Sistemdeki zararlılar "izin verilen tehdit" kısmından çıkartılamıyor

Cool File viewer'ı kendi isteğimle kurdum fakat diğerleri hakkında bir fikrim yok...
İkisini kaldırın, Opera'daki verilerinizi yedekleyip Opera'yı da kaldırın.

Aşağıdaki kodu kopyalayıp FRST'den fix tuşuna basın. Fixlog.txt adında bir dosya oluşması gerek, onu burada paylaşın.

Kod:
Start::
(Intel Corporation -> Intel Corporation) C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
GroupPolicy: Restriction - Chrome <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {13AA30DA-260F-430E-91DB-0CBCDF4D1AD1} - System32\Tasks\Opera scheduled Autoupdate 1639036706 => C:\Users\percy\AppData\Local\Programs\Opera\launcher.exe --scheduledautoupdate $(Arg0) (No File)
Task: {956C64DB-7ECC-4101-B679-87F0425AE26F} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe --automatic (No File)
Task: {F0C06D77-3429-41A2-8D19-CD99212F3615} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [3075936 2021-07-21] (Intel Corporation -> Intel Corporation)
Task: {F272CFEE-7931-4D8B-B460-2CF39EA33AFE} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132 => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [3075936 2021-07-21] (Intel Corporation -> Intel Corporation)
Task: {FD95B684-239B-4F85-98B6-B818B83A6F6D} - System32\Tasks\USER_ESRV_SVC_QUEENCREEK => "C:\Windows\System32\Wscript.exe" //B //NoLogo "C:\Program Files\Intel\SUR\QUEENCREEK\x64\task.vbs"
Tcpip\Parameters: [DhcpNameServer] 192.168.30.223 192.168.30.8
Tcpip\..\Interfaces\{4ce2f601-daa3-4d72-bcf4-ef5fe3c5ce27}: [DhcpNameServer] 192.168.30.223 192.168.30.8
Edge HKLM-x32\...\Edge\Extension: [odbmjgikedenicicookngdckhkjbebpd]
CHR HomePage: Default -> hxxps://find-it.pro/?utm_source=distr_m
CHR StartupUrls: Default -> "hxxps://www.google.com.tr/","hxxps://find-it.pro/?utm_source=distr_m"
CHR DefaultSearchURL: Default -> hxxp://extension-search.online/?q={searchTerms}
CHR DefaultSuggestURL: Default -> hxxp://extension-search.online/suggest/get?part={searchTerms}
CHR Extension: (Find-it.Pro Search) - C:\Users\percy\AppData\Local\Google\Chrome\User Data\Default\Extensions\meejmcfbiapijdfaadackoblffmidlig [2021-12-24]
CHR Extension: (Adblocker for Youtube™) - C:\Users\percy\AppData\Local\Google\Chrome\User Data\Default\Extensions\gakekacnalcpkgkogmbmknlcdikjghba [2021-12-09] [UpdateUrl:hxxps://clients80.google.com/service/update2/crx] <==== ATTENTION
CHR Extension: (Google Sheets Offline) - C:\Users\percy\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbenffkgdeokfgjbbjibklflbaeelinh [2021-12-09] [UpdateUrl:hxxps://clients69.google.com/service/update2/crx] <==== ATTENTION
S2 cphs; %SystemRoot%\System32\IntelCpHeciSvc.exe [X]
2021-12-09 11:00 - 2021-12-09 21:06 - 000000004 _____ C:\ProgramData\rc.dat
2021-12-09 10:59 - 2021-12-09 23:41 - 000000004 _____ C:\ProgramData\lock.dat
2021-12-09 10:59 - 2021-12-09 23:38 - 000000040 _____ C:\ProgramData\lir.bats
2021-12-09 10:59 - 2021-12-09 10:59 - 000000008 _____ C:\ProgramData\ts.dat
2021-12-09 10:58 - 2021-12-11 10:54 - 000000000 ____D C:\Users\percy\AppData\Roaming\neofed
2021-12-09 10:58 - 2021-12-11 10:54 - 000000000 ____D C:\Program Files (x86)\lOwFCGmbHyUn
2021-12-09 10:58 - 2021-12-11 10:51 - 000000000 ____D C:\Program Files (x86)\zVogHLNYxpNlC
2021-12-09 10:58 - 2021-12-11 10:51 - 000000000 ____D C:\Program Files (x86)\yAWmtmExGoPU2
2021-12-09 10:58 - 2021-12-11 10:51 - 000000000 ____D C:\Program Files (x86)\iWImyDASlsYzxxjhYER
2021-12-09 10:58 - 2021-12-11 10:51 - 000000000 ____D C:\Program Files (x86)\cbRHKOfZU
2021-12-09 10:58 - 2021-12-09 18:07 - 000000000 ____D C:\Users\percy\AppData\Local\Opera Software
2021-12-09 10:58 - 2021-12-09 10:58 - 000004208 _____ C:\Windows\system32\Tasks\Opera scheduled Autoupdate 1639036706
2021-12-09 10:58 - 2021-12-09 10:58 - 000000000 ____D C:\Users\percy\AppData\Roaming\queasy
2021-12-09 10:58 - 2021-12-09 10:58 - 000000000 ____D C:\Users\percy\AppData\Roaming\NCH Software
2021-12-09 10:58 - 2021-12-09 10:58 - 000000000 ____D C:\Users\percy\AppData\Local\Yandex
2021-12-09 10:58 - 2021-12-09 10:58 - 000000000 ____D C:\Program Files (x86)\foler
2021-12-09 10:58 - 2021-12-09 10:58 - 000000000 _____ C:\ProgramData\sqlite3.dll
2021-12-09 10:57 - 2021-12-09 21:08 - 000000000 ____D C:\ProgramData\MemoryOptimizer
2021-12-09 10:57 - 2021-12-09 21:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneKeyManager
2021-12-09 10:57 - 2021-12-09 21:07 - 000000000 ____D C:\Program Files (x86)\OneKeyManager
2021-12-09 10:57 - 2021-12-09 18:07 - 000000000 ____D C:\Users\percy\AppData\Roaming\Opera Software
2021-12-09 10:57 - 2021-12-09 10:58 - 000004732 __RSH C:\ProgramData\ntuser.pol
2021-12-09 10:56 - 2021-12-11 10:17 - 000000000 ____D C:\Program Files (x86)\Qui
C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-559131013-3136940072-3681618654-1001
Virustotal: C:\Windows\system32\DrtmAuthTxt.wim;C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
Intel Driver && Support Assistant (HKLM-x32\...\{9E0D27E1-B7C9-4D9E-BADF-67CC919A9EAC}) (Version: 21.7.50.3 - Intel) Hidden
AlternateDataStreams: C:\ProgramData\lir.bats:286F7FC5C6 [10]
AlternateDataStreams: C:\ProgramData\lock.dat:B839BDBBBE [10]
2019-12-07 12:14 - 2019-12-07 12:12 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts
End::
 
İkisini kaldırın, Opera'daki verilerinizi yedekleyip Opera'yı da kaldırın.

Aşağıdaki kodu kopyalayıp FRST'den fix tuşuna basın. Fixlog.txt adında bir dosya oluşması gerek, onu burada paylaşın.
Bilgisayarımda Opera'yı göremiyorum, görev yöneticisinde de yok arattığımda da karşıma çıkmıyor. VideoAdsBlocker'ı kaldırmaya çalıştığımda ekrana şu uyarıyı veriyor.
 

Dosya Ekleri

  • 16405367547864487090042890272751.jpg
    16405367547864487090042890272751.jpg
    76,4 KB · Görüntüleme: 37

Yeni konular

Geri
Yukarı