Bilgisayar iki işlem yaptığımda takılıyor

ComboFix 14-03-13.01 - nkfvas 15.03.2014  17:51:20.1.4 - x86 
  Microsoft Windows 7 Ultimate   6.1.7601.1.1254.90.1033.18.2047.1050 [GMT 2:00] 
  Running from: c:\users\nkfvas\Downloads\ComboFix.exe 
  AV: ESET Smart Security 5.0 *Disabled/Outdated* {77DEAFED-8149-104B-25A1-21771CA47CD1} 
  FW: ESET Kişisel güvenlik duvarı *Enabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA} 
  SP: ESET Smart Security 5.0 *Disabled/Outdated* {CCBF4E09-A773-1FC5-1F11-1A056723366C} 
  SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} 
   * Resident AV is active 
  . 
  . 
  . 
  (((((((((((((((((((((((((((((((((((((((   Other Deletions   ))))))))))))))))))))))))))))))))))))))))))))))))) 
  . 
  . 
  c:\program files\StartSearch plugin 
  c:\program files\StartSearch plugin\IEhelperActiveX.dll 
  c:\program files\StartSearch plugin\ssBarLcher.dll 
  c:\program files\StartSearch plugin\StartBar.dll 
  c:\program files\StartSearch plugin\uninst.exe 
  c:\program files\StartSearch plugin\vshareplg.crx 
  c:\windows\Installer\{bafd05cd-d411-ada3-a17d-4b9150d6caf0} 
  c:\windows\Installer\{bafd05cd-d411-ada3-a17d-4b9150d6caf0}\@ 
  c:\windows\Installer\{bafd05cd-d411-ada3-a17d-4b9150d6caf0}\n 
  c:\windows\Installer\{bafd05cd-d411-ada3-a17d-4b9150d6caf0}\U\00000001.@ 
  c:\windows\Installer\{bafd05cd-d411-ada3-a17d-4b9150d6caf0}\U\00000002.@ 
  c:\windows\Installer\{bafd05cd-d411-ada3-a17d-4b9150d6caf0}\U\80000000.@ 
  c:\windows\Installer\{bafd05cd-d411-ada3-a17d-4b9150d6caf0}\U\80000001.@ 
  c:\windows\Installer\{bafd05cd-d411-ada3-a17d-4b9150d6caf0}\U\800000cb.@ 
  c:\windows\XSxS 
  . 
  c:\windows\explorer.exe . . . is infected!! 
  . 
  . 
  (((((((((((((((((((((((((   Files Created from 2014-02-15 to 2014-03-15  ))))))))))))))))))))))))))))))) 
  . 
  . 
  2014-03-15 16:01 . 2014-03-15 16:03	--------	d-----w-	c:\users\nkfvas\AppData\Local\temp 
  2014-03-15 16:01 . 2014-03-15 16:01	--------	d-----w-	c:\users\Default\AppData\Local\temp 
  2014-03-14 13:53 . 2014-03-14 13:53	--------	d-----w-	c:\program files\HD Tune Pro 
  2014-03-13 17:43 . 2014-03-14 14:02	--------	d-----w-	c:\users\nkfvas\AppData\Roaming\HD Tune Pro 
  2014-03-13 17:43 . 2014-03-13 17:43	--------	d-----w-	c:\program files\Xenocode 
  2014-03-04 15:52 . 2014-03-04 15:52	--------	d-----w-	c:\users\nkfvas\AppData\Roaming\BANDISOFT 
  2014-03-04 15:52 . 2014-03-04 15:52	--------	d-----w-	c:\program files\Bandicam 
  2014-03-04 15:52 . 2014-03-04 15:52	--------	d-----w-	c:\program files\BandiMPEG1 
  2014-03-04 15:46 . 2014-03-04 15:46	--------	d-----w-	c:\program files\Common Files\Java 
  2014-03-04 15:45 . 2014-03-04 15:44	94632	----a-w-	c:\windows\system32\WindowsAccessBridge.dll 
  2014-02-27 12:43 . 2014-02-27 12:43	--------	d-----w-	c:\program files\iPod 
  2014-02-27 12:43 . 2014-02-27 12:44	--------	d-----w-	c:\programdata\188F1432-103A-4ffb-80F1-36B633C5C9E1 
  2014-02-22 18:04 . 2014-02-22 18:04	--------	d-----w-	c:\users\nkfvas\AppData\Roaming\HPAppData 
  . 
  . 
  . 
  ((((((((((((((((((((((((((((((((((((((((   Find3M Report   )))))))))))))))))))))))))))))))))))))))))))))))))))) 
  . 
  2014-03-11 21:28 . 2012-05-02 12:37	692616	----a-w-	c:\windows\system32\FlashPlayerApp.exe 
  2014-03-11 21:28 . 2012-05-02 12:37	71048	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl 
  2014-02-13 08:21 . 2014-02-13 08:21	51024	----a-w-	c:\windows\system32\vcomp90.dll 
  2014-01-29 09:53 . 2012-05-02 12:33	324096	----a-w-	c:\windows\system32\drivers\sptd.sys 
  . 
  . 
  ------- Sigcheck ------- 
  Note: Unsigned files aren't necessarily malware. 
  . 
  [-] 2009-07-14 01:14 . !HASH: COULD NOT OPEN FILE !!!!! . 259072 . . [------] . . c:\windows\System32\services.exe 
  [7] 2009-07-14 . 5F1B6A9C35D3D5CA72D6D6FDEF9747D6 . 259072 . . [6.1.7600.16385] . . c:\windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_cf36168b2e9c967b\services.exe 
  . 
  [-] 2012-12-05 . F6A6731BC0506FDFF86FBC11E6722DAE . 2616320 . . [6.1.7600.16385] . . c:\windows\explorer.exe 
  [7] 2011-02-26 . 255CF508D7CFB10E0794D6AC93280BD8 . 2614784 . . [6.1.7600.16385] . . c:\windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_525b5180f3f95373\explorer.exe 
  [7] 2011-02-26 . 2AF58D15EDC06EC6FDACCE1F19482BBF . 2614784 . . [6.1.7600.16385] . . c:\windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_51a3a583dafd0cef\explorer.exe 
  [7] 2011-02-26 . 0FB9C74046656D1579A64660AD67B746 . 2616320 . . [6.1.7600.16385] . . c:\windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_54149f9ef14031fc\explorer.exe 
  [7] 2011-02-25 . 8B88EBBB05A0E56B7DCC708498C02B3E . 2616320 . . [6.1.7600.16385] . . c:\windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_5389023fd8245f84\explorer.exe 
  [7] 2010-11-20 . 40D777B7A95E00593EB1568C68514493 . 2616320 . . [6.1.7600.16385] . . c:\windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_53bc10fdd7fe87ca\explorer.exe 
  [7] 2009-11-22 . 2626FC9755BE22F805D3CFA0CE3EE727 . 2614272 . . [6.1.7600.16385] . . c:\windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_51a66d6ddafc2ed1\explorer.exe 
  [7] 2009-11-22 . C76153C7ECA00FA852BB0C193378F917 . 2614272 . . [6.1.7600.16385] . . c:\windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_52283b2af41f3691\explorer.exe 
  [7] 2009-11-22 . FC89FACA0473641CB625EDA9277D0885 . 2613248 . . [6.1.7600.16385] . . c:\windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16434_none_51c00e6ddae85c4b\explorer.exe 
  [7] 2009-11-22 . 00B0358734CAA32C39D181FE6916B178 . 2613248 . . [6.1.7600.16385] . . c:\windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20542_none_523cdab8f40fe558\explorer.exe 
  [7] 2009-11-22 . B95EEB0F4E5EFBF1038A35B3351CF047 . 2613248 . . [6.1.7600.16385] . . c:\windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_51e07e31dad00878\explorer.exe 
  [7] 2009-11-22 . 9FF6C4C91A3711C0A3B18F87B08B518D . 2613248 . . [6.1.7600.16385] . . c:\windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_526619d4f3f142e6\explorer.exe 
  [7] 2009-07-14 . 15BC38A7492BEFE831966ADB477CF76F . 2613248 . . [6.1.7600.16385] . . c:\windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_518afd35db100430\explorer.exe 
  . 
  (((((((((((((((((((((((((((((((((((((   Reg Loading Points   )))))))))))))))))))))))))))))))))))))))))))))))))) 
  . 
  . 
  *Note* empty entries & legit default entries are not shown  
  REGEDIT4 
  . 
  [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\IDM Shell Extension] 
  @="{CDC95B92-E27C-4745-A8C5-64A52A78855D}" 
  [HKEY_CLASSES_ROOT\CLSID\{CDC95B92-E27C-4745-A8C5-64A52A78855D}] 
  2012-11-15 23:07	21904	----a-w-	c:\program files\Internet Download Manager\IDMShellExt.dll 
  . 
  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 
  "uTorrent"="c:\users\nkfvas\AppData\Roaming\uTorrent\uTorrent.exe" [2014-03-14 1208152] 
  "Octoshape Streaming Services"="c:\users\nkfvas\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe" [2011-03-24 107800] 
  "IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2013-04-05 3573624] 
  "Spotify Web Helper"="c:\users\nkfvas\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2014-01-27 1171968] 
  "DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2013-10-28 3675352] 
  . 
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 
  "AMD AVT"="start AMD Accelerated Video Transcoding device initialization" [X] 
  "BigDog303"="c:\windows\VM303_STI.EXE" [2006-01-24 61440] 
  "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2009-10-28 7862816] 
  "VMSnap3"="c:\windows\VMSnap3.exe" [2006-07-18 49152] 
  "StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-04-05 641664] 
  "APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2014-02-12 43848] 
  "itype"="c:\program files\Microsoft IntelliType Pro\itype.exe" [2011-08-10 1313640] 
  "egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2011-09-22 3080264] 
  "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2011-05-09 49208] 
  "Domino"="c:\windows\Domino.exe" [2006-07-04 49152] 
  "GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016] 
  "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2013-05-01 421888] 
  "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2014-02-21 152392] 
  "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336] 
  . 
  c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ 
  HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2009-11-18 275072] 
  . 
  [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] 
  "ConsentPromptBehaviorAdmin"= 0 (0x0) 
  "ConsentPromptBehaviorUser"= 3 (0x3) 
  "EnableLUA"= 0 (0x0) 
  "EnableUIADesktopToggle"= 0 (0x0) 
  "PromptOnSecureDesktop"= 0 (0x0) 
  . 
  [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] 
  "aux"=wdmaud.drv 
  . 
  [HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^ZyXEL G-202 Wireless Adapter Utility.lnk] 
  path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ZyXEL G-202 Wireless Adapter Utility.lnk 
  backup=c:\windows\pss\ZyXEL G-202 Wireless Adapter Utility.lnk.CommonStartup 
  backupExtension=.CommonStartup 
  . 
  [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite] 
  2013-10-28 08:29	3675352	----a-w-	c:\program files\DAEMON Tools Lite\DTLite.exe 
  . 
  [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Domino] 
  2006-07-04 11:16	49152	----a-w-	c:\windows\Domino.exe 
  . 
  [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor] 
  2006-10-26 22:47	31016	----a-w-	c:\program files\Microsoft Office\Office12\GrooveMonitor.exe 
  . 
  [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Octoshape Streaming Services] 
  2011-03-24 15:11	107800	----a-w-	c:\users\nkfvas\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe 
  . 
  [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype] 
  2013-02-28 15:50	18642024	----a-r-	c:\program files\Skype\Phone\Skype.exe 
  . 
  [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify] 
  2014-01-27 14:54	6118400	----a-w-	c:\users\nkfvas\AppData\Roaming\Spotify\spotify.exe 
  . 
  [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify Web Helper] 
  2014-01-27 14:54	1171968	----a-w-	c:\users\nkfvas\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe 
  . 
  [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent] 
  2013-05-02 17:57	802136	----a-w-	c:\program files\uTorrent\uTorrent.exe 
  . 
  R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-02-28 161384] 
  R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl.sys [2011-08-02 18432] 
  R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-20 15872] 
  R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x] 
  R3 TsUsbFlt;TsUsbFlt; [x] 
  R4 MSSQLServerADHelper100;SQL Active Directory Helper Service;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2012-02-16 44896] 
  R4 RsFx0103;RsFx0103 Driver;c:\windows\system32\DRIVERS\RsFx0103.sys [2009-03-30 239336] 
  R4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS);c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2009-03-30 366936] 
  S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys [2011-08-04 50624] 
  S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x] 
  S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2011-08-04 118104] 
  S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys [2011-08-04 33656] 
  S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2012-04-06 217600] 
  S2 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-03-03 1363584] 
  S2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-03-03 1748608] 
  S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2011-08-09 163424] 
  S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [2011-09-22 974944] 
  S2 PDF Architect Helper Service;PDF Architect Helper Service;c:\program files\PDF Architect\HelperService.exe [2013-04-08 1320496] 
  S2 PDF Architect Service;PDF Architect Service;c:\program files\PDF Architect\ConversionService.exe [2013-04-08 799280] 
  S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW73.sys [2013-02-14 79872] 
  S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2009-07-13 139776] 
  . 
  . 
  --- Other Services/Drivers In Memory --- 
  . 
  *NewlyCreated* - IDMWFP 
  *NewlyCreated* - WS2IFSL 
  . 
  [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] 
  HPZ12	REG_MULTI_SZ   	Pml Driver HPZ12 Net Driver HPZ12 
  HPService	REG_MULTI_SZ   	HPSLPSVC 
  hpdevmgmt	REG_MULTI_SZ   	hpqcxs08 hpqddsvc 
  . 
  Contents of the 'Scheduled Tasks' folder 
  . 
  2014-03-15 c:\windows\Tasks\Adobe Flash Player Updater.job 
  - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-02 21:28] 
  . 
  2014-03-14 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4083600464-3071531930-41312952-1001Core.job 
  - c:\users\nkfvas\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-03 22:01] 
  . 
  2014-03-15 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4083600464-3071531930-41312952-1001UA.job 
  - c:\users\nkfvas\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-03 22:01] 
  . 
  . 
  ------- Supplementary Scan ------- 
  . 
  uStart Page = hxxp://startsear.ch/?aff=2&cf=55d92d65-9457-11e1-b9db-00218512f593 
  mStart Page = hxxp://startsear.ch/?aff=2&cf=55d92d65-9457-11e1-b9db-00218512f593 
  IE: Bütün linkleri IDM ile indir - c:\program files\Internet Download Manager\IEGetAll.htm 
  IE: IDM ile indir - c:\program files\Internet Download Manager\IEExt.htm 
  IE: Microsoft Excel'e &Ver - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000 
  TCP: DhcpNameServer = 192.168.1.1 0.0.0.0 
  TCP: Interfaces\{60FEB0FD-1A7E-4F4C-80B2-F0DD57321429}: NameServer = 8.8.8.8,8.8.4.4 
  FF - ProfilePath - c:\users\nkfvas\AppData\Roaming\Mozilla\Firefox\Profiles\5dkf6swr.default\ 
  FF - prefs.js: browser.search.selectedEngine - Web Search 
  FF - prefs.js: browser.startup.homepage - hxxps://www.google.com.tr/ 
  FF - prefs.js: keyword.URL - hxxp://yandex.com.tr/yandsearch?clid=1763233&text= 
  FF - ExtSQL: !HIDDEN! 2012-05-03 19:47; smartwebprinting@hp.com; c:\program files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 
  . 
  - - - - ORPHANS REMOVED - - - - 
  . 
  URLSearchHooks-{687578b9-7132-4a7a-80e4-30ee31099e03} - (no file) 
  HKLM-Run-UnlockerAssistant - c:\program files\Unlocker\UnlockerAssistant.exe 
  MSConfigStartUp-Connectify Dispatch - c:\program files\Connectify\DispatchUI.exe 
  MSConfigStartUp-Connectify Hotspot - c:\program files\Connectify\Connectify.exe 
  MSConfigStartUp-MSN Toolbar - c:\program files\MSN Toolbar\Platform\4.0.0357.1\mswinext.exe 
  MSConfigStartUp-msnmsgr - c:\program files\Windows Live\Messenger\msnmsgr.exe 
  AddRemove-LiveVDO plugin - c:\program files\StartSearch plugin\uninst.exe 
  . 
  . 
  . 
  --------------------- LOCKED REGISTRY KEYS --------------------- 
  . 
  [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\Approved Extensions] 
  @Denied: (2) (LocalSystem) 
  "{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}"=hex:51,66,7a,6c,4c,1d,38,12,55,e2,d0, 
     7e,f8,75,36,04,cc,26,b5,2d,be,5d,85,a1 
  "{0055C089-8582-441B-A0BF-17B458C2A3A8}"=hex:51,66,7a,6c,4c,1d,38,12,e7,c3,46, 
     04,b0,cb,75,01,df,a9,54,f4,5d,9c,e7,bc 
  "{0347C33E-8762-4905-BF09-768834316C61}"=hex:51,66,7a,6c,4c,1d,38,12,50,c0,54, 
     07,50,c9,6b,0c,c0,1f,35,c8,31,6f,28,75 
  "{72853161-30C5-4D22-B7F9-0BBC1D38A37E}"=hex:51,66,7a,6c,4c,1d,38,12,0f,32,96, 
     76,f7,7e,4c,08,c8,ef,48,fc,18,66,e7,6a 
  "{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}"=hex:51,66,7a,6c,4c,1d,38,12,d5,94,07, 
     72,c2,98,42,03,c9,fd,97,9a,f4,87,69,57 
  "{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}"=hex:51,66,7a,6c,4c,1d,38,12,4d,a0,e0, 
     7c,bc,37,84,0f,e5,41,cb,b4,b5,01,91,c9 
  "{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}"=hex:51,66,7a,6c,4c,1d,38,12,07,5b,93, 
     aa,6e,60,ba,0b,f0,6d,b2,b7,80,44,00,83 
  "{DBC80044-A445-435B-BC74-9C25C1C588A9}"=hex:51,66,7a,6c,4c,1d,38,12,2a,03,db, 
     df,77,ea,35,06,c3,62,df,65,c4,9b,cc,bd 
  "{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}"=hex:51,66,7a,6c,4c,1d,38,12,91,fc,ec, 
     fb,7c,81,45,0a,c2,d4,4d,32,e4,48,ec,42 
  "{2A541AE1-5BF6-4665-A8A3-CFA9672E4291}"=hex:51,66,7a,6c,4c,1d,38,12,8f,19,47, 
     2e,c4,15,0b,03,d7,b5,8c,e9,62,70,06,85 
  "{555D4D79-4BD2-4094-A395-CFC534424A05}"=hex:51,66,7a,6c,4c,1d,38,12,17,4e,4e, 
     51,e0,05,fa,05,dc,83,8c,85,31,1c,0e,11 
  "{FF059E31-CC5A-4E2E-BF3B-96E929D65503}"=hex:51,66,7a,6c,4c,1d,38,12,5f,9d,16, 
     fb,68,82,40,0b,c0,2d,d5,a9,2c,88,11,17 
  "{BDEADE7F-C265-11D0-BCED-00A0C90AB50F}"=hex:51,66,7a,6c,4c,1d,38,12,11,dd,f9, 
     b9,57,8c,be,54,c3,fb,43,e0,cc,54,f1,1b 
  . 
  [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration] 
  @Denied: (2) (LocalSystem) 
  "Timestamp"=hex:31,a0,32,d3,37,b6,ce,01 
  . 
  [HKEY_USERS\S-1-5-21-4083600464-3071531930-41312952-1001_Classes\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C}] 
  @Denied: (Full) (Everyone) 
  @Allowed: (Read) (RestrictedCode) 
  "scansk"=hex(0):c4,00,f7,65,1c,b1,e1,4a,cd,5d,46,2d,25,d5,ae,db,f4,ee,d5,42,31, 
     03,d0,b6,5e,0a,5a,a4,74,c7,12,41,4c,b4,8c,b0,72,32,a9,f3,00,00,00,00,00,00,\ 
  . 
  [HKEY_USERS\S-1-5-21-4083600464-3071531930-41312952-1001_Classes\CLSID\{7B8E9164-324D-4A2E-A46D-0165FB2000EC}] 
  @Denied: (Full) (Everyone) 
  @Allowed: (Read) (RestrictedCode) 
  "scansk"=hex(0):9e,c3,ad,c8,22,0a,58,b7,37,55,13,b9,9b,06,d3,c1,89,40,f8,fd,28, 
     a1,b9,ab,6e,14,41,7d,7b,3b,9c,cb,fd,25,b4,9a,47,36,b0,f2,00,00,00,00,00,00,\ 
  . 
  [HKEY_USERS\S-1-5-21-4083600464-3071531930-41312952-1001_Classes\CLSID\{aef08478-9928-4117-b5e9-e8887f289660}] 
  @Denied: (Full) (Everyone) 
  @Allowed: (Read) (RestrictedCode) 
  "Model"=dword:00000097 
  "Therad"=dword:0000001e 
  "MData"=hex(0):2b,8f,78,29,5a,0c,ce,ec,48,d4,68,e5,9f,6a,96,3e,ab,de,c5,81,26, 
     38,95,44,75,07,18,dd,fb,11,42,94,27,b7,99,0d,2a,ba,05,1a,a2,02,c9,3e,9b,f9,\ 
  . 
  [HKEY_USERS\S-1-5-21-4083600464-3071531930-41312952-1001_Classes\CLSID\{fcf60e43-ed7f-413b-bfb8-937bda3c25e8}] 
  @Denied: (Full) (Everyone) 
  @Allowed: (Read) (RestrictedCode) 
  "Model"=dword:000000d7 
  "Therad"=dword:00000015 
  "MData"=hex(0):2b,8f,78,29,5a,0c,ce,ec,48,d4,68,e5,9f,6a,96,3e,ab,de,c5,81,26, 
     38,95,44,75,07,18,dd,fb,11,42,94,27,b7,99,0d,2a,ba,05,1a,a2,02,c9,3e,9b,f9,\ 
  . 
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] 
  @Denied: (A 2) (Everyone) 
  @="FlashBroker" 
  "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_12_0_0_77_ActiveX.exe,-101" 
  . 
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] 
  "Enabled"=dword:00000001 
  . 
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] 
  @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_12_0_0_77_ActiveX.exe" 
  . 
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] 
  @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" 
  . 
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] 
  @Denied: (A 2) (Everyone) 
  @="IFlashBroker5" 
  . 
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] 
  @="{00020424-0000-0000-C000-000000000046}" 
  . 
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] 
  @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" 
  "Version"="1.0" 
  . 
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*] 
  @Allowed: (B 1 4 5 6) (S-1-5-5-0-130840) 
  @="?????????????????? v1" 
  . 
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*\CLSID] 
  @="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}" 
  . 
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*] 
  @Allowed: (B 1 4 5 6) (S-1-5-5-0-130840) 
  @="?????????????????? v2" 
  . 
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*\CLSID] 
  @="{9BE31822-FDAD-461B-AD51-BE1D1C159921}" 
  . 
  [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] 
  @Denied: (Full) (Everyone) 
  . 
  --------------------- DLLs Loaded Under Running Processes --------------------- 
  . 
  - - - - - - - > 'Explorer.exe'(4384) 
  c:\program files\Internet Download Manager\idmmkb.dll 
  . 
  ------------------------ Other Running Processes ------------------------ 
  . 
  c:\windows\system32\atieclxx.exe 
  c:\windows\system32\taskhost.exe 
  c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 
  c:\program files\Bonjour\mDNSResponder.exe 
  c:\windows\system32\conhost.exe 
  c:\program files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe 
  c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe 
  c:\program files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe 
  c:\program files\Microsoft SQL Server\90\Shared\sqlbrowser.exe 
  c:\program files\Microsoft SQL Server\90\Shared\sqlwriter.exe 
  c:\programdata\MobileBroadbandQuickStartService\VMBQuickStartService.exe 
  c:\program files\Internet Download Manager\IEMonitor.exe 
  c:\windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe 
  c:\program files\iPod\bin\iPodService.exe 
  c:\windows\servicing\TrustedInstaller.exe 
  c:\program files\Windows Media Player\wmpnetwk.exe 
  c:\program files\HP\Digital Imaging\bin\hpqSTE08.exe 
  c:\program files\HP\Digital Imaging\bin\hpqbam08.exe 
  c:\program files\HP\Digital Imaging\bin\hpqgpc01.exe 
  c:\windows\system32\sppsvc.exe 
  . 
  ************************************************************************** 
  . 
  Completion time: 2014-03-15  18:11:17 - machine was rebooted 
  ComboFix-quarantined-files.txt  2014-03-15 16:11 
  . 
  Pre-Run: 36.186.591.232 bayt boş 
  Post-Run: 37.237.768.192 bayt boş 
  . 
  - - End Of File - - 37DF5C6BCF9FFF04E93CFFFB58BFFDA2 
  A36C5E4F47E84449FF07ED3517B43A31