I use a program called Mr. Mirror 2.1 and CIS and CIMA gives a Suspicious+-verdict.
It seems that he gives a Suspicious+, because he loads and unloads a windows signed driver called FastFAT.sys.
Why is loading and unloading a known Windows 'own' driver a problem?
Are there more known problems with fastfat.sys?
see verdict in attachment.
[attachment deleted by admin]