Profil: nafiz82 | DonanımHaber Forum

Şimdi Ara

@nafiz82

Takip Et 2 takipçi

Özel Mesaj

19 Aralık 2005
Tarihinde Katıldı

Takip Ettikleri
3 üye

Görüntülenme
Toplam: 54 (Bu ay: 0)

Fırsat Ekle

Gönderileri

Tümü (2)

Sadece Konular (2)

Sadece Bağlantılar (0)

nafiz82 · Güvenlik Programları altına konu açtı. 16 yıl

combofix log yardım?

arkadaslar ben bi internet kafeye format attım ama pc ye trojen atmış olabilir diye combofixle tarattım ama sonucu anlayamadım :D bi yardım edin buda log

ComboFix 10-08-27.03 - ömer 29.08.2010 1:32.1.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1254.90.1055.18.2047.1591 [GMT 3:00]
Running from: d:\lazim\18628-ComboFix-180610.exe
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\scrrntr.dll
D:\x3xh.exe

.
((((((((((((((((((((((((( Files Created from 2010-07-28 to 2010-08-28 )))))))))))))))))))))))))))))))
.

2010-08-28 16:09 . 2009-06-10 10:33 457248 ----a-w- c:\windows\system32\nvudisp.exe
2010-08-28 16:09 . 2009-06-04 13:39 457248 ----a-w- c:\windows\system32\NVUNINST.EXE
2010-08-26 21:17 . 2010-08-26 21:17 410984 ----a-w- c:\windows\system32\deploytk.dll
2010-08-26 21:17 . 2010-08-26 21:17 -------- d-----w- c:\program files\Java
2010-08-26 21:16 . 2010-08-26 21:17 -------- d-----w- c:\program files\LimeWire
2010-08-26 14:48 . 2009-10-20 16:20 265728 -c----w- c:\windows\system32\dllcache\http.sys
2010-08-26 14:34 . 2010-08-26 14:34 -------- d-----w- c:\program files\TeamViewer
2010-08-25 21:36 . 2010-08-25 21:37 -------- d-----w- c:\program files\Valve
2010-08-25 21:22 . 2010-08-25 21:22 -------- d-----w- c:\documents and settings\All Users.WINDOWS\Application Data\Codemasters
2010-08-25 21:21 . 2009-07-13 16:04 839680 ----a-w- c:\windows\system32\mkl_vml_p4.dll
2010-08-25 21:21 . 2009-07-13 16:04 532480 ----a-w- c:\windows\system32\mkl_vml_p3.dll
2010-08-25 21:21 . 2009-07-13 16:04 512000 ----a-w- c:\windows\system32\mkl_vml_def.dll
2010-08-25 21:21 . 2009-07-13 16:04 3485696 ----a-w- c:\windows\system32\mkl_p4.dll
2010-08-25 21:21 . 2009-07-13 16:04 2793472 ----a-w- c:\windows\system32\mkl_p3.dll
2010-08-25 21:21 . 2009-07-13 16:04 2174976 ----a-w- c:\windows\system32\mkl_lapack32.dll
2010-08-25 21:21 . 2009-07-13 16:04 2125824 ----a-w- c:\windows\system32\mkl_lapack64.dll
2010-08-25 21:21 . 2009-10-16 08:19 872448 ----a-w- c:\windows\system32\rapture3d_oal.dll
2010-08-25 21:21 . 2009-07-13 16:04 2441216 ----a-w- c:\windows\system32\mkl_def.dll
2010-08-25 21:21 . 2009-07-13 16:04 184320 ----a-w- c:\windows\system32\libguide40.dll
2010-08-25 20:55 . 2010-08-25 20:55 -------- d-----w- c:\program files\Codemasters
2010-08-25 20:50 . 2008-07-06 12:06 89088 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\filterpipelineprintproc.dll
2010-08-25 20:50 . 2010-08-25 20:50 -------- d-----w- C:\4dc44fcaf6df5e1a08863bc8aad4
2010-08-25 20:48 . 2010-08-25 20:48 -------- d-----w- C:\0c22d3df87ad16071bce98f05a
2010-08-25 20:48 . 2010-08-25 20:48 -------- d-----w- C:\a9b16186ef45887ade9a
2010-08-25 20:31 . 2006-08-01 07:02 49152 ------r- c:\windows\system32\ChCfg.exe
2010-08-25 20:30 . 2010-08-25 20:30 315392 ----a-w- c:\windows\HideWin.exe
2010-08-25 20:30 . 2007-07-26 09:09 520192 ------r- c:\windows\RtlExUpd.dll
2010-08-25 20:29 . 2007-08-01 03:39 12536 ----a-w- c:\windows\system32\drivers\ASUSHWIO.SYS
2010-08-25 20:18 . 2006-06-14 10:44 12288 ----a-r- c:\windows\system32\drivers\EIO_XP.sys
2010-08-25 20:16 . 2010-08-25 20:16 12288 ----a-w- c:\windows\system32\drivers\EIO64_xp.sys
2010-08-25 20:08 . 2004-07-09 01:26 354816 -c--a-w- c:\windows\system32\dllcache\psisdecd.dll
2010-08-25 20:08 . 2004-07-09 01:26 354816 ----a-w- c:\windows\system32\psisdecd.dll
2010-08-25 20:08 . 2004-07-09 01:26 52096 -c--a-w- c:\windows\system32\dllcache\msdv.sys
2010-08-25 20:08 . 2004-07-09 01:26 52096 ----a-w- c:\windows\system32\drivers\msdv.sys
2010-08-25 20:08 . 2004-07-09 01:26 15104 -c--a-w- c:\windows\system32\dllcache\mpe.sys
2010-08-25 20:08 . 2004-07-09 01:26 15104 ----a-w- c:\windows\system32\drivers\mpe.sys
2010-08-25 20:08 . 2004-07-09 01:26 11392 -c--a-w- c:\windows\system32\dllcache\bdasup.sys
2010-08-25 20:08 . 2004-07-09 01:26 11392 ----a-w- c:\windows\system32\drivers\bdasup.sys
2010-08-25 20:08 . 2002-12-11 21:14 46592 ----a-w- c:\windows\system32\dxdllreg.exe
2010-08-25 20:08 . 2002-08-29 00:41 31744 -c--a-w- c:\windows\system32\dllcache\pid.dll
2010-08-25 20:08 . 2006-12-28 03:44 84992 ----a-r- c:\windows\system32\drivers\AtiHdAud.sys
2010-08-25 19:57 . 2008-04-13 11:45 6272 ----a-w- c:\windows\system32\drivers\splitter.sys
2010-08-25 19:57 . 2008-04-13 09:39 142592 ----a-w- c:\windows\system32\drivers\aec.sys
2010-08-25 19:57 . 2008-04-13 11:45 56576 ----a-w- c:\windows\system32\drivers\swmidi.sys
2010-08-25 19:57 . 2008-04-13 11:45 52864 ----a-w- c:\windows\system32\drivers\DMusic.sys
2010-08-25 19:57 . 2008-04-13 11:39 7552 ----a-w- c:\windows\system32\drivers\MSKSSRV.sys
2010-08-25 19:57 . 2008-04-13 11:45 2944 ----a-w- c:\windows\system32\drivers\drmkaud.sys
2010-08-25 19:57 . 2008-04-13 11:39 4992 ----a-w- c:\windows\system32\drivers\MSPQM.sys
2010-08-25 19:57 . 2008-04-13 12:17 83072 ----a-w- c:\windows\system32\drivers\wdmaud.sys
2010-08-25 19:57 . 2008-04-13 11:39 5376 ----a-w- c:\windows\system32\drivers\MSPCLOCK.sys
2010-08-25 19:57 . 2008-04-13 12:15 60800 ----a-w- c:\windows\system32\drivers\sysaudio.sys
2010-08-25 19:57 . 2008-04-13 11:45 172416 ----a-w- c:\windows\system32\drivers\kmixer.sys
2010-08-25 19:56 . 2001-08-17 20:59 3072 ----a-w- c:\windows\system32\drivers\audstub.sys
2010-08-25 19:56 . 2008-03-21 11:35 146048 -c--a-w- c:\windows\system32\dllcache\portcls.sys
2010-08-25 19:56 . 2008-03-21 11:35 146048 ----a-w- c:\windows\system32\drivers\portcls.sys
2010-08-25 19:56 . 2002-12-11 21:14 4096 ----a-w- c:\windows\system32\ksuser.dll
2010-08-25 19:56 . 2008-04-13 08:45 60160 -c--a-w- c:\windows\system32\dllcache\drmk.sys
2010-08-25 19:56 . 2008-04-13 08:45 60160 ----a-w- c:\windows\system32\drivers\drmk.sys
2010-08-25 19:56 . 2008-04-14 08:36 57600 ----a-w- c:\windows\system32\drivers\redbook.sys
2010-08-25 19:56 . 2010-08-25 19:56 0 ----a-w- c:\windows\ativpsrm.bin
2010-08-25 19:55 . 2006-07-11 18:38 110592 ----a-w- c:\windows\system32\drivers\nvtcp.sys
2010-08-25 19:55 . 2006-06-29 12:40 208896 ----a-w- c:\windows\system32\nvunrm.exe
2010-08-25 19:55 . 2008-04-14 09:00 74240 ----a-w- c:\windows\system32\usbui.dll
2010-08-25 19:39 . 2008-05-02 09:11 235131 ----a-w- C:\pmtimer.exe
2010-08-25 19:39 . 2008-05-02 09:11 282725 ----a-w- C:\DSPdsblr.exe
2010-08-25 19:39 . 2008-05-02 09:11 364721 ----a-w- C:\DPsFnshr.exe
2010-08-25 19:39 . 2008-04-08 10:46 55808 ----a-w- C:\devcon.exe
2010-08-25 19:39 . 2008-04-08 10:46 20992 ----a-w- C:\makePNF.exe
2010-08-25 19:39 . 2008-04-08 10:46 137728 ----a-w- C:\mute.exe
2010-08-25 19:39 . 2005-04-12 23:21 22240 ----a-w- c:\windows\system32\drivers\WmFilter.sys
2010-08-25 19:38 . 2006-07-19 11:27 13568 ----a-w- c:\windows\system32\drivers\L8042Kbd.sys
2010-08-25 19:28 . 2008-02-26 08:01 4737024 ------r- c:\windows\system32\drivers\RtkHDAud.sys
2010-08-25 19:28 . 2007-05-14 08:12 3526464 ----a-w- c:\windows\system32\drivers\RtHDMI.sys
2010-08-25 19:28 . 2007-11-20 10:15 1826816 ------r- c:\windows\SkyTel.exe
2010-08-25 19:28 . 2007-11-07 09:31 1191936 ------r- c:\windows\RtlUpd.exe
2010-08-25 19:28 . 2007-03-23 11:19 9715200 ------r- c:\windows\RTLCPL.exe
2010-08-25 19:28 . 2006-07-21 08:14 86016 ------r- c:\windows\SoundMan.exe
2010-08-25 19:28 . 2008-02-19 07:34 16858112 ------r- c:\windows\RTHDCPL.exe
2010-08-25 19:28 . 2007-06-28 08:44 2165760 ------r- c:\windows\MicCal.exe
2010-08-25 19:28 . 2007-01-16 08:39 1191936 ----a-w- c:\windows\RtkUpd.exe
2010-08-25 19:28 . 2006-05-04 08:26 2808832 ------r- c:\windows\alcwzrd.exe
2010-08-25 19:28 . 2005-05-03 10:43 69632 ------r- c:\windows\Alcmtr.exe
2010-08-25 19:26 . 2006-07-11 18:37 261632 ----a-w- c:\windows\system32\drivers\nvsnpu.sys
2010-08-25 19:26 . 2006-07-11 18:38 20480 ----a-w- c:\windows\system32\drivers\nvnetbus.sys
2010-08-25 19:26 . 2006-07-11 18:38 57856 ----a-w- c:\windows\system32\drivers\NVENETFD.sys
2010-08-25 19:26 . 2006-07-11 18:38 1160448 ----a-w- c:\windows\system32\drivers\nvnrm.sys
2010-08-25 19:26 . 2006-07-11 18:36 201728 ----a-w- c:\windows\system32\fdco1ins.dll
2010-08-25 19:26 . 2006-07-11 18:36 201728 ----a-w- c:\windows\system32\fdco1.dll
2010-08-25 19:26 . 2006-06-29 12:40 35840 ----a-w- c:\windows\system32\nvconrm.dll
2010-08-25 19:26 . 2006-07-11 18:36 11264 ----a-w- c:\windows\system32\bdco1ins.dll
2010-08-25 19:26 . 2006-07-11 18:36 11264 ----a-w- c:\windows\system32\bdco1.dll
2010-08-25 19:23 . 2008-02-26 05:51 2863616 -c--a-w- c:\windows\system32\dllcache\ati2mtag.sys
2010-08-25 19:23 . 2008-02-26 05:51 2863616 ----a-w- c:\windows\system32\drivers\ati2mtag.sys
2010-08-25 19:23 . 2008-02-26 03:02 126976 ----a-w- c:\windows\system32\Oemdspif.dll
2010-08-25 19:21 . 2006-06-19 03:37 36864 ----a-w- c:\windows\system32\drivers\AmdK8.sys
2010-08-25 19:21 . 2006-02-26 15:02 5810 ----a-w- c:\windows\system32\drivers\ASACPI.sys
2010-08-25 19:21 . 2010-08-25 19:31 -------- d-----w- C:\D
2010-08-25 19:21 . 2010-08-25 17:19 -------- d--h--w- c:\documents and settings\Default User.WINDOWS
2010-08-25 19:21 . 2010-08-25 17:06 -------- d-----w- c:\documents and settings\All Users.WINDOWS
2010-08-25 19:17 . 2010-08-25 19:20 -------- d-----w- c:\windows\system32\drivers\UMDF
2010-08-25 19:17 . 2010-08-25 19:20 -------- d-----w- c:\windows\L2Schemas
2010-08-25 19:17 . 2010-08-25 19:19 -------- d-----w- c:\windows\system32\tr
2010-08-25 19:02 . 2010-08-25 19:02 -------- d-sh--w- c:\documents and settings\LocalService.NT AUTHORITY\IETldCache
2010-08-25 18:58 . 2010-06-18 11:39 16896 -c----w- c:\windows\system32\dllcache\iecompat.dll
2010-08-25 18:57 . 2010-06-24 14:53 11077120 -c----w- c:\windows\system32\dllcache\ieframe.dll
2010-08-25 18:57 . 2010-06-24 12:24 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2010-08-25 18:57 . 2010-06-24 12:23 599040 -c----w- c:\windows\system32\dllcache\msfeeds.dll
2010-08-25 18:57 . 2010-06-24 12:23 55296 -c----w- c:\windows\system32\dllcache\msfeedsbs.dll
2010-08-25 18:57 . 2010-06-24 12:23 247808 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2010-08-25 18:57 . 2010-06-24 12:23 1986560 -c----w- c:\windows\system32\dllcache\iertutil.dll
2010-08-25 18:57 . 2010-06-24 12:23 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll
2010-08-25 18:45 . 2010-08-25 18:45 -------- d-----w- c:\program files\MSXML 4.0
2010-08-25 17:46 . 2007-07-11 13:09 20480 ----a-w- c:\windows\FixCamera.exe
2010-08-25 17:46 . 2006-07-03 07:31 94208 ----a-w- c:\windows\amcap.exe
2010-08-25 17:46 . 2007-05-10 10:18 835584 ----a-w- c:\windows\vsnp325.exe
2010-08-25 17:46 . 2007-04-21 06:30 270336 ----a-w- c:\windows\tsnp325.exe
2010-08-25 17:46 . 2010-08-25 17:46 -------- d-----w- c:\program files\Common Files\snp325
2010-08-25 17:46 . 2007-06-22 13:33 10368384 ----a-w- c:\windows\system32\drivers\snp325.sys
2010-08-25 17:46 . 2007-05-31 06:01 57344 ----a-w- c:\windows\system32\vsnp325.dll
2010-08-25 17:46 . 2006-04-12 09:11 147456 ----a-w- c:\windows\system32\rsnp325.dll
2010-08-25 17:46 . 2005-11-23 10:55 53248 ----a-w- c:\windows\system32\csnp325.dll
2010-08-25 17:45 . 2010-06-24 12:18 63488 -c----w- c:\windows\system32\dllcache\icardie.dll
2010-08-25 17:45 . 2010-06-23 11:28 13824 -c----w- c:\windows\system32\dllcache\ieudinit.exe
2010-08-25 17:45 . 2010-02-22 22:04 2452872 -c----w- c:\windows\system32\dllcache\ieapfltr.dat
2010-08-25 17:45 . 2010-06-24 12:18 78336 -c----w- c:\windows\system32\dllcache\ieencode.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-08-26 18:36 . 2010-08-25 17:06 86327 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2010-08-26 15:12 . 2008-04-15 12:00 81498 ----a-w- c:\windows\system32\perfc01F.dat
2010-08-26 15:12 . 2008-04-15 12:00 427984 ----a-w- c:\windows\system32\perfh01F.dat
2010-08-25 21:36 . 2010-08-23 19:02 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-08-25 21:21 . 2010-08-23 20:32 -------- d-----w- c:\program files\BRS
2010-08-25 21:19 . 2008-07-20 01:41 445016 ----a-w- c:\windows\system32\wrap_oal.dll
2010-08-25 21:19 . 2008-07-20 01:41 109144 ----a-w- c:\windows\system32\OpenAL32.dll
2010-08-25 17:56 . 2010-08-23 20:03 -------- d-----w- c:\program files\TeamSpeak 3 Client
2010-08-25 17:28 . 2010-08-23 18:44 -------- d-----w- c:\program files\Windows Live
2010-08-25 17:08 . 2010-08-25 17:15 22486 ----a-r- c:\windows\system32\config\systemprofile\Application Data\Microsoft\Installer\{A743BBCC-3438-4BB3-8397-6C9D9AC125A6}\Timershot_1.exe
2010-08-25 17:08 . 2010-08-25 17:15 22486 ----a-r- c:\windows\system32\config\systemprofile\Application Data\Microsoft\Installer\{A743BBCC-3438-4BB3-8397-6C9D9AC125A6}\ARPPRODUCTICON.exe
2010-08-25 17:08 . 2010-08-25 17:08 22486 ----a-r- c:\documents and settings\Default User.WINDOWS\Application Data\Microsoft\Installer\{A743BBCC-3438-4BB3-8397-6C9D9AC125A6}\Timershot_1.exe
2010-08-25 17:08 . 2010-08-25 17:08 22486 ----a-r- c:\documents and settings\Default User.WINDOWS\Application Data\Microsoft\Installer\{A743BBCC-3438-4BB3-8397-6C9D9AC125A6}\ARPPRODUCTICON.exe
2010-08-25 17:08 . 2010-08-25 17:15 318 ----a-r- c:\windows\system32\config\systemprofile\Application Data\Microsoft\Installer\{2FBF04DC-404C-4FA4-BA28-99903080D2B9}\ARPPRODUCTICON.exe
2010-08-25 17:08 . 2010-08-25 17:08 318 ----a-r- c:\documents and settings\Default User.WINDOWS\Application Data\Microsoft\Installer\{2FBF04DC-404C-4FA4-BA28-99903080D2B9}\ARPPRODUCTICON.exe
2010-08-25 17:08 . 2010-08-25 17:15 318 ----a-r- c:\windows\system32\config\systemprofile\Application Data\Microsoft\Installer\{1CB92574-96F2-467B-B793-5CEB35C40C29}\ARPPRODUCTICON.exe
2010-08-25 17:08 . 2010-08-25 17:08 318 ----a-r- c:\documents and settings\Default User.WINDOWS\Application Data\Microsoft\Installer\{1CB92574-96F2-467B-B793-5CEB35C40C29}\ARPPRODUCTICON.exe
2010-08-25 17:04 . 2010-08-25 17:04 -------- d-----w- c:\documents and settings\All Users.WINDOWS\Application Data\GroupPolicy
2010-08-25 17:04 . 2010-08-25 17:04 21736 ----a-w- c:\windows\system32\emptyregdb.dat
2010-08-25 17:02 . 2010-08-25 17:02 -------- d-----w- c:\program files\LiraConv
2010-08-25 10:33 . 2010-08-23 19:08 -------- d-----w- c:\program files\ATI Technologies
2010-08-24 14:04 . 2010-08-23 19:24 -------- d-----w- c:\program files\WarRock
2010-08-23 22:08 . 2010-08-23 19:25 -------- d-----w- c:\program files\Metin2
2010-08-23 20:44 . 2010-08-23 20:44 -------- d-----w- c:\program files\Microsoft
2010-08-23 20:44 . 2010-08-23 20:44 -------- d-----w- c:\program files\Windows Live SkyDrive
2010-08-23 20:36 . 2010-08-23 20:36 -------- d-----w- c:\program files\Common Files\Windows Live
2010-08-23 20:31 . 2010-08-23 20:31 -------- d-----w- c:\program files\MSBuild
2010-08-23 20:31 . 2010-08-23 20:31 -------- d-----w- c:\program files\Reference Assemblies
2010-08-23 20:30 . 2010-08-23 20:30 -------- d-----w- c:\program files\Microsoft Games for Windows - LIVE
2010-08-23 20:30 . 2010-08-23 20:30 -------- d-----w- c:\program files\OpenAL
2010-08-23 19:59 . 2010-08-23 19:59 -------- d-----w- c:\program files\Common Files\Adobe
2010-08-23 19:42 . 2010-08-23 19:42 -------- d-----w- c:\program files\MSXML 6.0
2010-08-23 19:22 . 2010-08-23 19:22 -------- d-----w- c:\program files\HP
2010-08-23 19:22 . 2010-08-23 19:17 -------- d--h--w- c:\program files\Avago-HP
2010-08-23 19:14 . 2010-08-23 19:14 -------- d-----w- c:\program files\AAALOGO2010
2010-08-23 19:12 . 2010-08-23 19:12 -------- d-----w- c:\program files\Common Files\ATI Technologies
2010-08-23 19:07 . 2010-08-23 18:58 -------- d-----w- c:\program files\Common Files\InstallShield
2010-08-23 19:07 . 2010-08-23 19:07 -------- d-----w- c:\program files\My Company Name
2010-08-23 19:07 . 2010-08-23 19:06 -------- d-----w- c:\program files\ASUS
2010-08-23 19:04 . 2010-08-23 19:04 -------- d-----w- c:\program files\AMD
2010-08-23 19:02 . 2010-08-23 19:02 -------- d-----w- c:\program files\Realtek
2010-08-23 19:00 . 2010-08-23 19:00 -------- d-----w- c:\program files\NVIDIA Corporation
2010-08-23 18:54 . 2010-08-23 18:54 -------- d-----w- c:\program files\Common Files\Logitech
2010-08-23 18:54 . 2010-08-23 18:54 -------- d-----w- c:\program files\Logitech
2010-08-23 18:51 . 2010-08-23 18:51 -------- d-----w- c:\program files\Ahead
2010-08-23 18:51 . 2010-08-23 18:51 -------- d-----w- c:\program files\Common Files\Ahead
2010-08-23 18:43 . 2010-08-23 18:43 -------- d-----w- c:\program files\Nero
2010-08-23 18:43 . 2010-08-23 18:43 -------- d-----w- c:\program files\Common Files\Nero
2010-08-23 18:43 . 2010-08-23 18:43 -------- d-----w- c:\program files\Winamp
2010-08-23 18:43 . 2010-08-23 18:43 -------- d-----w- c:\program files\Internet Download Manager
2010-08-23 18:35 . 2010-08-23 18:35 -------- d-----w- c:\program files\microsoft frontpage
2010-08-18 05:58 . 2010-08-18 05:58 499712 ----a-w- c:\windows\system32\msvcp71.dll
2010-08-18 05:58 . 2010-08-18 05:58 348160 ----a-w- c:\windows\system32\msvcr71.dll
2010-06-30 12:24 . 2008-04-15 12:00 149504 ----a-w- c:\windows\system32\schannel.dll
2010-06-24 21:29 . 2008-07-20 01:44 1861120 ----a-w- c:\windows\system32\win32k.sys
2010-06-24 12:24 . 2008-07-20 01:44 916480 ----a-w- c:\windows\system32\wininet.dll
2010-06-21 15:27 . 2008-04-15 12:00 354304 ----a-w- c:\windows\system32\drivers\srv.sys
2010-06-17 14:03 . 2008-04-15 12:00 80384 ----a-w- c:\windows\system32\iccvid.dll
2010-06-14 14:31 . 2010-08-25 17:05 744448 ----a-w- c:\windows\pchealth\helpctr\binaries\helpsvc.exe
2010-06-14 07:42 . 2008-04-15 12:00 1172480 ----a-w- c:\windows\system32\msxml3.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2010-04-16 3872080]
"ASUS SmartDoctor"="c:\program files\ASUS\SmartDoctor\SmartDoctor.exe" [2007-12-18 1126400]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CoolSwitch"="c:\windows\system32\taskswitch.exe" [2002-03-19 45632]
"FixCamera"="c:\windows\FixCamera.exe" [2007-07-11 20480]
"tsnp325"="c:\windows\tsnp325.exe" [2007-04-21 270336]
"snp325"="c:\windows\vsnp325.exe" [2007-05-10 835584]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112]
"ASUSGamerOSD"="c:\program files\ASUS\GamerOSD\GamerOSD.exe" [2007-10-23 380928]
"RTHDCPL"="RTHDCPL.EXE" [2008-02-19 16858112]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2010-08-26 136600]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-06-10 13758464]
"nwiz"="nwiz.exe" [2009-06-10 1657376]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-06-10 86016]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-15 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"ShowDeskFix"="shell32" [X]

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\Codemasters\\DiRT2\\dirt2_game.exe"=
"c:\\Program Files\\Valve\\hl.exe"=
"c:\\Program Files\\ASUS\\GamerOSD\\SBS.exe"=
"c:\\Program Files\\TeamViewer\\Version5\\TeamViewer.exe"=
"c:\\Program Files\\LimeWire\\LimeWire.exe"=

S3 SNP325;USB PC Camera (SNPSTD325);c:\windows\system32\drivers\snp325.sys [25.08.2010 20:46 10368384]
.
Contents of the 'Scheduled Tasks' folder

2010-08-28 c:\windows\Tasks\WGASetup.job
- c:\windows\system32\KB905474\wgasetup.exe [2010-08-25 19:18]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com.tr/
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,http://www.gmer.net
Rootkit scan 2010-08-29 01:38
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(688)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'explorer.exe'(3500)
c:\windows\system32\WININET.dll
c:\windows\system32\wpdshserviceobj.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\portabledevicetypes.dll
c:\windows\system32\portabledeviceapi.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\nvsvc32.exe
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\windows\RTHDCPL.EXE
c:\windows\system32\RUNDLL32.EXE
c:\windows\ATKKBService.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\windows\system32\wbem\wmiapsrv.exe
.
**************************************************************************
.
Completion time: 2010-08-29 01:42:49 - machine was rebooted
ComboFix-quarantined-files.txt 2010-08-28 22:42

Pre-Run: 11.528.597.504 bayt boş
Post-Run: 12.897.562.624 bayt boş

WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect /usepmtimer

- - End Of File - - C2648925CF4FB1FE86F4F063BE8D7E87

4 Yanıt

Yanıtla

Favorilere Ekle

nafiz82 · Diğer Markalar, Aksesuarlar ve Konular altına konu açtı. 21 yıl

EN İYİ KUVVETLİ ŞEBEKE ÇEKİMİ HANGİ TELEFONDA VAR?

49 Yanıt

Yanıtla

Favorilere Ekle

Hakkında

Konum: Ankara

Resimler

https://forum.donanimhaber.com/cache-v2?path=https%3a%2f%2fforum.donanimhaber.com%2fstore%2fa3%2f9a%2f20%2fa39a20c015af1f5f5edbcc84eb390567.gif&t=1&text=0&width=87

1 Galeride Göster

Temel Bilgiler ve İstatistikler

Aktiflik: Şu anda DH'de değil
Son Giriş: geçen hafta
Son Mesaj Zamanı: geçen yıl
Mesaj Sayısı: 9
Gerçek Toplam Mesaj Sayısı: 275
İkinci El Bölümü Mesajları: 237
Konularının görüntülenme sayısı: 0 (Bu ay: 99)
Toplam aldığı artı oy sayısı: 1 (Bu hafta: 0)
En çok mesaj yazdığı forum bölümü: İkinci El

Mesajları

İkinci El Referansları