Bu hata nedir, yardım edermisiniz?

Question

Error (login):0x10e0 The operator or administrator has refused the request.2 gündür bu uyarı çıkıyor.

Answer

Bunu yapan bir virüs vardı. Çeşitli AV'lerle tarama yaptırmanı öneririm. Ne kullanıyorsun anti virüs?

Answer

quote: Orjinalden alıntı: thunderwatcher   Bunu yapan bir virüs vardı. Çeşitli AV'lerle tarama yaptırmanı öneririm. Ne kullanıyorsun anti virüs?   kaspersky 2009 + spyware doctor+ spy sweeper  virüs olduğuna eminmisiniz.

Answer

ne yapmaya çalıştığında alıyorsun bu uyarıyı?

Answer

quote: Orjinalden alıntı: mesuthaksoy  ne yapmaya çalıştığında alıyorsun bu uyarıyı?   hiç birşey, belirli aralıklarla otomatik çıkıyor.5 dakikada bir çıkıyor.

Answer

Son derece eminim kardeş. Virüs demiyim de malware diyim. Spy benzeri bişeyler. Spyware Doctor çok iyi değil, kendine hayrı yok. HiJackThis yakalıyormuş rivayete göre. Forumda indirileceği linki ve kullanım şeklini bulabilirsin. Ya da HijackThis log'unu gönder biz bakalım.

Answer

quote: Orjinalden alıntı: thunderwatcher   Son derece eminim kardeş. Virüs demiyim de malware diyim. Spy benzeri bişeyler. Spyware Doctor çok iyi değil, kendine hayrı yok. HiJackThis yakalıyormuş rivayete göre. Forumda indirileceği linki ve kullanım şeklini bulabilirsin. Ya da HijackThis log'unu gönder biz bakalım.   Sağolasın, hemen kurup bi tarama yaptırayım.HijackThis log'u nasıl göndericem?

Answer

quote: Orjinalden alıntı: thunderwatcher   Son derece eminim kardeş. Virüs demiyim de malware diyim. Spy benzeri bişeyler. Spyware Doctor çok iyi değil, kendine hayrı yok. HiJackThis yakalıyormuş rivayete göre. Forumda indirileceği linki ve kullanım şeklini bulabilirsin. Ya da HijackThis log'unu gönder biz bakalım.   Dostum tarattım, sonuç;  Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 23:48:24, on 11.01.2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16762) Boot mode: Normal  Running processes: E:/WINDOWS/System32/smss.exe E:/WINDOWS/system32/csrss.exe E:/WINDOWS/system32/winlogon.exe E:/WINDOWS/system32/services.exe E:/WINDOWS/system32/lsass.exe E:/WINDOWS/system32/svchost.exe E:/WINDOWS/system32/svchost.exe E:/WINDOWS/System32/svchost.exe E:/WINDOWS/System32/WLTRYSVC.EXE E:/WINDOWS/System32/bcmwltry.exe E:/WINDOWS/system32/spoolsv.exe E:/WINDOWS/Explorer.EXE E:/Program Files/Acronis/TrueImageHome/TimounterMonitor.exe E:/Program Files/Common Files/Acronis/Schedule2/schedhlp.exe E:/Program Files/Java/jre1.6.0_07/bin/jusched.exe E:/WINDOWS/VM_STI.EXE E:/Program Files/Logitech/Gaming Software/LWEMon.exe E:/Program Files/Creative/SBAudigy/Surround Mixer/CTSysVol.exe E:/WINDOWS/system32/rundll32.exe E:/Program Files/Virtual CD v9/System/VC9Play.exe E:/Program Files/Microsoft IntelliType Pro/type32.exe E:/Program Files/Microsoft IntelliPoint/point32.exe E:/WINDOWS/system32/RUNDLL32.EXE E:/WINDOWS/RTHDCPL.EXE E:/Program Files/MSI/Live Update 3/LMonitor.exe E:/Program Files/IObit/Advanced WindowsCare V2 Pro/MemCleaner.exe E:/Program Files/ScanSoft/OmniPageSE2.0/OpwareSE2.exe E:/WINDOWS/system32/rundll32.exe E:/WINDOWS/system32/wltray.exe E:/Program Files/Kaspersky Lab/Kaspersky Internet Security 2009/avp.exe E:/Program Files/Spyware Doctor/pctsTray.exe E:/Program Files/Winamp/winampa.exe E:/WINDOWS/system32/rundll.exe E:/Program Files/Webroot/Spy Sweeper/SpySweeperUI.exe E:/WINDOWS/system32/ctfmon.exe E:/Program Files/Virtual CD v9/System/VC9Tray.exe E:/Program Files/Messenger/msmsgs.exe E:/Program Files/Common Files/Acronis/Schedule2/schedul2.exe E:/Program Files/Kaspersky Lab/Kaspersky Internet Security 2009/avp.exe H:/Program Files (x86)/Windows Live/Messenger/msnmsgr.exe E:/WINDOWS/system32/svchost.exe E:/Program Files/WIDCOMM/Bluetooth Software/bin/btwdins.exe E:/WINDOWS/system32/CTsvcCDA.EXE E:/Program Files/Nero/Nero8/Nero BackItUp/NBService.exe E:/WINDOWS/system32/nvsvc32.exe E:/WINDOWS/system32/IoctlSvc.exe E:/Program Files/Spyware Doctor/pctsAuxs.exe E:/Program Files/Spyware Doctor/pctsSvc.exe E:/Program Files/Common Files/Acronis/Fomatik/TrueImageTryStartService.exe E:/Program Files/Philips/SPC 300NC PC Camera/TrayMin300.exe E:/Program Files/Virtual CD v9/System/vc9secs.exe E:/Program Files/Webroot/Spy Sweeper/SpySweeper.exe E:/WINDOWS/system32/svchost.exe E:/Program Files/MSI/DualCoreCenter/DualCoreCenter.exe E:/WINDOWS/System32/alg.exe E:/WINDOWS/system32/wbem/wmiprvse.exe E:/Program Files/Webroot/Spy Sweeper/SSU.EXE E:/WINDOWS/explorer.exe E:/WINDOWS/system32/svchost.exe E:/Program Files/Windows Live/Contacts/wlcomm.exe E:/Program Files/uTorrent/uTorrent.exe E:/Program Files/Mozilla Firefox/firefox.exe E:/Program Files/Spyware Doctor/pctsGui.exe E:/Program Files/Trend Micro/HijackThis/HijackThis.exe  R1 - HKCU/Software/Microsoft/Internet Explorer/Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896  R0 - HKCU/Software/Microsoft/Internet Explorer/Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157  R1 - HKLM/Software/Microsoft/Internet Explorer/Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157  R1 - HKLM/Software/Microsoft/Internet Explorer/Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896  R1 - HKLM/Software/Microsoft/Internet Explorer/Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896  R0 - HKLM/Software/Microsoft/Internet Explorer/Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157  R0 - HKLM/Software/Microsoft/Internet Explorer/Search,SearchAssistant =  R0 - HKLM/Software/Microsoft/Internet Explorer/Search,CustomizeSearch =  R0 - HKCU/Software/Microsoft/Internet Explorer/Main,Local Page =  R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) O1 - Hosts: 127.255.255.255 serial.alcohol-soft.com O1 - Hosts: 208.117.236.70 youtube.com O1 - Hosts: 208.117.236.70 www.youtube.com  O2 - BHO: IDMIEHlprObj Class - {0055C089-8582-441B-A0BF-17B458C2A3A8} - E:/Program Files/Internet Download Manager 5.14 - Complete!/IDM5.14b3CrackREA/IDMIECC.dll O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:/Program Files/Common Files/Adobe/Acrobat/ActiveX/AcroIEHelper.dll O2 - BHO: (no name) - {39E06D62-AA5E-4E40-8ADC-E22CCB4BD55C} - (no file) O2 - BHO: IEVkbdBHO Class - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - E:/Program Files/Kaspersky Lab/Kaspersky Internet Security 2009/ievkbd.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:/Program Files/Java/jre1.6.0_07/bin/ssv.dll O2 - BHO: Windows Live Oturum Açma Yardım Aracı - {9030D464-4C02-4ABF-8ECC-5164760863C6} - E:/Program Files/Common Files/Microsoft Shared/Windows Live/WindowsLiveLogin.dll O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - E:/Program Files/Canon/Easy-WebPrint/Toolband.dll O4 - HKLM/../Run: [AcronisTimounterMonitor] 'E:/Program Files/Acronis/TrueImageHome/TimounterMonitor.exe' O4 - HKLM/../Run: [Acronis Scheduler2 Service] 'E:/Program Files/Common Files/Acronis/Schedule2/schedhlp.exe' O4 - HKLM/../Run: [Adobe Reader Speed Launcher] 'E:/Program Files/Adobe/Reader 8.0/Reader/Reader_sl.exe' O4 - HKLM/../Run: [SunJavaUpdateSched] 'E:/Program Files/Java/jre1.6.0_07/bin/jusched.exe' O4 - HKLM/../Run: [NeroFilterCheck] 'E:/Program Files/Common Files/Nero/Lib/NeroCheck.exe' O4 - HKLM/../Run: [NBKeyScan] 'E:/Program Files/Nero/Nero8/Nero BackItUp/NBKeyScan.exe' O4 - HKLM/../Run: [BigDogPath] 'E:/WINDOWS/VM_STI.EXE' Philips SPC 300NC PC Camera O4 - HKLM/../Run: [Start WingMan Profiler] 'E:/Program Files/Logitech/Gaming Software/LWEMon.exe' /noui O4 - HKLM/../Run: [CTSysVol] 'E:/Program Files/Creative/SBAudigy/Surround Mixer/CTSysVol.exe' /r O4 - HKLM/../Run: [P17Helper] 'E:/WINDOWS/system32/rundll32.exe' P17.dll,P17Helper O4 - HKLM/../Run: [UpdReg] 'E:/WINDOWS/UpdReg.EXE' O4 - HKLM/../Run: [VC9Player] 'E:/Program Files/Virtual CD v9/System/VC9Play.exe' O4 - HKLM/../Run: [type32] 'E:/Program Files/Microsoft IntelliType Pro/type32.exe' O4 - HKLM/../Run: [IntelliPoint] 'E:/Program Files/Microsoft IntelliPoint/point32.exe' O4 - HKLM/../Run: [NvCplDaemon] 'E:/WINDOWS/system32/RUNDLL32.EXE' E:/WINDOWS/system32/NvCpl.dll,NvStartup O4 - HKLM/../Run: [nwiz] 'E:/WINDOWS/system32/nwiz.exe' /install O4 - HKLM/../Run: [NvMediaCenter] 'E:/WINDOWS/system32/RUNDLL32.EXE' E:/WINDOWS/system32/NvMcTray.dll,NvTaskbarInit O4 - HKLM/../Run: [RTHDCPL] 'E:/WINDOWS/RTHDCPL.EXE' O4 - HKLM/../Run: [Alcmtr] 'E:/WINDOWS/ALCMTR.EXE' O4 - HKLM/../Run: [AODAssist.exe] 'E:/Program Files/AMD/AMD OverDrive/AODAssist.exe' O4 - HKLM/../Run: [DelReg] 'E:/Program Files/MSI/DualCoreCenter/DelReg.exe' O4 - HKLM/../Run: [LiveMonitor] 'E:/Program Files/MSI/Live Update 3/LMonitor.exe' O4 - HKLM/../Run: [SmartRAM] 'E:/Program Files/IObit/Advanced WindowsCare V2 Pro/MemCleaner.exe' /m O4 - HKLM/../Run: [OpwareSE2] 'E:/Program Files/ScanSoft/OmniPageSE2.0/OpwareSE2.exe' O4 - HKLM/../Run: [BluetoothAuthenticationAgent] 'E:/WINDOWS/system32/rundll32.exe' bthprops.cpl,,BluetoothAuthenticationAgent O4 - HKLM/../Run: [U.S. Robotics Wireless Manager UI] 'E:/WINDOWS/system32/wltray.exe' O4 - HKLM/../Run: [AVP] 'E:/Program Files/Kaspersky Lab/Kaspersky Internet Security 2009/avp.exe' O4 - HKLM/../Run: [ISTray] 'E:/Program Files/Spyware Doctor/pctsTray.exe' O4 - HKLM/../Run: [WinampAgent] 'E:/Program Files/Winamp/winampa.exe' O4 - HKLM/../Run: [rundll] 'E:/WINDOWS/system32/rundll.exe' O4 - HKLM/../Run: [SpySweeper] 'E:/Program Files/Webroot/Spy Sweeper/SpySweeperUI.exe' /startintray O4 - HKCU/../Run: [ctfmon.exe] 'E:/WINDOWS/system32/ctfmon.exe' O4 - HKCU/../Run: [uTorrent] 'E:/Program Files/uTorrent/uTorrent.exe' O4 - HKCU/../Run: [MSMSGS] 'E:/Program Files/Messenger/msmsgs.exe' /background O4 - HKCU/../Run: [msnmsgr] 'H:/Program Files (x86)/Windows Live/Messenger/msnmsgr.exe' /background O4 - HKUS/S-1-5-19/../Run: [CTFMON.EXE] E:/WINDOWS/system32/CTFMON.EXE (User 'LOCAL SERVICE') O4 - HKUS/S-1-5-19/../RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'LOCAL SERVICE') O4 - HKUS/S-1-5-20/../Run: [CTFMON.EXE] E:/WINDOWS/system32/CTFMON.EXE (User 'NETWORK SERVICE') O4 - HKUS/S-1-5-20/../RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'NETWORK SERVICE') O4 - HKUS/S-1-5-18/../Run: [CTFMON.EXE] E:/WINDOWS/system32/CTFMON.EXE (User 'SYSTEM') O4 - HKUS/S-1-5-18/../RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM') O4 - HKUS/.DEFAULT/../Run: [CTFMON.EXE] E:/WINDOWS/system32/CTFMON.EXE (User 'Default user') O4 - HKUS/.DEFAULT/../RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user') O4 - Global Startup: BTTray.lnk = ? O4 - Global Startup: DualCoreCenter.lnk = E:/Program Files/MSI/DualCoreCenter/StartUpDualCoreCenter.exe O4 - Global Startup: TrayMin300.exe.lnk = ? O8 - Extra context menu item: Add to Banner Ad Blocker - E:/Program Files/Kaspersky Lab/Kaspersky Internet Security 2009/ie_banner_deny.htm O8 - Extra context menu item: Bütün linkleri IDM ile indir - E:/Program Files/Internet Download Manager 5.14 - Complete!/IDM5.14b3CrackREA/IEGetAll.htm O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://E:/Program Files/Canon/Easy-WebPrint/Resource.dll/RC_AddToList.html O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://E:/Program Files/Canon/Easy-WebPrint/Resource.dll/RC_HSPrint.html O8 - Extra context menu item: Easy-WebPrint Preview - res://E:/Program Files/Canon/Easy-WebPrint/Resource.dll/RC_Preview.html O8 - Extra context menu item: Easy-WebPrint Print - res://E:/Program Files/Canon/Easy-WebPrint/Resource.dll/RC_Print.html O8 - Extra context menu item: FLV video içeriğini IDM ile indir - E:/Program Files/Internet Download Manager 5.14 - Complete!/IDM5.14b3CrackREA/IEGetVL.htm O8 - Extra context menu item: IDM ile indir - E:/Program Files/Internet Download Manager 5.14 - Complete!/IDM5.14b3CrackREA/IEExt.htm O8 - Extra context menu item: Send To Bluetooth - E:/Program Files/WIDCOMM/Bluetooth Software/btsendto_ie_ctx.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:/Program Files/Java/jre1.6.0_07/bin/ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:/Program Files/Java/jre1.6.0_07/bin/ssv.dll O9 - Extra button: Web traffic protection statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - E:/Program Files/Kaspersky Lab/Kaspersky Internet Security 2009/SCIEPlgn.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:/WINDOWS/Network Diagnostic/xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:/WINDOWS/Network Diagnostic/xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:/Program Files/Messenger/msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:/Program Files/Messenger/msmsgs.exe O17 - HKLM/System/CCS/Services/Tcpip/../{95A93F35-BF6B-4383-A3CC-315E4D9FA49A}: NameServer = 208.67.222.222,208.67.220.220 O17 - HKLM/System/CCS/Services/Tcpip/../{FC72B478-E4C5-445A-B016-8FCF9E4272EE}: NameServer = 208.67.222.222,208.67.220.220 O20 - AppInit_DLLs: e:/progra~1/kasper~1/kaspersky internet security 2009/mzvkbd.dll,e:/progra~1/kasper~1/kaspersky internet security 2009/mzvkbd3.dll,e:/progra~1/kasper~1/kaspersky internet security 2009/adialhk.dll,e:/progra~1/kasper~1/kaspersky internet security 2009/kloehk.dll O20 - Winlogon Notify: fccAsQKb - fccAsQKb.dll (file missing) O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - E:/Program Files/Common Files/Acronis/Schedule2/schedul2.exe O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - E:/Program Files/Kaspersky Lab/Kaspersky Internet Security 2009/avp.exe O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - E:/Program Files/WIDCOMM/Bluetooth Software/bin/btwdins.exe O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - E:/WINDOWS/system32/CTsvcCDA.EXE O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - E:/Program Files/Nero/Nero8/Nero BackItUp/NBService.exe O23 - Service: NMIndexingService - Nero AG - E:/Program Files/Common Files/Nero/Lib/NMIndexingService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - E:/WINDOWS/system32/nvsvc32.exe O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - E:/WINDOWS/system32/IoctlSvc.exe O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - E:/Program Files/Spyware Doctor/pctsAuxs.exe O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - E:/Program Files/Spyware Doctor/pctsSvc.exe O23 - Service: Acronis Try And Decide Service (TryAndDecideService) - Unknown owner - E:/Program Files/Common Files/Acronis/Fomatik/TrueImageTryStartService.exe O23 - Service: Virtual CD v9 Management Service (VC9SecS) - H+H Software GmbH - E:/Program Files/Virtual CD v9/System/vc9secs.exe O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. (www.webroot.com) - E:/Program Files/Webroot/Spy Sweeper/SpySweeper.exe O23 - Service: U.S. Robotics Wireless LAN Service (wltrysvc) - Unknown owner - E:/WINDOWS/System32/WLTRYSVC.EXE  -- End of file - 13684 bytes

Answer

HijackThis indirmek için ve log dosyasını nasıl analiz edeceğini öğrenmek için aşağıdaki sayfayı incele. Ben senin logunu inceledim birazdan yüklüyorum silmen gereken değerlere ilişkin resmi

5 adet zararlı var makinanda

http://forum.donanimhaber.com/m_13619446/mpage_1/key_HijackThis/tm.htm

Answer

Analiz sonucunu yükledim. Makinanda Trojan var. Birileri remote ile bilgisayarına ulaşmaya çalışıyor ancak remote desktop açık değil büyük ihtimalle ya da bir şeyler remote erişimi engelliyor. Aldığın rastgele uyarının nedeni bu olabilir. Derhal temizlemen iyi olur.

Edit: Silmek için HijackThis konsolunda soldaki isimlere ait kutulara tik koyacaksın. Kırmızılar kesin tamir edilmesi gerekenler, sarılar tamir edilmesi iyi olacaklar. Soru işareti olanları ister kaldır ister kaldırma. Diğerlerine sakın elleme. Yani dikkatli işaretle

Son olarak alttaki fix yazan butona bastığında geçmiş olsun sorun çözüldü demektir. Restart atıp devam et.

Verdiğin log'u kendim incelediğimde serial aramak için bazı sitelere girdiğini gördüm. Bu siteler genelde tehlikeli içerik barındıran tuzak sitelerdir. Serial ve Crack ararken temiz siteleri ayırt etmek ve spy benzeri zararlılardan korunmak için TAMAMEN ÜCRETSİZ olan SpywareTerminator yazılımını kullanmanı öneririm. Crawler Tool Bar adlı eklentisi sayesinde Google aramalarının yanında sitenin güvenli olup olmadığını gösteren bir ibare belirtiyor. Çok kullanışlı!

< Bu mesaj bu kişi tarafından değiştirildi thunderwatcher -- 12 Ocak 2009; 6:43:21 >

Answer

quote: Orjinalden alıntı: thunderwatcher    HijackThis indirmek için ve log dosyasını nasıl analiz edeceğini öğrenmek için aşağıdaki sayfayı incele. Ben senin logunu inceledim birazdan yüklüyorum silmen gereken değerlere ilişkin resmi 5 adet zararlı var makinanda   http://forum.donanimhaber.com/m_13619446/mpage_1/key_HijackThis/tm.htm   Çok teşekkür ederim, makbule geçti.Emeğine sağlık.

Bu hata nedir, yardım edermisiniz?

Benzer içerikler