HijackThis Log Paylaşımı ve Çözümleri

ShaunWright · 17 Şubat 2020

Kod:

Logfile of HiJackThis Fork by Alex Dragokas v.2.9.0.18

Platform:  x64 Windows 7 (Ultimate), 6.1.7601.24544, Service Pack: 1
Time:      17.02.2020 - 08:52 (UTC+03:00)
Language:  OS: Turkish (0x41F). Display: Turkish (0x41F). Non-Unicode: Turkish (0x41F)
Elevated:  Yes
Ran by:    Mert    (group: Administrator) on MERT-BILGISAYAR, FirstRun: yes

Chrome:  80.0.3987.106
Internet Explorer: 11.0.9600.19597
Default: "C:\Users\Mert\AppData\Local\Google\Chrome\Application\chrome.exe" -- "%1" (Google Chrome)

Boot mode: Normal

Running processes:
Number | Path
   1  C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
   1  C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
   1  C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
   1  C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
   1  C:\Program Files\ESET\ESET Security\eguiProxy.exe
   1  C:\Program Files\ESET\ESET Security\ekrn.exe
   2  C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
   2  C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
   1  C:\Program Files\Windows Media Player\wmpnetwk.exe
   1  C:\Users\Mert\Downloads\Compressed\HiJackThis.exe
   1  C:\Windows\System32\SearchFilterHost.exe
   1  C:\Windows\System32\SearchIndexer.exe
   1  C:\Windows\System32\SearchProtocolHost.exe
   1  C:\Windows\System32\WUDFHost.exe
   1  C:\Windows\System32\audiodg.exe
   1  C:\Windows\System32\conhost.exe
   2  C:\Windows\System32\csrss.exe
   1  C:\Windows\System32\dwm.exe
   1  C:\Windows\System32\lsass.exe
   1  C:\Windows\System32\lsm.exe
   1  C:\Windows\System32\rundll32.exe
   1  C:\Windows\System32\services.exe
   1  C:\Windows\System32\smss.exe
   1  C:\Windows\System32\spoolsv.exe
  13  C:\Windows\System32\svchost.exe
   2  C:\Windows\System32\taskeng.exe
   1  C:\Windows\System32\taskhost.exe
   2  C:\Windows\System32\wbem\WmiPrvSE.exe
   1  C:\Windows\System32\wininit.exe
   1  C:\Windows\System32\winlogon.exe
   1  C:\Windows\explorer.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main: [Start Page] = https://www.yandex.com.tr/?win=284&clid=2262075-1
R4 - SearchScopes: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: [SuggestionsURL_JSON] = https://suggest.yandex.com.tr/suggest-ff.cgi?uil=ru&part={searchTerms} - Yandex
R4 - SearchScopes: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: [URL] = https://yandex.com.tr/search/?win=284&clid=2262076-1&text={searchTerms} - Yandex
F2 - HKLM\..\WinLogon: [UserInit] = C:\Windows\SysWOW64\userinit.exe,
F2-32 - HKLM\..\WinLogon: [UserInit] = C:\Windows\SysWOW64\userinit.exe,
O2 - HKLM\..\BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll
O2-32 - HKLM\..\BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll
O2-32 - HKLM\..\BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_231\bin\jp2ssv.dll
O2-32 - HKLM\..\BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_231\bin\ssv.dll
O3 - HKLM\..\Toolbar: Panda Safe Web - {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - (no file)
O3-32 - HKLM\..\Toolbar: Panda Safe Web - {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - (no file)
O4 - HKLM\..\Run: [egui] = C:\Program Files\ESET\ESET Security\ecmds.exe /run /hide /proxy
O4 - HKLM\..\Session Manager: [BootExecute] = sdnclean64.exe  (file missing)
O4 - MSConfig\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk [backup] => C:\Program Files\McAfee Security Scan\3.11.599\SSScheduler.exe (2018/02/06)
O4 - MSConfig\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^SteelSeries Engine 3.lnk [backup] => C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe -dataPath="C:\ProgramData\SteelSeries\SteelSeries Engine 3" -dbEnv=production -auto=true (2020/02/17)
O4 - MSConfig\startupfolder: C:^Users^Mert^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Logitech . Ürün Kaydı.lnk [backup] => C:\Program Files (x86)\Logitech\Ereg\eReg.exe /remind /language=TRK /_WFM="." (2018/02/06)
O4 - MSConfig\startupreg: Advanced SystemCare 11 [command] = C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe /Auto (HKCU) (2018/02/06) (file missing)
O4 - MSConfig\startupreg: AvastUI.exe [command] = C:\Program Files\AVAST Software\Avast\AvLaunch.exe /gui (HKLM) (2019/02/01) (file missing)
O4 - MSConfig\startupreg: BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} [command] = C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe (HKCU) (2018/02/06)
O4 - MSConfig\startupreg: BloodyKeyboard [command] = C:\Program Files (x86)\KeyDominator2\KeyDominator2\KeyDominator2.exe Minimum (HKCU) (2018/02/06) (file missing)
O4 - MSConfig\startupreg: CCleaner Monitoring [command] = C:\Program Files\CCleaner\CCleaner64.exe /MONITOR (HKCU) (2018/07/08)
O4 - MSConfig\startupreg: CCleaner Smart Cleaning [command] = C:\Program Files\CCleaner\CCleaner64.exe /MONITOR (HKCU) (2020/02/17)
O4 - MSConfig\startupreg: DT BEN [command] = C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DT_startup.exe -BEN (HKLM) (2018/04/04)
O4 - MSConfig\startupreg: Discord [command] = C:\Users\Mert\AppData\Local\Discord\app-0.0.300\Discord.exe (HKCU) (2018/03/03) (file missing)
O4 - MSConfig\startupreg: EADM [command] = F:\Program Files (x86)\Origin\Origin.exe -AutoStart (HKCU) (2019/06/11)
O4 - MSConfig\startupreg: FACEIT [command] = C:\Users\Mert\AppData\Local\FACEITApp\update.exe --processStart "FACEIT.exe" (HKCU) (2019/05/17)
O4 - MSConfig\startupreg: Google Update [command] = C:\Users\Mert\AppData\Local\Google\Update\1.3.35.442\GoogleUpdateCore.exe (HKCU) (2020/02/17)
O4 - MSConfig\startupreg: GoogleDriveSync [command] = C:\Program Files (x86)\Google\Drive\googledrivesync.exe /autostart (HKCU) (2018/08/19)
O4 - MSConfig\startupreg: Grabilla [command] = C:\Users\Mert\AppData\Local\Grabilla\grabillaTray.exe (HKCU) (2018/02/06) (file missing)
O4 - MSConfig\startupreg: IDMan [command] = C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot (HKCU) (2020/02/17)
O4 - MSConfig\startupreg: LWS [command] = C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe -hide (HKLM) (2018/02/06)
O4 - MSConfig\startupreg: Live Update [command] = C:\Program Files (x86)\MSI\Live Update\Live Update.exe /REMINDER (HKLM) (2018/02/06)
O4 - MSConfig\startupreg: Logitech Download Assistant [command] = C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch (HKLM) (2019/03/15)
O4 - MSConfig\startupreg: MSIRegister [command] = C:\MSI\MSIRegister\MSIRegister.exe (HKLM) (2018/02/06)
O4 - MSConfig\startupreg: McAfeeSafeConnect [command] = C:\Program Files (x86)\McAfee Safe Connect\McAfee Safe Connect.exe (HKCU) (2019/02/27)
O4 - MSConfig\startupreg: NetLimiter [command] = F:\Program Files\Locktime Software\NetLimiter 4\nlclientapp.exe /minimized (HKCU) (2018/02/06) (file missing)
O4 - MSConfig\startupreg: PivotSoftware [command] = C:\Program Files (x86)\Portrait Displays\Pivot Pro Plugin\Pivot_startup.exe -delay=10 (HKLM) (2018/04/04)
O4 - MSConfig\startupreg: PlaysTV [command] = C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv_launcher.exe --startup (HKLM) (2018/02/06) (file missing)
O4 - MSConfig\startupreg: RTHDVCPL [command] = C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe -s (HKLM) (2018/06/17)
O4 - MSConfig\startupreg: SDTray [command] = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (HKLM) (2019/07/15) (file missing)
O4 - MSConfig\startupreg: Spotify [command] = C:\Users\Mert\AppData\Roaming\Spotify\Spotify.exe --autostart --minimized (HKCU) (2019/06/11)
O4 - MSConfig\startupreg: Steam [command] = C:\Program Files (x86)\Steam\steam.exe -silent (HKCU) (2019/02/12)
O4 - MSConfig\startupreg: SunJavaUpdateSched [command] = C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (HKLM) (2020/02/17)
O4 - MSConfig\startupreg: Ubisoft Game Launcher [command] = C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\Uplay.exe -uplay_silent (HKCU) (2020/02/17)
O4 - MSConfig\startupreg: WTFast Tray [command] = C:\Program Files (x86)\WTFast\WTFast.exe trayonly (HKCU) (2018/02/06) (file missing)
O4 - MSConfig\startupreg: iTunesHelper [command] = C:\Program Files\iTunes\iTunesHelper.exe (HKLM) (2019/02/01)
O4 - MSConfig\startupreg: uTorrent [command] = C:\Users\Mert\AppData\Roaming\uTorrent\uTorrent.exe /MINIMIZED (HKCU) (2020/01/19) (file missing)
O8 - Context menu item: HKCU\..\Internet Explorer\MenuExt\E&xport to Microsoft Excel: (default) = C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE (file missing)
O8 - Context menu item: HKCU\..\Internet Explorer\MenuExt\IDM ile indir: (default) = C:\Program Files (x86)\Internet Download Manager\IEExt.htm
O8 - Context menu item: HKCU\..\Internet Explorer\MenuExt\Se&nd to OneNote: (default) = C:\Program Files\Microsoft Office\Root\Office16\ONBttnIE.dll (file missing)
O8 - Context menu item: HKCU\..\Internet Explorer\MenuExt\Tüm bağlantıları IDM ile indir: (default) = C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm
O17 - DHCP DNS 1: 192.168.1.1
O21 - HKLM\..\ShellIconOverlayIdentifiers\            IDM Shell Extension: IDM Shell Extension - {CDC95B92-E27C-4745-A8C5-64A52A78855D} - C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll
O21 - HKLM\..\ShellIconOverlayIdentifiers\  GoogleDriveBlacklisted: Google Drive Shell extension - {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} - C:\Program Files (x86)\Google\Drive\googledrivesync64.dll
O21 - HKLM\..\ShellIconOverlayIdentifiers\  GoogleDriveSynced: Google Drive Shell extension - {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} - C:\Program Files (x86)\Google\Drive\googledrivesync64.dll
O21 - HKLM\..\ShellIconOverlayIdentifiers\  GoogleDriveSyncing: Google Drive Shell extension - {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} - C:\Program Files (x86)\Google\Drive\googledrivesync64.dll
O21 - HKLM\..\ShellIconOverlayIdentifiers\00asw: (no name) - {472083B0-C522-11CF-8763-00608CC02F24} - (no file)
O23 - Service R2: Adobe Acrobat Update Service - (AdobeARMservice) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service R2: Diagnostics Tracking Service - (DiagTrack) - C:\Windows\System32\svchost.exe -k utcsvc; "ServiceDll" = C:\Windows\system32\diagtrack.dll
O23 - Service R2: ESET Service - (ekrn) - C:\Program Files\ESET\ESET Security\ekrn.exe
O23 - Service R2: NVIDIA Display Container LS - (NVDisplay.ContainerLocalSystem) - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
O23 - Service R2: NVIDIA LocalSystem Container - (NvContainerLocalSystem) - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -s NvContainerLocalSystem -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000 -st "C:\Program Files\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dll"
O23 - Service R2: TeamViewer 14 - (TeamViewer) - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service R2: UMVPFSrv - C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
O23 - Service R3: ESET Firewall Helper - (ekrnEpfw) - C:\Program Files\ESET\ESET Security\ekrn.exe
O23 - Service S2: Google Güncelleme Hizmeti (gupdate) - (gupdate) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /svc
O23 - Service S3: Adobe Flash Player Update Service - (AdobeFlashPlayerUpdateSvc) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service S3: BattlEye Service - (BEService) - C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
O23 - Service S3: EasyAntiCheat - C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe
O23 - Service S3: FACEITService - C:\Program Files\FACEIT AC\faceitservice.exe
O23 - Service S3: Google Güncelleme Hizmeti (gupdatem) - (gupdatem) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /medsvc
O23 - Service S3: McAfee Vpn Service - C:\Program Files (x86)\McAfee Safe Connect\service\VpnService.exe
O23 - Service S3: NBService - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service S3: NMIndexingService - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service S3: NVIDIA NetworkService Container - (NvContainerNetworkService) - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -s NvContainerNetworkService -f "C:\ProgramData\NVIDIA\NvContainerNetworkService.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\NetworkService" -r -p 30000 -st "C:\Program Files\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dll"
O23 - Service S3: Origin Client Service - F:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service S3: Steam Client Service - C:\Program Files (x86)\Common Files\Steam\SteamService.exe /RunAsService
O23 - Service S3: SteelSeries Update Service - (SteelSeriesUpdateService) - C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesUpdateService.exe
O23 - Service S3: Uncheater for BattleGroundsLite_SE - (uncheater_bgl) - C:\Program Files\Common Files\Uncheater\uncheater_bgl.exe
O23 - Service S3: iPod Servisi - (iPod Service) - C:\Program Files\iPod\bin\iPodService.exe


--
End of file - Time spent: 13,1 sec. - 27778 bytes, CRC32: FFFFFFFF. Sign: 櫏徶

Murat5038 · 17 Şubat 2020

@ShaunWright Zararlı yok gözüküyor ancak bu kadar AV ve güvenlik yazılımı fazla sadece bir tanesini seçip o kalacak şekilde diğerlerini kaldırın.
Eset, Panda, Mcafee, Avast, Spybot

Bunları filxelyin:

Kod:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main: [Start Page] = https://www.yandex.com.tr/?win=284&clid=2262075-1
R4 - SearchScopes: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: [SuggestionsURL_JSON] = https://suggest.yandex.com.tr/suggest-ff.cgi?uil=ru&part={searchTerms} - Yandex
R4 - SearchScopes: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: [URL] = https://yandex.com.tr/search/?win=284&clid=2262076-1&text={searchTerms} - Yandex
O4 - MSConfig\startupreg: MSIRegister [command] = C:\MSI\MSIRegister\MSIRegister.exe (HKLM) (2018/02/06)
O4 - MSConfig\startupreg: NetLimiter [command] = F:\Program Files\Locktime Software\NetLimiter 4\nlclientapp.exe /minimized (HKCU) (2018/02/06) (file missing)

ASC kaldırın CCleaner ile devam edin.

ShaunWright · 17 Şubat 2020

Murat5038 dedi:

@ShaunWright Zararlı yok gözüküyor ancak bu kadar AV ve güvenlik yazılımı fazla sadece bir tanesini seçip o kalacak şekilde diğerlerini kaldırın.
Eset, Panda, Mcafee, Avast, Spybot

Bunları filxelyin:

Kod:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main: [Start Page] = https://www.yandex.com.tr/?win=284&clid=2262075-1
R4 - SearchScopes: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: [SuggestionsURL_JSON] = https://suggest.yandex.com.tr/suggest-ff.cgi?uil=ru&part={searchTerms} - Yandex
R4 - SearchScopes: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: [URL] = https://yandex.com.tr/search/?win=284&clid=2262076-1&text={searchTerms} - Yandex
O4 - MSConfig\startupreg: MSIRegister [command] = C:\MSI\MSIRegister\MSIRegister.exe (HKLM) (2018/02/06)
O4 - MSConfig\startupreg: NetLimiter [command] = F:\Program Files\Locktime Software\NetLimiter 4\nlclientapp.exe /minimized (HKCU) (2018/02/06) (file missing)

ASC kaldırın CCleaner ile devam edin.

Sadece ESET ve CCleaner yüklü dediklerini fixledim. Teşekkürler

karayel34 · 18 Şubat 2020

Murat5038 dedi:

Zararlı görünmüyor. Onedrive, Office bazı özellikleri kullanmadığını düşünerek bunları fixleyin:

Kod:

O4 - HKLM\..\StartupApproved\Run: [SecurityHealth] = C:\WINDOWS\system32\SecurityHealthSystray.exe (2017/11/26)
O4-32 - HKLM\..\Run: [GrooveMonitor] = C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe
O17 - DHCP DNS 1: 8.8.8.8 (Well-known DNS: Google)
O17 - DHCP DNS 2: 195.175.39.39
O17 - DHCP DNS 3: 195.175.39.40
O17 - DHCP DNS 4: 8.8.4.4 (Well-known DNS: Google)
O17 - HKLM\System\CCS\Services\Tcpip\..\{cb01090b-8ca6-4af0-89ce-2f3469be9dea}: [NameServer] = 8.8.4.4 (Well-known DNS: Google)
O17 - HKLM\System\CCS\Services\Tcpip\..\{cb01090b-8ca6-4af0-89ce-2f3469be9dea}: [NameServer] = 8.8.8.8 (Well-known DNS: Google)
O21 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive1: (no name) - {BBACC218-34EA-4666-9D7A-C78F2274A524} - (no file)
O21 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive2: (no name) - {5AB7172C-9C11-405C-8DD5-AF20F3606282} - (no file)
O21 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive3: (no name) - {A78ED123-AB77-406B-9962-2A5D9D2F7F30} - (no file)
O21 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive4: (no name) - {F241C880-6982-4CE5-8CF7-7085BA96DA5A} - (no file)
O21 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive5: (no name) - {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} - (no file)
O21 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive6: (no name) - {9AA2F32D-362A-42D9-9328-24A483E2CCC3} - (no file)
O21 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive7: (no name) - {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} - (no file)
O21 - HKLM\..\ShellIconOverlayIdentifiers\00avg: (no name) - {472083B0-C522-11CF-8763-00608CC02F24} - (no file)
O21-32 - HKLM\..\ShellExecuteHooks: [{B5A7F190-DDA6-4420-B3BA-52453494E6CD}] - Groove GFS Stub Execution Hook - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (disabled)
O21-32 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive1: (no name) - {BBACC218-34EA-4666-9D7A-C78F2274A524} - (no file)
O21-32 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive2: (no name) - {5AB7172C-9C11-405C-8DD5-AF20F3606282} - (no file)
O21-32 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive3: (no name) - {A78ED123-AB77-406B-9962-2A5D9D2F7F30} - (no file)
O21-32 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive4: (no name) - {F241C880-6982-4CE5-8CF7-7085BA96DA5A} - (no file)
O21-32 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive5: (no name) - {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} - (no file)
O21-32 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive6: (no name) - {9AA2F32D-362A-42D9-9328-24A483E2CCC3} - (no file)
O21-32 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive7: (no name) - {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} - (no file)
O21-32 - HKLM\..\ShellIconOverlayIdentifiers\Groove Explorer Icon Overlay 1 (GFS Unread Stub): Groove Explorer Icon Overlay 1 (GFS Unread Stub) - {99FD978C-D287-4F50-827F-B2C658EDA8E7} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O21-32 - HKLM\..\ShellIconOverlayIdentifiers\Groove Explorer Icon Overlay 2 (GFS Stub): Groove Explorer Icon Overlay 2 (GFS Stub) - {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O21-32 - HKLM\..\ShellIconOverlayIdentifiers\Groove Explorer Icon Overlay 2.5 (GFS Unread Folder): Groove Explorer Icon Overlay 2.5 (GFS Unread Folder) - {920E6DB1-9907-4370-B3A0-BAFC03D81399} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O21-32 - HKLM\..\ShellIconOverlayIdentifiers\Groove Explorer Icon Overlay 3 (GFS Folder): Groove Explorer Icon Overlay 3 (GFS Folder) - {16F3DD56-1AF5-4347-846D-7C10C4192619} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O21-32 - HKLM\..\ShellIconOverlayIdentifiers\Groove Explorer Icon Overlay 4 (GFS Unread Mark): Groove Explorer Icon Overlay 4 (GFS Unread Mark) - {2916C86E-86A6-43FE-8112-43ABE6BF8DCC} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O23 - Service S3: Microsoft Office Diagnostics Service - (odserv) - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
O23 - Service S3: Microsoft Office Groove Audit Service - C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe
O23 - Service S3: Wise Boot Assistant - (WiseBootAssistant) - C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe

Dediklerinizi fixledim hocam dün. Tekrar tarama yaptığımda alttakiler çıkmadı.

O17 - DHCP DNS 1: 8.8.8.8 (Well-known DNS: Google)
O17 - DHCP DNS 2: 195.175.39.39
O17 - DHCP DNS 3: 195.175.39.40
O17 - DHCP DNS 4: 8.8.4.4 (Well-known DNS: Google)

Fixleme yaparkende Microsoft Office tikleri hata verdi programda. Sonrasında fixleme tamamlandı. Ayrıca fixleme öncesinde geri yükleme noktası oluşturdum. Ne olur ne olmaz diye

Son olarak, Virüs total URL tarama sorunum devame diyor hocam. Firefox'u sıfırladım, ön belleği sildim. Ama nafile. Ağ adaptörüm güncel bu arada, kontrol ettim. Ama sorun devam ediyor.

Murat5038 · 18 Şubat 2020

karayel34 dedi:
Son olarak, Virüs total URL tarama sorunum devam ediyor hocam.

Modem resetledin mi?

Complete Internet Repair ile İnternet Bağlantı Ayar Onarımı

Complete Internet Repair: İnternet Bağlantı Ayarları Onarıcısı Complete Internet Repair, internet bağlantı ayarlarınızda sık görülen sorunları onarmayı amaçlayan ücretsiz bir programdır. Kurulum gerektirmeyen programı USB belleğinizde de taşıyıp kullanabilirsiniz. Program yazılımsal...

www.technopat.net

Bunu da bir dene bakalım.

Beyaz Gölgelerden · 18 Şubat 2020

Paste ofCode

paste.ofcode.org

Şimdiden teşekkür ederim üstadım.

Murat5038 · 18 Şubat 2020

Zararlı görünmüyor ama bunları yine de fixleyin:

Kod:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main: [Start Page] = http://www.joygame.com/games.aspx?g=2001
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: [ProxyServer] = http=127.0.0.1:8888 (disabled)
R4 - SearchScopes: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}: [SuggestionsURL_JSON] = https://suggest.yandex.com.tr/suggest-ff.cgi?srv=ie11&uil=tr&part={searchTerms}&clid=2233630 - Yandex
R4 - SearchScopes: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}: [URL] = https://yandex.com.tr/search/?text={searchTerms}&clid=2233630 - Yandex
O4 - HKCU\..\Run: [CCleaner Smart Cleaning] = C:\Program Files\CCleaner\CCleaner64.exe /MONITOR
O4 - HKCU\..\StartupApproved\Run: [com.blitz.app] = C:\Users\Samet\AppData\Local\Blitz\Update.exe --processStart "Blitz.exe" --process-start-args "--hidden" (2019/05/06)
O17 - DHCP DNS 1: 46.197.15.60
O17 - DHCP DNS 2: 178.233.140.110
O17 - DHCP DNS 3: 176.240.150.250
O21 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive1: (no name) - {BBACC218-34EA-4666-9D7A-C78F2274A524} - (no file)
O21 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive2: (no name) - {5AB7172C-9C11-405C-8DD5-AF20F3606282} - (no file)
O21 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive3: (no name) - {A78ED123-AB77-406B-9962-2A5D9D2F7F30} - (no file)
O21 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive4: (no name) - {F241C880-6982-4CE5-8CF7-7085BA96DA5A} - (no file)
O21 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive5: (no name) - {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} - (no file)
O21 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive6: (no name) - {9AA2F32D-362A-42D9-9328-24A483E2CCC3} - (no file)
O21 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive7: (no name) - {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} - (no file)
O21-32 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive1: (no name) - {BBACC218-34EA-4666-9D7A-C78F2274A524} - (no file)
O21-32 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive2: (no name) - {5AB7172C-9C11-405C-8DD5-AF20F3606282} - (no file)
O21-32 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive3: (no name) - {A78ED123-AB77-406B-9962-2A5D9D2F7F30} - (no file)
O21-32 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive4: (no name) - {F241C880-6982-4CE5-8CF7-7085BA96DA5A} - (no file)
O21-32 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive5: (no name) - {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} - (no file)
O21-32 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive6: (no name) - {9AA2F32D-362A-42D9-9328-24A483E2CCC3} - (no file)
O21-32 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive7: (no name) - {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} - (no file)

karayel34 · 20 Şubat 2020

Murat5038 dedi:
Modem resetledin mi?

Complete Internet Repair ile İnternet Bağlantı Ayar Onarımı

Complete Internet Repair: İnternet Bağlantı Ayarları Onarıcısı Complete Internet Repair, internet bağlantı ayarlarınızda sık görülen sorunları onarmayı amaçlayan ücretsiz bir programdır. Kurulum gerektirmeyen programı USB belleğinizde de taşıyıp kullanabilirsiniz. Program yazılımsal...

www.technopat.net

Bunu da bir dene bakalım.

Geç cevap için kusura bakmayın hocam. Evde değildim, o yüzden makineme giremedim.
Modemi resetledim bugün. Durum şöyle: Virüstotal sitesinde dosya tarama bölümü 3 tarayıcımda sorunsuz çalışıyor, tarama anında sonuç veriyor. Opera tarayıcımda URL tarama kısmı sorunsuz, anında sonuçlar çıkıyor. Microsof Edge tarayıcımda URL taraması gecikiyordu. Şuan URL tarama sorunu yok.
Gelelim Firefox'a. Bu tarayıcı da dosya tarama bölümünde sorun yok. Ama URL tarama kısmında tarama yaptığım zaman, sonuç çıkmıyor. Taramaya devam ediyor. Modemi resetlemem rağmen, Firefox'da bu sorun devam ediyor. Bu URL tarama sorunun neden sadece Firefox'da olduğunu bir türlü çözemedim. Önceden böyle bir sorunum yoktu.
Sürekli kullandığım tarayıcı Firefox olduğu için, bir URL taraması için devamlı diğer tarayıcıyı açmak istemiyorum .)

Murat5038 · 21 Şubat 2020

karayel34 dedi:
Geç cevap için kusura bakmayın hocam. Evde değildim, o yüzden makineme giremedim.

Sıkıntı yok.
____________
Firefoxda sadece yapıyorsa onunla ilgili bir durumdur. Edge zaten kullanmıyorum pek kullanılan tarayıcı değil güvenlk açısından.
Chrome'da sorun yoksa, Firefox sorun yapıyorsa eklenti kaynaklı veya site izinleriyle ilgili bir durum olabilir. Önbellek temizliği de yapabilirsin tarayıcı veya CCleaner ile.

karayel34 · 21 Şubat 2020

Murat5038 dedi:
Sıkıntı yok.
____________
Firefoxda sadece yapıyorsa onunla ilgili bir durumdur. Edge zaten kullanmıyorum pek kullanılan tarayıcı değil güvenlk açısından.
Chrome'da sorun yoksa, Firefox sorun yapıyorsa eklenti kaynaklı veya site izinleriyle ilgili bir durum olabilir. Önbellek temizliği de yapabilirsin tarayıcı veya CCleaner ile.

Sıkıntı değilde, normalde biliyorsunuz hemen dönüş yaparım size. Bazen durumlar müsait olmuyor hocam. Yoksa size saygım sonsuz her zaman. Bana yardımınız çok, inkar edemem. ALLAH razı olsun sizden.

Edge derken, yeni edge tarayıcısını kurdum hocam. Zaten genel olarak Fİrefox kullanıyorum.
Chorme'u sildim hocam, çoktan

Opera var onun yerine. Onda sıkıntı yok.
Eklenti kaynaklı dediniz. Onuda düşündüm. 2 eklenti vardı zaten. Onları devre dışı bırakıp denedim, sonuç aynı. Site izinleri eskiden de aynıydı, bir kurcalama yapmadım. Firefox'da gelişmiş izleme korumasını da devre dışı bıraktım, denemek için ama sonuç değişmedi. Önbellek temizliği yaptım hocam. Temp klasörlerini temizledim. Hatta WiseCleaner ile de temizleme yaptım. Ama nafile

Hissediyorum Firefox ile bir sıkıntı var, ama ne?

Tekrar ön bellek temizliği filan yapayım. Belki düzelir.

HijackThis Log Paylaşımı ve Çözümleri

Ayrıntılı düzenleme

HiJackThis

ShaunWright

Hectopat

Murat5038

Yottapat!

ShaunWright

Hectopat

karayel34

Hectopat

Murat5038

Yottapat!

Complete Internet Repair ile İnternet Bağlantı Ayar Onarımı

Beyaz Gölgelerden

Hectopat

Paste ofCode

Murat5038

Yottapat!

karayel34

Hectopat

Complete Internet Repair ile İnternet Bağlantı Ayar Onarımı

Murat5038

Yottapat!

karayel34

Hectopat

Benzer konular

Yeni konular

Yeni mesajlar

Gizliliğinize önem veriyoruz