Oncelikle şunu okuyun. Hep antivirus yazılımı yuzunden başıma bu geldi 10 basarken kurdum taradı bisiler sildi sonra 130 svchost, ve bazı dosyaları bozdu suruculeri mesela ses surucusunu karıştırıcıyı bozmuş bu antivirus.
LOGUM:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:16:16, on 27.06.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Documents and Settings\All Users\Application Data\BetterSoft\OptimizerPro\OptimizerPro.exe
C:\Program Files\Google\Update\1.3.21.145\GoogleCrashHandler. exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\msco rsvw.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\Mucahit\Local Settings\Application Data\Yandex\YandexBrowser\Application\browser.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\Mucahit\Local Settings\Application Data\Yandex\YandexBrowser\Application\22.0.1105.41 2\crash_service.exe
C:\Documents and Settings\Mucahit\Local Settings\Application Data\Yandex\YandexBrowser\Application\browser.exe
C:\Documents and Settings\Mucahit\Local Settings\Application Data\Yandex\YandexBrowser\Application\browser.exe
C:\Documents and Settings\Mucahit\Local Settings\Application Data\Yandex\YandexBrowser\Application\browser.exe
C:\Documents and Settings\Mucahit\Local Settings\Application Data\Yandex\YandexBrowser\Application\browser.exe
C:\Documents and Settings\Mucahit\Belgelerim\Downloads\HijackThis.e xe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://websearch.searchdwebs.info/?p...cc=TR&unqvl=22
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Bağlantılar
O2 - BHO: SearchNewTab - - C:\Documents and Settings\All Users\Application Data\SearchNewTab\51c8917ee6b75.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: SkypeIEPluginBHO - - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Gorsel Favoriler - - C:\Program Files\Yandex\FastDial\fastdial.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: saFee ysaavei - - C:\Documents and Settings\All Users\Application Data\saFee ysaavei\51c890d16dca2.dll
O3 - Toolbar: Yandex Elements - - C:\Program Files\Yandex\Elements\bartab.dll
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\pchealth\helpctr\Binaries\MSCONFIG.EXE /auto
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Microsoft Excel'e &Ver - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Microsoft Excel'e Go&nder - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: OneNote'a G&onder - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Skype Click to Call - - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Araştır - - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: (MUWebControl Class) - http://www.update.microsoft.com/micr...?1369815331906
O18 - Protocol: skype-ie-addon-data - - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: c:\progra~1\safesa~1\sprote~1.dll c:\progra~1\websea~1\sprote~1.dll
O20 - Winlogon Notify: Antiwpa - antiwpa.dll (file missing)
O22 - SharedTaskScheduler: Browseui onceden yukleyicisi - - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Bileşen Katergorileri onbellek daemon - - C:\WINDOWS\system32\browseui.dll
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe

--
End of file - 5618 bytes

Sality virusu olmalıydı temizledim baya bir kac dosyada bulmuştum.
Bir kac virus turleri temizledim işte.
__________________