Trojan Şüphesi

Murat5038 · 24 Kasım 2020

İki AV, iki güvenlik yazılımın bir sistemde olmaması gerektiğini söylemediler mi bu zamana kadar size?
Kaspersky harici kaldır sistemden.

Bunları fixle:

Kod:

R4 - SearchScopes: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}: [SuggestionsURL_JSON] = https://suggest.yandex.com.tr/suggest-ff.cgi?srv=ie11&uil=tr&part={searchTerms}&clid=2233630 - Yandex
R4 - SearchScopes: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}: [URL] = https://yandex.com.tr/search/?text={searchTerms}&clid=2233630 - Yandex
O1 - Hosts: 51.68.172.243 authserver.mojang.com
O1 - Hosts: 51.68.172.243 sessionserver.mojang.com
O4 - HKCU\..\Run: [Chromium] = c:\users\pc\appdata\local\chromium\application\chrome.exe --auto-launch-at-startup --profile-directory="Default" --restore-last-session (file missing)
O4 - HKCU\..\StartupApproved\Run: [Krisp] = C:\Program Files\Krisp\Krisp.exe -s (file missing) (2020/09/11)
O22 - Task (.job): (disabled) (Not scheduled) CreateExplorerShellUnelevatedTask.job - C:\Windows\explorer.exe /NOUACCHECK
O22 - Task: (disabled) (update) \Microsoft\Windows\UpdateOrchestrator\Reboot_AC - C:\Windows\system32\MusNotification.exe /RunOnAC RebootDialog (Microsoft)
O22 - Task: (disabled) (update) \Microsoft\Windows\UpdateOrchestrator\Reboot_Battery - C:\Windows\system32\MusNotification.exe /RunOnBattery RebootDialog (Microsoft)
O22 - Task: (disabled) Adobe Acrobat Update Task - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
O22 - Task: (disabled) Antivirus Emergency Update - C:\Program Files\AVG\Antivirus\AvEmUpdate.exe
O22 - Task: (disabled) Intel PTT EK Recertification - C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_75ffca5eec865b4b\lib\IntelPTTEKRecertification.exe
O22 - Task: (disabled) Microsoft_Hardware_Launch_ipoint_exe - C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
O22 - Task: (disabled) Microsoft_Hardware_Launch_itype_exe - C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
O22 - Task: (disabled) Microsoft_Hardware_Launch_mousekeyboardcenter_exe - C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe
O22 - Task: (disabled) Microsoft_MKC_Logon_Task_ceip.exe - C:\Program Files\Microsoft Mouse and Keyboard Center\ceip.exe
O22 - Task: (disabled) Microsoft_MKC_Logon_Task_ipoint.exe - C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
O22 - Task: (disabled) Microsoft_MKC_Logon_Task_itype.exe - C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
O22 - Task: (disabled) StartDVR - C:\Program Files\AMD\CNext\CNext\RSServCmd.exe
O22 - Task: (disabled) \S-1-5-21-3362390023-2135889934-3111012709-1001\DataSenseLiveTileTask - C:\Windows\System32\DataUsageLiveTileTask.exe
O22 - Task: (telemetry) \Microsoft\Office\Office 15 Subscription Heartbeat - C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe (file missing)
O22 - Task: (telemetry) \Microsoft\Office\OfficeTelemetryAgentFallBack2016 - C:\Program Files\Microsoft Office\Office16\msoia.exe scan upload mininterval:2880 (Microsoft)
O22 - Task: (telemetry) \Microsoft\Office\OfficeTelemetryAgentLogOn2016 - C:\Program Files\Microsoft Office\Office16\msoia.exe scan upload (Microsoft)
O22 - Task: (update) \Microsoft\Windows\UpdateOrchestrator\USO_UxBroker - C:\Windows\system32\MusNotification.exe (Microsoft)
O22 - Task: \AVG\Overseer - C:\Program Files\Common Files\AVG\Overseer\overseer.exe /from_scheduler:1

DyaLto · 25 Kasım 2020

Murat5038 dedi:

İki av, iki güvenlik yazılımın bir sistemde olmaması gerektiğini söylemediler mi bu zamana kadar size?
Kaspersky harici kaldır sistemden.

bunları fixle:

Kod:

R4 - SearchScopes: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}: [SuggestionsURL_JSON] = https://suggest.yandex.com.tr/suggest-ff.cgi?srv=ie11&uil=tr&part={searchTerms}&clid=2233630 - Yandex
R4 - SearchScopes: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}: [URL] = https://yandex.com.tr/search/?text={searchTerms}&clid=2233630 - Yandex
O1 - Hosts: 51.68.172.243 authserver.mojang.com.
O1 - Hosts: 51.68.172.243 sessionserver.mojang.com.
O4 - HKCU\..\Run: [Chromium] = c:\users\pc\appdata\local\chromium\application\chrome.exe --auto-launch-at-startup --profile-directory="Default" --restore-last-session (file missing)
O4 - HKCU\..\StartupApproved\Run: [Krisp] = C:\Program Files\Krisp\Krisp.exe -s (file missing) (2020/09/11)
O22 - Task (.job): (disabled) (Not scheduled) CreateExplorerShellUnelevatedTask.job - C:\Windows\explorer.exe /NOUACCHECK.
O22 - Task: (disabled) (update) \Microsoft\Windows\UpdateOrchestrator\Reboot_AC - C:\Windows\system32\MusNotification.exe /RunOnAC RebootDialog (Microsoft)
O22 - Task: (disabled) (update) \Microsoft\Windows\UpdateOrchestrator\Reboot_Battery - C:\Windows\system32\MusNotification.exe /RunOnBattery RebootDialog (Microsoft)
O22 - Task: (disabled) Adobe Acrobat Update Task - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe.
O22 - Task: (disabled) Antivirus Emergency Update - C:\Program Files\AVG\Antivirus\AvEmUpdate.exe.
O22 - Task: (disabled) Intel PTT EK Recertification - C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_75ffca5eec865b4b\lib\IntelPTTEKRecertification.exe.
O22 - Task: (disabled) Microsoft_Hardware_Launch_ipoint_exe - C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe.
O22 - Task: (disabled) Microsoft_Hardware_Launch_itype_exe - C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe.
O22 - Task: (disabled) Microsoft_Hardware_Launch_mousekeyboardcenter_exe - C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe.
O22 - Task: (disabled) Microsoft_MKC_Logon_Task_ceip.exe - C:\Program Files\Microsoft Mouse and Keyboard Center\ceip.exe.
O22 - Task: (disabled) Microsoft_MKC_Logon_Task_ipoint.exe - C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe.
O22 - Task: (disabled) Microsoft_MKC_Logon_Task_itype.exe - C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe.
O22 - Task: (disabled) StartDVR - C:\Program Files\AMD\CNext\CNext\RSServCmd.exe.
O22 - Task: (disabled) \S-1-5-21-3362390023-2135889934-3111012709-1001\DataSenseLiveTileTask - C:\Windows\System32\DataUsageLiveTileTask.exe.
O22 - Task: (telemetry) \Microsoft\Office\Office 15 Subscription Heartbeat - C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe (file missing)
O22 - Task: (telemetry) \Microsoft\Office\OfficeTelemetryAgentFallBack2016 - C:\Program Files\Microsoft Office\Office16\msoia.exe scan upload mininterval:2880 (Microsoft)
O22 - Task: (telemetry) \Microsoft\Office\OfficeTelemetryAgentLogOn2016 - C:\Program Files\Microsoft Office\Office16\msoia.exe scan upload (Microsoft)
O22 - Task: (update) \Microsoft\Windows\UpdateOrchestrator\USO_UxBroker - C:\Windows\system32\MusNotification.exe (Microsoft)
O22 - Task: \AVG\Overseer - C:\Program Files\Common Files\AVG\Overseer\overseer.exe /from_scheduler:1.
[/CO.
[QUOTE="Murat5038, post: 8025211, member: 3728"]
İki AV, iki güvenlik yazılımın bir sistemde olmaması gerektiğini söylemediler mi bu zamana kadar size?
Kaspersky harici kaldır sistemden.

Bunları fixle:
[CODE]R4 - SearchScopes: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}: [SuggestionsURL_JSON] = https://suggest.yandex.com.tr/suggest-ff.cgi?srv=ie11&uil=tr&part={searchTerms}&clid=2233630 - Yandex
R4 - SearchScopes: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}: [URL] = https://yandex.com.tr/search/?text={searchTerms}&clid=2233630 - Yandex
O1 - Hosts: 51.68.172.243 authserver.mojang.com.
O1 - Hosts: 51.68.172.243 sessionserver.mojang.com.
O4 - HKCU\..\Run: [Chromium] = c:\users\pc\appdata\local\chromium\application\chrome.exe --auto-launch-at-startup --profile-directory="Default" --restore-last-session (file missing)
O4 - HKCU\..\StartupApproved\Run: [Krisp] = C:\Program Files\Krisp\Krisp.exe -s (file missing) (2020/09/11)
O22 - Task (.job): (disabled) (Not scheduled) CreateExplorerShellUnelevatedTask.job - C:\Windows\explorer.exe /NOUACCHECK.
O22 - Task: (disabled) (update) \Microsoft\Windows\UpdateOrchestrator\Reboot_AC - C:\Windows\system32\MusNotification.exe /RunOnAC RebootDialog (Microsoft)
O22 - Task: (disabled) (update) \Microsoft\Windows\UpdateOrchestrator\Reboot_Battery - C:\Windows\system32\MusNotification.exe /RunOnBattery RebootDialog (Microsoft)
O22 - Task: (disabled) Adobe Acrobat Update Task - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe.
O22 - Task: (disabled) Antivirus Emergency Update - C:\Program Files\AVG\Antivirus\AvEmUpdate.exe.
O22 - Task: (disabled) Intel PTT EK Recertification - C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_75ffca5eec865b4b\lib\IntelPTTEKRecertification.exe.
O22 - Task: (disabled) Microsoft_Hardware_Launch_ipoint_exe - C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe.
O22 - Task: (disabled) Microsoft_Hardware_Launch_itype_exe - C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe.
O22 - Task: (disabled) Microsoft_Hardware_Launch_mousekeyboardcenter_exe - C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe.
O22 - Task: (disabled) Microsoft_MKC_Logon_Task_ceip.exe - C:\Program Files\Microsoft Mouse and Keyboard Center\ceip.exe.
O22 - Task: (disabled) Microsoft_MKC_Logon_Task_ipoint.exe - C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe.
O22 - Task: (disabled) Microsoft_MKC_Logon_Task_itype.exe - C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe.
O22 - Task: (disabled) StartDVR - C:\Program Files\AMD\CNext\CNext\RSServCmd.exe.
O22 - Task: (disabled) \S-1-5-21-3362390023-2135889934-3111012709-1001\DataSenseLiveTileTask - C:\Windows\System32\DataUsageLiveTileTask.exe.
O22 - Task: (telemetry) \Microsoft\Office\Office 15 Subscription Heartbeat - C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe (file missing)
O22 - Task: (telemetry) \Microsoft\Office\OfficeTelemetryAgentFallBack2016 - C:\Program Files\Microsoft Office\Office16\msoia.exe scan upload mininterval:2880 (Microsoft)
O22 - Task: (telemetry) \Microsoft\Office\OfficeTelemetryAgentLogOn2016 - C:\Program Files\Microsoft Office\Office16\msoia.exe scan upload (Microsoft)
O22 - Task: (update) \Microsoft\Windows\UpdateOrchestrator\USO_UxBroker - C:\Windows\system32\MusNotification.exe (Microsoft)
O22 - Task: \AVG\Overseer - C:\Program Files\Common Files\AVG\Overseer\overseer.exe /from_scheduler:1.

Bilmiyordum yeni öğrendim teşekkür ederim. Ayrıca fixlemek nasıl oluyor onu da anlamadım kusura bakmayın.
Kaspersky hariç hepsini kaldırdım.

Murat5038 · 25 Kasım 2020

DyaLto dedi:
Ayrıca fixlemek nasıl oluyor onu da anlamadım

Rehberi okursan anlarsın.

yiitpepek · 25 Kasım 2020

DyaLto dedi:
Evet tüm USB girişlerini denedim. Windows kullanıyorum. HiJackThis.log bu şekilde paylaşacağım değil mi?
Gerçekten acil ihtiyacım var cevaba.

Eğer fare pille çalışıyorsa pilini değişin laptopta öyle bir şey olmuştu ben pili değiştim geçti.

DyaLto · 25 Kasım 2020

yiitpepek dedi:
Eğer fare pille çalışıyorsa pilini değişin laptopta öyle bir şey olmuştu ben pili değiştim geçti.

Kablolu olduğunu söylemiştim

Murat5038 dedi:
Rehberi okursan anlarsın.

Hangi rehberi?

Hypeer · 25 Kasım 2020

Kullandığın dandik bir marka mouse. Bu kadar paranoyak olmanıza gerek yok. Başka bir mouse kullanın.

DyaLto · 25 Kasım 2020

Hypeer dedi:
Kullandığın dandik bir marka mouse. Bu kadar paranoyak olmanıza gerek yok. Başka bir mouse kullanın.

Sağolun gerçekten teşekkür ederim evet biraz paranoya yapmış olabilirim bilgisayarı yeni topladım tekrardan teşekkür ederim iyi forumlar.

Trojan Şüphesi

Murat5038

Yottapat!

DyaLto

Picopat

Murat5038

Yottapat!

yiitpepek

Kilopat

DyaLto

Picopat

Hypeer

Hectopat

DyaLto

Picopat