DH Anasayfa
İndirim Kodu
Ara
Popüler
Foruma Git
Hakkımızda
Destek
Mobil Sürüm
Standart Site Görünümü
Bu Konuda
  • Tüm Forumlar
  • Donanım / Hardware
  • Teknik Yardım
  • Bu Konuda
Arama butonu
Bağlan:
Facebook
Google+
Twitter
Aşağı Git Tüm Forumlar Donanım / Hardware Teknik Yardım Combofix log analizinden anlayanlar yardım lütfen
Bu konudaki kullanıcılar: 1 misafir
1
Cevap 368
Tıklama 0
Öne Çıkarma
Combofix log analizinden anlayanlar yardım lütfen
Cevap Yaz
Konuya Özel
T
themyth_1905
Doğum gününü kutla!
8 yıl
Er
Konu Sahibi

Merhaba arkadaşlar,

Üni öğrencisiyim. Malum ben yokken bilgisayara evdekiler ne yaptılarsa geldiğimde hem bilgisayar yavaşlamıştı hem de internet 23mbit hız almasına rağmen çok yavaştı.

Not: Ben bırakırken hepsi çok iyi çalışıyordu :)

Combofix ile tarattırdım ve log aşağıda. Anlayan arkadaşlar yardımcı olursa sevinirim.

İşletim Sistemi Windows 7 64bit
Kingsoft Antivirüs 2012 kullanıyorum. 

ComboFix 16-03-18.01 - Ecrin 19.03.2016  15:20:24.1.6 - x64 
  Microsoft Windows 7 Home Premium   6.1.7601.1.1254.90.1055.18.4061.2175 [GMT 2:00] 
  Running from: c:\users\Ecrin\Desktop\ComboFix.exe 
  AV: Kingsoft Antivirus System Defense *Disabled/Updated* {B6A51389-A795-5AC9-13BA-F569D73F3FE8} 
  SP: Kingsoft Antivirus System Defense *Disabled/Updated* {0DC4F26D-81AF-5547-290A-CE1BACB87555} 
  SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} 
  . 
  . 
  (((((((((((((((((((((((((((((((((((((((   Other Deletions   ))))))))))))))))))))))))))))))))))))))))))))))))) 
  . 
  . 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\_ctypes.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\_elementtree.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\_hashlib.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\_multiprocessing.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\_psutil_windows.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\_socket.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\_ssl.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\_yappi.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\common.time34.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\hashobjs_ext.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\pyexpat.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\pysqlite2._sqlite.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\python27.dll 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\pythoncom27.dll 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\PyWinTypes27.dll 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\select.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\thumbnails_ext.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\unicodedata.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\usb_ext.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\win32api.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\win32com.shell.shell.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\win32crypt.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\win32event.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\win32file.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\win32gui.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\win32inet.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\win32pdh.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\win32pipe.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\win32process.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\win32profile.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\win32security.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\win32ts.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\windows._lib_cacheinvalidation.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\wx._animate.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\wx._controls_.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\wx._core_.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\wx._gdi_.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\wx._html2.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\wx._misc_.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\wx._windows_.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\wx._wizard.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\wxbase30u_net_vc90.dll 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\wxbase30u_vc90.dll 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\wxmsw30u_adv_vc90.dll 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\wxmsw30u_core_vc90.dll 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\wxmsw30u_html_vc90.dll 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\wxmsw30u_webview_vc90.dll 
  c:\users\Ecrin\AppData\Local\Temp\mdi064.dll 
  c:\users\Ecrin\AppData\Local\Temp\msupdate71\dwm.exe 
  c:\users\Ecrin\AppData\Local\Temp\msupdate71\libcurl-4.dl1 
  c:\users\Ecrin\AppData\Local\Temp\msupdate71\libiconv-2.dl1 
  c:\users\Ecrin\AppData\Local\Temp\msupdate71\libidn-11.dl1 
  c:\users\Ecrin\AppData\Local\Temp\msupdate71\libintl-8.dl1 
  c:\users\Ecrin\AppData\Local\Temp\msupdate71\libwinpthread-1.dl1 
  c:\users\Ecrin\AppData\Local\Temp\msupdate71\zlib1.dl1 
  c:\users\Ecrin\Dosyalarım.exe 
  . 
  . 
  (((((((((((((((((((((((((   Files Created from 2016-02-19 to 2016-03-19  ))))))))))))))))))))))))))))))) 
  . 
  . 
  2016-03-19 13:26 . 2016-03-19 13:26	--------	d-----w-	c:\users\Default\AppData\Local\temp 
  2016-03-12 13:28 . 2016-03-12 13:28	--------	d-----w-	c:\users\Ecrin\Autodesk 
  2016-03-12 13:28 . 2016-03-12 13:28	--------	d-----w-	c:\users\Ecrin\AppData\Roaming\NVIDIA 
  2016-03-12 13:24 . 2016-03-12 13:25	--------	d-----w-	c:\programdata\FLEXnet 
  2016-03-12 13:20 . 2016-03-12 13:27	--------	d-----w-	c:\users\Ecrin\AppData\Local\Autodesk 
  2016-03-12 13:11 . 2016-03-12 13:11	--------	d-----w-	c:\program files (x86)\Autodesk 
  2016-03-12 13:06 . 2016-03-12 13:06	--------	d-----w-	c:\program files\Common Files\Macrovision Shared 
  2016-03-12 12:56 . 2016-03-12 13:19	--------	d-----w-	c:\program files\Common Files\Autodesk Shared 
  2016-03-12 12:56 . 2016-03-12 12:56	--------	d-----w-	c:\program files\Autodesk 
  2016-03-12 12:34 . 2016-03-12 12:34	--------	d-----w-	c:\windows\Migration 
  2016-03-12 12:29 . 2016-03-12 13:20	--------	d-----w-	c:\programdata\Package Cache 
  2016-03-12 12:27 . 2016-03-12 13:58	--------	d-----w-	c:\users\Ecrin\AppData\Roaming\Autodesk 
  2016-03-12 12:27 . 2016-03-12 13:25	--------	d-----w-	c:\programdata\Autodesk 
  2016-03-12 12:26 . 2016-03-12 12:26	--------	d-----w-	c:\users\Ecrin\AppData\Local\Akamai 
  2016-03-12 12:25 . 2016-03-12 12:25	--------	d-----w-	C:\Autodesk 
  2016-03-11 18:37 . 2016-03-11 18:37	11035328	----a-w-	c:\windows\SysWow64\FlashPlayerInstaller.exe 
  2016-03-07 20:37 . 2016-03-07 20:37	--------	d-----w-	c:\programdata\KRSHistory 
  2016-03-06 20:01 . 2016-03-06 20:01	--------	d-----w-	c:\windows\SysWow64\4206 
  2016-03-06 19:57 . 2016-03-06 21:39	454656	----a-w-	c:\windows\SysWow64\yssk.dll 
  2016-03-06 19:57 . 2011-04-04 16:03	20091117	----a-w-	c:\windows\SysWow64\Ozne.dll 
  2016-03-06 19:57 . 2011-04-01 06:37	634880	----a-w-	c:\windows\SysWow64\systroy.dll 
  2016-03-06 19:49 . 2016-03-06 19:49	8704	----a-w-	c:\windows\SysWow64\SpOrder.dll 
  2016-03-06 19:49 . 2016-03-06 19:49	73728	----a-w-	c:\windows\SysWow64\VistaInfo8.dll 
  2016-03-06 19:48 . 2016-03-07 20:36	--------	d-----w-	c:\program files (x86)\TemizNet 
  2016-03-06 19:40 . 2016-03-06 19:40	--------	d-----w-	c:\programdata\handyCafe 
  2016-03-06 19:39 . 2016-03-06 19:46	--------	d-----w-	c:\program files (x86)\Filtre Programi 
  2016-02-28 15:38 . 2016-02-28 15:38	--------	d-----w-	c:\program files (x86)\Internet Download Manager 
  2016-02-24 15:45 . 2016-02-24 15:45	--------	d-----w-	c:\users\Ecrin\AppData\Local\Macromedia 
  2016-02-24 15:40 . 2016-03-11 18:37	797376	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe 
  2016-02-24 15:40 . 2016-03-11 18:37	142528	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl 
  2016-02-24 15:40 . 2016-02-24 15:40	--------	d-----w-	c:\windows\SysWow64\Macromed 
  2016-02-24 15:40 . 2016-02-24 15:40	--------	d-----w-	c:\windows\system32\Macromed 
  2016-02-24 15:39 . 2016-02-24 15:40	--------	d-----w-	c:\users\Ecrin\AppData\Local\Adobe 
  2016-02-19 21:41 . 2016-02-19 21:47	--------	d-----w-	c:\users\Ecrin\AppData\Local\Mozilla 
  2016-02-19 21:40 . 2016-02-19 21:40	--------	d-----w-	c:\program files (x86)\Mozilla Maintenance Service 
  . 
  . 
  . 
  ((((((((((((((((((((((((((((((((((((((((   Find3M Report   )))))))))))))))))))))))))))))))))))))))))))))))))))) 
  . 
  . 
  . 
  (((((((((((((((((((((((((((((((((((((   Reg Loading Points   )))))))))))))))))))))))))))))))))))))))))))))))))) 
  . 
  . 
  *Note* empty entries & legit default entries are not shown  
  REGEDIT4 
  . 
  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 
  "GoogleDriveSync"="c:\program files (x86)\Google\Drive\googledrivesync.exe" [2016-02-24 23260000] 
  "GoogleChromeAutoLaunch_308EB6A907AED472DC47A0C90CA049C6"="c:\program files (x86)\Google\Chrome\Application\chrome.exe" [2016-03-16 1008792] 
  "Akamai NetSession Interface"="c:\users\Ecrin\AppData\Local\Akamai\netsession_win.exe" [2015-09-10 4691384] 
  . 
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] 
  "kxesc"="c:\program files (x86)\kingsoft\kingsoft antivirus\kxetray.exe" [2015-12-05 1595056] 
  "ADSKAppManager"="c:\program files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe" [2016-02-24 529480] 
  . 
  [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] 
  "ConsentPromptBehaviorAdmin"= 0 (0x0) 
  "ConsentPromptBehaviorUser"= 3 (0x3) 
  "EnableLUA"= 0 (0x0) 
  "EnableUIADesktopToggle"= 0 (0x0) 
  "PromptOnSecureDesktop"= 0 (0x0) 
  . 
  R1 UsbCharger;UsbCharger;c:\windows\system32\DRIVERS\UsbCharger.sys;c:\windows\SYSNATIVE\DRIVERS\UsbCharger.sys [x] 
  R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] 
  R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x] 
  R3 AppleChargerSrv;AppleChargerSrv;c:\windows\system32\AppleChargerSrv.exe;c:\windows\SYSNATIVE\AppleChargerSrv.exe [x] 
  R3 etdrv;etdrv;c:\windows\etdrv.sys;c:\windows\etdrv.sys [x] 
  R3 FlexNet Licensing Service 64;FlexNet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe;c:\program files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe [x] 
  R3 GVTDrv64;GVTDrv64;c:\windows\GVTDrv64.sys;c:\windows\GVTDrv64.sys [x] 
  R3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [x] 
  R3 mi-raysat_3dsmax2016_64;mental ray Satellite for Autodesk 3ds Max 2016 64-bit;c:\program files\Autodesk\3ds Max 2016\NVIDIA\Satellite\raysat_3dsmax2016_64server.exe;c:\program files\Autodesk\3ds Max 2016\NVIDIA\Satellite\raysat_3dsmax2016_64server.exe [x] 
  R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] 
  R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x] 
  R3 Yassak;Yassak;c:\program files (x86)\TemizNet\wlcomm.exe;c:\program files (x86)\TemizNet\wlcomm.exe [x] 
  S0 kavbootc;kavbootc;c:\windows\system32\drivers\kavbootc64.sys;c:\windows\SYSNATIVE\drivers\kavbootc64.sys [x] 
  S1 AppleCharger;AppleCharger;c:\windows\system32\DRIVERS\AppleCharger.sys;c:\windows\SYSNATIVE\DRIVERS\AppleCharger.sys [x] 
  S1 KDHacker;KDHacker;c:\program files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kdhacker64.sys;c:\program files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kdhacker64.sys [x] 
  S2 AdAppMgrSvc;Autodesk Application Manager Service;c:\program files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe ;c:\program files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe  [x] 
  S2 kisknl;kisknl;c:\windows\system32\drivers\kisknl.sys;c:\windows\SYSNATIVE\drivers\kisknl.sys [x] 
  S2 kxescore;Kingsoft Core Service;c:\program files (x86)\kingsoft\kingsoft antivirus\kxescore.exe;c:\program files (x86)\kingsoft\kingsoft antivirus\kxescore.exe [x] 
  S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x] 
  S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x] 
  S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x] 
  S3 VUSB3HUB;VIA USB 3 Root Hub Service;c:\windows\system32\DRIVERS\ViaHub3.sys;c:\windows\SYSNATIVE\DRIVERS\ViaHub3.sys [x] 
  S3 xhcdrv;VIA USB eXtensible Host Controller Service;c:\windows\system32\DRIVERS\xhcdrv.sys;c:\windows\SYSNATIVE\DRIVERS\xhcdrv.sys [x] 
  S4 KUsbGuard;KUsbGuard;c:\program files (x86)\kingsoft\kingsoft antivirus\kusbquery64.sys;c:\program files (x86)\kingsoft\kingsoft antivirus\kusbquery64.sys [x] 
  . 
  . 
  Contents of the 'Scheduled Tasks' folder 
  . 
  2016-03-19 c:\windows\Tasks\Adobe Flash Player Updater.job 
  - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-02-24 18:37] 
  . 
  2016-03-19 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job 
  - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2015-12-05 09:42] 
  . 
  2016-03-19 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job 
  - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2015-12-05 09:42] 
  . 
  . 
  --------- X64 Entries ----------- 
  . 
  . 
  [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\  GoogleDriveBlacklisted] 
  @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}" 
  [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}] 
  2016-02-24 20:39	775064	----a-w-	c:\program files (x86)\Google\Drive\googledrivesync64.dll 
  . 
  [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\  GoogleDriveSynced] 
  @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}" 
  [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}] 
  2016-02-24 20:39	775064	----a-w-	c:\program files (x86)\Google\Drive\googledrivesync64.dll 
  . 
  [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\  GoogleDriveSyncing] 
  @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}" 
  [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}] 
  2016-02-24 20:39	775064	----a-w-	c:\program files (x86)\Google\Drive\googledrivesync64.dll 
  . 
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 
  "VIAxHCUtl"="c:\program files\VIA XHCI UASP Utility\usb3Monitor" [X] 
  "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2013-12-13 13662936] 
  . 
  ------- Supplementary Scan ------- 
  . 
  uLocal Page = c:\windows\system32\blank.htm 
  uStart Page = about:blank 
  uInternet Settings,ProxyOverride = <local> 
  TCP: DhcpNameServer = 192.168.1.1 
  FF - ProfilePath - c:\users\Ecrin\AppData\Roaming\Mozilla\Firefox\Profiles\b323t8it.default\ 
  FF - prefs.js: browser.startup.homepage - hxxps://www.google.com.tr/?gfe_rd=cr&ei=UozHVqm5HaLY8Ael_paICA 
  . 
  - - - - ORPHANS REMOVED - - - - 
  . 
  Wow6432Node-HKCU-Run-Microsoft.Net - c:\users\Ecrin\Dosyalarım.exe 
  . 
  . 
  . 
  --------------------- LOCKED REGISTRY KEYS --------------------- 
  . 
  [HKEY_USERS\S-1-5-21-3615535235-763976793-2235896908-1000_Classes\Wow6432Node\CLSID\{605d86c2-311c-4bdc-a5ea-5e1a5b9df173}] 
  @Denied: (Full) (Everyone) 
  @Allowed: (Read) (RestrictedCode) 
  "Model"=dword:00000035 
  "Therad"=dword:00000006 
  . 
  [HKEY_USERS\S-1-5-21-3615535235-763976793-2235896908-1000_Classes\Wow6432Node\CLSID\{7B8E9164-324D-4A2E-A46D-0165FB2000EC}] 
  @Denied: (Full) (Everyone) 
  "scansk"=hex(0):2e,a1,9e,a8,70,b2,74,86,0b,64,2e,ba,7d,fb,d3,af,74,c2,8c,1c,77, 
     95,d7,9d,95,cb,f9,6b,3c,f4,1e,b5,96,5d,c9,12,15,1d,99,61,00,00,00,00,00,00,\ 
  . 
  [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] 
  @Denied: (Full) (Everyone) 
  . 
  ------------------------ Other Running Processes ------------------------ 
  . 
  c:\program files (x86)\kingsoft\kingsoft antivirus\vulfix.exe 
  c:\users\Ecrin\AppData\Local\Autodesk\.AdskAppManager\R1\AdAppMgr.exe 
  c:\program files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe 
  . 
  ************************************************************************** 
  . 
  Completion time: 2016-03-19  15:33:07 - machine was rebooted 
  ComboFix-quarantined-files.txt  2016-03-19 13:33 
  . 
  Pre-Run: 435.313.684.480 bayt boş 
  Post-Run: 435.142.144.000 bayt boş 
  . 
  - - End Of File - - DB00E553B30270376612C5114C316B96 
  A36C5E4F47E84449FF07ED3517B43A31



A
AYNIADAM
8 yıl
Yüzbaşı

quote:

Orijinalden alıntı: themyth_1905

Merhaba arkadaşlar,

Üni öğrencisiyim. Malum ben yokken bilgisayara evdekiler ne yaptılarsa geldiğimde hem bilgisayar yavaşlamıştı hem de internet 23mbit hız almasına rağmen çok yavaştı.

Not: Ben bırakırken hepsi çok iyi çalışıyordu :)

Combofix ile tarattırdım ve log aşağıda. Anlayan arkadaşlar yardımcı olursa sevinirim.

İşletim Sistemi Windows 7 64bit
Kingsoft Antivirüs 2012 kullanıyorum. 

ComboFix 16-03-18.01 - Ecrin 19.03.2016  15:20:24.1.6 - x64 
  Microsoft Windows 7 Home Premium   6.1.7601.1.1254.90.1055.18.4061.2175 [GMT 2:00] 
  Running from: c:\users\Ecrin\Desktop\ComboFix.exe 
  AV: Kingsoft Antivirus System Defense *Disabled/Updated* {B6A51389-A795-5AC9-13BA-F569D73F3FE8} 
  SP: Kingsoft Antivirus System Defense *Disabled/Updated* {0DC4F26D-81AF-5547-290A-CE1BACB87555} 
  SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} 
  . 
  . 
  (((((((((((((((((((((((((((((((((((((((   Other Deletions   ))))))))))))))))))))))))))))))))))))))))))))))))) 
  . 
  . 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\_ctypes.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\_elementtree.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\_hashlib.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\_multiprocessing.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\_psutil_windows.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\_socket.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\_ssl.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\_yappi.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\common.time34.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\hashobjs_ext.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\pyexpat.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\pysqlite2._sqlite.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\python27.dll 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\pythoncom27.dll 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\PyWinTypes27.dll 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\select.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\thumbnails_ext.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\unicodedata.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\usb_ext.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\win32api.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\win32com.shell.shell.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\win32crypt.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\win32event.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\win32file.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\win32gui.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\win32inet.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\win32pdh.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\win32pipe.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\win32process.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\win32profile.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\win32security.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\win32ts.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\windows._lib_cacheinvalidation.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\wx._animate.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\wx._controls_.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\wx._core_.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\wx._gdi_.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\wx._html2.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\wx._misc_.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\wx._windows_.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\wx._wizard.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\wxbase30u_net_vc90.dll 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\wxbase30u_vc90.dll 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\wxmsw30u_adv_vc90.dll 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\wxmsw30u_core_vc90.dll 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\wxmsw30u_html_vc90.dll 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\wxmsw30u_webview_vc90.dll 
  c:\users\Ecrin\AppData\Local\Temp\mdi064.dll 
  c:\users\Ecrin\AppData\Local\Temp\msupdate71\dwm.exe 
  c:\users\Ecrin\AppData\Local\Temp\msupdate71\libcurl-4.dl1 
  c:\users\Ecrin\AppData\Local\Temp\msupdate71\libiconv-2.dl1 
  c:\users\Ecrin\AppData\Local\Temp\msupdate71\libidn-11.dl1 
  c:\users\Ecrin\AppData\Local\Temp\msupdate71\libintl-8.dl1 
  c:\users\Ecrin\AppData\Local\Temp\msupdate71\libwinpthread-1.dl1 
  c:\users\Ecrin\AppData\Local\Temp\msupdate71\zlib1.dl1 
  c:\users\Ecrin\Dosyalarım.exe 
  . 
  . 
  (((((((((((((((((((((((((   Files Created from 2016-02-19 to 2016-03-19  ))))))))))))))))))))))))))))))) 
  . 
  . 
  2016-03-19 13:26 . 2016-03-19 13:26	--------	d-----w-	c:\users\Default\AppData\Local\temp 
  2016-03-12 13:28 . 2016-03-12 13:28	--------	d-----w-	c:\users\Ecrin\Autodesk 
  2016-03-12 13:28 . 2016-03-12 13:28	--------	d-----w-	c:\users\Ecrin\AppData\Roaming\NVIDIA 
  2016-03-12 13:24 . 2016-03-12 13:25	--------	d-----w-	c:\programdata\FLEXnet 
  2016-03-12 13:20 . 2016-03-12 13:27	--------	d-----w-	c:\users\Ecrin\AppData\Local\Autodesk 
  2016-03-12 13:11 . 2016-03-12 13:11	--------	d-----w-	c:\program files (x86)\Autodesk 
  2016-03-12 13:06 . 2016-03-12 13:06	--------	d-----w-	c:\program files\Common Files\Macrovision Shared 
  2016-03-12 12:56 . 2016-03-12 13:19	--------	d-----w-	c:\program files\Common Files\Autodesk Shared 
  2016-03-12 12:56 . 2016-03-12 12:56	--------	d-----w-	c:\program files\Autodesk 
  2016-03-12 12:34 . 2016-03-12 12:34	--------	d-----w-	c:\windows\Migration 
  2016-03-12 12:29 . 2016-03-12 13:20	--------	d-----w-	c:\programdata\Package Cache 
  2016-03-12 12:27 . 2016-03-12 13:58	--------	d-----w-	c:\users\Ecrin\AppData\Roaming\Autodesk 
  2016-03-12 12:27 . 2016-03-12 13:25	--------	d-----w-	c:\programdata\Autodesk 
  2016-03-12 12:26 . 2016-03-12 12:26	--------	d-----w-	c:\users\Ecrin\AppData\Local\Akamai 
  2016-03-12 12:25 . 2016-03-12 12:25	--------	d-----w-	C:\Autodesk 
  2016-03-11 18:37 . 2016-03-11 18:37	11035328	----a-w-	c:\windows\SysWow64\FlashPlayerInstaller.exe 
  2016-03-07 20:37 . 2016-03-07 20:37	--------	d-----w-	c:\programdata\KRSHistory 
  2016-03-06 20:01 . 2016-03-06 20:01	--------	d-----w-	c:\windows\SysWow64\4206 
  2016-03-06 19:57 . 2016-03-06 21:39	454656	----a-w-	c:\windows\SysWow64\yssk.dll 
  2016-03-06 19:57 . 2011-04-04 16:03	20091117	----a-w-	c:\windows\SysWow64\Ozne.dll 
  2016-03-06 19:57 . 2011-04-01 06:37	634880	----a-w-	c:\windows\SysWow64\systroy.dll 
  2016-03-06 19:49 . 2016-03-06 19:49	8704	----a-w-	c:\windows\SysWow64\SpOrder.dll 
  2016-03-06 19:49 . 2016-03-06 19:49	73728	----a-w-	c:\windows\SysWow64\VistaInfo8.dll 
  2016-03-06 19:48 . 2016-03-07 20:36	--------	d-----w-	c:\program files (x86)\TemizNet 
  2016-03-06 19:40 . 2016-03-06 19:40	--------	d-----w-	c:\programdata\handyCafe 
  2016-03-06 19:39 . 2016-03-06 19:46	--------	d-----w-	c:\program files (x86)\Filtre Programi 
  2016-02-28 15:38 . 2016-02-28 15:38	--------	d-----w-	c:\program files (x86)\Internet Download Manager 
  2016-02-24 15:45 . 2016-02-24 15:45	--------	d-----w-	c:\users\Ecrin\AppData\Local\Macromedia 
  2016-02-24 15:40 . 2016-03-11 18:37	797376	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe 
  2016-02-24 15:40 . 2016-03-11 18:37	142528	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl 
  2016-02-24 15:40 . 2016-02-24 15:40	--------	d-----w-	c:\windows\SysWow64\Macromed 
  2016-02-24 15:40 . 2016-02-24 15:40	--------	d-----w-	c:\windows\system32\Macromed 
  2016-02-24 15:39 . 2016-02-24 15:40	--------	d-----w-	c:\users\Ecrin\AppData\Local\Adobe 
  2016-02-19 21:41 . 2016-02-19 21:47	--------	d-----w-	c:\users\Ecrin\AppData\Local\Mozilla 
  2016-02-19 21:40 . 2016-02-19 21:40	--------	d-----w-	c:\program files (x86)\Mozilla Maintenance Service 
  . 
  . 
  . 
  ((((((((((((((((((((((((((((((((((((((((   Find3M Report   )))))))))))))))))))))))))))))))))))))))))))))))))))) 
  . 
  . 
  . 
  (((((((((((((((((((((((((((((((((((((   Reg Loading Points   )))))))))))))))))))))))))))))))))))))))))))))))))) 
  . 
  . 
  *Note* empty entries & legit default entries are not shown  
  REGEDIT4 
  . 
  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 
  "GoogleDriveSync"="c:\program files (x86)\Google\Drive\googledrivesync.exe" [2016-02-24 23260000] 
  "GoogleChromeAutoLaunch_308EB6A907AED472DC47A0C90CA049C6"="c:\program files (x86)\Google\Chrome\Application\chrome.exe" [2016-03-16 1008792] 
  "Akamai NetSession Interface"="c:\users\Ecrin\AppData\Local\Akamai\netsession_win.exe" [2015-09-10 4691384] 
  . 
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] 
  "kxesc"="c:\program files (x86)\kingsoft\kingsoft antivirus\kxetray.exe" [2015-12-05 1595056] 
  "ADSKAppManager"="c:\program files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe" [2016-02-24 529480] 
  . 
  [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] 
  "ConsentPromptBehaviorAdmin"= 0 (0x0) 
  "ConsentPromptBehaviorUser"= 3 (0x3) 
  "EnableLUA"= 0 (0x0) 
  "EnableUIADesktopToggle"= 0 (0x0) 
  "PromptOnSecureDesktop"= 0 (0x0) 
  . 
  R1 UsbCharger;UsbCharger;c:\windows\system32\DRIVERS\UsbCharger.sys;c:\windows\SYSNATIVE\DRIVERS\UsbCharger.sys [x] 
  R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] 
  R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x] 
  R3 AppleChargerSrv;AppleChargerSrv;c:\windows\system32\AppleChargerSrv.exe;c:\windows\SYSNATIVE\AppleChargerSrv.exe [x] 
  R3 etdrv;etdrv;c:\windows\etdrv.sys;c:\windows\etdrv.sys [x] 
  R3 FlexNet Licensing Service 64;FlexNet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe;c:\program files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe [x] 
  R3 GVTDrv64;GVTDrv64;c:\windows\GVTDrv64.sys;c:\windows\GVTDrv64.sys [x] 
  R3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [x] 
  R3 mi-raysat_3dsmax2016_64;mental ray Satellite for Autodesk 3ds Max 2016 64-bit;c:\program files\Autodesk\3ds Max 2016\NVIDIA\Satellite\raysat_3dsmax2016_64server.exe;c:\program files\Autodesk\3ds Max 2016\NVIDIA\Satellite\raysat_3dsmax2016_64server.exe [x] 
  R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] 
  R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x] 
  R3 Yassak;Yassak;c:\program files (x86)\TemizNet\wlcomm.exe;c:\program files (x86)\TemizNet\wlcomm.exe [x] 
  S0 kavbootc;kavbootc;c:\windows\system32\drivers\kavbootc64.sys;c:\windows\SYSNATIVE\drivers\kavbootc64.sys [x] 
  S1 AppleCharger;AppleCharger;c:\windows\system32\DRIVERS\AppleCharger.sys;c:\windows\SYSNATIVE\DRIVERS\AppleCharger.sys [x] 
  S1 KDHacker;KDHacker;c:\program files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kdhacker64.sys;c:\program files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kdhacker64.sys [x] 
  S2 AdAppMgrSvc;Autodesk Application Manager Service;c:\program files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe ;c:\program files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe  [x] 
  S2 kisknl;kisknl;c:\windows\system32\drivers\kisknl.sys;c:\windows\SYSNATIVE\drivers\kisknl.sys [x] 
  S2 kxescore;Kingsoft Core Service;c:\program files (x86)\kingsoft\kingsoft antivirus\kxescore.exe;c:\program files (x86)\kingsoft\kingsoft antivirus\kxescore.exe [x] 
  S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x] 
  S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x] 
  S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x] 
  S3 VUSB3HUB;VIA USB 3 Root Hub Service;c:\windows\system32\DRIVERS\ViaHub3.sys;c:\windows\SYSNATIVE\DRIVERS\ViaHub3.sys [x] 
  S3 xhcdrv;VIA USB eXtensible Host Controller Service;c:\windows\system32\DRIVERS\xhcdrv.sys;c:\windows\SYSNATIVE\DRIVERS\xhcdrv.sys [x] 
  S4 KUsbGuard;KUsbGuard;c:\program files (x86)\kingsoft\kingsoft antivirus\kusbquery64.sys;c:\program files (x86)\kingsoft\kingsoft antivirus\kusbquery64.sys [x] 
  . 
  . 
  Contents of the 'Scheduled Tasks' folder 
  . 
  2016-03-19 c:\windows\Tasks\Adobe Flash Player Updater.job 
  - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-02-24 18:37] 
  . 
  2016-03-19 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job 
  - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2015-12-05 09:42] 
  . 
  2016-03-19 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job 
  - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2015-12-05 09:42] 
  . 
  . 
  --------- X64 Entries ----------- 
  . 
  . 
  [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\  GoogleDriveBlacklisted] 
  @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}" 
  [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}] 
  2016-02-24 20:39	775064	----a-w-	c:\program files (x86)\Google\Drive\googledrivesync64.dll 
  . 
  [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\  GoogleDriveSynced] 
  @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}" 
  [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}] 
  2016-02-24 20:39	775064	----a-w-	c:\program files (x86)\Google\Drive\googledrivesync64.dll 
  . 
  [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\  GoogleDriveSyncing] 
  @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}" 
  [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}] 
  2016-02-24 20:39	775064	----a-w-	c:\program files (x86)\Google\Drive\googledrivesync64.dll 
  . 
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 
  "VIAxHCUtl"="c:\program files\VIA XHCI UASP Utility\usb3Monitor" [X] 
  "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2013-12-13 13662936] 
  . 
  ------- Supplementary Scan ------- 
  . 
  uLocal Page = c:\windows\system32\blank.htm 
  uStart Page = about:blank 
  uInternet Settings,ProxyOverride = <local> 
  TCP: DhcpNameServer = 192.168.1.1 
  FF - ProfilePath - c:\users\Ecrin\AppData\Roaming\Mozilla\Firefox\Profiles\b323t8it.default\ 
  FF - prefs.js: browser.startup.homepage - hxxps://www.google.com.tr/?gfe_rd=cr&ei=UozHVqm5HaLY8Ael_paICA 
  . 
  - - - - ORPHANS REMOVED - - - - 
  . 
  Wow6432Node-HKCU-Run-Microsoft.Net - c:\users\Ecrin\Dosyalarım.exe 
  . 
  . 
  . 
  --------------------- LOCKED REGISTRY KEYS --------------------- 
  . 
  [HKEY_USERS\S-1-5-21-3615535235-763976793-2235896908-1000_Classes\Wow6432Node\CLSID\{605d86c2-311c-4bdc-a5ea-5e1a5b9df173}] 
  @Denied: (Full) (Everyone) 
  @Allowed: (Read) (RestrictedCode) 
  "Model"=dword:00000035 
  "Therad"=dword:00000006 
  . 
  [HKEY_USERS\S-1-5-21-3615535235-763976793-2235896908-1000_Classes\Wow6432Node\CLSID\{7B8E9164-324D-4A2E-A46D-0165FB2000EC}] 
  @Denied: (Full) (Everyone) 
  "scansk"=hex(0):2e,a1,9e,a8,70,b2,74,86,0b,64,2e,ba,7d,fb,d3,af,74,c2,8c,1c,77, 
     95,d7,9d,95,cb,f9,6b,3c,f4,1e,b5,96,5d,c9,12,15,1d,99,61,00,00,00,00,00,00,\ 
  . 
  [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] 
  @Denied: (Full) (Everyone) 
  . 
  ------------------------ Other Running Processes ------------------------ 
  . 
  c:\program files (x86)\kingsoft\kingsoft antivirus\vulfix.exe 
  c:\users\Ecrin\AppData\Local\Autodesk\.AdskAppManager\R1\AdAppMgr.exe 
  c:\program files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe 
  . 
  ************************************************************************** 
  . 
  Completion time: 2016-03-19  15:33:07 - machine was rebooted 
  ComboFix-quarantined-files.txt  2016-03-19 13:33 
  . 
  Pre-Run: 435.313.684.480 bayt boş 
  Post-Run: 435.142.144.000 bayt boş 
  . 
  - - End Of File - - DB00E553B30270376612C5114C316B96 
  A36C5E4F47E84449FF07ED3517B43A31
Öncelikle fake antivürüs programı bulmuş sanırım. Kinston Antivürs sistem diye. Bu hizmeti durdurarak windowsun kendi antivürs hizmetini yeniden aktif etmiş.
Bknz: 
AV: Kingsoft Antivirus System Defense *Disabled/Updated* {B6A51389-A795-5AC9-13BA-F569D73F3FE8} 
  SP: Kingsoft Antivirus System Defense *Disabled/Updated* {0DC4F26D-81AF-5547-290A-CE1BACB87555} 
  SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}


Hızlı bir tarama yazarak root dizin ve windows altındaki virüslü dosyaları silmiş.
Bknz: 
c:\users\Ecrin\AppData\Local\Temp\_MEI21842\wx._core_.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\wx._gdi_.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\wx._html2.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\wx._misc_.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\wx._windows_.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\wx._wizard.pyd 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\wxbase30u_net_vc90.dll 
  c:\users\Ecrin\AppData\Local\Temp\_MEI21842\wxbase30u_vc90.dll


Yinede tam sistem taraması yapmanız gerekmekte. ( Başka yazılımlarla )

Diğer başlıklara gelince. Sistem kayıt defterinde bulduğu virüslerle ilgili kayıtları silmiş, bu virüslerin kayıt defterinde işletim sisteminde ki yaptığı değişiklikleri ise varsayılan ayarlarına getirmiş.

Daha sonra zamanlanmış görevlerde tanımlı görevleride iptal etmiş.
Bazı ayarların değiştirilmesini önlemek için kilitlemiş. vs. vs.

Sonuç olarak sisteminde bulaşma var. Yapabildiği kadar temizliyip stabil hale getirmeye çalışmış.
İyi bir antivürs programı kurarak korumanı tamamla. Sistem halen stabil çalışmıyor ise yedek alıp yeniden kurulum yap.



Cevap Yaz
Tüm Forumlar Donanım / Hardware Teknik Yardım Combofix log analizinden anlayanlar yardım lütfen
DH Mobil uygulaması ile devam edin. Mobil tarayıcınız ile mümkün olanların yanı sıra, birçok yeni ve faydalı özelliğe erişin.
App Store'danİndirin Google Play'denİndirin
Gizle ve güncelleme çıkana kadar tekrar gösterme.
DonanımHaber Forum - Mini Sürüm

Hakkımızda | Yukarı

Tam sürüm için tıklayınız
Version: 1.2.855
Donanım Sponsoru: incehesap.com