Ad-aware
spybot
AdsGone
virus tarama programları
guvenlik kipte başlatma vs bir işe yaramadı.
Zaten biz bu konulardan cok da anlamıyoruz
Size arkadaşımın HjackThis logunu yolluyorum.
Bir de siz bakın. Ne yapabiliriz?
Yardımlarınız bekliyoruz. Şimdiden cok teekkurler.
Logfile of HijackThis v1.99.1
Scan saved at 00:13:54, on 19.10.2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSRxyYXkAcommand.exe
C:WINDOWSSystem32nvsvc32.exe
C:WINDOWSSystem32HPZipm12.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesCommon FilesSoftwinBitDefender Communicatorxcommsvr.exe
C:Program FilesCommon FilesSoftwinBitDefender Scan Serverbdss.exe
C:WINDOWSsystem32rundll32.exe
C:WINDOWSExplorer.EXE
C:Program FilesMSN Messengermsnmsgr.exe
C:Program FilesHPDigital Imagingbinhpqtra08.exe
C:Program FilesHPDigital Imagingbinhpqgalry.exe
C:Program FilesHPDigital ImagingbinhpqSTE08.exe
C:Program FilesHPDigital ImagingProduct Assistantbinhprblog.exe
C:WINDOWSSystem32wuauclt.exe
C:WINDOWSSystem32wuauclt.exe
C:Program FilesWinRARWinRAR.exe
C
OCUME~1GURAYLOCALS~1TempRar$EX00.079Hijac kThis.exeR1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://red.clientapps.yahoo.com/cust.../www.yahoo.com
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://red.clientapps.yahoo.com/cust...ch/search.html
O3 - Toolbar: &Yahoo! Companion - - C:PROGRA~1YAHOO!COMPAN~1INSTALLScpnycomp5_5_ 7_0.dll
O3 - Toolbar: ICQ Toolbar - - C:Program FilesICQToolbartoolbaru.dll
O3 - Toolbar: MSN - - C:Program FilesMSN AppsMSN Toolbar1.02.3000.1001tr-trmsntb.dll
O4 - HKLM..Run: [C:WINDOWSSystem32windows.exe ] C:WINDOWSSystem32windows.exe
O4 - HKLM..Run: [windowstr] windows.exe
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSSystem32NvCpl.dll,NvStartup
O4 - HKCU..Run: [msnmsgr] "C:Program FilesMSN Messengermsnmsgr.exe" /background
O4 - HKCU..Run: [Spyware Cleaner] "C:Program FilesSpyware CleanerSpywareCleaner.Exe" /boot
O4 - Global Startup: HP Image Zone Hızlı Başlangıc.lnk = C:Program FilesHPDigital Imagingbinhpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:Program FilesHPDigital Imagingbinhpqtra08.exe
O8 - Extra context menu item: &ICQ Toolbar Search - res://C:Program FilesICQToolbartoolbaru.dll/SEARCH.HTML
O8 - Extra context menu item: &Yahoo! Search - file:///C:Program FilesYahoo!Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:Program FilesYahoo!Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:Program FilesYahoo!Common/ycmap.htm
O9 - Extra button: (no name) - - C:WINDOWSSystem32msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - - C:WINDOWSSystem32msjava.dll
O9 - Extra button: Messenger - - C:Program FilesYahoo!Messengeryhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - - C:Program FilesYahoo!Messengeryhexbmes0521.dll
O9 - Extra button: ICQ Lite - - C:Program FilesICQLiteICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - - C:Program FilesICQLiteICQLite.exe
O16 - DPF: (YInstStarter Class) - C:Program FilesYahoo!Commonyinsthelper.dll
O16 - DPF: (MSN Photo Upload Tool) - http://by5fd.bay5.hotmail.msn.com/re...s/MsnPUpld.cab
O16 - DPF: (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab
O16 - DPF: (PopCapLoader Object) - http://arcade.icq.com/carlo/zuma/popcaploader_v5.cab
O18 - Protocol: msnim - - "C:PROGRA~1MSNMES~1msgrapp.dll" (file missing)
O20 - Winlogon Notify: Group Policy - C:WINDOWSsystem32l20ulcd91f0.dll
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:Program FilesCommon FilesSoftwinBitDefender Scan Serverbdss.exe
O23 - Service: Command Service (cmdService) - Unknown owner - C:WINDOWSRxyYXkAcommand.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:Program FilesiPodbiniPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:WINDOWSSystem32nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:WINDOWSSystem32HPZipm12.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%WinPcaprpcapd.exe" -d -f "%ProgramFiles%WinPcaprpcapd.ini (file missing)
O23 - Service: BitDefender Communicator (XCOMM) - Softwin - C:Program FilesCommon FilesSoftwinBitDefender Communicatorxcommsvr.exe
__________________