![]() |
| |||||||
|
![]() |
| | Konu Araçları |
|
#1
| |||
| |||
| Merhaba! Ben bir şekilde iexplore.exe virüsü kazanmış görünüyor. Rasgele pop-up'ları sürekli beni plaguing's. Her zaman Internet Explorer'da rağmen kullanımı Firefox her zaman gel. Herhangi Yardım büyük mutluluk duyacağız. Teşekkürler! -Danny HijackThis Girişi ---------------------- Logfile HijackThis v1.99.1 ve Tarama 3:13:34 at 12/22/2007 kaydedilmiş Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16512) Çalışan süreçleri: C: \ WINDOWS \ System32 \ Smss.exe C: \ WINDOWS \ system32 \ winlogon.exe C: \ WINDOWS \ system32 \ Services.exe C: \ WINDOWS \ system32 \ lsass.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ Program Files \ Windows Defender \ MsMpEng.exe C: \ WINDOWS \ System32 \ svchost.exe C: \ WINDOWS \ Explorer.EXE C: \ Program Files \ Common Files \ Symantec Shared \ ccProxy.exe C: \ Program Files \ Common Files \ Symantec Shared \ ccSetMgr.exe C: \ Program Files \ Norton Internet Security \ ISSVC.exe C: \ Program Files \ Common Files \ Symantec Shared \ SNDSrvc.exe C: \ Program Files \ Common Files \ Symantec Shared \ SPBBC \ SPBBCSvc.exe C: \ Program Files \ Common Files \ Symantec Shared \ ccEvtMgr.exe C: \ Program Files \ Alwil Software \ Avast4 \ aswUpdSv.exe C: \ Program Files \ Alwil Software \ Avast4 \ ashServ.exe C: \ WINDOWS \ system32 \ spoolsv.exe C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe C: \ Program Files \ Common Files \ LightScribe \ LSSrvc.exe C: \ Program Files \ Norton Internet Security \ Norton AntiVirus \ navapsvc.exe C: \ Program Files \ Analog Devices \ SoundMAX \ SMAgent.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ Program Files \ Common Files \ Symantec Shared \ Güvenlik Merkezi \ SymWSC.exe C: \ Program Files \ Alwil Software \ Avast4 \ ashMaiSv.exe C: \ Program Files \ Alwil Software \ Avast4 \ ashWebSv.exe C: \ Program Files \ Analog Devices \ SoundMAX \ SMax4PNP.exe C: \ WINDOWS \ AGRSMMSG.exe C: \ Program Files \ Apoint2K \ Apoint.exe C: \ WINDOWS \ System32 \ svchost.exe C: \ Program Files \ hpq \ HP Wireless Assistant \ HP Wireless Assistant.exe C: \ Program Files \ Hp \ HP Software Update \ HPWuSchd2.exe C: \ Program Files \ Common Files \ Symantec Shared \ ccApp.exe C: \ Program Files \ Common Files \ InstallShield \ UpdateService \ issch.exe C: \ Program Files \ Apoint2K \ Apntex.exe C: \ Program Files \ Lexmark 2300 Series \ ezprint.exe C: \ Program Files \ iTunes \ iTunesHelper.exe C: \ Program Files \ Windows Defender \ MSASCui.exe C: \ progra ~ 1 \ intern ALWILS ~ 1 \ Avast4 \ ashDisp.exe C: \ WINDOWS \ system32 \ lxcgcoms.exe C: \ Program ~ 1 \ HPQ \ Shared \ HPQTOA ~ 1.exe C: \ Program Files \ AIM \ aim.exe C: \ WINDOWS \ system32 \ ctfmon.exe C: \ Program Files \ SUPERAntiSpyware \ SUPERAntiSpyware.exe C: \ WINDOWS \ system32 \ wuauclt.exe C: \ Program Files \ iPod \ bin \ iPodService.exe C: \ progra ~ 1 \ intern Mozilla Firefox \ firefox.exe C: \ Program Files \ utorrent.exe C: \ Program Files \ Hijackthis \ HijackThis.exe C: \ progra ~ 1 \ intern Mozilla Firefox \ firefox.exe R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft.com/fwlink/?Link.../www.mchsi.com R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Window Title = Microsoft Internet Explorer MediaCom Online tarafından sağlanan R3 - URLSearchHook: Yahoo! Toolbar - (EF99BD32-C1FB-11D2-892F-0090271D4F88) - (no file) O3 - Toolbar: Norton AntiVirus - (42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6) - C: \ Program Files \ Norton Internet Security \ Norton AntiVirus \ NavShExt.dll O3 - Toolbar: HP görünümü - (B2847E28-5D7D-4DEB-8B67-05D28BCF79F5) - C: \ Program Files \ HP \ Digital Imaging \ bin \ HPDTLK02.dll O4 - HKLM \ .. \ Run: [SoundMAXPnP] C: \ Program Files \ Analog Devices \ SoundMAX \ SMax4PNP.exe O4 - HKLM \ .. \ Run: [SoundMAX] C: \ Program Files \ Analog Devices \ SoundMAX \ Smax4.exe / tepsi O4 - HKLM \ .. \ Run: [AGRSMMSG] AGRSMMSG.exe O4 - HKLM \ .. \ Run: [Apoint] C: \ Program Files \ Apoint2K \ Apoint.exe O4 - HKLM \ .. \ Run: [hpWirelessAssistant] C: \ Program Files \ hpq \ HP Wireless Assistant \ HP Wireless Assistant.exe O4 - HKLM \ .. \ Run: [HP Software Update] C: \ Program Files \ Hp \ HP Software Update \ HPWuSchd2.exe O4 - HKLM \ .. \ Run: [LSBWatcher] c: \ HP \ drivers \ hplsbwatcher \ lsburnwatcher.exe O4 - HKLM \ .. \ Run: [ccApp] "C: \ Program Files \ Common Files \ Symantec Shared \ ccApp.exe" O4 - HKLM \ .. \ Run: [URLLSTCK.exe] C: \ Program Files \ Norton Internet Security \ UrlLstCk.exe O4 - HKLM \ .. \ Run: [Cpqset] C: \ Program Files \ HPQ \ Default Settings \ cpqset.exe O4 - HKLM \ .. \ Run: [igfxtray] C: \ WINDOWS \ system32 \ igfxtray.exe O4 - HKLM \ .. \ Run: [] igfxhkcmd C: \ WINDOWS \ system32 \ hkcmd.exe O4 - HKLM \ .. \ Run: [igfxpers] C: \ WINDOWS \ system32 \ igfxpers.exe O4 - HKLM \ .. \ Run: [TkBellExe] C: \ Program Files \ RealMedia \ WINDOWS \ realsched.exe "-osboot O4 - HKLM \ .. \ Run: [ISUSPM Başlangıç] C: \ progra ~ 1 \ intern COMMON ~ 1 \ yüklemek ~ 1 \ UPDATE ~ 1 \ ISUSPM.exe-başlangıç O4 - HKLM \ .. \ Run: [ISUSScheduler] "C: \ Program Files \ Common Files \ InstallShield \ UpdateService \ issch.exe"-start O4 - HKLM \ .. \ Run: [FaxCenterServer] "C: \ Program Files \ Lexmark Faks Çözümleri \ fm3032.exe" / s O4 - HKLM \ .. \ Run: [lxcgmon.exe] "C: \ Program Files \ Lexmark 2300 Series \ lxcgmon.exe" O4 - HKLM \ .. \ Run: [EzPrint] "C: \ Program Files \ Lexmark 2300 Series \ ezprint.exe" O4 - HKLM \ .. \ Run: [QuickTime Task] "C: \ Program Files \ QuickTime \ QTTask.exe"-atboottime O4 - HKLM \ .. \ Run: [iTunesHelper] "C: \ Program Files \ iTunes \ iTunesHelper.exe" O4 - HKLM \ .. \ Run: [Windows Defender] "C: \ Program Files \ Windows Defender \ MSASCui.exe" gizle O4 - HKLM \ .. \ Run: [avast!] C: \ progra ~ 1 \ intern ALWILS ~ 1 \ Avast4 \ ashDisp.exe O4 - HKLM \ .. \ Run: [1d8d7730] rundll32.exe "C: \ WINDOWS \ system32 \ gxdtsrag.dll", b O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ jusched.exe" O4 - HKCU \ .. \ Run: [MSMSGS] "C: \ Program Files \ Messenger \ msmsgs.exe" / arka plan O4 - HKCU \ .. \ Run: [AIM] C: \ Program Files \ AIM \ aim.exe-cnetwait.odl O4 - HKCU \ .. \ Run: [ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe O4 - HKCU \ .. \ Run: [NBJ] "C: \ Program Files \ Ahead \ Nero BackItUp \ NBJ.exe" O4 - HKCU \ .. \ Run: [SUPERAntiSpyware] C: \ Program Files \ SUPERAntiSpyware \ SUPERAntiSpyware.exe O4 - Startup: HP Dijital Görüntüleme Monitor.lnk = C: \ Program Files \ Hp \ Digital Imaging \ bin \ hpqtra08.exe O8 - Extra menü item: E & Microsoft Excel'e xport - res: / / C: \ progra ~ 1 \ intern mikro ~ 4 \ Office11 \ EXCEL.EXE/3000 O9 - Extra düğmesi: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ssv.dll O9 - Extra 'Tools' MENUITEM: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ssv.dll O9 - Extra button: ATI TV - (44226DFF-747E-4edc-B30C-78752E50CD0C) - C: \ Program Files \ ATI Multimedia \ tv \ EXPLBAR.DLL O9 - Extra düğmesi: Araştırma - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ progra ~ 1 \ intern mikro ~ 4 \ Office11 \ REFIEBAR.DLL O9 - Extra düğmesi: AIM - (AC9E2541-2814-11d5-BC6D-00B0D0A1DE45) - C: \ Program Files \ AIM \ aim.exe O9 - Extra düğmesi: (no name) - (e2e2dd38-d088-4134-82b7-f2ba38496583) -% windir% \ Network Diagnostic \ (dosya eksik) xpnetdiag.exe O9 - Extra 'Tools' MENUITEM: @ xpsp3res.dll, -20001 - (e2e2dd38-d088-4134-82b7-f2ba38496583) -% windir% \ Network Diagnostic \ (dosya eksik) xpnetdiag.exe O9 - Extra düğmesi: Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O9 - Extra 'Tools' MENUITEM: Windows Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O11 - Options group: [INTERNATIONAL] International * Ø14 - IERESET.INF: START_PAGE_URL = http://www.mchsi.com O16 - DPF: (14C1B87C-3342-445F-9B5E-365FF330A3AC) (Hewlett-Packard Online Destek Hizmetleri) - http://h20278.www2.hp.com/HPISWeb/Customer/cabs/HPISDataManager.CAB O16 - DPF: (30528230-99f7-4bb4-88d8-fa1d4f56a2ab) (YInstStarter Sınıfı) - C: \ Program Files \ Yahoo! \ Common \ yinsthelper.dll O16 - DPF: (56762DEC-6B0D-4AB4-A8AD-989993B5D08B) (OnlineScanner Kontrolü) - http://www.eset.eu/buxus/docs/OnlineScanner.cab O20 - AppInit_DLLs: C: \ WINDOWS \ system32 \ wmfhotfix.dll O21 - SSODL: WPDShServiceObj - (AAA288BA-9A4C-45B0-95D7-94D524869DB5) - C: \ WINDOWS \ system32 \ WPDShServiceObj.dll O23 - Service: Apple Mobile Device - Apple, Inc - C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe O23 - Service: avast! iAVS4 Kontrol Servisi (aswUpdSv) - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast4 \ aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast4 \ ashServ.exe O23 - Service: avast! Mail Scanner - Bilinmeyen sahibi - C: \ Program Files \ Alwil Software \ Avast4 \ ashMaiSv.exe "/ (dosya eksik) hizmeti O23 - Service: avast! Web Tarayıcı - Bilinmeyen sahibi - C: \ Program Files \ Alwil Software \ Avast4 \ ashWebSv.exe "/ (dosya eksik) hizmeti O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ ccEvtMgr.exe O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ ccProxy.exe O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ ccPwdSvc.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ ccSetMgr.exe O23 - Service: DomainService - Unknown owner - C: \ WINDOWS \ system32 \ (dosya eksik) hgvfhpan.exe O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, LP - C: \ Program Files \ HPQ \ SHARED \ HPQWMI.exe O23 - Service: InstallDriver Tablo Yöneticisi (IDriverT) - Macrovision Corporation - C: \ Program Files \ Common Files \ InstallShield \ Driver \ 11 \ Intel 32 \ IDriverT.exe O23 - Service: iPod Service - Apple Inc - C: \ Program Files \ iPod \ bin \ iPodService.exe O23 - Service: ISSvc (ISSVC) - Symantec Corporation - C: \ Program Files \ Norton Internet Security \ ISSVC.exe O23 - Service: LightScribeService Doğrudan Disk (LightScribeService) - Hewlett-Packard Company - C: \ Program Files \ Common Files \ LightScribe \ LSSrvc.exe Servisi Etiketleme O23 - Service: lxcg_device - - C: \ WINDOWS \ system32 \ lxcgcoms.exe O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C: \ Program Files \ Norton Internet Security \ Norton AntiVirus \ navapsvc.exe O23 - Service: SAVScan - Symantec Corporation - C: \ Program Files \ Norton Internet Security \ Norton AntiVirus \ SAVScan.exe O23 - Service: ScriptBlocking Servisi (SBService) - Symantec Corporation - C: \ progra ~ 1 \ intern COMMON ~ 1 \ SYMANT ~ 1 \ SCRIPT ~ 1 \ SBServ.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ SNDSrvc.exe O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc - C: \ Program Files \ Analog Devices \ SoundMAX \ SMAgent.exe O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ SPBBC \ SPBBCSvc.exe O23 - Service: SymWMI Servisi (SymWSC) - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ Güvenlik Merkezi \ SymWSC.exe |
|
#2
| ||||||||||||
| ||||||||||||
| Önce herhangi bir yardım olacağından, uTorrent kaldırmanız gerekir.
__________________
Indirme ve ayrıca PC, para iyi ay kaydedilen çıkmasını sorumlu yasadışı nedir? Benim Sistemi: Hybr! D
|