Kaspersky "Trojan.Win32.Hosts2.gen" tespiti

Syfe

Centipat
Katılım
15 Kasım 2021
Mesajlar
17
Daha fazla  
Cinsiyet
Kadın
Bulduğu Trojan'ın adı: Trojan.Win32.Hosts2.gen. Konum: C:\Windows\System32\drivers\etc\hosts.

3 4 aydir bilgisayarimda bu virüs var. Kaspersky'a taratiyorum ve bilgisayari yeniden baslattigimda duzeleceği söyleniyor fakat uygulamaya girdigimde tekrar yeniden baslatmam gerektigini soyluyor. Host'u sifirlamaya calistim ama administrator izni istiyor.

Screenshot_3.png
Screenshot_1.png
 
Son düzenleyen: Moderatör:
Bulduğu Trojan'ın adı: Trojan.Win32.Hosts2.gen. Konum: C:\Windows\System32\drivers\etc\hosts.

3 4 aydir bilgisayarimda bu virüs var. Kaspersky'a taratiyorum ve bilgisayari yeniden baslattigimda duzeleceği söyleniyor fakat uygulamaya girdigimde tekrar yeniden baslatmam gerektigini soyluyor. Host'u sifirlamaya calistim ama administrator izni istiyor.

Eki Görüntüle 1216157Eki Görüntüle 1216158

Güvenli modda deneyin bir de.
 
Aşağıdaki raporu paylaşın.

 
Aşağıdaki raporu paylaşın.

[CODE title="tarama sonuclari"]Logfile of HiJackThis Fork by Alex Dragokas v.2.10.0.10

Platform: x64 Windows 10 (Pro), 10.0.19042.928 (ReleaseId: 2009, 20H2), Service Pack: 0
Time: 18.11.2021 - 02:00 (UTC+03:00)
Language: OS: Turkish (0x41F). Display: Turkish (0x41F). Non-Unicode: Turkish (0x41F)
Elevated: Yes
Ran by: Arda (group: Administrators) on DESKTOP-B5VR4HK, FirstRun: yes

Chrome: 96.0.4664.45
Internet Explorer: 11.0.19041.1
Default: "C:\Program Files\Google\Chrome\Application\chrome.exe" --single-argument %1 (Google Chrome)

Boot mode: Normal

Running processes:
Number | Path
1 C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
1 C:\Program Files (x86)\Common Files\Steam\SteamService.exe
1 C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleCrashHandler.exe
1 C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleCrashHandler64.exe
1 C:\Program Files (x86)\JAMESDONKEY\JAMESDONKEY Audio 7.1\JAMESDONKEY Audio 7.1.exe
1 C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 21.3\avp.exe
1 C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 21.3\avpui.exe
1 C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
1 C:\Program Files (x86)\Origin\OriginWebHelperService.exe
1 C:\Program Files (x86)\Skillbrains\lightshot\5.5.0.7\Lightshot.exe
7 C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
1 C:\Program Files (x86)\Steam\steam.exe
1 C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\wallpaper32.exe
9 C:\Program Files\Google\Chrome\Application\chrome.exe
3 C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
3 C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
1 C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
1 C:\Program Files\NZXT CAM\resources\app.asar.unpacked\node_modules\@nzxt\rust-cam\dist\native\target\release\service.exe
1 C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
1 C:\Program Files\Red Giant\Services\Red Giant Service.exe
1 C:\Program Files\Riot Vanguard\vgtray.exe
1 C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_3.2105.19601.0_x64__8wekyb3d8bbwe\Cortana.exe
1 C:\Program Files\WindowsApps\Microsoft.YourPhone_1.21042.137.0_x64__8wekyb3d8bbwe\YourPhone.exe
6 C:\Users\ahmet\AppData\Local\Discord\app-1.0.9003\Discord.exe
1 C:\Users\ahmet\AppData\Local\Programs\Opera GX\80.0.4170.91\opera_crashreporter.exe
21 C:\Users\ahmet\AppData\Local\Programs\Opera GX\opera.exe
3 C:\Users\ahmet\AppData\Roaming\PreMiD\PreMiD.exe
1 C:\Users\ahmet\Downloads\HiJackThis.exe
1 C:\Windows\explorer.exe
1 C:\Windows\System32\ApplicationFrameHost.exe
1 C:\Windows\System32\AudioDeviceService.exe
1 C:\Windows\System32\audiodg.exe
1 C:\Windows\System32\conhost.exe
2 C:\Windows\System32\csrss.exe
1 C:\Windows\System32\ctfmon.exe
2 C:\Windows\System32\dllhost.exe
2 C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_4a746d937e6a7240\Display.NvContainer\NVDisplay.Container.exe
1 C:\Windows\System32\dwm.exe
2 C:\Windows\System32\fontdrvhost.exe
1 C:\Windows\System32\lsass.exe
1 C:\Windows\System32\oobe\UserOOBEBroker.exe
1 C:\Windows\System32\rundll32.exe
5 C:\Windows\System32\RuntimeBroker.exe
1 C:\Windows\System32\SearchFilterHost.exe
1 C:\Windows\System32\SearchIndexer.exe
1 C:\Windows\System32\SearchProtocolHost.exe
1 C:\Windows\System32\SecurityHealthService.exe
1 C:\Windows\System32\SecurityHealthSystray.exe
1 C:\Windows\System32\services.exe
1 C:\Windows\System32\SettingSyncHost.exe
1 C:\Windows\System32\SgrmBroker.exe
1 C:\Windows\System32\sihost.exe
1 C:\Windows\System32\smartscreen.exe
1 C:\Windows\System32\smss.exe
1 C:\Windows\System32\spoolsv.exe
67 C:\Windows\System32\svchost.exe
1 C:\Windows\System32\taskhostw.exe
1 C:\Windows\System32\wbem\WmiPrvSE.exe
1 C:\Windows\System32\wininit.exe
1 C:\Windows\System32\winlogon.exe
1 C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
1 C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
1 C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\TextInputHost.exe
1 C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
1 C:\Windows\SysWOW64\wbem\WmiPrvSE.exe

R4 - SearchScopes: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}: [SuggestionsURL_JSON] = https://suggest.yandex.com.tr/suggest-ff.cgi?srv=ie11&uil=tr&part={searchTerms}&clid=2233630 - Yandex
R4 - SearchScopes: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}: = https://yandex.com.tr/search/?te...ijackthis-log-paylasimi-ve-coezuemleri.30649/
[/QUOTE]

Bilgisayari yeniden baslatmadan tarattim ama sorun olur mu yardimci olursaniz çok sevinirim.
Hosts dosyalarının bütünlüğü bozulmuş veya değiştirilmiş. @acv hocamım dediğini yapın.


Uygulayabilirsiniz.

Host dosyasini sifirlayamiyorum yönetici izni istiyor fakat izini alamadim.
 
Son düzenleme:

Yeni konular

Geri
Yukarı