Rehber HijackThis Log Paylaşımı ve Çözümleri

1543056134722.png


Sisteminizde yaşadığınız performans düşüşü, kilitlenme, zararlı etkisi, uygulama hatalarından kaynaklanan sorunsalları analiz etmek ve performans iyileştirmesi, zararlı etkisini inaktif etmek için bize HijackThis yazılımı ile yaptığınız tarama Logunu burada paylaşmanız gerekmektedir.



Kullanımı:

1) Bir geliştirici tarafından yeni özellikler kazandırılan güncel sürümünü buradan indirip, arşiv dosyasından masaüstüne uygulamayı çıkartın.

HiJackThis

Program, zararlı temizliğinde imza veritabanı kullanmadan sezgisel tespite dayalı bir yöntemle kullanılır. Çok hızlı bir tarama ile, zararlı bulaşmamış bir sistemden farklı olarak çalışan işlemlerin bir listesini çıkartır. Bu işlemlerin tamamı...
www.technopat.net www.technopat.net

Alternatif: Download HiJackThis Fork - MajorGeeks

Eski Sürüm: HiJackThis | Free software downloads at SourceForge.net

2) Bilgisayarınızı yeniden başlatın 3 dk işlem yapmadan bekleyin.

3) HijackThis yazılımına sağ tıklayıp yönetici olarak çalıştırın (XP için geçerli değil).

1543056459730.png


4) Açılan arayüzde, "Do a system scan and save a log file" butonuna tıklayın.

1543053000396.png


5) Otomatik olarak Hijackthis taraması başlayacak, taramanın tamamlanması sürece fare ve klavyeyi kullanmayın.
1543053111358.png


6) Tarama tamamlandığında HijackThis raporunu içeren bir Log dosyası karşınıza gelecektir.

1543053449185.png



*7) Log dosyasını incelememiz için buraya cevaplama bölümünden eklemeniz gerekmektedir.

1543053710016.png

Kod'a tıklayın.

1543053809056.png


Log'da yazanları mavi bölmenin içine yapıştırıp "Devam Et" butonuna basın.

Uyarı: Sitede kod eklemede sorun yaşarsanız kod paylaşımlarını altta verilen sitelerden birine yapıştırıp linki paylaşmanız gerekmektedir. Bu durumda *7. seçeneği şu anlık kullanmayın.

Paste ofCode

8) Ayrıca sisteminizde var olan sorunu detaylıca (Performans düşüşü, Malware varlığı şüphesi vb.) belirterek konuyu cevaplayın.
(Bunu yapmayana cevap verilmeyecektir)

Fixleme:

Konuda şahsım tarafından veya uzman kişilerden geri dönüş yapıldığında Hijackthis uygulama arayüzünden söylediğimiz satırların başlarına tik işareti koyun. Ardından "Fix checked" butonuna basın.
1543054420492.png
 
Son düzenleme:
Genişletmek için tıkla...
Bunu fixleyin:
O4 - HKCU\..\StartupApproved\Run: [XW1QWHKBZI] = C:\Users\Anıl\87e7a63627.js (file missing) (2019/09/25)


Ses değiştirme yazılımı kurulmuş gerekli değilse kaldırın ses sorunlarına neden olabilir:
O4 - HKCU\..\StartupApproved\Run: [ClownfishVoiceChanger] = C:\Program Files (x86)\ClownfishVoiceChanger\ClownfishVoiceChanger.exe (2019/10/19)

Brave Browser kullanmıyorsan kaldırabilirsin. IDT ses sürücün varsa sıkıntı yok farklı ses aygıtına sahipsen zararlı olabilir. PACE License Services adında bir yazılım var siz kurduysanız veya kurduğunuz bir programla beraber kurulduysa biliyorsanız kalabilir kısaca.
 
Kod: 
Logfile of HiJackThis Fork by Alex Dragokas v.2.9.0.18

Platform:  x64 Windows 10 (Home Single Language), 10.0.18362.476 (ReleaseId: 1903), Service Pack: 0
Time:      19.11.2019 - 21:41 (UTC+03:00)
Language:  OS: Turkish (0x41F). Display: Turkish (0x41F). Non-Unicode: Turkish (0x41F)
Elevated:  Yes
Ran by:    yhaon    (group: Administrator) on DESKTOP-09AOAC0, FirstRun: yes

Chrome:  78.0.3904.97
Firefox: 69.0.3.7221
Edge:    11.0.18362.476
Internet Explorer: 11.0.18362.1
Default: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Chrome)

Boot mode: Normal

Running processes:
Number | Path
   1  C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
   1  C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
   1  C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
   1  C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
   1  C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
  11  C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
   1  C:\Program Files (x86)\Google\Update\1.3.35.342\GoogleCrashHandler.exe
   1  C:\Program Files (x86)\Google\Update\1.3.35.342\GoogleCrashHandler64.exe
   1  C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe
   1  C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe
   1  C:\Program Files (x86)\IObit\Driver Booster\6.6.0\Scheduler.exe
   1  C:\Program Files (x86)\IObit\Smart Defrag\SmartDefrag.exe
   1  C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
   1  C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
   1  C:\Program Files\CONEXANT\SAII\SmartAudio.exe
   2  C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
   1  C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
   1  C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe
   1  C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
   1  C:\Program Files\WindowsApps\Microsoft.YourPhone_1.19102.525.0_x64__8wekyb3d8bbwe\YourPhone.exe
   1  C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1910.4-0\MsMpEng.exe
   1  C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1910.4-0\NisSrv.exe
   1  C:\Users\yhaon\Desktop\HiJackThis\HiJackThis.exe
   1  C:\Windows\SysWOW64\UIUSrv.exe
   1  C:\Windows\System32\CastSrv.exe
   1  C:\Windows\System32\CxAudMsg64.exe
   1  C:\Windows\System32\DriverStore\FileRepository\c0347338.inf_amd64_ac57ebc90aacc6d7\B347375\atieclxx.exe
   1  C:\Windows\System32\DriverStore\FileRepository\c0347338.inf_amd64_ac57ebc90aacc6d7\B347375\atiesrxx.exe
   1  C:\Windows\System32\DriverStore\FileRepository\x40plmwa.inf_amd64_ebba65282f89f8eb\ICEsoundService64.exe
   4  C:\Windows\System32\RuntimeBroker.exe
   1  C:\Windows\System32\SASrv.exe
   1  C:\Windows\System32\SecurityHealthService.exe
   1  C:\Windows\System32\SgrmBroker.exe
   1  C:\Windows\System32\audiodg.exe
   1  C:\Windows\System32\conhost.exe
   2  C:\Windows\System32\csrss.exe
   1  C:\Windows\System32\ctfmon.exe
   1  C:\Windows\System32\dllhost.exe
   1  C:\Windows\System32\drivers\AdminService.exe
   1  C:\Windows\System32\dwm.exe
   2  C:\Windows\System32\fontdrvhost.exe
   1  C:\Windows\System32\lsass.exe
   1  C:\Windows\System32\rundll32.exe
   1  C:\Windows\System32\schtasks.exe
   1  C:\Windows\System32\services.exe
   1  C:\Windows\System32\sihost.exe
   1  C:\Windows\System32\smartscreen.exe
   1  C:\Windows\System32\smss.exe
   1  C:\Windows\System32\spoolsv.exe
  24  C:\Windows\System32\svchost.exe
   2  C:\Windows\System32\taskhostw.exe
   1  C:\Windows\System32\wbem\WmiPrvSE.exe
   1  C:\Windows\System32\wininit.exe
   1  C:\Windows\System32\winlogon.exe
   1  C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
   1  C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
   1  C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
   1  C:\Windows\explorer.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main: [Default_Page_URL] = http://asus15.msn.com/?pc=ASTE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main: [Start Page] = http://www.oyunsunucum.com
O1 - Hosts.ICS: 192.168.137.1 DESKTOP-09AOAC0.mshome.net # 2024 10 4 24 17 40 24 879
O1 - Hosts.ICS: 192.168.137.14 HUAWEI_P20_lite-aa99d4908.mshome.net # 2019 11 6 2 17 40 24 879
O2-32 - HKLM\..\BHO: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll
O4 - HKCU\..\StartupApproved\Run: [Advanced SystemCare 12] = C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe /Auto (2019/10/21)
O4 - HKCU\..\StartupApproved\Run: [DAEMON Tools Lite Automount] = C:\Program Files\DAEMON Tools Lite\DTAgent.exe -autorun (2019/11/17)
O4 - HKCU\..\StartupApproved\Run: [Discord] = C:\Users\yhaon\AppData\Local\Discord\app-0.0.305\Discord.exe (2019/10/04)
O4 - HKCU\..\StartupApproved\Run: [OneDrive] = C:\Users\yhaon\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background (2019/10/08)
O4 - HKCU\..\StartupApproved\Run: [Wargaming.net Game Center] = C:\ProgramData\Wargaming.net\GameCenter\wgc.exe --background '' (2019/10/10)
O4 - HKLM\..\Run: [cAudioFilterAgent] = C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe
O4 - HKLM\..\StartupApproved\Run: [SecurityHealth] = C:\WINDOWS\system32\SecurityHealthSystray.exe (2019/08/31)
O9 - Button: HKLM\..\{A95fe080-8f5d-11d2-a20b-00aa003c157a}: Evernote 5'e ekle - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\AddNote.html
O9 - Tools menu item: HKLM\..\{A95fe080-8f5d-11d2-a20b-00aa003c157a}: Evernote 5'e ekle - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\AddNote.html
O9-32 - Button: HKLM\..\{A95fe080-8f5d-11d2-a20b-00aa003c157a}: Evernote 5'e ekle - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html
O9-32 - Tools menu item: HKLM\..\{A95fe080-8f5d-11d2-a20b-00aa003c157a}: Evernote 5'e ekle - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html
O17 - DHCP DNS 1: 192.168.8.1
O21 - HKLM\..\ShellIconOverlayIdentifiers\!AsusWSShellExt_B: AsusWSShellExt_BN64 Class - {6D4133E5-0742-4ADC-8A8C-9303440F7191} - C:\Program Files (x86)\Common Files\AWS\2.2.6.547\ASUSWSShellExt64.dll
O21 - HKLM\..\ShellIconOverlayIdentifiers\!AsusWSShellExt_O: AsusWSShellExt_ON64 Class - {64174815-8D98-4CE6-8646-4C039977D809} - C:\Program Files (x86)\Common Files\AWS\2.2.6.547\ASUSWSShellExt64.dll
O21 - HKLM\..\ShellIconOverlayIdentifiers\!AsusWSShellExt_U: AsusWSShellExt_UN64 Class - {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} - C:\Program Files (x86)\Common Files\AWS\2.2.6.547\ASUSWSShellExt64.dll
O22 - Task (.job): (Ready) DropboxUpdateTaskMachineUA.job - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler
O22 - Task (.job): (Ready) WpsNotifyTask_Administrator.job - C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.5247\wtoolex\wpsnotify.exe -from=task
O22 - Task (.job): (Ready) WpsUpdateTask_Administrator.job - C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.5247\wtoolex\wpsupdate.exe -from=task
O22 - Task (.job): DropboxUpdateTaskMachineCore1d55fcfce787bb4.job - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /c
O23 - Service R2: AMD External Events Utility - C:\WINDOWS\System32\DriverStore\FileRepository\c0347338.inf_amd64_ac57ebc90aacc6d7\B347375\atiesrxx.exe
O23 - Service R2: Advanced SystemCare Service 12 - (AdvancedSystemCareService12) - C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe
O23 - Service R2: AtherosSvc - C:\WINDOWS\System32\drivers\AdminService.exe
O23 - Service R2: Conexant Audio Message Service - (CxAudMsg) - C:\WINDOWS\system32\CxAudMsg64.exe
O23 - Service R2: Conexant SmartAudio service - (SAService) - C:\WINDOWS\system32\SAsrv.exe
O23 - Service R2: Conexant UIU Service - (UIUService) - C:\WINDOWS\system32\UIUSrv.exe  (file missing)
O23 - Service R2: GamesAppIntegrationService - C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
O23 - Service R2: ICEsoundService - C:\WINDOWS\System32\DriverStore\FileRepository\x40plmwa.inf_amd64_ebba65282f89f8eb\ICEsoundService64.exe
O23 - Service R2: Microsoft Office Click-to-Run Service - (ClickToRunSvc) - C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe /service
O23 - Service R3: Disc Soft Lite Bus Service - C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
O23 - Service S2: Dropbox Update Service (dbupdate) - (dbupdate) - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /svc
O23 - Service S2: Google Güncelleme Hizmeti (gupdate) - (gupdate) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /svc
O23 - Service S2: WPS Office Update Service - (Kingsoft_WPS_UpdateService) - C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.5247\wtoolex\wpsupdatesvr.exe
O23 - Service S2: tbaseprovisioning - C:\Windows\SysWOW64\tbaseprovisioning.exe
O23 - Service S3: Dropbox Update Service (dbupdatem) - (dbupdatem) - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /medsvc
O23 - Service S3: GamesAppService - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service S3: Google Chrome Elevation Service - (GoogleChromeElevationService) - C:\Program Files (x86)\Google\Chrome\Application\78.0.3904.97\elevation_service.exe
O23 - Service S3: Google Güncelleme Hizmeti (gupdatem) - (gupdatem) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /medsvc
O23 - Service S3: Mozilla Maintenance Service - (MozillaMaintenance) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service S3: Office 64 Source Engine - (ose64) - C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
O23 - Service S3: Steam Client Service - C:\Program Files (x86)\Common Files\Steam\SteamService.exe /RunAsService
O23 - Service S3: Uncheater for BattleGroundsLite_SE - (uncheater_bgl) - C:\Program Files\Common Files\Uncheater\uncheater_bgl.exe


--
End of file - Time spent: 84,9 sec. - 20416 bytes, CRC32: FFFFFFFF. Sign: �㚓








Aşırı derecede genel kasma sorunu yaşıyorum disk bellek ve ram de sürekli bir şeyler %100 kullanıma sebep oluyor şarkı dinlerken de tırrrt tııırrrrt diye sürekli takılıyor
 
Zararlı yönden bir sıkıntı yok.
ASC ve IOBIT ürünleri, WPS Kaynaklı olabilir sorunlar. Dropbox, Onedrive gibi ürünleri vs. temiz önyükleme ile düzeltmeye çalışabilirsin.

Ek olarak sorunun yazılımsal değil donanımsal bakım da olabilir kontrol edin.

Bunları yine de fixleyin:
Kod: 
R0 - HKCU\Software\Microsoft\Internet Explorer\Main: [Default_Page_URL] = http://asus15.msn.com/?pc=ASTE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main: [Start Page] = http://www.oyunsunucum.com
O1 - Hosts.ICS: 192.168.137.1 DESKTOP-09AOAC0.mshome.net # 2024 10 4 24 17 40 24 879
O1 - Hosts.ICS: 192.168.137.14 HUAWEI_P20_lite-aa99d4908.mshome.net # 2019 11 6 2 17 40 24 879
O17 - DHCP DNS 1: 192.168.8.1
O21 - HKLM\..\ShellIconOverlayIdentifiers\!AsusWSShellExt_B: AsusWSShellExt_BN64 Class - {6D4133E5-0742-4ADC-8A8C-9303440F7191} - C:\Program Files (x86)\Common Files\AWS\2.2.6.547\ASUSWSShellExt64.dll
O21 - HKLM\..\ShellIconOverlayIdentifiers\!AsusWSShellExt_O: AsusWSShellExt_ON64 Class - {64174815-8D98-4CE6-8646-4C039977D809} - C:\Program Files (x86)\Common Files\AWS\2.2.6.547\ASUSWSShellExt64.dll
O21 - HKLM\..\ShellIconOverlayIdentifiers\!AsusWSShellExt_U: AsusWSShellExt_UN64 Class - {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} - C:\Program Files (x86)\Common Files\AWS\2.2.6.547\ASUSWSShellExt64.dll
O22 - Task (.job): (Ready) DropboxUpdateTaskMachineUA.job - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler
O22 - Task (.job): (Ready) WpsNotifyTask_Administrator.job - C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.5247\wtoolex\wpsnotify.exe -from=task
O22 - Task (.job): (Ready) WpsUpdateTask_Administrator.job - C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.5247\wtoolex\wpsupdate.exe -from=task
O22 - Task (.job): DropboxUpdateTaskMachineCore1d55fcfce787bb4.job - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /c
 
Murat5038 dedi:
Zararlı yönden bir sıkıntı yok.
ASC ve IOBIT ürünleri, WPS Kaynaklı olabilir sorunlar. Dropbox, Onedrive gibi ürünleri vs. temiz önyükleme ile düzeltmeye çalışabilirsin.

Ek olarak sorunun yazılımsal değil donanımsal bakım da olabilir kontrol edin.

Bunları yine de fixleyin:
Kod: 
R0 - HKCU\Software\Microsoft\Internet Explorer\Main: [Default_Page_URL] = http://asus15.msn.com/?pc=ASTE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main: [Start Page] = http://www.oyunsunucum.com
O1 - Hosts.ICS: 192.168.137.1 DESKTOP-09AOAC0.mshome.net # 2024 10 4 24 17 40 24 879
O1 - Hosts.ICS: 192.168.137.14 HUAWEI_P20_lite-aa99d4908.mshome.net # 2019 11 6 2 17 40 24 879
O17 - DHCP DNS 1: 192.168.8.1
O21 - HKLM\..\ShellIconOverlayIdentifiers\!AsusWSShellExt_B: AsusWSShellExt_BN64 Class - {6D4133E5-0742-4ADC-8A8C-9303440F7191} - C:\Program Files (x86)\Common Files\AWS\2.2.6.547\ASUSWSShellExt64.dll
O21 - HKLM\..\ShellIconOverlayIdentifiers\!AsusWSShellExt_O: AsusWSShellExt_ON64 Class - {64174815-8D98-4CE6-8646-4C039977D809} - C:\Program Files (x86)\Common Files\AWS\2.2.6.547\ASUSWSShellExt64.dll
O21 - HKLM\..\ShellIconOverlayIdentifiers\!AsusWSShellExt_U: AsusWSShellExt_UN64 Class - {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} - C:\Program Files (x86)\Common Files\AWS\2.2.6.547\ASUSWSShellExt64.dll
O22 - Task (.job): (Ready) DropboxUpdateTaskMachineUA.job - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler
O22 - Task (.job): (Ready) WpsNotifyTask_Administrator.job - C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.5247\wtoolex\wpsnotify.exe -from=task
O22 - Task (.job): (Ready) WpsUpdateTask_Administrator.job - C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.5247\wtoolex\wpsupdate.exe -from=task
O22 - Task (.job): DropboxUpdateTaskMachineCore1d55fcfce787bb4.job - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /c
Genişletmek için tıkla...
Teşekkür ederim hocam büyük oranda halloldu eline koluna yüeğine sağlık
 
Kod: 
Logfile of HiJackThis Fork by Alex Dragokas v.2.9.0.18

Platform:  x64 Windows 10 (Pro), 10.0.18363.476 (ReleaseId: 1909), Service Pack: 0
Time:      28.11.2019 - 23:16 (UTC+03:00)
Language:  OS: Turkish (0x41F). Display: Turkish (0x41F). Non-Unicode: Arabic (0x401)
Elevated:  Yes
Ran by:    simon    (group: Administrator) on DESKTOP-ELRO7I6, FirstRun: yes

Chrome:  78.0.3904.108
Firefox: 70.0.1.7242
Edge:    11.0.18362.476
Internet Explorer: 11.0.18362.1
Default: "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "%1" (Firefox)

Boot mode: Normal

Running processes:
Number | Path
   1  C:\Program Files (x86)\ASUS\ASUS Battery Health Charging\AsBhcSrv.exe
   1  C:\Program Files (x86)\ASUS\ASUS Battery Health Charging\BhcMgr.exe
   1  C:\Program Files (x86)\DU Meter\DUMeter.exe
   1  C:\Program Files (x86)\DU Meter\DUMeterSvc.exe
   1  C:\Program Files (x86)\Internet Download Manager\IDMan.exe
   1  C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
   1  C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
   1  C:\Program Files\CCleaner\CCleaner64.exe
   1  C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
   2  C:\Program Files\Everything\Everything.exe
   6  C:\Program Files\Mozilla Firefox\firefox.exe
   3  C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
   3  C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
   1  C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
   1  C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.54.91.0_x64__kzf8qxf38zg5c\SkypeApp.exe
   1  C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.54.91.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
   1  C:\Program Files\WindowsApps\Microsoft.WindowsStore_11911.1001.9.0_x64__8wekyb3d8bbwe\WinStore.App.exe
   1  C:\Program Files\WindowsApps\Microsoft.YourPhone_1.19102.525.0_x64__8wekyb3d8bbwe\YourPhone.exe
   1  C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19101.10711.0_x64__8wekyb3d8bbwe\Video.UI.exe
   1  C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1910.4-0\MsMpEng.exe
   1  C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1910.4-0\NisSrv.exe
   1  C:\Users\simon\Desktop\HiJackThis.exe
   1  C:\Windows\ImmersiveControlPanel\SystemSettings.exe
   1  C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
   1  C:\Windows\System32\ApplicationFrameHost.exe
   1  C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_b4d616b6741b6568\ASUSOptimization\AsusOptimization.exe
   1  C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_b4d616b6741b6568\ASUSOptimization\AsusOptimizationStartupTask.exe
   1  C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_b4d616b6741b6568\ASUSSoftwareManager\AsusSoftwareManager.exe
   1  C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_b4d616b6741b6568\ASUSSoftwareManager\AsusSoftwareManagerAgent.exe
   1  C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_b4d616b6741b6568\ASUSSystemAnalysis\AsusSystemAnalysis.exe
   1  C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_b4d616b6741b6568\ASUSSystemDiagnosis\AsusSystemDiagnosis.exe
   1  C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_9de8154b682af864\igfxCUIService.exe
   1  C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_9de8154b682af864\igfxEM.exe
   1  C:\Windows\System32\DriverStore\FileRepository\iastorac.inf_amd64_c171c5fc6d7cbcc0\RstMwService.exe
   1  C:\Windows\System32\DriverStore\FileRepository\icesoundapo64.inf_amd64_77a79c68b2290e1f\ICEsoundService64.exe
   1  C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_74dc8483545826b6\IntelCpHDCPSvc.exe
   1  C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_74dc8483545826b6\IntelCpHeciSvc.exe
   2  C:\Windows\System32\DriverStore\FileRepository\nvami.inf_amd64_122da6547232ad2e\Display.NvContainer\NVDisplay.Container.exe
   1  C:\Windows\System32\DriverStore\FileRepository\piecomponent.inf_amd64_3af8c195be3b7b1a\Intel_PIE_Service.exe
   1  C:\Windows\System32\Intel\DPTF\esif_uf.exe
   1  C:\Windows\System32\MicrosoftEdgeCP.exe
   1  C:\Windows\System32\MicrosoftEdgeSH.exe
   2  C:\Windows\System32\RtkAudUService64.exe
   7  C:\Windows\System32\RuntimeBroker.exe
   1  C:\Windows\System32\SearchFilterHost.exe
   1  C:\Windows\System32\SearchIndexer.exe
   1  C:\Windows\System32\SearchProtocolHost.exe
   1  C:\Windows\System32\SecurityHealthService.exe
   1  C:\Windows\System32\SettingSyncHost.exe
   1  C:\Windows\System32\SgrmBroker.exe
   1  C:\Windows\System32\WUDFHost.exe
   1  C:\Windows\System32\audiodg.exe
   1  C:\Windows\System32\browser_broker.exe
   2  C:\Windows\System32\conhost.exe
   2  C:\Windows\System32\csrss.exe
   1  C:\Windows\System32\ctfmon.exe
   2  C:\Windows\System32\dllhost.exe
   1  C:\Windows\System32\dwm.exe
   2  C:\Windows\System32\fontdrvhost.exe
   1  C:\Windows\System32\jhi_service.exe
   1  C:\Windows\System32\lsass.exe
   1  C:\Windows\System32\rundll32.exe
   1  C:\Windows\System32\services.exe
   1  C:\Windows\System32\sihost.exe
   1  C:\Windows\System32\smartscreen.exe
   1  C:\Windows\System32\smss.exe
   1  C:\Windows\System32\spoolsv.exe
  77  C:\Windows\System32\svchost.exe
   1  C:\Windows\System32\taskhostw.exe
   2  C:\Windows\System32\wbem\WmiPrvSE.exe
   1  C:\Windows\System32\wbem\unsecapp.exe
   1  C:\Windows\System32\wininit.exe
   1  C:\Windows\System32\winlogon.exe
   1  C:\Windows\System32\wlanext.exe
   1  C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
   1  C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
   1  C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
   1  C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.18362.471_none_5f12f35059003107\TiWorker.exe
   1  C:\Windows\explorer.exe
   1  C:\Windows\servicing\TrustedInstaller.exe

R4 - SearchScopes: HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{3CB12E97-BDDF-4488-8C61-217335DD319F}: [SuggestionsURL] = https://clients5.google.com/complete/search?q={searchTerms}&client=ie8&mw={ie:maxWidth}&sh={ie:sectionHeight}&rh={ie:rowHeight}&inputencoding={inputEncoding}&outputencoding={outputEncoding} - Google
R4 - SearchScopes: HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{3CB12E97-BDDF-4488-8C61-217335DD319F}: [URL] = https://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?} - Google
O1 - Hosts.ICS: 37.0.156 LAPTOP-9CJEEBAT.mshome.net # 2019 12 1 2 6 48 28 17
O2 - HKLM\..\BHO: Adobe Acrobat Create PDF Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll
O2 - HKLM\..\BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll
O2 - HKLM\..\BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll
O2-32 - HKLM\..\BHO: Adobe Acrobat Create PDF Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll
O2-32 - HKLM\..\BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll
O2-32 - HKLM\..\BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll
O3 - HKLM\..\Toolbar: Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll
O3-32 - HKLM\..\Toolbar: Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll
O4 - HKCU\..\Run: [DU Meter] = C:\Program Files (x86)\DU Meter\DUMeter.exe /autostart
O4 - HKCU\..\Run: [IDMan] = C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\StartupApproved\Run: [CCleaner Smart Cleaning] = C:\Program Files\CCleaner\CCleaner64.exe /MONITOR (2019/11/28)
O4 - HKCU\..\StartupApproved\Run: [OneDrive] = C:\Users\simon\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background (2019/11/14)
O4 - HKLM\..\Run: [Everything] = C:\Program Files\Everything\Everything.exe -startup
O8 - Context menu item: HKCU\..\Internet Explorer\MenuExt\IDM ile indir: (default) = C:\Program Files (x86)\Internet Download Manager\IEExt.htm
O8 - Context menu item: HKCU\..\Internet Explorer\MenuExt\Microsoft Excel'e &Ver: (default) = C:\Program Files\Microsoft Office\Office16\EXCEL.EXE (file missing)
O8 - Context menu item: HKCU\..\Internet Explorer\MenuExt\OneNote'a G&önder: (default) = C:\Program Files\Microsoft Office\Office16\ONBttnIE.dll (file missing)
O8 - Context menu item: HKCU\..\Internet Explorer\MenuExt\Tüm bağlantıları IDM ile indir: (default) = C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm
O15 - Trusted Zone: *.localhost
O15 - Trusted Zone: http://webcompanion.com
O17 - DHCP DNS 1: 192.168.43.99
O17 - HKLM\System\CCS\Services\Tcpip\..\{51718286-c52c-423b-af65-9c9d42bda7ce}: [NameServer] = 8.8.4.4 (Well-known DNS: Google)
O17 - HKLM\System\CCS\Services\Tcpip\..\{51718286-c52c-423b-af65-9c9d42bda7ce}: [NameServer] = 8.8.8.8 (Well-known DNS: Google)
O21 - HKLM\..\ShellIconOverlayIdentifiers\            IDM Shell Extension: IDM Shell Extension - {CDC95B92-E27C-4745-A8C5-64A52A78855D} - C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll
O21 - HKLM\..\ShellIconOverlayIdentifiers\  OptaneIconOverlay: Intel.Optane.Pinning.ShellExt.OptaneIconOverlay - {A3AF6F6C-8BED-3D93-8B5D-33427B5D38E9} - C:\Windows\system32\mscoree.dll
O22 - Task (.job): (disabled) (Not scheduled) CreateExplorerShellUnelevatedTask.job - C:\Windows\explorer.exe /NOUACCHECK
O23 - Service R2: ASUS Battery Health Charging Service - (AsBhcService) - C:\Program Files (x86)\ASUS\ASUS Battery Health Charging\AsBhcSrv.exe
O23 - Service R2: ASUS Optimization - (ASUSOptimization) - C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_b4d616b6741b6568\ASUSOptimization\AsusOptimization.exe
O23 - Service R2: ASUS Software Manager - (ASUSSoftwareManager) - C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_b4d616b6741b6568\ASUSSoftwareManager\AsusSoftwareManager.exe
O23 - Service R2: ASUS System Analysis - (ASUSSystemAnalysis) - C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_b4d616b6741b6568\ASUSSystemAnalysis\AsusSystemAnalysis.exe
O23 - Service R2: ASUS System Diagnosis - (ASUSSystemDiagnosis) - C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_b4d616b6741b6568\ASUSSystemDiagnosis\AsusSystemDiagnosis.exe
O23 - Service R2: DU Meter Service - (DUMeterSvc) - C:\Program Files (x86)\DU Meter\DUMeterSvc.exe Files (x86)\DU Meter\DUMeterSvc.exe /startedbyscm:E1F6D4BE-40E33354-DUMeterService
O23 - Service R2: Everything - C:\Program Files\Everything\Everything.exe -svc
O23 - Service R2: ICEsoundService - C:\Windows\System32\DriverStore\FileRepository\icesoundapo64.inf_amd64_77a79c68b2290e1f\ICEsoundService64.exe
O23 - Service R2: Intel(R) Content Protection HDCP Service - (cplspcon) - C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_74dc8483545826b6\IntelCpHDCPSvc.exe
O23 - Service R2: Intel(R) Dynamic Application Loader Host Interface Service - (jhi_service) - C:\Windows\System32\jhi_service.exe
O23 - Service R2: Intel(R) Dynamic Platform and Thermal Framework service - (esifsvc) - C:\Windows\System32\Intel\DPTF\esif_uf.exe
O23 - Service R2: Intel(R) HD Graphics Control Panel Service - (igfxCUIService2.0.0.0) - C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_9de8154b682af864\igfxCUIService.exe
O23 - Service R2: NVIDIA Display Container LS - (NVDisplay.ContainerLocalSystem) - C:\Windows\System32\DriverStore\FileRepository\nvami.inf_amd64_122da6547232ad2e\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f C:\ProgramData\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\Windows\System32\DriverStore\FileRepository\nvami.inf_amd64_122da6547232ad2e\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
O23 - Service R2: NVIDIA LocalSystem Container - (NvContainerLocalSystem) - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -s NvContainerLocalSystem -a -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000 -st "C:\Program Files\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dll"
O23 - Service R2: Realtek Audio Universal Service - (RtkAudioUniversalService) - C:\Windows\System32\RtkAudUService64.exe
O23 - Service R2: RstMwService - C:\Windows\System32\DriverStore\FileRepository\iastorac.inf_amd64_c171c5fc6d7cbcc0\RstMwService.exe
O23 - Service R3: Intel(R) Content Protection HECI Service - (cphs) - C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_74dc8483545826b6\IntelCpHeciSvc.exe
O23 - Service R3: Intel® PROSet/Wireless Service - (PIEServiceNew) - C:\Windows\System32\DriverStore\FileRepository\piecomponent.inf_amd64_3af8c195be3b7b1a\Intel_PIE_Service.exe
O23 - Service R3: Microsoft Office Tıkla-Çalıştır Hizmeti - (ClickToRunSvc) - C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe /service
O23 - Service S2: Intel(R) Audio Service - (IntelAudioService) - C:\Windows\system32\cAVS\Intel(R) Audio Service\IntelAudioService.exe
O23 - Service S2: Intel(R) TPM Provisioning Service - C:\Windows\System32\Intel\iCLS Client\lib\TPMProvisioningService.exe
O23 - Service S3: Intel(R) Capability Licensing Service TCP IP Interface - C:\Windows\System32\Intel\iCLS Client\lib\SocketHeciServer.exe
O23 - Service S3: Intel(R) Optane(TM) Memory Service - (iaStorAfsService) - C:\Windows\System32\iaStorAfsService.exe
O23 - Service S3: NVIDIA NetworkService Container - (NvContainerNetworkService) - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -s NvContainerNetworkService -f "C:\ProgramData\NVIDIA\NvContainerNetworkService.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\NetworkService" -r -p 30000 -st "C:\Program Files\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dll"


--
End of file - Time spent: 15 sec. - 29662 bytes, CRC32: FFFFFFFF. Sign: 쟋�
Hocam cihazda performasn vs düşüşü hissetmedim zaten güçlü cihaz fakat yakın zamanda eth.vbs vs miner virüsüyle uğraştım kaldırdım sanıyorum. Onun dışında birde bazı oyunları yüklerken virüs tespitleri oldu. Başka bişey varsada ben bilmiyorum. Şimdiden teşkkrlr.
 
Everything, Dumeter kendin yüklemediysen ve kullanmıyorsan verdiklerimi fixleyip kaldırın denetim masasından.
Kod: 
R4 - SearchScopes: HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{3CB12E97-BDDF-4488-8C61-217335DD319F}: [SuggestionsURL] = https://clients5.google.com/complete/search?q={searchTerms}&client=ie8&mw={ie:maxWidth}&sh={ie:sectionHeight}&rh={ie:rowHeight}&inputencoding={inputEncoding}&outputencoding={outputEncoding} - Google
R4 - SearchScopes: HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{3CB12E97-BDDF-4488-8C61-217335DD319F}: [URL] = https://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?} - Google
O1 - Hosts.ICS: 37.0.156 LAPTOP-9CJEEBAT.mshome.net # 2019 12 1 2 6 48 28 17
O4 - HKCU\..\Run: [DU Meter] = C:\Program Files (x86)\DU Meter\DUMeter.exe /autostart
O4 - HKLM\..\Run: [Everything] = C:\Program Files\Everything\Everything.exe -startup
O17 - DHCP DNS 1: 192.168.43.99
O22 - Task (.job): (disabled) (Not scheduled) CreateExplorerShellUnelevatedTask.job - C:\Windows\explorer.exe /NOUACCHECK
O23 - Service R2: DU Meter Service - (DUMeterSvc) - C:\Program Files (x86)\DU Meter\DUMeterSvc.exe Files (x86)\DU Meter\DUMeterSvc.exe /startedbyscm:E1F6D4BE-40E33354-DUMeterService
O23 - Service R2: Everything - C:\Program Files\Everything\Everything.exe -svc
 
Murat5038 dedi:
Everything, Dumeter kendin yüklemediysen ve kullanmıyorsan verdiklerimi fixleyip kaldırın denetim masasından.
Kod: 
R4 - SearchScopes: HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{3CB12E97-BDDF-4488-8C61-217335DD319F}: [SuggestionsURL] = https://clients5.google.com/complete/search?q={searchTerms}&client=ie8&mw={ie:maxWidth}&sh={ie:sectionHeight}&rh={ie:rowHeight}&inputencoding={inputEncoding}&outputencoding={outputEncoding} - Google
R4 - SearchScopes: HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{3CB12E97-BDDF-4488-8C61-217335DD319F}: [URL] = https://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?} - Google
O1 - Hosts.ICS: 37.0.156 LAPTOP-9CJEEBAT.mshome.net # 2019 12 1 2 6 48 28 17
O4 - HKCU\..\Run: [DU Meter] = C:\Program Files (x86)\DU Meter\DUMeter.exe /autostart
O4 - HKLM\..\Run: [Everything] = C:\Program Files\Everything\Everything.exe -startup
O17 - DHCP DNS 1: 192.168.43.99
O22 - Task (.job): (disabled) (Not scheduled) CreateExplorerShellUnelevatedTask.job - C:\Windows\explorer.exe /NOUACCHECK
O23 - Service R2: DU Meter Service - (DUMeterSvc) - C:\Program Files (x86)\DU Meter\DUMeterSvc.exe Files (x86)\DU Meter\DUMeterSvc.exe /startedbyscm:E1F6D4BE-40E33354-DUMeterService
O23 - Service R2: Everything - C:\Program Files\Everything\Everything.exe -svc
Genişletmek için tıkla...
O ikisini kendim yükledim hocam diğerlerini yapayım o zaman
 
Kod: 
Logfile of HiJackThis Fork by Alex Dragokas v.2.9.0.18

Platform:  x64 Windows 10 (Home), 10.0.18363.476 (ReleaseId: 1909), Service Pack: 0
Time:      28.11.2019 - 23:42 (UTC+03:00)
Language:  OS: Turkish (0x41F). Display: Turkish (0x41F). Non-Unicode: Turkish (0x41F)
Elevated:  Yes
Ran by:    Orhan    (group: Administrator) on DESKTOP-J9AIRAJ, FirstRun: yes

Chrome:  78.0.3904.108
Edge:    11.0.18362.476
Internet Explorer: 11.0.18362.1
Default: "C:\Windows\system32\LaunchWinApp.exe" "%1" (Microsoft Edge)

Boot mode: Normal

Running processes:
Number | Path
   1  C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe
   1  C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
   1  C:\Program Files\AMD\CNext\CNext\amdow.exe
   1  C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1908.0.0_x64__8wekyb3d8bbwe\Calculator.exe
   1  C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1910.4-0\MsMpEng.exe
   1  C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1910.4-0\NisSrv.exe
   1  C:\Users\miayo\Desktop\HiJackThis.exe
   1  C:\Windows\ImmersiveControlPanel\SystemSettings.exe
   1  C:\Windows\SysWOW64\PnkBstrA.exe
   1  C:\Windows\System32\ApplicationFrameHost.exe
   1  C:\Windows\System32\DriverStore\FileRepository\u0348851.inf_amd64_57dae422ff3d4272\B348820\atieclxx.exe
   1  C:\Windows\System32\DriverStore\FileRepository\u0348851.inf_amd64_57dae422ff3d4272\B348820\atiesrxx.exe
   1  C:\Windows\System32\MicrosoftEdgeCP.exe
   1  C:\Windows\System32\MicrosoftEdgeSH.exe
   2  C:\Windows\System32\RtkAudUService64.exe
   3  C:\Windows\System32\RuntimeBroker.exe
   1  C:\Windows\System32\SearchIndexer.exe
   1  C:\Windows\System32\SecurityHealthService.exe
   1  C:\Windows\System32\SettingSyncHost.exe
   1  C:\Windows\System32\SgrmBroker.exe
   1  C:\Windows\System32\audiodg.exe
   1  C:\Windows\System32\browser_broker.exe
   1  C:\Windows\System32\conhost.exe
   2  C:\Windows\System32\csrss.exe
   1  C:\Windows\System32\ctfmon.exe
   1  C:\Windows\System32\dllhost.exe
   1  C:\Windows\System32\dwm.exe
   2  C:\Windows\System32\fontdrvhost.exe
   1  C:\Windows\System32\lsass.exe
   1  C:\Windows\System32\schtasks.exe
   1  C:\Windows\System32\services.exe
   1  C:\Windows\System32\sihost.exe
   1  C:\Windows\System32\smartscreen.exe
   1  C:\Windows\System32\smss.exe
   1  C:\Windows\System32\spoolsv.exe
  72  C:\Windows\System32\svchost.exe
   1  C:\Windows\System32\taskhostw.exe
   1  C:\Windows\System32\wbem\WmiApSrv.exe
   2  C:\Windows\System32\wbem\WmiPrvSE.exe
   1  C:\Windows\System32\wininit.exe
   1  C:\Windows\System32\winlogon.exe
   1  C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
   1  C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
   1  C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
   1  C:\Windows\explorer.exe

R4 - SearchScopes: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}: [SuggestionsURL_JSON] = https://suggest.yandex.com.tr/suggest-ff.cgi?srv=ie11&uil=tr&part={searchTerms}&clid=2233630 - Yandex
R4 - SearchScopes: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}: [URL] = https://yandex.com.tr/search/?text={searchTerms}&clid=2233630 - Yandex
O4 - HKCU\..\StartupApproved\Run: [Steam] = C:\Program Files (x86)\Steam\steam.exe -silent (2019/10/03)
O4 - HKLM\..\Run: [RtkAudUService] = C:\Windows\System32\RtkAudUService64.exe -background
O4 - HKLM\..\StartupApproved\Run: [SecurityHealth] = C:\Windows\system32\SecurityHealthSystray.exe (2019/11/03)
O17 - DHCP DNS 1: 192.168.1.1
O22 - Task (.job): (disabled) (Not scheduled) CreateExplorerShellUnelevatedTask.job - C:\Windows\explorer.exe /NOUACCHECK
O23 - Service R2: AMD External Events Utility - C:\Windows\System32\DriverStore\FileRepository\u0348851.inf_amd64_57dae422ff3d4272\B348820\atiesrxx.exe
O23 - Service R2: PnkBstrA - C:\Windows\system32\PnkBstrA.exe  (file missing)
O23 - Service R2: Realtek Audio Universal Service - (RtkAudioUniversalService) - C:\Windows\System32\RtkAudUService64.exe
O23 - Service S2: Google Güncelleme Hizmeti (gupdate) - (gupdate) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /svc
O23 - Service S3: Google Chrome Elevation Service - (GoogleChromeElevationService) - C:\Program Files (x86)\Google\Chrome\Application\78.0.3904.108\elevation_service.exe
O23 - Service S3: Google Güncelleme Hizmeti (gupdatem) - (gupdatem) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /medsvc
O23 - Service S3: Steam Client Service - C:\Program Files (x86)\Common Files\Steam\SteamService.exe /RunAsService
O23 - Service S3: Uncheater for BattleGroundsLite_SE - (uncheater_bgl) - C:\Program Files\Common Files\Uncheater\uncheater_bgl.exe


--
End of file - Time spent: 17,5 sec. - 9954 bytes, CRC32: FFFFFFFF. Sign: 忯ᒦ

Bir problem gözüküyor mu hocam?
 
Zararlı yok ancak ana sayfanız Yandex, kaldırmak istersen bunları fixleyebilirsin:
Kod: 
R4 - SearchScopes: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}: [SuggestionsURL_JSON] = https://suggest.yandex.com.tr/suggest-ff.cgi?srv=ie11&uil=tr&part={searchTerms}&clid=2233630 - Yandex
R4 - SearchScopes: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}: [URL] = https://yandex.com.tr/search/?text={searchTerms}&clid=2233630 - Yandex
O22 - Task (.job): (disabled) (Not scheduled) CreateExplorerShellUnelevatedTask.job - C:\Windows\explorer.exe /NOUACCHECK
 
Murat5038 dedi:
Zararlı yok ancak ana sayfanız Yandex, kaldırmak istersen bunları fixleyebilirsin:
Kod: 
R4 - SearchScopes: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}: [SuggestionsURL_JSON] = https://suggest.yandex.com.tr/suggest-ff.cgi?srv=ie11&uil=tr&part={searchTerms}&clid=2233630 - Yandex
R4 - SearchScopes: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}: [URL] = https://yandex.com.tr/search/?text={searchTerms}&clid=2233630 - Yandex
O22 - Task (.job): (disabled) (Not scheduled) CreateExplorerShellUnelevatedTask.job - C:\Windows\explorer.exe /NOUACCHECK
Genişletmek için tıkla...
Çok teşekkür ediyorum.
 

Benzer konular

taylaan
HijackThis Log Paylaşımı
Mesaj
0
Görüntüleme
548
taylaan
taylaan
Niyazi Taşcı
Android Silinmeyen Trojan Virüsü Temizleme
Mesaj
5
Görüntüleme
5.687
quarest
quarest
Egeeymen
Kaspersky silinmeyen trojan
Mesaj
2
Görüntüleme
1.001
acv
A
B
Kaspersky Security Cloud trojan buldu
2 3
Mesaj
21
Görüntüleme
3.006
Murat5038
Murat5038
2
  • Makale
Rehber  Kaspersky Virus Removal Tool ile Zararlı Yazılım Temizliği
Mesaj
7
Görüntüleme
14.534
Windows 11 Bükücü
Windows 11 Bükücü

Technopat Haberler

Yeni konular

Yeni mesajlar

Geri
Yukarı