Hijackthis

Question

Scan yapıp logları siteye giriyorum zararlı olanları buluyorum işaretliyor fix checked yapıyorum sonradan tekrar scan yapıyorum bakıyorum yine aynı hatalar var düzeltmiyormu niye öyle oluyor?

Loglar

Logfile of Trend Micro HijackThis v2.0.4 
  Scan saved at 20:39:52, on 05.06.2013 
  Platform: Windows 7 SP1 (WinNT 6.00.3505) 
  MSIE: Internet Explorer v10.0 (10.00.9200.16576) 
  Boot mode: Normal 
   
  Running processes: 
  D:\Users\Yatcazkalkcaz\AppData\Roaming\DRPSu\DrvUpdater.exe 
  D:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe 
  D:\Program Files (x86)\Internet Download Manager\IEMonitor.exe 
  D:\Program Files (x86)\Google\Chrome\Application\chrome.exe 
  D:\Program Files (x86)\Google\Chrome\Application\chrome.exe 
  D:\Program Files (x86)\Google\Chrome\Application\chrome.exe 
  D:\Program Files (x86)\Google\Chrome\Application\chrome.exe 
  D:\Program Files (x86)\Google\Chrome\Application\chrome.exe 
  D:\Program Files (x86)\Google\Chrome\Application\chrome.exe 
  D:\Program Files (x86)\Google\Chrome\Application\chrome.exe 
  D:\Program Files (x86)\Skype\Phone\Skype.exe 
  D:\Program Files (x86)\Google\Chrome\Application\chrome.exe 
  D:\Program Files (x86)\Windows Media Player\wmplayer.exe 
  D:\Program Files (x86)\Google\Chrome\Application\chrome.exe 
  D:\Program Files (x86)\Google\Chrome\Application\chrome.exe 
  D:\Program Files (x86)\Google\Chrome\Application\chrome.exe 
  D:\Users\Yatcazkalkcaz\Downloads\Programs\HijackThis.exe 
   
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =http://www.yandex.com.tr?clid=1818323 
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =http://go.microsoft.com/fwlink/p/?LinkId=255141 
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =http://go.microsoft.com/fwlink/?LinkId=54896 
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =http://go.microsoft.com/fwlink/?LinkId=54896 
  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =http://go.microsoft.com/fwlink/p/?LinkId=255141 
  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =  
  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =  
  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = D:\Windows\SysWOW64\blank.htm 
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =  
  R3 - URLSearchHook: IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - D:\Program Files (x86)\IObit Apps Toolbar\IE\7.1\iobitappsToolbarIE.dll 
  O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - D:\Program Files (x86)\Internet Download Manager\IDMIECC.dll 
  O2 - BHO: IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - D:\Program Files (x86)\IObit Apps Toolbar\IE\7.1\iobitappsToolbarIE.dll 
  O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files (x86)\Java\jre7\bin\ssv.dll 
  O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - D:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll 
  O2 - BHO: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - D:\PROGRA~2\IObit\ADVANC~1\BROWER~1\ASCPLU~1.DLL 
  O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - D:\Program Files (x86)\Microsoft\BingBar\7.1.362.0\BingExt.dll 
  O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll 
  O2 - BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - D:\Program Files (x86)\Hotspot Shield\HssIE\HssIE.dll 
  O3 - Toolbar: IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - D:\Program Files (x86)\IObit Apps Toolbar\IE\7.1\iobitappsToolbarIE.dll 
  O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "D:\Program Files (x86)\Microsoft\BingBar\7.1.362.0\BingExt.dll" (file missing) 
  O4 - HKLM\..\Run: [SunJavaUpdateSched] "D:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" 
  O4 - HKLM\..\Run: [SearchSettings] "D:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe" 
  O4 - HKLM\..\Run: [StartCCC] "D:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun 
  O4 - HKCU\..\Run: [DrvUpdater] D:\Users\Yatcazkalkcaz\AppData\Roaming\DRPSu\DrvUpdater.exe /hide 
  O4 - HKCU\..\Run: [Steam] "D:\Program Files (x86)\Steam\steam.exe" -silent 
  O4 - HKCU\..\Run: [Keyboard Inf.] D:\Users\Yatcazkalkcaz\AppData\Roaming\WinRAR\wmwar.exe 
  O4 - HKCU\..\Run: [IDMan] D:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot 
  O4 - HKCU\..\Run: [Advanced SystemCare 6] "D:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe" /AutoStart 
  O8 - Extra context menu item: Bütün linkleri IDM ile indir - D:\Program Files (x86)\Internet Download Manager\IEGetAll.htm 
  O8 - Extra context menu item: IDM ile indir - D:\Program Files (x86)\Internet Download Manager\IEExt.htm 
  O10 - Unknown file in Winsock LSP: d:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll 
  O10 - Unknown file in Winsock LSP: d:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll 
  O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics 
  O17 - HKLM\System\CCS\Services\Tcpip\..\{FA3A2D6E-A65F-499A-82A3-839C7F2957F1}: NameServer = 8.8.8.8,8.8.4.4 
  O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - D:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll 
  O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - D:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe 
  O23 - Service: Advanced SystemCare Service 6 (AdvancedSystemCareService6) - IObit - D:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe 
  O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - D:\Windows\System32\alg.exe (file missing) 
  O23 - Service: AMD External Events Utility - Unknown owner - D:\Windows\system32\atiesrxx.exe (file missing) 
  O23 - Service: Application Updater - Spigot, Inc. - D:\Program Files (x86)\Application Updater\ApplicationUpdater.exe 
  O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - D:\Windows\System32\lsass.exe (file missing) 
  O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - D:\Windows\system32\fxssvc.exe (file missing) 
  O23 - Service: Google Güncelleme Hizmeti (gupdate) (gupdate) - Google Inc. - D:\Program Files (x86)\Google\Update\GoogleUpdate.exe 
  O23 - Service: Google Güncelleme Hizmeti (gupdatem) (gupdatem) - Google Inc. - D:\Program Files (x86)\Google\Update\GoogleUpdate.exe 
  O23 - Service: Hotspot Shield Service (hshld) - AnchorFree Inc. - D:\Program Files (x86)\Hotspot Shield\bin\openvpnas.exe 
  O23 - Service: Hotspot Shield Routing Service (HssSrv) - AnchorFree Inc. - D:\Program Files (x86)\Hotspot Shield\HssWPR\hsssrv.exe 
  O23 - Service: Hotspot Shield Tray Service (HssTrayService) - Unknown owner - D:\Program Files (x86)\Hotspot Shield\bin\HssTrayService.EXE 
  O23 - Service: Hotspot Shield Monitoring Service (HssWd) - Unknown owner - D:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe 
  O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - D:\Windows\system32\lsass.exe (file missing) 
  O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - D:\Windows\System32\msdtc.exe (file missing) 
  O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - D:\Windows\system32\lsass.exe (file missing) 
  O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - D:\Windows\system32\locator.exe (file missing) 
  O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - D:\Windows\system32\lsass.exe (file missing) 
  O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - D:\Windows\System32\spoolsv.exe (file missing) 
  O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - D:\Windows\system32\sppsvc.exe (file missing) 
  O23 - Service: Steam Client Service - Valve Corporation - D:\Program Files (x86)\Common Files\Steam\SteamService.exe 
  O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - D:\Windows\system32\UI0Detect.exe (file missing) 
  O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - D:\Windows\system32\lsass.exe (file missing) 
  O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - D:\Windows\System32\vds.exe (file missing) 
  O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - D:\Windows\system32\vssvc.exe (file missing) 
  O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - D:\Windows\system32\Wat\WatAdminSvc.exe (file missing) 
  O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - D:\Windows\system32\wbengine.exe (file missing) 
  O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - D:\Windows\system32\wbem\WmiApSrv.exe (file missing) 
  O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - D:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) 
   
  -- 
  End of file - 9111 bytes

Hijackthis

Benzer içerikler