv yöneticisi
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 16/10/2010 04:11:38 | Computer Name = PC-C521DA8688CE | Source = MsiInstaller | ID = 1014
Description = Windows Installer proxy bilgisi dogru kaydedilmedi

Error - 16/10/2010 04:52:45 | Computer Name = PC-C521DA8688CE | Source = crypt32 | ID = 131080
Description = Üçüncü parti kök listesi sira numarasinin otomatik güncellestirme
yapilarak alinamadigi konum:
hata: Zaman asimi süresi sona erdiginden bu islem geri çevrildi.

Error - 17/10/2010 15:15:52 | Computer Name = PC-C521DA8688CE | Source = Application Hang | ID = 1002
Description = Askida kalan uygulama fm.exe, sürüm 10.3.0.39323, aski modülü hungapp,
sürüm 0.0.0.0, askida kalma adresi 0x00000000.

Error - 26/10/2010 10:09:16 | Computer Name = PC-C521DA8688CE | Source = Application Error | ID = 1000
Description = Hata uygulamasi mmc.exe, sürüm 5.1.2600.2180, hata modülü ntdll.dll,
sürümü 5.1.2600.3520, hata adresi 0x00011948.

Error - 06/11/2010 08:38:27 | Computer Name = PC-C521DA8688CE | Source = Application Error | ID = 1000
Description = Hata uygulamasi fm.exe, sürüm 10.3.0.39323, hata modülü fm.exe, sürümü
10.3.0.39323, hata adresi 0x00c7e3bc.

[ System Events ]
Error - 31/10/2010 06:25:51 | Computer Name = PC-C521DA8688CE | Source = Service Control Manager | ID = 7023
Description = Uygulama Yönetimi hizmet asagidaki hata ile sona erdi: %%126

Error - 31/10/2010 06:25:51 | Computer Name = PC-C521DA8688CE | Source = Service Control Manager | ID = 7023
Description = Uygulama Yönetimi hizmet asagidaki hata ile sona erdi: %%126

Error - 31/10/2010 06:25:51 | Computer Name = PC-C521DA8688CE | Source = Service Control Manager | ID = 7023
Description = Uygulama Yönetimi hizmet asagidaki hata ile sona erdi: %%126

Error - 31/10/2010 06:25:51 | Computer Name = PC-C521DA8688CE | Source = Service Control Manager | ID = 7023
Description = Uygulama Yönetimi hizmet asagidaki hata ile sona erdi: %%126

Error - 31/10/2010 07:27:46 | Computer Name = PC-C521DA8688CE | Source = System Error | ID = 1003
Description = Hata kodu 00000019, parameter1 00000020, parameter2 e2a4d1c1, parameter3
e2a4d1e1, parameter4 0c041704.

Error - 01/11/2010 12:29:14 | Computer Name = PC-C521DA8688CE | Source = Dhcp | ID = 1001
Description = Bilgisayariniza, ag adresi 0012F05E3B7B olan Ag Karti için ag üzerinden
(DHCP Sunucu tarafindan) bir adres atanmamis. Asagidaki hata olustu: %%1223. Bilgisayariniz,
ag adresi (DHCP) sunucusundan kendisi bir adres almak için denemeye devam edecek.

Error - 02/11/2010 13:01:26 | Computer Name = PC-C521DA8688CE | Source = Dhcp | ID = 1002
Description = Ag adresi 0012F05E3B7B olan Ag Karti için 192.168.2.2 IP adresi kira
istegi, DHCP sunucusu 192.34.105.1 tarafindan reddedildi (DHCP sunucusu DHCPNACK
iletisi gönderdi).

Error - 02/11/2010 13:01:31 | Computer Name = PC-C521DA8688CE | Source = Dhcp | ID = 1001
Description = Bilgisayariniza, ag adresi 0012F05E3B7B olan Ag Karti için ag üzerinden
(DHCP Sunucu tarafindan) bir adres atanmamis. Asagidaki hata olustu: %%1223. Bilgisayariniz,
ag adresi (DHCP) sunucusundan kendisi bir adres almak için denemeye devam edecek.

Error - 02/11/2010 13:02:30 | Computer Name = PC-C521DA8688CE | Source = System Error | ID = 1003
Description = Hata kodu 1000008e, parameter1 c0000005, parameter2 805677bb, parameter3
b4bdfc7c, parameter4 00000000.

Error - 02/11/2010 13:30:04 | Computer Name = PC-C521DA8688CE | Source = Dhcp | ID = 1002
Description = Ag adresi 0012F05E3B7B olan Ag Karti için 192.168.2.2 IP adresi kira
istegi, DHCP sunucusu 192.34.105.1 tarafindan reddedildi (DHCP sunucusu DHCPNACK
iletisi gönderdi).


< End of report >

descriptionSomething slows down the machine + occasional blue screens - Page 2 EmptyRe: Something slows down the machine + occasional blue screens

more_horiz
Hi Sneakyone, did i do everything alright? i wonder what is the cause of this insisting issue..
Lately i am forced to restart at the startup cos it cant get past the account choosing screen.. ( because of my manual restarting there's no blue screen lately) however i can't start windows on the first try almost every time.. after manual restart it works..

descriptionSomething slows down the machine + occasional blue screens - Page 2 EmptyRe: Something slows down the machine + occasional blue screens

more_horiz
Hello !

Seems like the crashes is caused by eamon.sys i.e. ESET NOD32 antivirus uninstall ESET completely use this guide http://kb.eset.com/esetkb/index?page=content&id=SOLN2116 you'll find a removal tool over there. Make sure you use that. I would recommend Microsoft Security Essentials as a replacement to ESET.

The crash has happen while running a Process called Plugin Container which belongs to Mozilla Firefox. You might wanna consider removing Firefox and remove the Flash, Java plugins and reinstall it.


Bugcheck:

Code:

BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 00000020, a pool block header size is corrupt.
Arg2: e2a4d1c1, The pool entry we were looking for within the page.
Arg3: e2a4d1e1, The next pool entry.
Arg4: 0c041704, (reserved)

Debugging Details:
------------------


BUGCHECK_STR:  0x19_20

POOL_ADDRESS:  e2a4d1c1

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  DRIVER_FAULT

PROCESS_NAME:  plugin-containe

LAST_CONTROL_TRANSFER:  from 8054b9c1 to 8053358e

STACK_TEXT: 
b30d93ac 8054b9c1 00000019 00000020 e2a4d1c1 nt!KeBugCheckEx+0x1b
b30d93fc f7b7a94b e2a4d1c9 00000000 f7b75f98 nt!ExFreePoolWithTag+0x2be
b30d9408 f7b75f98 00951c00 00000000 dce51d00 Ntfs!NtfsCommonCreate+0x1563
b30d960c f7b77d2d 894cd3c8 88827e28 b30d9664 Ntfs!NtfsCommonCreate+0x14c0
b30d96f0 804e3807 89b27020 88827e28 88871650 Ntfs!NtfsFsdCreate+0x1dc
b30d9700 f7475876 88827e38 89bbbb70 88871650 nt!IopfCallDriver+0x31
b30d974c 804e3807 89b25c80 00000001 89477030 sr!SrCreate+0x150
b30d975c b3a74bef 88827e38 89477030 88871650 nt!IopfCallDriver+0x31
WARNING: Stack unwind information not available. Following frames may be wrong.
b30d978c 804e3807 897f4620 88827e28 88827e28 eamon+0x3bef
b30d979c 8056f7a9 89bbf8e8 894c7944 b30d9944 nt!IopfCallDriver+0x31
b30d987c 805633ec 89bbf900 00000000 894c78a0 nt!IopParseDevice+0xa12
b30d9904 8056750a 00000000 b30d9944 00000040 nt!ObpLookupObjectName+0x56a
b30d9958 8056fc83 00000000 00000000 b2710000 nt!ObOpenObjectByName+0xeb
b30d99d4 8056fd52 b30d9be8 00100001 b30d9bb4 nt!IopCreateFile+0x407
b30d9a30 8056fe88 b30d9be8 00100001 b30d9bb4 nt!IoCreateFile+0x8e
b30d9a70 804de7ec b30d9be8 00100001 b30d9bb4 nt!NtCreateFile+0x30
b30d9a70 804dc9b1 b30d9be8 00100001 b30d9bb4 nt!KiFastCallEntry+0xf8
b30d9b14 b3a72a55 b30d9be8 00100001 b30d9bb4 nt!ZwCreateFile+0x11
b30d9b5c b3a744af b30d9be8 00100001 b30d9bb4 eamon+0x1a55
b30d9bf0 b3a75e4e 00000034 889a7b20 ffffffff eamon+0x34af
b30d9c1c b3a74d93 894a9510 00000000 00000003 eamon+0x4e4e
b30d9c60 804e3807 017f4620 889a7b20 889a7b20 eamon+0x3d93
b30d9c70 8056ab70 89ae5f78 89c21e70 00000001 nt!IopfCallDriver+0x31
b30d9ca4 80566b71 88996518 897f4620 0013019f nt!IopCloseFile+0x27c
b30d9cd4 80566d1b 88996518 89ae5f90 89c21e70 nt!ObpDecrementHandleCount+0x119
b30d9cfc 80566d8c e22fe268 89ae5f90 00000274 nt!ObpCloseHandleTableEntry+0x14d
b30d9d44 80566dd6 00000274 00000001 00000000 nt!ObpCloseHandle+0x87
b30d9d58 804de7ec 00000274 04c6fcf0 7c8fe514 nt!NtClose+0x1d
b30d9d58 7c8fe514 00000274 04c6fcf0 7c8fe514 nt!KiFastCallEntry+0xf8
04c6fcf0 00000000 00000000 00000000 00000000 0x7c8fe514


STACK_COMMAND:  kb

FOLLOWUP_IP:
eamon+3bef
b3a74bef ??              ???

SYMBOL_STACK_INDEX:  8

SYMBOL_NAME:  eamon+3bef

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: eamon

IMAGE_NAME:  eamon.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  47c80d64

FAILURE_BUCKET_ID:  0x19_20_eamon+3bef

BUCKET_ID:  0x19_20_eamon+3bef

Followup: MachineOwner


Hope this helps,
Captain

............................................................................................

Regards,
Captain MVP
Something slows down the machine + occasional blue screens - Page 2 Gp_use10

It is considered
courteous to  post a reply if you have been able to resolve your problem, or received  an answer to your question.

descriptionSomething slows down the machine + occasional blue screens - Page 2 EmptyRe: Something slows down the machine + occasional blue screens

more_horiz
privacy_tip Permissions in this forum:
You cannot reply to topics in this forum