Rehber HijackThis Log Paylaşımı ve Çözümleri

Logfile of HiJackThis Fork by Alex Dragokas v.2.9.0.11

Platform:  x64 Windows 10 (Enterprise 2015 LTSB), 10.0.14393.2368 (ReleaseId: 1607), Service Pack: 0
Time:      16.12.2018 - 17:50 (UTC+03:00)
Language:  OS: Turkish (0x41F). Display: Turkish (0x41F). Non-Unicode: Turkish (0x41F)
Elevated:  Yes
Ran by:    PC    (group: Administrator) on ADMINISTRATOR, FirstRun: yes

Opera:   56.0.3051.116
Chrome:  70.0.3538.110
Internet Explorer: 11.0.14393.2007
Default: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Chrome)

Boot mode: Normal

Running processes:
Number | Path
   1  C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
   1  C:\Program Files (x86)\Comodo\Internet Security Essentials\isesrv.exe
   1  C:\Program Files (x86)\Comodo\Internet Security Essentials\vkise.exe
  11  C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
   1  C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler.exe
   1  C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler64.exe
   1  C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
   1  C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
   1  C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
   1  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
   1  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
   1  C:\Program Files (x86)\Internet Download Manager\IDMan.exe
   1  C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
   1  C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
   1  C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
   1  C:\Program Files (x86)\Skillbrains\lightshot\5.4.0.35\Lightshot.exe
   1  C:\Program Files\Advanced System Care\SmartRAM\SmartRAM.exe
   1  C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe
   1  C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
   1  C:\Program Files\COMODO\COMODO Internet Security\cis.exe
   1  C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
   2  C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
   3  C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
   3  C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
   1  C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
   1  C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
   1  C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
   1  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
   1  C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
   1  C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
   3  C:\Users\PC\AppData\Local\Discord\app-0.0.301\Discord.exe
   1  C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_0707757077710fff\igfxCUIService.exe
   1  C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_0707757077710fff\igfxEM.exe
   1  C:\Windows\System32\Intel\DPTF\esif_uf.exe
   1  C:\Windows\System32\RuntimeBroker.exe
   1  C:\Windows\System32\SearchIndexer.exe
   1  C:\Windows\System32\WUDFHost.exe
   1  C:\Windows\System32\conhost.exe
   2  C:\Windows\System32\csrss.exe
   1  C:\Windows\System32\dllhost.exe
   1  C:\Windows\System32\dwm.exe
   1  C:\Windows\System32\fontdrvhost.exe
   1  C:\Windows\System32\hpservice.exe
   1  C:\Windows\System32\ibtsiva.exe
   1  C:\Windows\System32\lsass.exe
   1  C:\Windows\System32\services.exe
   1  C:\Windows\System32\sihost.exe
   1  C:\Windows\System32\smss.exe
  15  C:\Windows\System32\svchost.exe
   1  C:\Windows\System32\taskhostw.exe
   1  C:\Windows\System32\wbem\WmiPrvSE.exe
   1  C:\Windows\System32\wininit.exe
   1  C:\Windows\System32\winlogon.exe
   1  C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
   1  C:\Windows\Temp\DPTF\esif_assist_64.exe
   1  C:\Windows\explorer.exe
   1  D:\Program Files\ThrottleStop_860\ThrottleStop.exe
   1  D:\Program Files\TxGameAssistant\AppMarket\AppMarket.exe
   1  D:\Program Files\TxGameAssistant\AppMarket\QMEmulatorService.exe
   1  D:\Program Files\TxGameAssistant\AppMarket\QQExternal.exe
   1  D:\İDM\Sıkıştırılmış\HiJackThis\HiJackThis.exe

R4 - SearchScopes: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}: [SuggestionsURL_JSON] = https://suggest.yandex.com.tr/suggest-ff.cgi?srv=ie11&uil=tr&part={searchTerms}&clid=2233630 - Yandex
R4 - SearchScopes: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}: [URL] = https://yandex.com.tr/search/?text={searchTerms}&clid=2233630 - Yandex
O1 - Hosts: 127.0.0.1 dlied1.qq.com
O2 - HKLM\..\BHO: (no name) - {27DD0F8B-3E0E-4ADC-A78A-66047E71ADC5} - C:\OldNewExplorer\OldNewExplorer64.dll
O2 - HKLM\..\BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll
O2 - HKLM\..\BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll
O2-32 - HKLM\..\BHO: (no name) - {27DD0F8B-3E0E-4ADC-A78A-66047E71ADC5} - C:\OldNewExplorer\OldNewExplorer32.dll
O2-32 - HKLM\..\BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
O2-32 - HKLM\..\BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll
O4 - HKCU\..\Run: [SmartRAM] = C:\Program Files\Advanced System Care\SmartRAM\SmartRAM.exe /m
O4 - HKCU\..\StartupApproved\Run: [DAEMON Tools Lite Automount] = D:\Yeni klasör\DAEMON Tools Lite\DTAgent.exe -autorun (file missing) (2018/05/30)
O4 - HKCU\..\StartupApproved\Run: [Discord] = C:\Users\PC\AppData\Local\Discord\app-0.0.301\Discord.exe (2018/04/30)
O4 - HKCU\..\StartupApproved\Run: [GoogleChromeAutoLaunch_73B90D4D0D4A45E4E1249D0D8EDB5EB0] = C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --no-startup-window /prefetch:5 (2018/04/30)
O4 - HKCU\..\StartupApproved\Run: [IDMan] = C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot (2018/04/30)
O4 - HKCU\..\StartupApproved\Run: [Steam] = C:\Program Files (x86)\Steam\steam.exe -silent (2018/06/11)
O4 - HKLM\..\Run: [COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10}] = C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
O4 - HKLM\..\StartupApproved\Run32: [HPRadioMgr] = C:\Program Files (x86)\HP\HP Wireless Button Driver\HPRadioMgr64.exe (2018/05/01)
O4 - HKLM\..\StartupApproved\Run: [RTHDVCPL] = C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe -s (2018/05/01)
O4 - HKU\.DEFAULT\..\RunOnce: [HttpAcceptLanguageOptOut] = C:\Windows\system32\REG.exe ADD "HKCU\Control Panel\International\User Profile" /v "HttpAcceptLanguageOptOut" /t REG_DWORD /f /d 1
O4 - HKU\S-1-5-19\..\RunOnce: [HttpAcceptLanguageOptOut] = C:\Windows\system32\REG.exe ADD "HKCU\Control Panel\International\User Profile" /v "HttpAcceptLanguageOptOut" /t REG_DWORD /f /d 1
O4 - HKU\S-1-5-20\..\RunOnce: [HttpAcceptLanguageOptOut] = C:\Windows\system32\REG.exe ADD "HKCU\Control Panel\International\User Profile" /v "HttpAcceptLanguageOptOut" /t REG_DWORD /f /d 1
O4-32 - HKLM\..\Run: [IseUI] = C:\Program Files (x86)\COMODO\Internet Security Essentials\vkise.exe
O4-32 - HKLM\..\Run: [Lightshot] = C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe
O6 - IE Policy: HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions - present
O8 - Context menu item: HKCU\..\Internet Explorer\MenuExt\IDM ile indir: (default) = C:\Program Files (x86)\Internet Download Manager\IEExt.htm
O8 - Context menu item: HKCU\..\Internet Explorer\MenuExt\Tüm bağlantıları IDM ile indir: (default) = C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm
O9 - Button: HKLM\..\{25510184-5A38-4A99-B273-DCA8EEF6CD08}: Bağlantı sorunlarını çözmenize yardımcı olacak şekilde HP Ağ Denetimini başlatır - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Tools menu item: HKLM\..\{25510184-5A38-4A99-B273-DCA8EEF6CD08}: HP Ağ Denetimi - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9-32 - Button: HKLM\..\{25510184-5A38-4A99-B273-DCA8EEF6CD08}: Bağlantı sorunlarını çözmenize yardımcı olacak şekilde HP Ağ Denetimini başlatır - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9-32 - Tools menu item: HKLM\..\{25510184-5A38-4A99-B273-DCA8EEF6CD08}: HP Ağ Denetimi - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O17 - DHCP DNS 1: 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{d6c93588-0e10-46b6-85fa-e435b0c20c4e}: [NameServer] = 156.154.70.25
O17 - HKLM\System\CCS\Services\Tcpip\..\{d6c93588-0e10-46b6-85fa-e435b0c20c4e}: [NameServer] = 156.154.71.25
O21 - HKLM\..\ShellIconOverlayIdentifiers\            IDM Shell Extension: IDM Shell Extension - {CDC95B92-E27C-4745-A8C5-64A52A78855D} - C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll
O22 - Task (.job): (Not scheduled) HPCeeScheduleForPC.job - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForPC (null)
O22 - Task (.job): (Not scheduled) update-S-1-5-21-4044262842-78268418-613820247-1001.job - C:\Program Files (x86)\Skillbrains\Updater\Updater.exe -runmode=checkupdate
O22 - Task (.job): (Not scheduled) update-sys.job - C:\Program Files (x86)\Skillbrains\Updater\Updater.exe -runmode=checkupdate
O22 - Task (.job): (disabled) (Not scheduled) CreateExplorerShellUnelevatedTask.job - C:\Windows\explorer.exe /NOUACCHECK
O23 - Service R2: COMODO Dragon Update Service - (DragonUpdater) - C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
O23 - Service R2: COMODO Internet Security Helper Service - (CmdAgent) - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service R2: ESIF Upper Framework Service - (esifsvc) - C:\Windows\system32\Intel\DPTF\esif_uf.exe
O23 - Service R2: HP Service - (hpsrv) - C:\Windows\system32\Hpservice.exe
O23 - Service R2: HP Support Solutions Framework Service - (HPSupportSolutionsFrameworkService) - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
O23 - Service R2: Intel Bluetooth Service - (ibtsiva) - C:\Windows\system32\ibtsiva.exe
O23 - Service R2: Intel(R) Dynamic Application Loader Host Interface Service - (jhi_service) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service R2: Intel(R) HD Graphics Control Panel Service - (igfxCUIService2.0.0.0) - C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_0707757077710fff\igfxCUIService.exe
O23 - Service R2: Intel(R) Management and Security Application Local Management Service - (LMS) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service R2: NVIDIA Display Container LS - (NVDisplay.ContainerLocalSystem) - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
O23 - Service R2: NVIDIA LocalSystem Container - (NvContainerLocalSystem) - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -s NvContainerLocalSystem -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000 -st "C:\Program Files\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dll"
O23 - Service R2: NVIDIA Telemetry Container - (NvTelemetryContainer) - C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r
O23 - Service R2: QMEmulatorService - D:\Program Files\TxGameAssistant\AppMarket\QMEmulatorService.exe
O23 - Service R2: Realtek Audio Service - (RtkAudioService) - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service R2: SynTPEnh Caller Service - (SynTPEnhService) - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
O23 - Service R2: isesrv - C:\Program Files (x86)\COMODO\Internet Security Essentials\isesrv.exe -service
O23 - Service R3: HP Software Framework Service - (hpqwmiex) - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service S2: Google Güncelleme Hizmeti (gupdate) - (gupdate) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /svc
O23 - Service S2: Intel(R) TPM Provisioning Service - C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\TPMProvisioningService.exe
O23 - Service S3: COMODO Virtual Service Manager - (cmdvirth) - C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
O23 - Service S3: Disc Soft Lite Bus Service - D:\Yeni klasör\DAEMON Tools Lite\DiscSoftBusServiceLite.exe  (file missing)
O23 - Service S3: HP CASL Framework Service - (hpqcaslwmiex) - C:\Program Files (x86)\HP\Shared\hpqwmiex.exe
O23 - Service S3: Intel(R) Capability Licensing Service TCP IP Interface - C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\SocketHeciServer.exe
O23 - Service S3: Intel(R) Content Protection HDCP Service - (cplspcon) - C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_0707757077710fff\IntelCpHDCPSvc.exe
O23 - Service S3: Intel(R) Content Protection HECI Service - (cphs) - C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_0707757077710fff\IntelCpHeciSvc.exe
O23 - Service S3: NVIDIA NetworkService Container - (NvContainerNetworkService) - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -s NvContainerNetworkService -f "C:\ProgramData\NVIDIA\NvContainerNetworkService.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\NetworkService" -r -p 30000 -st "C:\Program Files\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dll"
O23 - Service S3: Office 64 Source Engine - (ose64) - C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
O23 - Service S3: Steam Client Service - C:\Program Files (x86)\Common Files\Steam\SteamService.exe /RunAsService
O23 - Service S3: Visual Studio Standard Collector Service 150 - (VSStandardCollectorService150) - C:\Program Files (x86)\Microsoft Visual Studio\Shared\Common\DiagnosticsHub.Collection.Service\StandardCollector.Service.exe
O23 - Service S3: Windows Lisans Yöneticisi Hizmeti - (LicenseManager) - C:\Windows\System32\svchost.exe -k LocalService; "ServiceDll" = C:\Windows\system32\LicenseManagerSvc.dll


--
End of file - Time spent: 23 sec. - 30344 bytes, CRC32: FFFFFFFF. Sign: 鑳�

R4 - SearchScopes: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}: [SuggestionsURL_JSON] = https://suggest.yandex.com.tr/suggest-ff.cgi?srv=ie11&uil=tr&part={searchTerms}&clid=2233630 - Yandex
R4 - SearchScopes: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}: [URL] = https://yandex.com.tr/search/?text={searchTerms}&clid=2233630 - Yandex
O1 - Hosts: 127.0.0.1 dlied1.qq.com
O2 - HKLM\..\BHO: (no name) - {27DD0F8B-3E0E-4ADC-A78A-66047E71ADC5} - C:\OldNewExplorer\OldNewExplorer64.dll
O2 - HKLM\..\BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll
O2-32 - HKLM\..\BHO: (no name) - {27DD0F8B-3E0E-4ADC-A78A-66047E71ADC5} - C:\OldNewExplorer\OldNewExplorer32.dll
O2-32 - HKLM\..\BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
O4 - HKCU\..\Run: [SmartRAM] = C:\Program Files\Advanced System Care\SmartRAM\SmartRAM.exe /m
O4 - HKCU\..\StartupApproved\Run: [DAEMON Tools Lite Automount] = D:\Yeni klasör\DAEMON Tools Lite\DTAgent.exe -autorun (file missing) (2018/05/30)
O4 - HKCU\..\StartupApproved\Run: [Discord] = C:\Users\PC\AppData\Local\Discord\app-0.0.301\Discord.exe (2018/04/30)
O4 - HKCU\..\StartupApproved\Run: [GoogleChromeAutoLaunch_73B90D4D0D4A45E4E1249D0D8EDB5EB0] = C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --no-startup-window /prefetch:5 (2018/04/30)
O4 - HKU\.DEFAULT\..\RunOnce: [HttpAcceptLanguageOptOut] = C:\Windows\system32\REG.exe ADD "HKCU\Control Panel\International\User Profile" /v "HttpAcceptLanguageOptOut" /t REG_DWORD /f /d 1
O4 - HKU\S-1-5-19\..\RunOnce: [HttpAcceptLanguageOptOut] = C:\Windows\system32\REG.exe ADD "HKCU\Control Panel\International\User Profile" /v "HttpAcceptLanguageOptOut" /t REG_DWORD /f /d 1
O4 - HKU\S-1-5-20\..\RunOnce: [HttpAcceptLanguageOptOut] = C:\Windows\system32\REG.exe ADD "HKCU\Control Panel\International\User Profile" /v "HttpAcceptLanguageOptOut" /t REG_DWORD /f /d 1
O4-32 - HKLM\..\Run: [Lightshot] = C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe
O6 - IE Policy: HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions - present
O9 - Button: HKLM\..\{25510184-5A38-4A99-B273-DCA8EEF6CD08}: Bağlantı sorunlarını çözmenize yardımcı olacak şekilde HP Ağ Denetimini başlatır - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Tools menu item: HKLM\..\{25510184-5A38-4A99-B273-DCA8EEF6CD08}: HP Ağ Denetimi - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9-32 - Button: HKLM\..\{25510184-5A38-4A99-B273-DCA8EEF6CD08}: Bağlantı sorunlarını çözmenize yardımcı olacak şekilde HP Ağ Denetimini başlatır - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9-32 - Tools menu item: HKLM\..\{25510184-5A38-4A99-B273-DCA8EEF6CD08}: HP Ağ Denetimi - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O17 - DHCP DNS 1: 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{d6c93588-0e10-46b6-85fa-e435b0c20c4e}: [NameServer] = 156.154.70.25
O17 - HKLM\System\CCS\Services\Tcpip\..\{d6c93588-0e10-46b6-85fa-e435b0c20c4e}: [NameServer] = 156.154.71.25
O22 - Task (.job): (Not scheduled) HPCeeScheduleForPC.job - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForPC (null)
O22 - Task (.job): (Not scheduled) update-S-1-5-21-4044262842-78268418-613820247-1001.job - C:\Program Files (x86)\Skillbrains\Updater\Updater.exe -runmode=checkupdate
O22 - Task (.job): (Not scheduled) update-sys.job - C:\Program Files (x86)\Skillbrains\Updater\Updater.exe -runmode=checkupdate
O22 - Task (.job): (disabled) (Not scheduled) CreateExplorerShellUnelevatedTask.job - C:\Windows\explorer.exe /NOUACCHECK
O23 - Service R2: COMODO Dragon Update Service - (DragonUpdater) - C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
O23 - Service R2: HP Service - (hpsrv) - C:\Windows\system32\Hpservice.exe
O23 - Service R2: HP Support Solutions Framework Service - (HPSupportSolutionsFrameworkService) - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
O23 - Service R2: Intel Bluetooth Service - (ibtsiva) - C:\Windows\system32\ibtsiva.exe
O23 - Service R2: QMEmulatorService - D:\Program Files\TxGameAssistant\AppMarket\QMEmulatorService.exe
O23 - Service R3: HP Software Framework Service - (hpqwmiex) - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service S2: Google Güncelleme Hizmeti (gupdate) - (gupdate) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /svc
O23 - Service S3: Disc Soft Lite Bus Service - D:\Yeni klasör\DAEMON Tools Lite\DiscSoftBusServiceLite.exe  (file missing)
O23 - Service S3: HP CASL Framework Service - (hpqcaslwmiex) - C:\Program Files (x86)\HP\Shared\hpqwmiex.exe
O23 - Service S3: Office 64 Source Engine - (ose64) - C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
O23 - Service S3: Steam Client Service - C:\Program Files (x86)\Common Files\Steam\SteamService.exe /RunAsService
O23 - Service S3: Visual Studio Standard Collector Service 150 - (VSStandardCollectorService150) - C:\Program Files (x86)\Microsoft Visual Studio\Shared\Common\DiagnosticsHub.Collection.Service\StandardCollector.Service.exe

Logfile of HiJackThis Fork by Alex Dragokas v.2.9.0.11

Platform:  x64 Windows 10 (Home Single Language), 10.0.17134.471 (ReleaseId: 1803), Service Pack: 0
Time:      19.12.2018 - 22:43 (UTC+03:00)
Language:  OS: Turkish (0x41F). Display: Turkish (0x41F). Non-Unicode: Turkish (0x41F)
Elevated:  Yes
Ran by:    Arıcı    (group: Administrator) on DESKTOP-PCBK9AN, FirstRun: yes

Chrome:  71.0.3578.98
Firefox: 65.0.0.6925
Edge:    11.0.17134.471
Internet Explorer: 11.0.17134.1
Default: "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "%1" (Firefox)

Boot mode: Normal

Running processes:
Number | Path
   1  C:\MSI\MSIRegister\MSIRegisterService.exe
   1  C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AdobeGCClient.exe
   1  C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
   1  C:\Program Files (x86)\Kaspersky Lab\Kaspersky Free 19.0.0\avp.exe
   1  C:\Program Files (x86)\Kaspersky Lab\Kaspersky Free 19.0.0\avpui.exe
   1  C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 3.0\ksde.exe
   1  C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 3.0\ksdeui.exe
   1  C:\Program Files (x86)\MSI\Gaming APP\GamingApp_Service.exe
   1  C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey.exe
   1  C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey_Service.exe
   1  C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
   1  C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\EyeRest.exe
   1  C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe
   1  C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\TriggerModeMonitor.exe
   1  C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\VideoCardMonitorII.exe
   1  C:\Program Files (x86)\MSI\MysticLight\LEDKeeper.exe
   1  C:\Program Files (x86)\MSI\MysticLight\MysticLight2_Service.exe
   1  C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
   1  C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
   1  C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
   1  C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe
   1  C:\Program Files (x86)\Wise\Wise Care 365\WiseTray.exe
   1  C:\Program Files (x86)\Wise\Wise Care 365\WiseTurbo.exe
   1  C:\Program Files (x86)\X-Rite\Devices\Services\xrdd.exe
   1  C:\Program Files\Logitech Gaming Software\LCore.exe
   2  C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
   3  C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
   3  C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
   1  C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
   1  C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
   1  C:\Program Files\Windows Defender\MSASCuiL.exe
   1  C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.36.52.0_x64__kzf8qxf38zg5c\SkypeApp.exe
   1  C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.36.52.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
   1  C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.36.52.0_x64__kzf8qxf38zg5c\SkypeBridge\SkypeBridge.exe
   1  C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18102.12011.0_x64__8wekyb3d8bbwe\Video.UI.exe
   1  C:\Program Files\rempl\sedlauncher.exe
   1  C:\Program Files\rempl\sedsvc.exe
   1  C:\ProgramData\KMSAuto\bin\KMSSS.exe
   1  C:\Users\Arıcı\Desktop\HiJackThis.exe
   4  C:\Windows\SysWOW64\muachost.exe
   1  C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
   2  C:\Windows\System32\CompatTelRunner.exe
   1  C:\Windows\System32\OpenWith.exe
   6  C:\Windows\System32\RuntimeBroker.exe
   1  C:\Windows\System32\SearchFilterHost.exe
   1  C:\Windows\System32\SearchIndexer.exe
   1  C:\Windows\System32\SearchProtocolHost.exe
   1  C:\Windows\System32\SecurityHealthService.exe
   1  C:\Windows\System32\SgrmBroker.exe
   1  C:\Windows\System32\WUDFHost.exe
   1  C:\Windows\System32\WirelessKB850NotificationService.exe
   1  C:\Windows\System32\audiodg.exe
   2  C:\Windows\System32\conhost.exe
   2  C:\Windows\System32\csrss.exe
   1  C:\Windows\System32\ctfmon.exe
   1  C:\Windows\System32\dasHost.exe
   1  C:\Windows\System32\dllhost.exe
   1  C:\Windows\System32\dwm.exe
   2  C:\Windows\System32\fontdrvhost.exe
   1  C:\Windows\System32\lsass.exe
   1  C:\Windows\System32\services.exe
   1  C:\Windows\System32\sihost.exe
   1  C:\Windows\System32\smartscreen.exe
   1  C:\Windows\System32\smss.exe
   1  C:\Windows\System32\sppsvc.exe
  71  C:\Windows\System32\svchost.exe
   1  C:\Windows\System32\taskhostw.exe
   3  C:\Windows\System32\wbem\WmiPrvSE.exe
   1  C:\Windows\System32\wininit.exe
   1  C:\Windows\System32\winlogon.exe
   1  C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
   1  C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
   1  C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
   1  C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17134.464_none_eaf315ac1d6e512f\TiWorker.exe
   1  C:\Windows\explorer.exe
   1  C:\Windows\servicing\TrustedInstaller.exe
   1  N:\Program Files\DAEMON Tools Lite\DTShellHlp.exe
   1  N:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe

R4 - SearchScopes: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}: [SuggestionsURL_JSON] = https://suggest.yandex.com.tr/suggest-ff.cgi?srv=ie11&uil=tr&part={searchTerms}&clid=2233630 - Yandex
R4 - SearchScopes: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}: [URL] = https://yandex.com.tr/search/?text={searchTerms}&clid=2233630 - Yandex
O1 - Hosts: 127.0.0.1 na1r.services.adobe.com
O1 - Hosts: 127.0.0.1 hlrcv.stage.adobe.com
O1 - Hosts: 127.0.0.1 lmlicenses.wip4.adobe.com
O1 - Hosts: 127.0.0.1 lm.licenses.adobe.com
O1 - Hosts: 127.0.0.1 activate.adobe.com
O1 - Hosts: 127.0.0.1 practivate.adobe.com
O2 - HKLM\..\BHO: Adobe Acrobat Create PDF Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll
O2 - HKLM\..\BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre-10.0.1\bin\jp2ssv.dll
O2 - HKLM\..\BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre-10.0.1\bin\ssv.dll (file missing)
O2 - HKLM\..\BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll
O2-32 - HKLM\..\BHO: Adobe Acrobat Create PDF Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll
O2-32 - HKLM\..\BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll
O3 - HKLM\..\Toolbar: Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll
O3-32 - HKLM\..\Toolbar: Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll
O4 - HKCU\..\Run: [Discord] = C:\Users\Arıcı\AppData\Local\Discord\app-0.0.301\Discord.exe
O4 - HKCU\..\RunOnce: [Application Restart #1] = C:\Windows\SysWOW64\muachost.exe /RestartByRestartManager:B8068E99-AD35-4e61-A7AE-0884B3D6ACA0 /RestartByRestartManager:B1FD662B-6052-4393-8628-60258A866E4B /RestartByRestartManager:D43C60FE-4966-4530-BDF2-9C5FD3E1C747 /RestartByRestartManager:435D376B-0C1E-4918-A835-8C651652985D
O4 - HKCU\..\StartupApproved\Run: [uTorrent] = C:\Users\Arıcı\AppData\Roaming\uTorrent\uTorrent.exe /MINIMIZED (2018/07/23)
O4 - HKLM\..\Run: [Launch LCore] = C:\Program Files\Logitech Gaming Software\LCore.exe /minimized
O4 - HKLM\..\Run: [RTHDVCPL] = C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
O8 - Context menu item: HKCU\..\Internet Explorer\MenuExt\E&xport to Microsoft Excel: (default) = C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE (file missing)
O8 - Context menu item: HKCU\..\Internet Explorer\MenuExt\Se&nd to OneNote: (default) = C:\Program Files (x86)\Microsoft Office\Root\Office16\ONBttnIE.dll (file missing)
O17 - DHCP DNS 1: 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{c8ac57fc-333b-4894-8de4-95c257c7bcc8}: [NameServer] = 8.8.4.4 (Well-known DNS: Google)
O17 - HKLM\System\CCS\Services\Tcpip\..\{c8ac57fc-333b-4894-8de4-95c257c7bcc8}: [NameServer] = 8.8.8.8 (Well-known DNS: Google)
O22 - Task (.job): (Not scheduled) X-Rite Device Services Software Updater.job - C:\Program Files (x86)\X-Rite\Devices\Services\XRD Software Update.exe
O23 - Service R2: GamingApp_Service - C:\Program Files (x86)\MSI\Gaming APP\GamingApp_Service.exe
O23 - Service R2: KMS-host Service - (KMSEmulator) - C:\ProgramData\KMSAuto\bin\KMSSS.exe -Port 1688 -PWin RandomKMSPID -PO14 RandomKMSPID -PO15 RandomKMSPID -PO16 RandomKMSPID -AI 43200 -RI 43200 -Log
O23 - Service R2: Kaspersky Anti-Virus Hizmeti 19.0.0 - (AVP19.0.0) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Free 19.0.0\avp.exe -r
O23 - Service R2: Kaspersky Secure Connection Service 3.0.0 - (KSDE3.0.0) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 3.0\ksde.exe -r
O23 - Service R2: MSI Gaming Hotkey Service - (GamingHotkey_Service) - C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey_Service.exe
O23 - Service R2: MSI Live Update Service - (MSI_LiveUpdate_Service) - C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
O23 - Service R2: MSIREGISTER_MR - C:\MSI\MSIRegister\MSIRegisterService.exe
O23 - Service R2: MSI_ActiveX_Service - C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe
O23 - Service R2: MysticLight2_Service - C:\Program Files (x86)\MSI\MysticLight\MysticLight2_Service.exe
O23 - Service R2: NVIDIA Display Container LS - (NVDisplay.ContainerLocalSystem) - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
O23 - Service R2: NVIDIA LocalSystem Container - (NvContainerLocalSystem) - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -s NvContainerLocalSystem -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000 -st "C:\Program Files\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dll"
O23 - Service R2: NVIDIA Telemetry Container - (NvTelemetryContainer) - C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r
O23 - Service R2: SAMSUNG Mobile Connectivity Service - (ss_conn_service) - C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
O23 - Service R2: Windows Remediation Service - (sedsvc) - C:\Program Files\rempl\sedsvc.exe
O23 - Service R2: Wireless Keyboard 850 Notification Service - (WirelessKB850NotificationService) - C:\Windows\system32\WirelessKB850NotificationService.exe
O23 - Service R2: Wise Boot Assistant - (WiseBootAssistant) - C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe
O23 - Service R2: X-Rite Device Services Manager - (xrdd.exe) - C:\Program Files (x86)\X-Rite\Devices\Services\xrdd.exe
O23 - Service R3: Disc Soft Lite Bus Service - N:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
O23 - Service S3: Adobe Flash Player Update Service - (AdobeFlashPlayerUpdateSvc) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service S3: EasyAntiCheat - C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe
O23 - Service S3: Google Chrome Elevation Service - (GoogleChromeElevationService) - C:\Program Files (x86)\Google\Chrome\Application\71.0.3578.98\elevation_service.exe
O23 - Service S3: Logitech Gaming Registry Service - (LogiRegistryService) - C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
O23 - Service S3: Mozilla Maintenance Service - (MozillaMaintenance) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service S3: NVIDIA NetworkService Container - (NvContainerNetworkService) - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -s NvContainerNetworkService -f "C:\ProgramData\NVIDIA\NvContainerNetworkService.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\NetworkService" -r -p 30000 -st "C:\Program Files\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dll"
O23 - Service S3: ServiceLayer - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service S3: Steam Client Service - C:\Program Files (x86)\Common Files\Steam\SteamService.exe /RunAsService
O23 - Service S3: Wacom Professional Service - (WTabletServicePro) - C:\Program Files\Tablet\Wacom\WTabletServicePro.exe
O23 - Service S3: klvssbridge64_19.0.0 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Free 19.0.0\x64\vssbridge64.exe


--
End of file - Time spent: 19,6 sec. - 27174 bytes, CRC32: FFFFFFFF. Sign: �ၱ

Logfile of HiJackThis Fork by Alex Dragokas v.2.9.0.11

Platform:  x32 Windows 7 (Home Basic), 6.1.7601.24312, Service Pack: 1
Time:      20.12.2018 - 21:20 (UTC-04:00)
Language:  OS: Turkish (0x41F). Display: Turkish (0x41F). Non-Unicode: English (0x409)
Elevated:  Yes
Ran by:    enver    (group: Administrator) on BILGISAYAR, FirstRun: yes

Opera:   56.0.3051.116
Chrome:  69.0.3497.100
Firefox: 64.0.0.6914
Internet Explorer: 11.0.9600.19203
Default: "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "%1" (Firefox)

Boot mode: Normal

Running processes:
Number | Path
   1  C:\Program Files\AMD\ATI.ACE\Core-Static\CCC.exe
   1  C:\Program Files\AMD\ATI.ACE\Core-Static\MOM.exe
   1  C:\Program Files\HMA! Pro VPN\Vpn.exe
   1  C:\Program Files\HMA! Pro VPN\VpnSvc.exe
   1  C:\Program Files\Internet Download Manager\IDMan.exe
   1  C:\Program Files\Internet Download Manager\IEMonitor.exe
   7  C:\Program Files\Mozilla Firefox\firefox.exe
   1  C:\Program Files\RelevantKnowledge\rlservice.exe
   1  C:\Program Files\RelevantKnowledge\rlvknlg.exe
   1  C:\Program Files\RelevantKnowledge\rlvknlg32.exe
   1  C:\Program Files\Skillbrains\lightshot\5.4.0.35\Lightshot.exe
   1  C:\Program Files\TeamViewer\TeamViewer_Service.exe
   1  C:\Users\enver\Desktop\HiJackThis.exe
   1  C:\Windows\System32\atieclxx.exe
   1  C:\Windows\System32\atiesrxx.exe
   1  C:\Windows\System32\audiodg.exe
   1  C:\Windows\System32\cmd.exe
   2  C:\Windows\System32\csrss.exe
   1  C:\Windows\System32\lsass.exe
   1  C:\Windows\System32\lsm.exe
   1  C:\Windows\System32\services.exe
   1  C:\Windows\System32\smss.exe
   1  C:\Windows\System32\spoolsv.exe
  13  C:\Windows\System32\svchost.exe
   1  C:\Windows\System32\taskeng.exe
   1  C:\Windows\System32\taskhost.exe
   1  C:\Windows\System32\taskmgr.exe
   1  C:\Windows\System32\wininit.exe
   1  C:\Windows\System32\winlogon.exe
   1  C:\Windows\explorer.exe

O2 - HKLM\..\BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O4 - Global User Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HMA! Pro VPN.lnk    ->    C:\Program Files\HMA! Pro VPN\Vpn.exe /nogui
O4 - HKCU\..\Run: [IDMan] = C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [uTorrent] = C:\Users\enver\AppData\Roaming\uTorrent\uTorrent.exe /MINIMIZED
O4 - HKLM\..\Run: [Lightshot] = C:\Program Files\Skillbrains\lightshot\Lightshot.exe
O4 - HKLM\..\Run: [StartCCC] = C:\Program Files\AMD\ATI.ACE\Core-Static\x86\CLIStart.exe MSRun
O8 - Context menu item: HKCU\..\Internet Explorer\MenuExt\IDM ile indir: (default) = C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Context menu item: HKCU\..\Internet Explorer\MenuExt\Tüm bağlantıları IDM ile indir: (default) = C:\Program Files\Internet Download Manager\IEGetAll.htm
O17 - DHCP DNS 1: 77.88.8.8 (Well-known DNS: Yandex.DNS)
O17 - DHCP DNS 2: 77.88.8.1 (Well-known DNS: Yandex.DNS)
O17 - HKLM\System\CCS\Services\Tcpip\..\{27FAA35B-4759-498E-9E4E-920A7B38B15F}: [NameServer] = 77.88.8.1 (Well-known DNS: Yandex.DNS)
O17 - HKLM\System\CCS\Services\Tcpip\..\{27FAA35B-4759-498E-9E4E-920A7B38B15F}: [NameServer] = 77.88.8.8 (Well-known DNS: Yandex.DNS)
O17 - HKLM\System\CCS\Services\Tcpip\..\{C08F0507-E1FD-4FAB-A455-77B9CBE543DC}: [NameServer] = 77.234.40.79
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{27FAA35B-4759-498E-9E4E-920A7B38B15F}: [NameServer] = 77.88.8.1 (Well-known DNS: Yandex.DNS)
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{27FAA35B-4759-498E-9E4E-920A7B38B15F}: [NameServer] = 77.88.8.8 (Well-known DNS: Yandex.DNS)
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{C08F0507-E1FD-4FAB-A455-77B9CBE543DC}: [NameServer] = 77.234.40.79
O21 - HKLM\..\ShellIconOverlayIdentifiers\            IDM Shell Extension: IDM Shell Extension - {CDC95B92-E27C-4745-A8C5-64A52A78855D} - C:\Program Files\Internet Download Manager\IDMShellExt.dll
O23 - Service R2: AMD External Events Utility - C:\Windows\system32\atiesrxx.exe
O23 - Service R2: Diagnostics Tracking Service - (DiagTrack) - C:\Windows\System32\svchost.exe -k utcsvc; "ServiceDll" = C:\Windows\system32\diagtrack.dll
O23 - Service R2: HMA! Pro VPN - (HmaProVpn) - C:\Program Files\HMA! Pro VPN\VpnSvc.exe
O23 - Service R2: RelevantKnowledge - C:\Program Files\RelevantKnowledge\rlservice.exe Files\RelevantKnowledge\rlservice.exe /service
O23 - Service R2: TeamViewer 12 - (TeamViewer) - C:\Program Files\TeamViewer\TeamViewer_Service.exe
O23 - Service S3: Mozilla Maintenance Service - (MozillaMaintenance) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe


--
End of file - Time spent: 25,9 sec. - 9592 bytes, CRC32: FFFFFFFF. Sign: 䉏檑

O4 - Global User Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HMA! Pro VPN.lnk    ->    C:\Program Files\HMA! Pro VPN\Vpn.exe /nogui
O4 - HKCU\..\Run: [uTorrent] = C:\Users\enver\AppData\Roaming\uTorrent\uTorrent.exe /MINIMIZED
O4 - HKLM\..\Run: [Lightshot] = C:\Program Files\Skillbrains\lightshot\Lightshot.exe
O17 - DHCP DNS 1: 77.88.8.8 (Well-known DNS: Yandex.DNS)
O17 - DHCP DNS 2: 77.88.8.1 (Well-known DNS: Yandex.DNS)
O17 - HKLM\System\CCS\Services\Tcpip\..\{27FAA35B-4759-498E-9E4E-920A7B38B15F}: [NameServer] = 77.88.8.1 (Well-known DNS: Yandex.DNS)
O17 - HKLM\System\CCS\Services\Tcpip\..\{27FAA35B-4759-498E-9E4E-920A7B38B15F}: [NameServer] = 77.88.8.8 (Well-known DNS: Yandex.DNS)
O17 - HKLM\System\CCS\Services\Tcpip\..\{C08F0507-E1FD-4FAB-A455-77B9CBE543DC}: [NameServer] = 77.234.40.79
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{27FAA35B-4759-498E-9E4E-920A7B38B15F}: [NameServer] = 77.88.8.1 (Well-known DNS: Yandex.DNS)
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{27FAA35B-4759-498E-9E4E-920A7B38B15F}: [NameServer] = 77.88.8.8 (Well-known DNS: Yandex.DNS)
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{C08F0507-E1FD-4FAB-A455-77B9CBE543DC}: [NameServer] = 77.234.40.79
O23 - Service R2: HMA! Pro VPN - (HmaProVpn) - C:\Program Files\HMA! Pro VPN\VpnSvc.exe
O23 - Service R2: RelevantKnowledge - C:\Program Files\RelevantKnowledge\rlservice.exe Files\RelevantKnowledge\rlservice.exe /service
O23 - Service R2: TeamViewer 12 - (TeamViewer) - C:\Program Files\TeamViewer\TeamViewer_Service.exe
O23 - Service S3: Mozilla Maintenance Service - (MozillaMaintenance) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

Logfile of HiJackThis Fork by Alex Dragokas v.2.9.0.11

Platform:  x64 Windows 7 (Ultimate), 6.1.7601.0, Service Pack: 1
Time:      20.12.2018 - 23:49 (UTC+03:00)
Language:  OS: Turkish (0x41F). Display: Turkish (0x41F). Non-Unicode: English (0x409)
Elevated:  Yes
Ran by:    Dell    (group: Administrator) on DELL-BILGISAYAR, FirstRun: no

Chrome:  71.0.3578.98
Firefox: 62.0.3.6848
Internet Explorer: 11.0.9600.17041
Default: "C:\Program Files (x86)\GreenBrowser\GreenBrowser.exe" "%1"

Boot mode: Normal

Running processes:
Number | Path
   1  C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
   1  C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
   1  C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
   1  C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RtWLan.exe
   1  C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RtlService.exe
   1  C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe
   1  C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
   1  C:\Program Files\CCleaner\CCleaner64.exe
   1  C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
   1  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
   1  C:\Users\Dell\Desktop\HiJackThis\HiJackThis.exe
   1  C:\Windows\SysWOW64\PnkBstrA.exe
   2  C:\Windows\SysWOW64\svchost.exe
   1  C:\Windows\System32\SearchFilterHost.exe
   1  C:\Windows\System32\SearchIndexer.exe
   2  C:\Windows\System32\SearchProtocolHost.exe
   1  C:\Windows\System32\audiodg.exe
   2  C:\Windows\System32\conhost.exe
   2  C:\Windows\System32\csrss.exe
   1  C:\Windows\System32\dwm.exe
   1  C:\Windows\System32\lsass.exe
   1  C:\Windows\System32\lsm.exe
   1  C:\Windows\System32\services.exe
   1  C:\Windows\System32\smss.exe
   1  C:\Windows\System32\spoolsv.exe
   1  C:\Windows\System32\sppsvc.exe
  13  C:\Windows\System32\svchost.exe
   2  C:\Windows\System32\taskeng.exe
   1  C:\Windows\System32\taskhost.exe
   1  C:\Windows\System32\wininit.exe
   1  C:\Windows\System32\winlogon.exe
   1  C:\Windows\System32\wlanext.exe
   1  C:\Windows\explorer.exe

O1 - Hosts: ::1 localhost
O2 - HKLM\..\BHO: Adobe Acrobat Create PDF Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll
O2 - HKLM\..\BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll
O2 - HKLM\..\BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_121\bin\jp2ssv.dll
O2 - HKLM\..\BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_121\bin\ssv.dll
O2 - HKLM\..\BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll
O2-32 - HKLM\..\BHO: Adobe Acrobat Create PDF Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll
O2-32 - HKLM\..\BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll
O2-32 - HKLM\..\BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll
O3 - HKLM\..\Toolbar: Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll
O3-32 - HKLM\..\Toolbar: Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll
O4 - HKCU\..\Run: [CCleaner Monitoring] = C:\Program Files\CCleaner\CCleaner64.exe /MONITOR
O4 - MSConfig\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk [backup] => C:\Program Files\McAfee Security Scan\3.11.587\SSScheduler.exe (2018/10/08) (file missing)
O4 - MSConfig\startupreg: AceStream [command] = C:\Users\Dell\AppData\Roaming\ACEStream\engine\ace_engine.exe (HKCU) (2018/11/09) (file missing)
O4 - MSConfig\startupreg: Acrobat Assistant 8.0 [command] = C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe (HKLM) (2018/12/20)
O4 - MSConfig\startupreg: Adobe Acrobat Synchronizer [command] = C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe (HKCU) (2018/12/13)
O4 - MSConfig\startupreg: Adobe Creative Cloud [command] = C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --showwindow=false --onOSstartup=true (HKLM) (2018/12/13) (file missing)
O4 - MSConfig\startupreg: AdobeAAMUpdater-1.0 [command] = C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (HKLM) (2018/12/20)
O4 - MSConfig\startupreg: AdobeGCInvoker-1.0 [command] = C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe (HKLM) (2018/12/20)
O4 - MSConfig\startupreg: Astrill [command] = C:\Program Files (x86)\Astrill\astrill.exe /autostart (HKCU) (2018/10/07) (file missing)
O4 - MSConfig\startupreg: BCSSync [command] = C:\Program Files\Microsoft Office\Office14\BCSSync.exe /DelayServices (HKLM) (2018/10/07)
O4 - MSConfig\startupreg: CCleaner Monitoring [command] = C:\Program Files\CCleaner\CCleaner64.exe /MONITOR (HKCU) (2018/12/20)
O4 - MSConfig\startupreg: HotKeysCmds [command] = C:\Windows\system32\hkcmd.exe (HKLM) (2018/10/07)
O4 - MSConfig\startupreg: IDMan [command] = C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot (HKCU) (2018/12/20)
O4 - MSConfig\startupreg: IgfxTray [command] = C:\Windows\system32\igfxtray.exe (HKLM) (2018/10/07)
O4 - MSConfig\startupreg: NUSB3MON [command] = C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (HKLM) (2018/10/07)
O4 - MSConfig\startupreg: Persistence [command] = C:\Windows\system32\igfxpers.exe (HKLM) (2018/10/07)
O4 - MSConfig\startupreg: Spotify Web Helper [command] = C:\Users\Dell\AppData\Roaming\Spotify\SpotifyWebHelper.exe --autostart (HKCU) (2018/10/07) (file missing)
O4 - MSConfig\startupreg: Spotify [command] = C:\Users\Dell\AppData\Roaming\Spotify\Spotify.exe --autostart --minimized (HKCU) (2018/12/13)
O4 - MSConfig\startupreg: Steam [command] = C:\Program Files (x86)\Steam\steam.exe -silent (HKCU) (2018/10/07)
O4 - MSConfig\startupreg: SunJavaUpdateSched [command] = C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (HKLM) (2018/10/07)
O4 - MSConfig\startupreg: USB Gamepad [command] = C:\Windows\USB Vibration\7906\USB Gamepad.exe -boot (HKLM) (2018/10/07)
O4 - MSConfig\startupreg: Windows Mobile-based device management [command] = C:\Windows\WindowsMobile\wmdcBase.exe (HKLM) (2018/10/07)
O4 - MSConfig\startupreg: XperiaCompanionAgent [command] = C:\Program Files (x86)\Sony\Xperia Companion\XperiaCompanionAgent.exe (HKCU) (2018/10/07)
O4-32 - HKLM\..\Run: [NUSB3MON] = C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
O8 - Context menu item: HKCU\..\Internet Explorer\MenuExt\IDM ile indir: (default) = C:\Program Files (x86)\Internet Download Manager\IEExt.htm
O8 - Context menu item: HKCU\..\Internet Explorer\MenuExt\Tüm bağlantıları IDM ile indir: (default) = C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm
O17 - DHCP DNS 1: 192.168.1.1
O18 - HKLM\Software\Classes\Protocols\Handler\ms-help: [CLSID] = {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O20 - HKLM\..\Windows: [AppInit_DLLs] = C:\Windows\system32\nvinitx.dll (disabled because not code signed)
O20-32 - HKLM\..\Windows: [AppInit_DLLs] = C:\Windows\SysWOW64\nvinit.dll
O21 - HKLM\..\ShellIconOverlayIdentifiers\   AccExtIco1: AccExtIco1 Class - {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} - C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll
O21 - HKLM\..\ShellIconOverlayIdentifiers\   AccExtIco2: AccExtIco2 Class - {853B7E05-C47D-4985-909A-D0DC5C6D7303} - C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll
O21 - HKLM\..\ShellIconOverlayIdentifiers\   AccExtIco3: AccExtIco3 Class - {42D38F2E-98E9-4382-B546-E24E4D6D04BB} - C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll
O21 - HKLM\..\ShellIconOverlayIdentifiers\   IDM Shell Extension: IDM Shell Extension - {CDC95B92-E27C-4745-A8C5-64A52A78855D} - C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll
O21 - HKLM\..\ShellIconOverlayIdentifiers\00asw: (no name) - {472083B0-C522-11CF-8763-00608CC02F24} - (no file)
O23 - Service R2: Adobe Acrobat Update Service - (AdobeARMservice) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service R2: Adobe Genuine Monitor Service - (AGMService) - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
O23 - Service R2: Adobe Genuine Software Integrity Service - (AGSService) - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
O23 - Service R2: NVIDIA Display Container LS - (NVDisplay.ContainerLocalSystem) - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem"
O23 - Service R2: PnkBstrA - C:\Windows\SysWow64\PnkBstrA.exe
O23 - Service R2: RealtekWlanU - C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RtlService.exe
O23 - Service R2: RzKLService - C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe
O23 - Service S2: Google Güncelleme Hizmeti (gupdate) - (gupdate) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /svc
O23 - Service S2: Realtek DHCP Service - (RTLDHCPService) - C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RTLDHCP.exe
O23 - Service S3: Adobe Flash Player Update Service - (AdobeFlashPlayerUpdateSvc) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service S3: Google Güncelleme Hizmeti (gupdatem) - (gupdatem) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /medsvc
O23 - Service S3: Intel(R) Content Protection HECI Service - (cphs) - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service S3: Microsoft SharePoint Workspace Audit Service - C:\Program Files\Microsoft Office\Office14\GROOVE.EXE /auditservice
O23 - Service S3: Mozilla Maintenance Service - (MozillaMaintenance) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service S3: Office 64 Source Engine - (ose64) - C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
O23 - Service S3: Xperia Companion Hizmeti - (XperiaCompanionService) - C:\Program Files\Sony\Xperia Companion\Service\XperiaCompanionService.exe


--
End of file - Time spent: 26,8 sec. - 22304 bytes, CRC32: FFFFFFFF. Sign: 꿍鶽