[d0od]

Hey, bana tamamen bir panik garip olan RAM's yine son .... çok yemiş olma benim virüs programı ya da casus yazılım .. üzerinden herhangi bir uygunsuz bulamıyor Görev yöneticisi bir yeme bozukluğu olan, ancak Svchost kadar chucking sadece emin olmak istiyorum!

--

Logfile Trend Micro HijackThis v2.0.2 ve
Tarama 2:48:21 PM, 8/4/2008 kayıtlı
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot modu: Normal

Çalışan süreçleri:
C: \ Program Files (x86) \ RocketDock \ RocketDock.exe
C: \ Program Files (x86) \ Google \ Web Accelerator \ GoogleWebAccWarden.exe
C: \ Program Files (x86) \ Google \ Web Accelerator \ googlewebaccclient.exe
C: \ Program Files (x86) \ Trend Micro \ HijackThis \ Sniper.exe

R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://d0od.blogspot.com/
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, SearchAssistant =
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, CustomizeSearch =
R1 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Int ernet Ayarlar, AutoConfigURL = http://localhost:9100/proxy.pac
R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Toolbar, LinksFolderName =
O1 - Hosts::: 1 yerel
O2 - BHO: Google Güncelleştirmesi Helper - (25D596E9-BD03-4D4A-8310-5DF3B31E8D26) - C: \ Program Files (x86) \ Google \ Update \ 1.2.121.17 \ GoopdateBho.dll
O2 - BHO: Google Web Accelerator Helper - (69A87B7D-DE56-4136-9655-716BA50C19C7) - C: \ Program Files (x86) \ Google \ Web Accelerator \ GoogleWebAccToolbar.dll
O2 - BHO: SSVHelper Sınıf - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files (x86) \ Java \ jre1.6.0_05 \ bin \ ssv.dll
O2 - BHO: Windows Live Sign-Yardımcı yılında - (9030D464-4C02-4ABF-8ECC-5164760863C6) - C: \ Program Files (x86) \ Common Files \ Microsoft Shared \ Windows Live \ WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - (AF69DE43-7D58-4638-B6FA-CE66B5AD205D) - C: \ Program Files (x86) \ Google \ GoogleToolbarNotifier \ 2.1.1119.1736 \ wg.dll var
O3 - Toolbar: Google Web Accelerator - (DB87BFA2-A2E3-451E-8E5A-C89982D87CBF) - C: \ Program Files (x86) \ Google \ Web Accelerator \ GoogleWebAccToolbar.dll
O4 - HKLM \ .. \ Run: [amd_dc_opt] C: \ Program Files (x86) \ AMD \ Dual-Core Doktoru \ amd_dc_opt.exe
O4 - HKCU \ .. \ Run: [Sidebar] C: \ Program Files \ Windows Sidebar \ sidebar.exe / AutoRun
O4 - HKCU \ .. \ Run: [RocketDock] "C: \ Program Files (x86) \ RocketDock \ RocketDock.exe"
O4 - HKCU \ .. \ Run: [uTorrent] "C: \ Program Files (x86) \ uTorrent2 \ uTorrent.exe"
O4 - HKCU \ .. \ Run: [WMPNSCFG] C: \ Program Files (x86) \ Windows Media Player \ WMPNSCFG.exe
O4 - HKUS \ S-1-5-19 \ .. \ Run: [Sidebar]% ProgramFiles% \ Windows Sidebar \ Sidebar.exe / detectMem (User 'LOCAL SERVICE')
O4 - HKUS \ S-1-5-19 \ .. \ Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll, ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS \ S-1-5-20 \ .. \ Run: [Sidebar]% ProgramFiles% \ Windows Sidebar \ Sidebar.exe / detectMem (User 'NETWORK SERVICE')
O4 - Global Startup: Run Google Web Accelerator.lnk = C: \ Program Files (x86) \ Google \ Web Accelerator \ GoogleWebAccWarden.exe
O8 - Extra menü öğesi: & D & ownload & BitComet ile - res: / / C: \ Program Files (x86) \ BitComet \ BitComet.exe / AddLink.htm
O8 - Extra menü öğesi: & D & BitComet ile tüm video ownload - res: / / C: \ Program Files (x86) \ BitComet \ BitComet.exe / AddVideo.htm
O8 - Extra menü öğesi: & D & tüm BitComet ile ownload - res: / / C: \ Program Files (x86) \ BitComet \ BitComet.exe / AddAllLink.htm
O9 - Extra düğmesi: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files (x86) \ Java \ jre1.6.0_05 \ bin \ ssv.dll
O9 - Extra 'Tools' MENUITEM: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files (x86) \ Java \ jre1.6.0_05 \ bin \ ssv.dll
O9 - Extra düğmesi: Bonjour - (7F9DB11C-E358-4ca6-A83D-ACC663939424) - C: \ Program Files (x86) \ Bonjour \ ExplorerPlugin.dll
O13 - Gopher Prefix:
O16 - DPF: (0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75) (CKAVWebScan Nesne) -- http://www.kaspersky.com/kos/eng/par...an_unicode.cab
O16 - DPF: (30528230-99f7-4bb4-88d8-fa1d4f56a2ab) (Installation Support) - C: \ Program Files (x86) \ Yahoo! \ Common \ Yinsthelper.dll
O16 - DPF: (4A85DBE0-BFB2-4119-8401-186A7C6EB653) -- http://messenger.zone.msn.com/binary/MJSS.cab69309.cab
O16 - DPF: (4F1E5B1A-2A80-42CA-8532-2D05CB959537) (MSN Resim Yükleme Aracı) -- http://gfx1.hotmail.com/mail/w2/reso...PUplden-gb.cab
O16 - DPF: (B8BE5E93-A60C-4D26-A2DC-220313175592) (MSN Games - Installer) -- http://messenger.zone.msn.com/binary...o.cab56649.cab
O16 - DPF: (C3F79A2B-B9B4-4A66-B012-3EE46475B072) (MessengerStatsClient Sınıf) -- http://messenger.zone.msn.com/binary...t.cab56907.cab
O16 - DPF: (D27CDB6E-AE6D-11CF-96B8-444553540000) (Shockwave Flash Object) -- http://fpdownload2.macromedia.com/ge...nt/swflash.cab
O16 - DPF: (E6187999-9FEC-46A1-A20F-F4CA977D5643) (ZoneChess Nesne) -- http://messenger.zone.msn.com/binary/Chess.cab57176.cab
O16 - DPF: (F6ACF75C-C32C-447B-9BEF-46B766368D29) (Creative Otomatik Yazılım Güncelleme Destek Paketi) -- http://www.creative.com/softwareupda...5102/CTPID.cab
O16 - DPF: (F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8) (GoPetsWeb Kontrol) -- https: / / secure.gopetslive.com / dev / GoPetsWeb.cab
O17 - HKLM \ System \ CCS \ Services \ Tcpip \ .. \ (BF0DBBE6-E088-4418-8A2D-4B9788FFCACC): NameServer = 192.168.2.1
O18 - Protokol: skype4com - (FFC8B962-9B40-4DFF-9458-1830C7DD7F5D) - C: \ progra ~ 2 \ COMMON ~ 1 \ Skype \ SKYPE4 ~ 1.DLL
O23 - Service: @% SystemRoot% \ system32 \ Alg.exe, -112 (ALG) - Bilinmeyen sahibi - C: \ Windows \ System32 \ (dosya eksik) alg.exe
O23 - Service: iPod Service - Apple Inc - C: \ Program Files (x86) \ iPod \ bin \ iPodService.exe
O23 - Service: keyiso.dll, -100 (KeyIso) - Bilinmeyen sahibi - C: \ Windows \ system32 \ @ (dosya eksik) lsass.exe
O23 - Service: comres.dll, -2797 (MSDTC) - Bilinmeyen sahibi - C: \ Windows @ \ System32 \ (dosya eksik) msdtc.exe
O23 - Service: @% SystemRoot% \ System32 \, -102 (Netlogon) - Bilinmeyen sahibi - C: \ Windows \ system32 \ lsass.exe (file missing) netlogon.dll
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Bilinmeyen sahibi - C: \ Windows \ system32 \ (dosya eksik) nvvsvc.exe
O23 - Service: @% systemroot% \ system32 \ psbase.dll, -300 (ProtectedStorage) - Bilinmeyen sahibi - C: \ Windows \ system32 \ (dosya eksik) lsass.exe
O23 - Service: @% SystemRoot% \ System32 \ Locator.exe, -2 (RPCLOCATOR) - Bilinmeyen sahibi - C: \ Windows \ system32 \ (dosya eksik) Locator.exe
O23 - Service: @% SystemRoot% \ system32 \ samsrv.dll, -1 (SamSs) - Bilinmeyen sahibi - C: \ Windows \ system32 \ (dosya eksik) lsass.exe
O23 - Service: @% SystemRoot% \ system32 \ SLsvc.exe, -101 (slsvc) - Bilinmeyen sahibi - C: \ Windows \ system32 \ SLsvc.exe (eksik) dosyası
O23 - Service: @% SystemRoot% \ system32 \ snmptrap.exe, -3 (SNMPTRAP) - Bilinmeyen sahibi - C: \ Windows \ System32 \ (dosya eksik) snmptrap.exe
O23 - Service: @% systemroot% \ system32 \ spoolsv.exe, -1 (Biriktiricisi) - Bilinmeyen sahibi - C: \ Windows \ System32 \ (dosya eksik) spoolsv.exe
O23 - Service: @% SystemRoot% \ system32 \ ui0detect.exe, -101 (UI0Detect) - Bilinmeyen sahibi - C: \ Windows \ system32 \ UI0Detect.exe (eksik) dosyası
O23 - Service: @% SystemRoot% \ system32 \ vds.exe, -100 (VDS) - Bilinmeyen sahibi - C: \ Windows \ System32 \ (dosya eksik) vds.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc - C: \ Windows \ system32 \ vmnetdhcp.exe
O23 - Service: VMware NAT Service - VMware, Inc - C: \ Windows \ system32 \ vmnat.exe
O23 - Service: @% systemroot% \ system32 \ vssvc.exe, -102 (VSS) - Bilinmeyen sahibi - C: \ Windows \ system32 \ (dosya eksik) vssvc.exe
O23 - Service: @% SystemRoot% \ system32 \ wbem \ wmiapsrv.exe, -110 (wmiApSrv) - Bilinmeyen sahibi - C: \ Windows \ system32 \ wbem \ WmiApSrv.exe (eksik) dosyası
O23 - Service: @% ProgramFiles% \ Windows Media Player \ wmpnetwk.exe, -101 (WMPNetworkSvc) - Bilinmeyen sahibi - C: \ Program Files (x86) \ Windows Media Player \ (dosya eksik) wmpnetwk.exe

--
Dosya sonu - 7922 byte

[evilfantasy]

Güzel görünüyor.