HijackThis Açıklaması

HijackThis casus yazılım kaldırmak için bir çok faydalı ücretsiz kolaylıktır. Araç geleneksel AntiSpyware tarayıcıları bu kendini ne elle kaldırmak için seçtiğiniz kullanıcı yapar farklıdır. Program tek başına bir virüs veritabanına sahip değil, bu kullanıcı mevcut bilgisayar ayarlarını görmenizi sağlar ve bu yeteneği kaldırmak için verir de lütfen. Ancak, çıkarmadan kayıtları bilgisayara ihtiyacı olan bilgisayar ve zarar verebilir. Bu nedenle, önerilen ile kullanılmak üzere profesyonel veya profesyonel.

HijackThis indirmek için tıklayınız lütfen. Eğer ihtiyacınız olan günlük analiz yardım, lütfen aşağıda varsa belirtiler ile göndermeye çekinmeyin.

Posted in: Nasıl Kılavuzları Yapılır

Bu giriş Cuma, Aralık 26, 2024 10:23 pm ve Nasıl Yapılır Kılavuzları. Bu RSS 2.0 beslemesi ile bu giriş için herhangi bir yanıt takip edebilirsiniz altında eğe gönderilen mesajların oldu. Kendi bir yanıt, ya da trackback bırakabilirsiniz sitesi.

38 yanıt "HijackThis Açıklaması" için

Liveantiviruspccheck.com - Antivirus 2023 Saldırı Sitesi | Virüs Temizleme Guru Aralık 28, 2024 4:53 at pm

[...] Bir BHO sonucu (Browser Helper Object gibi. Bu nesneler genellikle HijackThis ile kaldırmak olabilir. Tıklayın öğrenin HijackThis Hakkında Burada için. HijackThis indirmek için lütfen tıklayınız. Dikkatli kullanın HijackThis Lütfen [çıkarmadan bu yana .. .]

Websafetyguide. Com - Sistem Güvenlik Virüs Saldırı Sitesi | Virüs Temizleme Guru Aralık 30, 2024 at 9:23 am

[...] Genellikle HijackThis ile kaldırmak olabilir. Eğer HijackThis hakkında daha fazla bilgi edinmek isterseniz, lütfen burayı tıklayın. Lütfen bilgisayarınıza zarar verebilir yanlış girişler çıkarmadan beri dikkatle HijackThis kullanmak eğer [...]

Advancedantivirusscan. Com - Ana Sayfa Antivirus ve 2009 Virüs | Virüs Temizleme Guru Ocak 2nd, 2024 4:44 am

Virusandspywarescan. Com - Antivirus 2023 Virüs Saldırı Sitesi | Virüs Temizleme Guru Ocak 3, 2024 1:09 at pm

Sgviralscan.com - Spyware Guard 2023 Virüs | Virüs Temizleme Guru Ocak 5, 2024 5:46 at pm

PC-güvenlik-tarayıcı. Com - Antivirus 2023 Virüs Saldırı Sitesi | Virüs Temizleme Guru 5 Ocak, 2023 10:19 at

Watchnetprotection.com - Sistem Güvenlik Virüs | 11:40 Virüs Temizleme Guru Ocak 6th, 2024 at am

Stabilityinternetscan.com - Sistem Güvenlik Virüs | Virüs Temizleme Guru Ocak 10, 2024 5:19 at pm

Pro4scan.com / Best4scan.com / Scan6new.com - Internet Antivirus Saldırı Sitesi | Virüs Temizleme Guru Ocak 10, 2024 5:42 at

Antivirusxppro2009.com Virüs Temizleme | Virüs Temizleme Guru Ocak 21, 2024 1:07 am

İnternet-AntiSpyware-scan.com Saldırı Site Antivirus 360 ve | 1:24 Virüs Temizleme Guru 21 Ocak, 2023 am

Traffchecking.com / uyarı / antivirusplus2009.com Antivirus Plus 2023 | 2:59 Virüs Temizleme Guru Ocak 21, 2024 at pm

Virtumonde - Vundo Trojan Virüs Temizleme Kılavuzu | 10:58 Virüs Temizleme Guru 22 Ocak, 2023 at am

[...] Programın eski sürümlerini istifade eder. Eğer HijackThis hakkında daha fazla bilgi edinmek isterseniz, lütfen burayı tıklayın. Lütfen bilgisayarınıza zarar verebilir yanlış girişler çıkarmadan beri dikkatle HijackThis kullanmak eğer [...]

Securityonlinescan.com Popup Kaldırma | Virüs Temizleme Guru Ocak 25, 2024 4:26 am

Admess.Trojan Zserv.Transponder.Trojan Wstart.TrojanDownloader Temizleme Yardım | Virüs Temizleme Guru Ocak 25, 2024 4:31 am

GetModule32.exe GetModule34.exe GetModule35.exe Virüs Dosya Bilgileri | Virüs Temizleme Guru Ocak 26, 2024 1:11 am

HijackThis hakkında bilgi edinmek için [...] Tıklayınız. HijackThis indirmek için lütfen tıklayınız. [...]

afiss I mamaida Ocak 30, 2024 2:52 am

Logfile Trend Micro HijackThis v2.0.2 ve
Tarama 9:07:57 at 1/29/2009 kayıtlı
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot modu: Normal

Çalışan süreçleri:
C: \ Windows \ system32 \ Dwm.exe
C: \ Windows \ system32 \ taskeng.exe
C: \ Windows \ Explorer.EXE
c: \ progra ~ 1 \ intern mcafee.com \ ajan \ mcagent.exe
C: \ Program Files \ Synaptics \ SynTP \ SynTPEnh.exe
C: \ Program Files \ HP \ HP Software Update \ hpwuSchd2.exe
C: \ Program Files \ Hewlett-Packard \ HP Wireless Assistant \ HPWAMain.exe
C: \ Program Files \ HP \ QuickPlay \ QPService.exe
C: \ Program Files \ QuickTime \ QTTask.exe
C: \ Program Files \ iTunes \ iTunesHelper.exe
C: \ Windows \ ehome \ ehtray.exe
C: \ Users \ Stefania \ AppData \ Local \ Google \ Update \ GoogleUpdate.exe
C: \ Program Files \ Windows Media Player \ wmpnscfg.exe
C: \ Program Files \ Hewlett-Packard \ Digital Imaging \ bin \ hpqtra08.exe
C: \ Windows \ system32 \ wbem \ Unsecapp.exe
C: \ Program Files \ Sony \ Sony Picture Utility \ PMBCore \ SPUVolumeWatcher.exe
C: \ Program Files \ Hewlett-Packard \ HP Wireless Assistant \ WiFiMsg.EXE
C: \ Program Files \ Hewlett-Packard \ Shared \ HpqToaster.exe
C: \ Program Files \ Hewlett-Packard \ Digital Imaging \ bin \ hpqSTE08.exe
C: \ Windows \ system32 \ taskeng.exe
C: \ Program Files \ STOPzilla! \ STOPzilla.exe
C: \ Program Files \ STOPzilla! \ SZOptions.exe
C: \ Program Files \ Trend Micro \ HijackThis \ HijackThis.exe

R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = https://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = https://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=71&bd=Pavilion&pf=laptop
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = https://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=71&bd=Pavilion&pf=laptop
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = https://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = https://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = https://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=71&bd=Pavilion&pf=laptop
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, SearchAssistant =
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, CustomizeSearch =
R1 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Internet Settings, ProxyOverride = *. yerel
R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Toolbar, LinksFolderName =
O1 - Hosts::: 1 yerel
O2 - BHO: HP Print Clips - (053F9267-DC04-4294-A72C-58F732D338C0) - C: \ Program Files \ Hewlett-Packard \ Smart Web Printing \ hpswp_framework.dll
O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files \ Common Files \ Adobe \ Acrobat \ ActiveX \ AcroIEHelper.dll
O2 - BHO: SITEguard BHO - (1827766B-9F49-4854-8034-F6EE26FCB1EC) - C: \ Program Files \ STOPzilla! \ SZSG.dll
O2 - BHO: SSVHelper Sınıf - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre1.6.0 \ bin \ ssv.dll
O2 - BHO: scriptproxy - (7DB2D5A0-7241-4E79-B68D-6309F01C5231) - C: \ Program Files \ McAfee \ VirusScan \ scriptsn.dll
O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file)
O2 - BHO: STOPzilla Browser Helper Object - (E3215F20-3212-11d6-9F8B-00D0B743919D) - C: \ Program Files \ STOPzilla! \ SZIEBHO.dll
O3 - Toolbar: STOPzilla - (98828DED-A591-462F-83BA-D2F62A68B8B8) - C: \ Program Files \ STOPzilla! \ SZSG.dll
O4 - HKLM \ .. \ Run: [hpqSRMon] C: \ Program Files \ Hewlett-Packard \ Digital Imaging \ bin \ hpqSRMon.exe
O4 - HKLM \ .. \ Run: [SynTPEnh] C: \ Program Files \ Synaptics \ SynTP \ SynTPEnh.exe
O4 - HKLM \ .. \ Run: [HP Software Update] C: \ Program Files \ Hp \ HP Software Update \ HPWuSchd2.exe
O4 - HKLM \ .. \ Run: [mcagent_exe] C: \ Program Files \ McAfee.com \ Ajan \ mcagent.exe / runkey
O4 - HKLM \ .. \ Run: [HP Health Check Scheduler] C: \ Program Files \ Hewlett-Packard \ HP Health Check \ HPHC_Scheduler.exe
O4 - HKLM \ .. \ Run: [hpWirelessAssistant] C: \ Program Files \ Hewlett-Packard \ HP Wireless Assistant \ HPWAMain.exe
O4 - HKLM \ .. \ Run: [QPService] "C: \ Program Files \ HP \ QuickPlay \ QPService.exe"
O4 - HKLM \ .. \ Run: [QuickTime Task] "C: \ Program Files \ QuickTime \ QTTask.exe"-atboottime
O4 - HKLM \ .. \ Run: [iTunesHelper] "C: \ Program Files \ iTunes \ iTunesHelper.exe"
O4 - HKLM \ .. \ RunOnce: [Launcher]% WINDIR% \ SMINST \ launcher.exe
O4 - HKCU \ .. \ Run: [ehTray.exe] C: \ Windows \ ehome \ ehTray.exe
O4 - HKCU \ .. \ Run: [Google Update] "C: \ Users \ Stefania \ AppData \ Local \ Google \ Update \ GoogleUpdate.exe" / c
O4 - HKCU \ .. \ Run: [AdobeUpdater] C: \ Program Files \ Common Files \ Adobe \ Updater5 \ AdobeUpdater.exe
O4 - HKCU \ .. \ Run: [WMPNSCFG] C: \ Program Files \ Windows Media Player \ WMPNSCFG.exe
O4 - HKCU \ .. \ Run: [Casus Yazılım Önleme] C: \ Program Files \ Casus Yazılım Önleme \ Antispyware.exe önyükleme
O4 - HKUS \ S-1-5-19 \ .. \ Run: [Sidebar]% ProgramFiles% \ Windows Sidebar \ Sidebar.exe / detectMem (User 'LOCAL SERVICE')
O4 - HKUS \ S-1-5-19 \ .. \ Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll, ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS \ S-1-5-20 \ .. \ Run: [Sidebar]% ProgramFiles% \ Windows Sidebar \ Sidebar.exe / detectMem (User 'NETWORK SERVICE')
O4 - Startup: OneNote 2023 Ekran Clipper ve Launcher.lnk = C: \ Program Files \ Microsoft Office \ Office12 \ ONENOTEM.EXE
O4 - Startup: Picture Motion Browser Medya Check Tool.lnk = C: \ Program Files \ Sony \ Sony Picture Utility \ PMBCore \ SPUVolumeWatcher.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C: \ Program Files \ Hewlett-Packard \ Digital Imaging \ bin \ hpqtra08.exe
O8 - Extra menü item: E & Microsoft Excel'e xport - res: / / C: \ progra ~ 1 \ intern mikro ~ 3 \ Office12 \ EXCEL.EXE/3000
O9 - Extra düğmesi: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0 \ bin \ ssv.dll
O9 - Extra 'Tools' MENUITEM: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0 \ bin \ ssv.dll
O9 - Extra düğmesi: - (2670000A-7350-4f3c-8081-5663EE0C6C49) - C: \ progra ~ 1 \ intern ~ mikro OneNote gönder 3 \ Office12 \ ONBttnIE.dll
O9 - Extra 'Tools' MENUITEM: S & son OneNote için - (2670000A-7350-4f3c-8081-5663EE0C6C49) - C: \ progra ~ 1 \ intern mikro ~ 3 \ Office12 \ ONBttnIE.dll
O9 - Extra düğmesi: HP Clipbook - (58ECB495-38F0-49cb-A538-10282ABF65E7) - C: \ Program Files \ Hewlett-Packard \ Smart Web Printing \ hpswp_extensions.dll
O9 - Extra düğmesi: HP Akıllı seçin - (700259D7-1666-479a-93B1-3250410481E8) - C: \ Program Files \ Hewlett-Packard \ Smart Web Printing \ hpswp_extensions.dll
O9 - Extra düğmesi: Araştırma - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ progra ~ 1 \ intern mikro ~ 3 \ Office12 \ REFIEBAR.DLL
O10 - Winsock LSP olarak Bilinmeyen dosya: C: \ Program Files \ Common Files \ is3 \ anti casus yazılım \ is3lsp.dll
O10 - Winsock LSP olarak Bilinmeyen dosya: C: \ Program Files \ Common Files \ is3 \ anti casus yazılım \ is3lsp.dll
O10 - Winsock LSP olarak Bilinmeyen dosya: C: \ Program Files \ Common Files \ is3 \ anti casus yazılım \ is3lsp.dll
O10 - Winsock LSP olarak Bilinmeyen dosya: C: \ Program Files \ Common Files \ is3 \ anti casus yazılım \ is3lsp.dll
O10 - Winsock LSP olarak Bilinmeyen dosya: C: \ Program Files \ Common Files \ is3 \ anti casus yazılım \ is3lsp.dll
O10 - Winsock LSP olarak Bilinmeyen dosya: C: \ Program Files \ Common Files \ is3 \ anti casus yazılım \ is3lsp.dll
O10 - Winsock LSP olarak Bilinmeyen dosya: C: \ Program Files \ Common Files \ is3 \ anti casus yazılım \ is3lsp.dll
O10 - Winsock LSP olarak Bilinmeyen dosya: C: \ Program Files \ Common Files \ is3 \ anti casus yazılım \ is3lsp.dll
O10 - Winsock LSP olarak Bilinmeyen dosya: C: \ Program Files \ Common Files \ is3 \ anti casus yazılım \ is3lsp.dll
O10 - Winsock LSP olarak Bilinmeyen dosya: C: \ Program Files \ Common Files \ is3 \ anti casus yazılım \ is3lsp.dll
O10 - Winsock LSP olarak Bilinmeyen dosya: C: \ Program Files \ Common Files \ is3 \ anti casus yazılım \ is3lsp.dll
O16 - DPF: (7FC1B346-83E6-4774-8D20-1A6B09B0E737) (Windows Live Photo Upload Control) - https://kiredam2.spaces.live.com/PhotoUpload/VistaMsnPUplden-us.cab
O18 - Protokol: skype4com - (FFC8B962-9B40-4DFF-9458-1830C7DD7F5D) - C: \ progra ~ 1 \ intern COMMON ~ 1 \ Skype \ SKYPE4 ~ 1.DLL
O23 - Service: AddFiltr - Hewlett-Packard Development Company, LP - C: \ Program Files \ Hewlett-Packard \ HP Quick Launch Buttons \ AddFiltr.exe
O23 - Service: Adobe LM Service - Adobe Systems - C: \ Program Files \ Common Files \ Adobe Systems Shared \ Service \ Adobelmsvc.exe
O23 - Service: Casus Yazılım Önleme Tarama Motoru (AntispywareSrv) - Bilinmeyen sahibi - C: \ Program Files \ Casus Yazılım Önleme \ Antispyware.srv.exe
O23 - Service: Apple Mobile Device - Apple Inc - C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C: \ Program Files \ Symantec \ LiveUpdate \ ALUSchedulerSvc.exe
O23 - Service: Bonjour Service - Apple Inc - C: \ Program Files \ Bonjour \ mDNSResponder.exe
O23 - Service: Symantec Lic NetConnect servisi (CLTNetCnService) - Bilinmeyen sahibi - c: \ Program Files \ Common Files \ Symantec Shared \ (dosya eksik) ccSvcHst.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - C: \ Program Files \ Hewlett-Packard \ HP Health Check \ hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, LP - C: \ Program Files \ Hewlett-Packard \ Shared \ hpqwmiex.exe
O23 - Service: InstallDriver Tablo Yöneticisi (IDriverT) - Macrovision Corporation - C: \ Program Files \ Roxio \ Roxio MyDVD Temel v9 \ InstallShield \ Driver \ 1050 \ Intel 32 \ IDriverT.exe
O23 - Service: iPod Service - Apple Inc - C: \ Program Files \ iPod \ bin \ iPodService.exe
O23 - Service: LightScribeService Doğrudan Disk (LightScribeService) - Hewlett-Packard Company - C: \ Program Files \ Common Files \ LightScribe \ LSSrvc.exe Servisi Etiketleme
O23 - Service: LiveUpdate - Symantec Corporation - C: \ progra ~ 1 \ intern Symantec \ LIVEUP ~ 1 \ LUCOMS ~ 1.EXE
O23 - Service: LiveUpdate Uyarı Servisi Ex (LiveUpdate Notice Ex) - Bilinmeyen sahibi - c: \ Program Files \ Common Files \ Symantec Shared \ (dosya eksik) ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C: \ Program Files \ Common Files \ Symantec Shared \ pif \ (B8E1DD85-8582-4c61-B58F-2F227FCA9A08) \ PIFSvc.exe
O23 - Service: McAfee Services () mcmscsvc - McAfee, Inc - C: \ progra ~ 1 \ intern McAfee \ MSC \ mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc - c: \ progra ~ 1 \ intern COMMON ~ 1 \ McAfee \ MNA \ McNASvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc - C: \ progra ~ 1 \ intern McAfee \ VIRUSS ~ 1 \ mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc - c: \ progra ~ 1 \ intern COMMON ~ 1 \ McAfee \ mcproxy \ mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc - C: \ progra ~ 1 \ intern McAfee \ VIRUSS ~ 1 \ mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc - C: \ progra ~ 1 \ intern McAfee \ VIRUSS ~ 1 \ mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc - C: \ Program Files \ McAfee \ MPF \ MPFSrv.exe
O23 - Service: QuickPlay Arkaplan Çekim Servisi (QBCS) (QPCapSvc) - Bilinmeyen sahibi - C: \ Program Files \ HP \ QuickPlay \ Kernel \ TV \ QPCapSvc.exe
O23 - Service: QuickPlay Görev Zamanlayıcısı (QTS) (QPSched) - Bilinmeyen sahibi - C: \ Program Files \ HP \ QuickPlay \ Kernel \ TV \ QPSched.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C: \ Program Files \ Common Files \ Roxio Shared \ 9.0 \ SharedCOM \ RoxMediaDB9.exe
O23 - Service: stllssvr - MicroVision Geliştirme, Inc - C: \ Program Files \ Common Files \ SureThing Shared \ stllssvr.exe
O23 - Service: STOPzilla Servisi (szserver) - iS3, Inc - C: \ Program Files \ Common Files \ iS3 \ Anti-Spyware \ SZServer.exe
O23 - Service: XAudioService - Conexant Systems, Inc - C: \ Windows \ System32 \ Drivers \ xaudio.exe

--
Dosya sonu - 11.297 bayt

Cogad.exe (Cogad) Truva Virüs Dosya Bilgileri | Virüs Temizleme Guru 3 Şubat, 2009 1:23 at pm

HijackThis hakkında bilgi edinmek için [...] Tıklayınız. HijackThis indirmek için lütfen tıklayınız. [...]

~ Tmpa.exe (~ Tmpa) Truva Virüs Dosya Bilgileri | Virüs Temizleme Guru Şubat 4th, 2024 9:51 at

HijackThis hakkında bilgi edinmek için [...] Tıklayınız. HijackThis indirmek için lütfen tıklayınız. [...]

Burolage.exe (Burolage) Truva Virüs Dosya Bilgileri | Virüs Temizleme Guru Şubat 4th, 2024 9:51 at

HijackThis hakkında bilgi edinmek için [...] Tıklayınız. HijackThis indirmek için lütfen tıklayınız. [...]

GetModule36.exe (GetModule36) Truva Virüs Dosya Bilgileri | Virüs Temizleme Guru Şubat 8th, 2024 7:12 at

HijackThis hakkında bilgi edinmek için [...] Tıklayınız. HijackThis indirmek için lütfen tıklayınız. [...]

Gand.exe (GAND) Truva Virüs Dosya Bilgileri | Virüs Temizleme Guru 11 Şubat, 2009 11:02 at

HijackThis hakkında bilgi edinmek için [...] Tıklayınız. HijackThis indirmek için lütfen tıklayınız. [...]

Viewtubesoftware.exe (Viewtubesoftware) Truva Virüs Dosya Bilgileri | Virüs Temizleme Guru 13 Şubat, 2009 12:54 at pm

HijackThis hakkında bilgi edinmek için [...] Tıklayınız. HijackThis indirmek için lütfen tıklayınız. [...]

M9ma.exe (M9ma) Virüs Bilgileri | Virüs Temizleme Guru 20 Şubat, 2009 5:57 at

HijackThis hakkında bilgi edinmek için [...] Tıklayınız [...]

Şubat, 2009 10:08 pm ncyh at 25.

Lütfen bana günlüğü okumak için yardımcı olur. Gerçekten bu sorunu TT düzeltmek istiyorum

Logfile Trend Micro HijackThis v2.0.2 ve
Tarama 6:01:23 at 2/25/2009 kayıtlı
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot modu: Normal

Çalışan süreçleri:
C: \ WINDOWS \ System32 \ Smss.exe
C: \ WINDOWS \ system32 \ winlogon.exe
C: \ WINDOWS \ system32 \ Services.exe
C: \ WINDOWS \ system32 \ lsass.exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ WINDOWS \ System32 \ svchost.exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ Program Files \ Common Files \ Symantec Shared \ ccSvcHst.exe
C: \ WINDOWS \ system32 \ spoolsv.exe
C: \ WINDOWS \ system32 \ userinit.exe
C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe
C: \ Program Files \ Symantec \ LiveUpdate \ AluSchedulerSvc.exe
C: \ Program Files \ Bonjour \ mDNSResponder.exe
C: \ Program Files \ Java \ jre6 \ bin \ jqs.exe
C: \ WINDOWS \ system32 \ nvsvc32.exe
C: \ WINDOWS \ Explorer.EXE
C: \ Program Files \ QvodPlayer \ QvodTerminal.exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ WINDOWS \ system32 \ SearchIndexer.exe
C: \ WINDOWS \ RTHDCPL.EXE
C: \ Program Files \ Java \ jre6 \ bin \ jusched.exe
C: \ WINDOWS \ system32 \ Rundll32.exe
C: \ Program Files \ ScanSoft \ PaperPort \ pptd40nt.exe
C: \ Program Files \ Brother \ Brmfcmon \ BrMfcWnd.exe
C: \ Program Files \ Brother \ ControlCenter3 \ brccMCtl.exe
C: \ Program Files \ Common Files \ Symantec Shared \ ccSvcHst.exe
C: \ Program Files \ iTunes \ iTunesHelper.exe
C: \ Program Files \ Common Files \ Ahead \ Lib \ NMBgMonitor.exe
C: \ WINDOWS \ system32 \ ctfmon.exe
C: \ Program Files \ Windows Live \ Messenger \ msnmsgr.exe
C: \ Program Files \ Common Files \ Ahead \ Lib \ NMIndexStoreSvr.exe
C: \ Program Files \ Veoh Networks \ YouTube \ VeohClient.exe
C: \ Program Files \ Skype \ Telefon \ Skype.exe
C: \ Documents and Settings \ kullanıcı \ Local Settings \ Application Data \ Octoshape \ Octoshape Akış Hizmetler \ OctoshapeClient.exe
C: \ Program Files \ iPod \ bin \ iPodService.exe
C: \ Program Files \ Windows Masaüstü Arama \ WindowsSearch.exe
C: \ Program Files \ Hamachi \ hamachi.exe
C: \ WINDOWS \ System32 \ svchost.exe
C: \ Program Files \ Skype \ Plugin Manager \ skypePM.exe
C: \ Program Files \ Norton 360 \ ScanStub.exe
C: \ Program Files \ Common Files \ Microsoft Shared \ Windows Live \ WLLoginProxy.exe
C: \ Program Files \ Internet Explorer \ IEXPLORE.EXE
C: \ progra ~ 1 \ intern COMMON ~ 1 \ SYMANT ~ 1 \ CCPD-LC \ symlcsvc.exe
C: \ Program Files \ Common Files \ iS3 \ Anti-Spyware \ SZServer.exe
D: \ Stopzilla \ STOPzilla.exe
D: \ Stopzilla \ SZOptions.exe
C: \ Program Files \ Safari \ Safari.exe
C: \ DOCUME ~ 1 \ kullanıcı \ Locals ~ 1 \ Temp \ Saf6C1.tmp \ HiJackThis.exe

R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = https://g.msn.com/0SEENSG/SAOS01?FORM=TOOLBR
R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = https://g.msn.com/0SEENSG/SAOS01?FORM=TOOLBR
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = https://www.yahoo.com/
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = https://us.rd.yahoo.com/customize/ie/defaults/su/msgr8/ * https://www.yahoo.com
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = https://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/ * https://www.yahoo.com/ext / arama / search.html
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = https://us.rd.yahoo.com/customize/ie/defaults/sp/msgr8/ * https://www.yahoo.com
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = https://www.yahoo.com/
R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ SearchURL, (Varsayılan) = https://g.msn.com/0SEENSG/SAOS01?FORM=TOOLBR
R1 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Internet Settings, ProxyServer = 127.0.0.1:8080
R1 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Internet Settings, ProxyOverride = yerel; *. yerel
R3 - URLSearchHook: (no name) - (982CB676-38F0-4D9A-BB72-D9371ABE876E) - (no file)
O2 - BHO: & Yahoo! Araç Çubuğu Helper - (02478D38-C3F9-4efb-9B51-7695ECA05670) - C: \ progra ~ 1 \ intern Yahoo! \ Companion \ yükler \ cpn \ yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files \ Common Files \ Adobe \ Acrobat \ ActiveX \ AcroIEHelper.dll
O2 - BHO: SITEguard BHO - (1827766B-9F49-4854-8034-F6EE26FCB1EC) - D: \ Stopzilla \ SZSG.dll
O2 - BHO: Yahoo! IE Services Button - (5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897) - C: \ Program Files \ Yahoo! \ Common \ yiesrvc.dll
O2 - BHO: NCO 2,0 IE BHO - (602ADB0E-4AFF-4217-8AA1-95DAC4DFA408) - C: \ Program Files \ Common Files \ Symantec Shared \ coShared \ Browser \ 2,6 \ coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - (6D53EC84-6AAE-4787-AEEE-F4628F01010C) - C: \ progra ~ 1 \ intern COMMON ~ 1 \ SYMANT ~ 1 \ SBS \ IPSBHO.dll
O2 - BHO: Java (tm) Plug-in SSV Helper - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre6 \ bin \ ssv.dll olarak
O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file)
O2 - BHO: Windows Live Sign-Yardımcı yılında - (9030D464-4C02-4ABF-8ECC-5164760863C6) - C: \ Program Files \ Common Files \ Microsoft Shared \ Windows Live \ WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - (AA58ED58-01DD-4d91-8333-CF10577473F7) - c: \ Program Files \ googletoolbar1.dll
O2 - BHO: Windows - (BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0) - C: \ Program Files \ Windows Live Toolbar \ msntb.dll Toolbar'ın Helper Canlı
O2 - BHO: Java (tm) Plug-in 2 SSV Helper - (DBC80044-A445-435b In-BC74-9C25C1C588A9) - C: \ Program Files \ Java \ jre6 \ bin \ jp2ssv.dll
O2 - BHO: STOPzilla Browser Helper Object - (E3215F20-3212-11d6-9F8B-00D0B743919D) - D: \ Stopzilla \ SZIEBHO.dll
O2 - BHO: JQSIEStartDetectorImpl - (E7E6F031-17CE-4C07-BC86-EABFE594F69C) - C: \ Program Files \ Java \ jre6 \ lib '\ dağıtmak \ jqs \ yani \ jqs_plugin.dll
O3 - Toolbar: Windows Araç Çubuğu - (BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0) - C: \ Program Files \ Windows Live Toolbar \ msntb.dll Canlı
O3 - Toolbar: & Google - (2318C2B1-4965-11D4-9B18-009027A5CD4F) - c: \ Program Files \ googletoolbar1.dll
O3 - Toolbar: Yahoo! Toolbar - (EF99BD32-C1FB-11D2-892F-0090271D4F88) - C: \ progra ~ 1 \ intern Yahoo! \ Companion \ yükler \ cpn \ yt.dll
O3 - Toolbar: Show Norton Toolbar - (7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA) - C: \ Program Files \ Common Files \ Symantec Shared \ coShared \ Browser \ 2,6 \ CoIEPlg.dll
O3 - Toolbar: STOPzilla - (98828DED-A591-462F-83BA-D2F62A68B8B8) - D: \ Stopzilla \ SZSG.dll
O4 - HKLM \ .. \ Run: [IMJPMIG8.1] "C: \ WINDOWS \ IME \ imjp8_1 \ IMJPMIG.EXE" / Spoil / RemAdvDef / Migration32
O4 - HKLM \ .. \ Run: [PHIME2002ASync] C: \ WINDOWS \ system32 \ IME \ TINTLGNT \ TINTSETP.EXE / SYNC
O4 - HKLM \ .. \ Run: [PHIME2002A] C: \ WINDOWS \ system32 \ IME \ TINTLGNT \ TINTSETP.EXE / IMEName
O4 - HKLM \ .. \ Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM \ .. \ Run: [Alcmtr] alcmtr.exe
O4 - HKLM \ .. \ Run: [NvCplDaemon] Rundll32.exe C: \ WINDOWS \ system32 \ NvCpl.dll, NvStartup
O4 - HKLM \ .. \ Run: [nwiz] nwiz.exe / yüklemek
O4 - HKLM \ .. \ Run: [NeroFilterCheck] C: \ Program Files \ Common Files \ Ahead \ Lib \ NeroCheck.exe
O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "C: \ Program Files \ Java \ jre6 \ bin \ jusched.exe"
O4 - HKLM \ .. \ Run: [NvMediaCenter] Rundll32.exe C: \ WINDOWS \ system32 \ NvMcTray.dll, NvTaskbarInit
O4 - HKLM \ .. \ Run: [Adobe Reader Speed Launcher] "C: \ Program Files \ Adobe \ Reader 8,0 \ Reader \ Reader_sl.exe"
O4 - HKLM \ .. \ Run: [SSBkgdUpdate] "C: \ Program Files \ Common Files \ ScanSoft Shared \ SSBkgdUpdate \ SSBkgdupdate.exe" Embedding önyükleme
O4 - HKLM \ .. \ Run: [PaperPort PTD] C: \ Program Files \ ScanSoft \ PaperPort \ pptd40nt.exe
O4 - HKLM \ .. \ Run: [IndexSearch] C: \ Program Files \ ScanSoft \ PaperPort \ IndexSearch.exe
O4 - HKLM \ .. \ Run: [BrMfcWnd] C: \ Program Files \ Brother \ Brmfcmon \ BrMfcWnd.exe / AutoRun
O4 - HKLM \ .. \ Run: [SetDefPrt] C: \ Program Files \ Brother \ Brmfl06a \ BrStDvPt.exe
O4 - HKLM \ .. \ Run: [ControlCenter3] C: \ Program Files \ Brother \ ControlCenter3 \ brctrcen.exe / otomatik
O4 - HKLM \ .. \ Run: [ccApp] "C: \ Program Files \ Common Files \ Symantec Shared \ ccApp.exe"
O4 - HKLM \ .. \ Run: [osCheck] "C: \ Program Files \ Norton 360 \ osCheck.exe"
O4 - HKLM \ .. \ Run: [AppleSyncNotifier] C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleSyncNotifier.exe
O4 - HKLM \ .. \ Run: [QuickTime Task] "C: \ Program Files \ QuickTime \ QTTask.exe"-atboottime
O4 - HKLM \ .. \ Run: [iTunesHelper] "C: \ Program Files \ iTunes \ iTunesHelper.exe"
O4 - HKCU \ .. \ Run: [BgMonitor_ (79662E04-7C6C-4d9f-84C7-88D8A56B10AA)] "C: \ Program Files \ Common Files \ Ahead \ Lib \ NMBgMonitor.exe"
O4 - HKCU \ .. \ Run: [ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe
O4 - HKCU \ .. \ Run: [MsnMsgr] "C: \ Program Files \ Windows Live \ Messenger \ msnmsgr.exe" / arka plan
O4 - HKCU \ .. \ Run: [SWG] C: \ Program Files \ GoogleToolbarNotifier \ 1.2.1128.5462 \ GoogleToolbarNotifier.exe
O4 - HKCU \ .. \ Run: [BitTorrent DNA] "C: \ Program Files \ DNA \ btdna.exe"
O4 - HKCU \ .. \ Run: [YouTube] "C: \ Program Files \ Veoh Networks \ YouTube \ VeohClient.exe" / VeohHide
O4 - HKCU \ .. \ Run: [Skype] "C: \ Program Files \ Skype \ Telefon \ Skype.exe" / nosplash / küçültüldüğünde
O4 - HKCU \ .. \ Run: [Octoshape Akış Hizmetler] "C: \ Documents and Settings \ kullanıcı \ Local Settings \ Application Data \ Octoshape \ Octoshape Akış Hizmetler \ OctoshapeClient.exe" INV: bootrun
O4 - HKCU \ .. \ Run: [Buhar] "d: \ oyunlar \ buhar \ steam.exe"-sessiz
O4 - S-1-5-18 Başlangıç: hamachi.lnk = C: \ Program Files \ Hamachi \ ') (Kullanıcı' SİSTEMİ hamachi.exe
O4 - S-1-5-18 Başlangıç: IMVU.lnk = C: \ Program Files \ IMVU \ IMVUClient.exe (Kullanıcı 'SİSTEM')
O4 -. DEFAULT Başlangıç: hamachi.lnk = C: \ Program Files \ Hamachi \) (Kullanıcı 'Varsayılan kullanıcı' hamachi.exe
O4 -. DEFAULT Başlangıç: IMVU.lnk = C: \ Program Files \ IMVU \ IMVUClient.exe (Kullanıcı 'Varsayılan kullanıcı')
O4 - Başlangıç: hamachi.lnk = C: \ Program Files \ Hamachi \ hamachi.exe
O4 - Başlangıç: IMVU.lnk = C: \ Program Files \ IMVU \ IMVUClient.exe
O4 - Global Startup: Microsoft Office.lnk = C: \ Program Files \ Microsoft Office \ Office10 \ OSA.EXE
O4 - Global Startup: Windows Arama'yı = C: \ Program Files \ Windows Masaüstü Arama \ WindowsSearch.exe
O8 - Extra menü öğesi: Windows Search - res: / / C: \ Program Files \ Windows Live Toolbar \ msntb.dll / search.htm Canlı
O8 - Extra menü öğesi: Favorilere Windows ve Canlı ekle - https://favorites.live.com/quickadd.aspx
O8 - Extra menü item: E & Microsoft Excel'e xport - res: / / C: \ progra ~ 1 \ intern mikro ~ 2 \ Office10 \ EXCEL.EXE/3000
O8 - Extra menü öğesi: ¢ ËÍÍ ¼ Æ ¬ μ ½ EO »U - C: \ Program Files \ P4P \ cx.htm
O8 - Extra menü öğesi: E ¹ ÓÃËÑ ¹ Ö ± Í ¨ ³ μÏÂÔØ - C: \ Program Files \ P4P \ dl.htm
O9 - Extra düğmesi: Yahoo! Hizmetler - (5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897) - C: \ Program Files \ Yahoo! \ Common \ yiesrvc.dll
O9 - Extra düğmesi: Run IMVU - (d9288080-1baa-4bc4-9cf8-a92d743db949) - C: \ Documents and Settings \ kullanıcı \ Start Menu \ Programlar \ IMVU \ Run IMVU.lnk
O9 - Extra düğmesi: (no name) - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe
O9 - Extra 'Tools' MENUITEM: @ xpsp3res.dll, -20001 - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe
O9 - Extra düğmesi: Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe
O9 - Extra 'Tools' MENUITEM: Windows Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe
O10 - Winsock LSP olarak Bilinmeyen dosya: c: \ windows \ system32 \ nwprovau.dll
O16 - DPF: (30528230-99f7-4bb4-88d8-fa1d4f56a2ab) (Installation Support) - C: \ Program Files \ Yahoo! \ Common \ Yinsthelper.dll
O16 - DPF: (67A5F8DC-1A4B-4D66-9F24-A704AD929EEE) (Sistem Gereksinimleri Laboratuarı) - https://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab
O16 - DPF: (C3F79A2B-B9B4-4A66-B012-3EE46475B072) (MessengerStatsClient Sınıf) - https://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: (CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7) (get_atlcom Sınıf) - https://www.adobe.com/products/acrobat/nos/gp.cab
O16 - DPF: (D27CDB6E-AE6D-11CF-96B8-444553540000) (Shockwave Flash Object) - https://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: (F5A7706B-B9C0-4C89-A715-7A0C6B05DD48) (mayın tarama gemisi Flags Class) - https://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O18 - Protokol: skype4com - (FFC8B962-9B40-4DFF-9458-1830C7DD7F5D) - C: \ progra ~ 1 \ intern COMMON ~ 1 \ Skype \ SKYPE4 ~ 1.DLL
O23 - Service: Apple Mobile Device - Apple Inc - C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C: \ Program Files \ Symantec \ LiveUpdate \ AluSchedulerSvc.exe
O23 - Service: Bonjour Service - Apple Inc - C: \ Program Files \ Bonjour \ mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Qvod Terminal - Shenzhen QVOD Technology Co.,Ltd - C:\Program Files\QvodPlayer\QvodTerminal.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
O23 - Service: STOPzilla Service (szserver) - iS3, Inc. - C:\Program Files\Common Files\iS3\Anti-Spyware\SZServer.exe

–
End of file - 14090 bytes

ncyh February 25th, 2024 at 10:09 am

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:01:23 PM, on 2/25/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\userinit.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\QvodPlayer\QvodTerminal.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
C:\Program Files\Brother\ControlCenter3\brccMCtl.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Documents and Settings\user\Local Settings\Application Data\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Hamachi\hamachi.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Norton 360\ScanStub.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\iS3\Anti-Spyware\SZServer.exe
D:\Stopzilla\STOPzilla.exe
D:\Stopzilla\SZOptions.exe
C:\Program Files\Safari\Safari.exe
C:\DOCUME~1\user\LOCALS~1\Temp\Saf6C1.tmp\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://g.msn.com/0SEENSG/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://g.msn.com/0SEENSG/SAOS01?FORM=TOOLBR
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://us.rd.yahoo.com/customize/ie/defaults/su/msgr8/ *https://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/ *https://www.yahoo.com/ext/search/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://us.rd.yahoo.com/customize/ie/defaults/sp/msgr8/ *https://www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://g.msn.com/0SEENSG/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:8080
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local;*.local
R3 - URLSearchHook: (no name) - {982CB676-38F0-4D9A-BB72-D9371ABE876E} - (no file)
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SITEguard BHO - {1827766B-9F49-4854-8034-F6EE26FCB1EC} - D:\Stopzilla\SZSG.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: STOPzilla Browser Helper Object - {E3215F20-3212-11D6-9F8B-00D0B743919D} - D:\Stopzilla\SZIEBHO.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll
O3 - Toolbar: STOPzilla - {98828DED-A591-462F-83BA-D2F62A68B8B8} - D:\Stopzilla\SZSG.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] “C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE” /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] “C:\Program Files\Java\jre6\bin\jusched.exe”
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] “C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe”
O4 - HKLM\..\Run: [SSBkgdUpdate] “C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe” -Embedding -boot
O4 - HKLM\..\Run: [PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
O4 - HKLM\..\Run: [IndexSearch] C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe
O4 - HKLM\..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
O4 - HKLM\..\Run: [SetDefPrt] C:\Program Files\Brother\Brmfl06a\BrStDvPt.exe
O4 - HKLM\..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun
O4 - HKLM\..\Run: [ccApp] “C:\Program Files\Common Files\Symantec Shared\ccApp.exe”
O4 - HKLM\..\Run: [osCheck] “C:\Program Files\Norton 360\osCheck.exe”
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [QuickTime Task] “C:\Program Files\QuickTime\QTTask.exe” -atboottime
O4 - HKLM\..\Run: [iTunesHelper] “C:\Program Files\iTunes\iTunesHelper.exe”
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] “C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe”
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] “C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe” /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [BitTorrent DNA] “C:\Program Files\DNA\btdna.exe”
O4 - HKCU\..\Run: [Veoh] “C:\Program Files\Veoh Networks\Veoh\VeohClient.exe” /VeohHide
O4 - HKCU\..\Run: [Skype] “C:\Program Files\Skype\Phone\Skype.exe” /nosplash /minimized
O4 - HKCU\..\Run: [Octoshape Streaming Services] “C:\Documents and Settings\user\Local Settings\Application Data\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe” -inv:bootrun
O4 - HKCU\..\Run: [Steam] “d:\games\steam\steam.exe” -silent
O4 - S-1-5-18 Startup: hamachi.lnk = C:\Program Files\Hamachi\hamachi.exe (User ‘SYSTEM’)
O4 - S-1-5-18 Startup: IMVU.lnk = C:\Program Files\IMVU\IMVUClient.exe (User ‘SYSTEM’)
O4 - .DEFAULT Startup: hamachi.lnk = C:\Program Files\Hamachi\hamachi.exe (User ‘Default user’)
O4 - .DEFAULT Startup: IMVU.lnk = C:\Program Files\IMVU\IMVUClient.exe (User ‘Default user’)
O4 - Startup: hamachi.lnk = C:\Program Files\Hamachi\hamachi.exe
O4 - Startup: IMVU.lnk = C:\Program Files\IMVU\IMVUClient.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: ·¢ËÍÍ¼Æ¬µ½ÊÖ»ú - C:\Program Files\P4P\cx.htm
O8 - Extra context menu item: Ê¹ÓÃËÑ¹·Ö±Í¨³µÏÂÔØ - C:\Program Files\P4P\dl.htm
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\user\Start Menu\Programs\IMVU\Run IMVU.lnk
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - https://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - https://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - https://www.adobe.com/products/acrobat/nos/gp.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - https://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Qvod Terminal - Shenzhen QVOD Technology Co.,Ltd - C:\Program Files\QvodPlayer\QvodTerminal.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
O23 - Service: STOPzilla Service (szserver) - iS3, Inc. - C:\Program Files\Common Files\iS3\Anti-Spyware\SZServer.exe

–
End of file - 14090 bytes

Xlswin.exe (Xlswin) Trojan Virus File Information | Virus Removal Guru March 2nd, 2024 at 9:49 pm