Silinemeyen Spy ve HijackThis Logum

19-09-2019, 17:17:31

#1
Pluvious

Açık Profil bilgileri

Özel Mesaj Gönder

Pluvious tarafından gönderilen tüm mesajları bul

Pluvious'ı arkadaş olarak ekle

Genel Moderatör
Merhaba,
Dun yuklediğim bir ***** spylı cıktı ve silinmiyor.
Daha doğrusu dun gerek mcafee ile yaptığım gerekse microsoft defenderla yaptığım full scanler sonucunda coğu silinmişti,silinmeyenleri de move on boot programıyla boottan sildim ve bilgisayarı temizlediğimi sanıyordum.Fakat bugun actığımda yine spy vardı,yine defalarca virus ve spy tarattım yine cıktı,yine cıkanları sildim.Fakat bu cozum olmayacak.O yuzden HijackThis Logumu yolluyorum,bir an once yorumlayabilirseniz cok sevinirim.HijackThis'in kendi sitesinden analiz ettirdim ama sonucları pek anlaymadım Yardımlarınızı bekliyorum...

Logfile of HijackThis v1.99.1
Scan saved at 16:03:39, on 20.05.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16441)

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32csrss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesWindows DefenderMsMpEng.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32S24EvMon.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSSystem32SCardSvr.exe
C:Program FilesCommon FilesAcronisSchedule2schedul2.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesNetwork AssociatesCommon FrameworkFrameworkService.exe
C:Program FilesNetwork AssociatesVirusScanMcshield.exe
C:PROGRA~1NETWOR~1COMMON~1aPrdMgr.exe
C:Program FilesNetwork AssociatesVirusScanVsTskMgr.exe
C:Program FilesDellNICCONFIGSVCNICCONFIGSVC.exe
C:WINDOWSsystem32vsvc32.exe
C:WINDOWSsystem32RegSrvc.exe
C:WINDOWSsystem32ZCfgSvc.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32UAService7.exe
C:WINDOWSsystem32XConfig.exe
C:WINDOWSSystem32lg.exe
C:WINDOWSsystem32wbemwmiprvse.exe
C:Program FilesIntelNCSPROSetPRONoMgr.exe
C:Program FilesNetwork AssociatesVirusScanSHSTAT.EXE
C:Program FilesNetwork AssociatesCommon FrameworkUpdaterUI.exe
C:Program FilesCommon FilesNetwork AssociatesTalkBackTBMon.exe
C:Program FilesASUSTekASUSDVDPDVDServ.exe
C:WINDOWSsystem32undll32.exe
C:Program FilesWindows DefenderMSASCui.exe
C:Program FilesCommon FilesAcronisSchedule2schedhlp.exe
C:Program FilesAcronisTrueImageTrueImageMonitor.exe
C:Program FilesJavajre1.6.0_01injusched.exe
C:Program FilesLogitechMouseWaresystemem_exec.exe
C:Program FilesMessengermsmsgs.exe
C:WINDOWSsystem32ctfmon.exe
C:WINDOWSsystem32tvdm.exe
C:Program FilesMSN Messengermsnmsgr.exe
C:WINDOWSexplorer.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesMozilla Firefoxirefox.exe
Cocuments and SettingsMelikeDesktopHijackThisHijackThis.exe

R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInt ernet Settings,ProxyServer = :
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Bağlantılar
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 - HKLM..Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM..Run: [PRONoMgr.exe] C:Program FilesIntelNCSPROSetPRONoMgr.exe
O4 - HKLM..Run: [Apoint] C:Program FilesApointApoint.exe
O4 - HKLM..Run: [ShStatEXE] "C:Program FilesNetwork AssociatesVirusScanSHSTAT.EXE" /STANDALONE
O4 - HKLM..Run: [McAfeeUpdaterUI] "C:Program FilesNetwork AssociatesCommon FrameworkUpdaterUI.exe" /StartedFromRunKey
O4 - HKLM..Run: [Network Associates Error Reporting Service] "C:Program FilesCommon FilesNetwork AssociatesTalkBackTBMon.exe"
O4 - HKLM..Run: [RemoteControl] "C:Program FilesASUSTekASUSDVDPDVDServ.exe"
O4 - HKLM..Run: [Dell QuickSet] C:Program FilesDellQuickSetquickset.exe
O4 - HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 - HKLM..Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM..Run: [QuickTime Task] "C:Program FilesQuickTimeqttask.exe" -atboottime
O4 - HKLM..Run: [Windows Defender] "C:Program FilesWindows DefenderMSASCui.exe" -hide
O4 - HKLM..Run: [Acronis Scheduler2 Service] "C:Program FilesCommon FilesAcronisSchedule2schedhlp.exe"
O4 - HKLM..Run: [TrueImageMonitor.exe] C:Program FilesAcronisTrueImageTrueImageMonitor.exe
O4 - HKLM..Run: [OPSE reminder] "C:Program FilesScanSoftOmniPageSE2.0EregEngEreg.exe" -r "C:Program FilesScanSoftOmniPageSE2.0EregEngereg.ini"
O4 - HKLM..Run: [TVolution] C:Program FilesinKline GlobalTVolutionTVolution.exe
O4 - HKLM..Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM..Run: [Adobe Photo Downloader] "C:Program FilesAdobePhotoshop Album Starter Edition.0Appspdproxy.exe"
O4 - HKLM..Run: [DAEMON Tools-1033] "D:Program FilesD-Toolsdaemon.exe" -lang 1033 -lock
O4 - HKLM..Run: [WinampAgent] C:Program FilesWinampwinampa.exe
O4 - HKLM..Run: [SunJavaUpdateSched] "C:Program FilesJavajre1.6.0_01injusched.exe"
O4 - HKLM..Run: [setup] rundll32.exe "C:WINDOWSsystem32doabxmls.dll",realset
O4 - HKCU..Run: [MSMSGS] "C:Program FilesMessengermsmsgs.exe" /background
O4 - HKCU..Run: [Steam] "D:Program FilesSteamSteam.exe" -silent
O4 - HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O8 - Extra context menu item: Download with GetRight - C:Program FilesGetRightGRdownload.htm
O8 - Extra context menu item: FlashGet'i kullanarak indir - C:Program FilesFlashGetjc_link.htm
O8 - Extra context menu item: Microsoft Excel'e Go&nder - res://C:PROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
O8 - Extra context menu item: Open with GetRight Browser - C:Program FilesGetRightGRbrowse.htm
O8 - Extra context menu item: Tumunu FlashGet'i kullanarak indir - C:Program FilesFlashGetjc_all.htm
O9 - Extra button: (no name) - - C:Program FilesJavajre1.6.0_01inssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - - C:Program FilesJavajre1.6.0_01inssv.dll
O9 - Extra button: Araştır - - C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 - Extra button: FlashGet - - C:PROGRA~1FLASHGETlashget.exe (file missing)
O9 - Extra 'Tools' menuitem: &FlashGet - - C:PROGRA~1FLASHGETlashget.exe (file missing)
O9 - Extra button: (no name) - - %windir%Network Diagnosticxpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - - %windir%Network Diagnosticxpnetdiag.exe (file missing)
O9 - Extra button: Messenger - - C:Program FilesMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - - C:Program FilesMessengermsmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: (WUWebControl Class) - http://update.microsoft.com/windowsu...?1164179804360
O16 - DPF: (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab
O17 - HKLMSystemCCSServicesTcpip..: NameServer = 85.255.116.101,85.255.112.153
O17 - HKLMSystemCS1ServicesTcpipParameters: NameServer = 85.255.116.101 85.255.112.153
O17 - HKLMSystemCS1ServicesTcpip..: NameServer = 85.255.116.101,85.255.112.153
O17 - HKLMSystemCS2ServicesTcpipParameters: NameServer = 85.255.116.101 85.255.112.153
O17 - HKLMSystemCS2ServicesTcpip..: NameServer = 85.255.116.101,85.255.112.153
O17 - HKLMSystemCCSServicesTcpipParameters: NameServer = 85.255.116.101 85.255.112.153
O18 - Protocol: livecall - - C:PROGRA~1MSNMES~1MSGRAP~1.DLL
O18 - Protocol: msnim - - C:PROGRA~1MSNMES~1MSGRAP~1.DLL
O21 - SSODL: WPDShServiceObj - - C:WINDOWSsystem32WPDShServiceObj.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:Program FilesCommon FilesAcronisSchedule2schedul2.exe
O23 - Service: Bluetooth Service (btwdins) - Unknown owner - C:Program FilesDellBluetooth Softwareintwdins.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Unknown owner - C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe (file missing)
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:Program FilesNetwork AssociatesCommon FrameworkFrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:Program FilesNetwork AssociatesVirusScanMcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:Program FilesNetwork AssociatesVirusScanVsTskMgr.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:Program FilesIntelNCSSyncNetSvc.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:Program FilesDellNICCONFIGSVCNICCONFIGSVC.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:WINDOWSsystem32vsvc32.exe
O23 - Service: RegSrvc - Intel Corporation - C:WINDOWSsystem32RegSrvc.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%WinPcappcapd.exe" -d -f "%ProgramFiles%WinPcappcapd.ini (file missing)
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:WINDOWSsystem32S24EvMon.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:WINDOWSsystem32UAService7.exe
O23 - Service: VNC Server Version 4 (WinVNC4) - Unknown owner - C:Program FilesRealVNCVNC4WinVNC4.exe" -service (file missing)
__________________