HijackThis. Performans + Güvenlik! (Virüslerden kurtulun). 500.000+ (489. sayfa)

 Logfile of Trend Micro HijackThis v2.0.2 
  Scan saved at 21:02:00, on 03.12.2010 
  Platform: Windows Vista SP2 (WinNT 6.00.1906) 
  MSIE: Internet Explorer v8.00 (8.00.6001.18975) 
  Boot mode: Normal 
   
  Running processes: 
  C:\Windows\vmsnap3.exe 
  C:\Windows\Domino.exe 
  C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe 
  C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe 
  C:\Program Files (x86)\Skype\Phone\Skype.exe 
  C:\Program Files (x86)\Skype\Plugin Manager\skypePM.exe 
  C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
  C:\Program Files (x86)\Skype\Toolbars\Shared\SkypeNames2.exe 
  C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe 
  C:\Users\BSMZ\Downloads\HiJackThis.exe 
   
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =http://go.microsoft.com/fwlink/?LinkId=54896 
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =http://go.microsoft.com/fwlink/?LinkId=69157 
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =http://go.microsoft.com/fwlink/?LinkId=69157 
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =http://go.microsoft.com/fwlink/?LinkId=54896 
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =http://go.microsoft.com/fwlink/?LinkId=54896 
  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =http://go.microsoft.com/fwlink/?LinkId=69157 
  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =  
  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =  
  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm 
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =  
  F2 - REG:system.ini: UserInit=userinit.exe 
  O1 - Hosts: ::1 localhost 
  O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll 
  O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll 
  O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll 
  O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll 
  O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll 
  O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll 
  O4 - HKLM\..\Run: [ATICustomerCare] "C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe" 
  O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min 
  O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" 
  O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" 
  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" 
  O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun 
  O4 - Startup: Adobe Gamma.lnk = C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe 
  O8 - Extra context menu item: Bütün linkleri IDM ile indir - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm 
  O8 - Extra context menu item: FLV video içeriğini IDM ile indir - C:\Program Files (x86)\Internet Download Manager\IEGetVL.htm 
  O8 - Extra context menu item: IDM ile indir - C:\Program Files (x86)\Internet Download Manager\IEExt.htm 
  O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll 
  O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll 
  O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll 
  O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll 
  O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll 
  O13 - Gopher Prefix:  
  O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -https://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab 
  O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll 
  O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL 
  O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll 
  O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe 
  O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) 
  O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing) 
  O23 - Service: Avira FireWall (AntiVirFirewallService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\avfwsvc.exe 
  O23 - Service: Avira AntiVir MailGuard (AntiVirMailService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe 
  O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe 
  O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe 
  O23 - Service: Avira AntiVir WebGuard (AntiVirWebService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE 
  O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing) 
  O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) 
  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe 
  O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) 
  O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe 
  O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) 
  O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe 
  O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) 
  O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) 
  O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) 
  O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing) 
  O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) 
  O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe 
  O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) 
  O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) 
  O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) 
  O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) 
  O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) 
  O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) 
   
  -- 
  End of file - 8777 bytes 

Logfile of Trend Micro HijackThis v2.0.4 
  Scan saved at 13:08:55, on 06.12.2010 
  Platform: Windows 7  (WinNT 6.00.3504) 
  MSIE: Internet Explorer v8.00 (8.00.7600.16671) 
  Boot mode: Normal 
   
  Running processes: 
  C:\Program Files (x86)\Norton Internet Security\Engine\18.1.0.37\ccSvcHst.exe 
  C:\Windows\vsnp2uvc.exe 
  C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe 
  C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe 
  C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe 
  C:\Users\user\Desktop\HijackThis.exe 
  C:\Windows\SysWOW64\DllHost.exe 
   
  O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\18.1.0.37\coIEPlg.dll 
  O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\18.1.0.37\IPSBHO.DLL 
  O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.1.0.37\coIEPlg.dll 
  O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll 
  O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll 
  O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) 
  O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing) 
  O23 - Service: ASP.NET Durum Hizmeti (aspnet_state) - Unknown owner - C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing) 
  O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) 
  O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) 
  O23 - Service: Google Güncelleme Hizmeti (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 
  O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe 
  O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) 
  O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe 
  O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) 
  O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) 
  O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files (x86)\Norton Internet Security\Engine\18.1.0.37\ccSvcHst.exe 
  O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe 
  O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) 
  O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared Files\RichVideo.exe 
  O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) 
  O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) 
  O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) 
  O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) 
  O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) 
  O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe 
  O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) 
  O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe 
  O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) 
  O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) 
  O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) 
  O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) 
  O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) 
  O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) 
  O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) 
   
  -- 
  End of file - 5373 bytes 
  

Logfile of Trend Micro HijackThis v2.0.2 
  Scan saved at 11:06:49, on 11.12.2010 
  Platform: Windows XP SP3 (WinNT 5.01.2600) 
  MSIE: Internet Explorer v8.00 (8.00.6001.18702) 
  Boot mode: Normal 
   
  Running processes: 
  C:\WINDOWS\System32\smss.exe 
  C:\WINDOWS\system32\winlogon.exe 
  C:\WINDOWS\system32\services.exe 
  C:\WINDOWS\system32\lsass.exe 
  C:\WINDOWS\system32\Ati2evxx.exe 
  C:\WINDOWS\system32\svchost.exe 
  C:\WINDOWS\System32\svchost.exe 
  C:\WINDOWS\system32\Ati2evxx.exe 
  C:\WINDOWS\Explorer.EXE 
  C:\WINDOWS\system32\spoolsv.exe 
  C:\Program Files\DAEMON Tools\daemon.exe 
  C:\WINDOWS\VMSnap3.exe 
  C:\WINDOWS\Domino.exe 
  C:\Program Files\Common Files\Java\Java Update\jusched.exe 
  C:\PROGRA~1\WI9130~1\Datamngr\DATAMN~1.EXE 
  C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe 
  C:\Program Files\Messenger\msmsgs.exe 
  C:\WINDOWS\system32\ctfmon.exe 
  C:\WINDOWS\System32\svchost.exe 
  C:\Program Files\Java\jre6\bin\jqs.exe 
  C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE 
  C:\Program Files\iZ3D Driver\Win32\S3DCService.exe 
  C:\WINDOWS\system32\svchost.exe 
  C:\WINDOWS\system32\rundll32.exe 
  C:\WINDOWS\Lboxoa.exe 
  C:\DOCUME~1\OSMANY~1\LOCALS~1\Temp\Ljl.exe 
  C:\Documents and Settings\osman yetistirici\Desktop\Antivirüs\HiJackThis.exe 
  C:\Documents and Settings\osman yetistirici\Local Settings\Application Data\Google\Chrome\Application\chrome.exe 
  C:\Documents and Settings\osman yetistirici\Local Settings\Application Data\Google\Chrome\Application\chrome.exe 
  C:\Documents and Settings\osman yetistirici\Local Settings\Application Data\Google\Chrome\Application\chrome.exe 
  C:\Documents and Settings\osman yetistirici\Local Settings\Application Data\Google\Chrome\Application\chrome.exe 
  C:\Documents and Settings\osman yetistirici\Local Settings\Application Data\Google\Chrome\Application\chrome.exe 
   
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank 
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =http://go.microsoft.com/fwlink/?LinkId=69157 
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =http://go.microsoft.com/fwlink/?LinkId=54896 
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =http://go.microsoft.com/fwlink/?LinkId=54896 
  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =http://go.microsoft.com/fwlink/?LinkId=69157 
  R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = localhost:8118 
  O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) 
  O2 - BHO: Windows Live Oturum Açma Yardım Aracı - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll 
  O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll 
  O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll 
  O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll 
  O2 - BHO: Bandoo IE Plugin - {EB5CEE80-030A-4ED8-8E20-454E9C68380F} - C:\Program Files\Fun4IM\Plugins\IE\ieplugin.dll 
  O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 
  O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe 
  O4 - HKLM\..\Run: [VMSnap3] C:\WINDOWS\VMSnap3.exe 
  O4 - HKLM\..\Run: [Domino] C:\WINDOWS\Domino.exe 
  O4 - HKLM\..\Run: [BigDog303] C:\WINDOWS\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH) 
  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" 
  O4 - HKLM\..\Run: [DATAMNGR] C:\PROGRA~1\WI9130~1\Datamngr\DATAMN~1.EXE 
  O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\osman yetistirici\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c 
  O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background 
  O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe" 
  O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background 
  O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe 
  O4 - HKCU\..\Run: [JP595IR86O] C:\DOCUME~1\OSMANY~1\LOCALS~1\Temp\Ljl.exe 
  O4 - HKUS\S-1-5-18\..\Run: [ctfmon.exe] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') 
  O4 - HKUS\.DEFAULT\..\Run: [ctfmon.exe] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') 
  O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe 
  O8 - Extra context menu item: Microsoft Excel'e Gö&nder - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 
  O9 - Extra button: Araştır - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL 
  O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe 
  O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe 
  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe 
  O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe 
  O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll 
  O15 - Trusted Zone:http://*.mcafee.com 
  O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1270292268393 
  O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1270574060234 
  O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) -http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab 
  O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab 
  O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} -http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab 
  O16 - DPF: {F9043C85-F6F2-101A-A3C9-08002B2F49FB} (Microsoft Common Dialog Control, version 6.0 (SP6)) -https://kariyer.akbank.com/comdlg32.cab 
  O17 - HKLM\System\CCS\Services\Tcpip\..\{417A95D3-8BC6-448A-9FF4-9F6FDCA84D42}: NameServer = 8.8.8.8,8.8.4.4 
  O17 - HKLM\System\CCS\Services\Tcpip\..\{BEFFBAE1-EEFE-4F04-9A5E-9DAA7C166FDD}: NameServer = 8.8.8.8,8.8.4.4 
  O20 - AppInit_DLLs: c:\progra~1\wi9130~1\datamngr\datamngr.dll  
  O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe 
  O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe 
  O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe 
  O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe 
  O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe 
  O23 - Service: S3D Service (Win32) (S3DSvc32) - iZ3D Inc. - C:\Program Files\iZ3D Driver\Win32\S3DCService.exe 
   
  -- 
  End of file - 7363 bytes 
  

ComboFix 10-12-11.03 - osman yetistirici 12.12.2010   5:29.2.1 - x86 
  Microsoft Windows XP Professional  5.1.2600.3.1254.90.1033.18.2046.1614 [GMT 2:00] 
  Running from: c:\documents and settings\osman yetistirici\Desktop\ComboFix.exe 
  AV: ESET NOD32 Antivirus 4.0 *Disabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0} 
  AV: ESET NOD32 Antivirus 4.0 *Enabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0} 
   
  WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !! 
  . 
   
  (((((((((((((((((((((((((((((((((((((((   Other Deletions   ))))))))))))))))))))))))))))))))))))))))))))))))) 
  . 
   
  c:\program files\Windows Searchqu Toolbar 
  c:\program files\Windows Searchqu Toolbar\Datamngr\datamngrUI.exe 
  c:\windows\Lboxoa.exe 
  c:\windows\system32\sshnas21.dll 
  c:\windows\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job 
   
  . 
  (((((((((((((((((((((((((((((((((((((((   Drivers/Services   ))))))))))))))))))))))))))))))))))))))))))))))))) 
  . 
   
  -------\Legacy_SSHNAS 
  -------\Service_SSHNAS 
   
   
  (((((((((((((((((((((((((   Files Created from 2010-11-12 to 2010-12-12  ))))))))))))))))))))))))))))))) 
  . 
   
  2010-12-12 02:23 . 2010-12-12 02:23	--------	d-----w-	c:\program files\ESET 
  2010-12-11 21:19 . 2010-12-11 21:19	--------	d-----w-	c:\documents and settings\osman yetistirici\Application Data\Bandoo 
  2010-12-11 02:17 . 2001-07-13 11:56	14976	----a-w-	c:\windows\system32\drivers\SBKUPNT.SYS 
  2010-12-11 02:17 . 1997-02-08 15:11	13312	----a-w-	c:\windows\system32\DEVLOAD.EXE 
  2010-12-09 14:43 . 2010-12-09 14:43	--------	d-----w-	c:\documents and settings\osman yetistirici\fontconfig 
  2010-12-09 14:42 . 2010-12-09 14:54	--------	d-----w-	c:\program files\PS3 Media Server 
  2010-12-03 18:12 . 2010-12-03 18:12	38976	----a-w-	c:\windows\system32\drivers\pssdk42.sys 
  2010-12-03 18:12 . 2010-12-03 18:13	--------	d-----w-	c:\program files\SkyGrabber 
  2010-12-01 21:50 . 2010-12-01 21:50	--------	d-----w-	c:\program files\URUSoft 
  2010-11-24 01:52 . 2008-04-13 08:46	38912	-c--a-w-	c:\windows\system32\dllcache\avc.sys 
  2010-11-24 01:52 . 2008-04-13 08:46	38912	----a-w-	c:\windows\system32\drivers\avc.sys 
  2010-11-24 01:52 . 2008-04-13 08:46	48128	-c--a-w-	c:\windows\system32\dllcache\61883.sys 
  2010-11-24 01:52 . 2008-04-13 08:46	48128	----a-w-	c:\windows\system32\drivers\61883.sys 
  2010-11-24 01:45 . 1999-11-19 02:49	265797	----a-w-	c:\windows\system32\pdvcodec.dll 
  2010-11-23 04:59 . 2010-12-04 21:11	--------	d-----w-	c:\program files\Atmel 
  2010-11-17 13:12 . 1998-04-30 12:56	129024	----a-w-	c:\windows\UNWISE.EXE 
  2010-11-17 13:10 . 2004-01-31 20:02	393216	----a-w-	c:\windows\system32\LameACM.acm 
   
  . 
  ((((((((((((((((((((((((((((((((((((((((   Find3M Report   )))))))))))))))))))))))))))))))))))))))))))))))))))) 
  . 
  2010-11-04 22:33 . 2010-11-04 22:15	29480	----a-w-	c:\windows\system32\msxml3a.dll 
  2010-11-04 22:14 . 2010-04-19 07:54	505128	----a-w-	c:\windows\system32\msvcp71.dll 
  2010-11-04 22:14 . 2010-04-19 07:54	353576	----a-w-	c:\windows\system32\msvcr71.dll 
  2010-10-06 16:00 . 2010-11-09 22:19	190464	----a-w-	c:\windows\system32\PCGW32.DLL 
  2010-09-15 02:50 . 2010-04-19 05:46	472808	----a-w-	c:\windows\system32\deployJava1.dll 
  2010-09-15 00:29 . 2010-06-07 03:07	73728	----a-w-	c:\windows\system32\javacpl.cpl 
  . 
   
  ------- Sigcheck ------- 
   
  [-] 2010-07-06 . 41380CF0CD7E695E12FE378C5FB1B277 . 361600 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\TCPIP.SYS 
  [-] 2010-07-06 . 41380CF0CD7E695E12FE378C5FB1B277 . 361600 . . [5.1.2600.5625] . . c:\windows\system32\drivers\TCPIP.SYS 
  [7] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys 
  [7] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\ERDNT\cache\tcpip.sys 
  [7] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB951748$\tcpip.sys 
  [7] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\TCPIP.SYS 
  [7] 2004-08-04 . 9F4B36614A0FC234525BA224957DE55C . 359040 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\tcpip.sys 
  . 
  (((((((((((((((((((((((((((((((((((((   Reg Loading Points   )))))))))))))))))))))))))))))))))))))))))))))))))) 
  . 
  . 
  *Note* empty entries & legit default entries are not shown  
  REGEDIT4 
   
  [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EB5CEE80-030A-4ED8-8E20-454E9C68380F}] 
  2010-08-23 02:22	2195456	----a-w-	c:\program files\Fun4IM\Plugins\IE\ieplugin.dll 
   
  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 
  "Google Update"="c:\documents and settings\osman yetistirici\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2010-04-03 136176] 
  "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856] 
  "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\lib\NMBgMonitor.exe" [2006-03-01 90112] 
  "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360] 
   
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 
  "DAEMON Tools"="c:\program files\DAEMON Tools\daemon.exe" [2005-12-10 133016] 
  "NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648] 
  "VMSnap3"="c:\windows\VMSnap3.exe" [2006-08-30 49152] 
  "Domino"="c:\windows\Domino.exe" [2006-06-28 49152] 
  "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552] 
  "egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-11-16 2054360] 
   
  [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] 
  "ctfmon.exe"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] 
   
  c:\documents and settings\osman yetistirici\Start Menu\Programs\Startup\ 
  Adobe Gamma.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-17 113664] 
   
  [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATIPTA] 
  2005-05-13 05:05	344064	----a-w-	c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe 
   
  [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\High Definition Audio Property Page Shortcut] 
  2004-10-27 23:21	61952	------w-	c:\windows\system32\HdAShCut.exe 
   
  [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SMSERIAL] 
  2005-04-26 19:15	544768	----a-w-	c:\windows\sm56hlpr.exe 
   
  [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] 
  2010-04-03 09:34	36972	----a-w-	c:\program files\Java\jre1.5.0\bin\jusched.exe 
   
  [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] 
  "%windir%\\system32\\sessmgr.exe"= 
  "%windir%\\Network Diagnostic\\xpnetdiag.exe"= 
  "c:\\Program Files\\emule\\emule.exe"= 
  "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"= 
  "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= 
  "c:\\Documents and Settings\\osman yetistirici\\temp\\TeamViewer\\Version5\\TeamViewer.exe"= 
  "c:\\Program Files\\TeamViewer\\Version5\\TeamViewer.exe"= 
  "c:\\SIERRA\\Half-Life\\hl.exe"= 
  "c:\\Program Files\\valve\\hl.exe"= 
  "c:\\Program Files\\OperaTor-3.5\\OperaTor\\Opera\\opera.exe"= 
  "c:\\Program Files\\uTorrent\\uTorrent.exe"= 
  "c:\\Program Files\\FlashFXP\\FlashFXP.exe"= 
  "c:\\Program Files\\NgrabLite\\NGrabLite.exe"= 
  "c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"= 
  "c:\\WINDOWS\\pchealth\\helpctr\\binaries\\helpctr.exe"= 
  "c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"= 
  "c:\\Program Files\\PS3 Media Server\\PMS.exe"= 
   
  R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [16.11.2009 09:03 108792] 
  R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [16.11.2009 09:06 96408] 
  R1 iZ3DInjectionDriver;Driver inject our D3D and OGL wrappers;c:\program files\iZ3D Driver\Win32\S3DInjectionDriver.sys [10.11.2010 00:19 34968] 
  R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [16.11.2009 09:04 735960] 
  R2 S3DSvc32;S3D Service (Win32);c:\program files\iZ3D Driver\Win32\S3DCService.exe [10.11.2010 00:19 360960] 
  R2 SBKUPNT;SBKUPNT;c:\windows\system32\drivers\SBKUPNT.SYS [11.12.2010 04:17 14976] 
  S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.03.2010 13:16 130384] 
  S3 GPU-Z;GPU-Z;\??\c:\docume~1\OSMANY~1\LOCALS~1\Temp\GPU-Z.sys --> c:\docume~1\OSMANY~1\LOCALS~1\Temp\GPU-Z.sys [?] 
  S3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [06.11.2007 22:22 34064] 
  S3 PSSDK42;PSSDK42;c:\windows\system32\drivers\pssdk42.sys [03.12.2010 20:12 38976] 
  S3 vmfilter303;vmfilter303;c:\windows\system32\drivers\vmfilter303.sys [07.07.2010 19:03 428160] 
  S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18.03.2010 13:16 753504] 
  S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [04.04.2010 18:46 643072] 
  . 
  Contents of the 'Scheduled Tasks' folder 
   
  2010-12-12 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1390067357-484763869-839522115-1004Core.job 
  - c:\documents and settings\osman yetistirici\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2010-04-03 13:34] 
   
  2010-12-12 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1390067357-484763869-839522115-1004UA.job 
  - c:\documents and settings\osman yetistirici\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2010-04-03 13:34] 
  . 
  . 
  ------- Supplementary Scan ------- 
  . 
  uStart Page = about:blank 
  uInternet Settings,ProxyServer = localhost:8118 
  IE: Microsoft Excel'e Gö&nder - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 
  Trusted Zone: internet 
  Trusted Zone: mcafee.com 
  TCP: {417A95D3-8BC6-448A-9FF4-9F6FDCA84D42} = 8.8.8.8,8.8.4.4 
  TCP: {BEFFBAE1-EEFE-4F04-9A5E-9DAA7C166FDD} = 8.8.8.8,8.8.4.4 
  . 
  - - - - ORPHANS REMOVED - - - - 
   
  HKLM-Run-BigDog303 - c:\windows\VM303_STI.EXE 
  SafeBoot-MCODS 
  AddRemove-flip.exe - c:\program files\Atmel\Flip 3.4.2\uninstall.exe 
   
   
   
  ************************************************************************** 
   
  catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,http://www.gmer.net 
  Rootkit scan 2010-12-12 05:35 
  Windows 5.1.2600 Service Pack 3 NTFS 
   
  scanning hidden processes ...   
   
  scanning hidden autostart entries ...  
   
  HKLM\Software\Microsoft\Windows\CurrentVersion\Run 
    BigDog303 = c:\windows\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH)????????????????0?????????@??????????????  
   
  scanning hidden files ...   
   
  scan completed successfully 
  hidden files: 0 
   
  ************************************************************************** 
  . 
  --------------------- LOCKED REGISTRY KEYS --------------------- 
   
  [HKEY_USERS\S-1-5-21-1390067357-484763869-839522115-1004\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{D1E8A114-4404-9B25-BA64-4E4CB4BFFA91}*] 
  @Allowed: (Read) (RestrictedCode) 
  @Allowed: (Read) (RestrictedCode) 
  "abnomjbpebadlfmffgjejcojnfdemmbmab"=hex:6b,61,62,67,64,64,6d,61,66,64,6d,6d, 
     67,6b,6f,69,65,61,70,6e,69,6e,00,01 
  "palocjbgipkfdlpbpllmadmallkhiblg"=hex:6b,61,62,67,64,64,6d,61,66,64,6d,6d,67, 
     6b,6f,69,65,61,70,6e,69,6e,00,01 
  "panomjbpebadlfmffgjejcojnfdelmok"=hex:6a,61,63,67,67,66,69,62,6c,63,6c,6a,68, 
     63,66,62,66,6c,65,68,00,00 
  "oalocjbgipkfdlpbpllmadmallhhfd"=hex:6a,61,63,67,67,66,69,62,6c,63,6c,6a,68,63, 
     66,62,66,6c,65,68,00,00 
   
  [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}] 
  @Denied: (A 2) (Everyone) 
  @="FlashBroker" 
  "LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe,-101" 
   
  [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation] 
  "Enabled"=dword:00000001 
   
  [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32] 
  @="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe" 
   
  [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib] 
  @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" 
   
  [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}] 
  @Denied: (A 2) (Everyone) 
  @="IFlashBroker4" 
   
  [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32] 
  @="{00020424-0000-0000-C000-000000000046}" 
   
  [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib] 
  @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" 
  "Version"="1.0" 
  . 
  --------------------- DLLs Loaded Under Running Processes --------------------- 
   
  - - - - - - - > 'winlogon.exe'(1084) 
  c:\windows\system32\Ati2evxx.dll 
   
  - - - - - - - > 'explorer.exe'(3328) 
  c:\windows\system32\WININET.dll 
  c:\windows\system32\ieframe.dll 
  c:\windows\system32\webcheck.dll 
  c:\windows\system32\WPDShServiceObj.dll 
  c:\windows\system32\PortableDeviceTypes.dll 
  c:\windows\system32\PortableDeviceApi.dll 
  . 
  ------------------------ Other Running Processes ------------------------ 
  . 
  c:\windows\system32\Ati2evxx.exe 
  c:\windows\system32\Ati2evxx.exe 
  c:\program files\Java\jre6\bin\jqs.exe 
  c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE 
  c:\program files\Windows Media Player\WMPNetwk.exe 
  c:\windows\system32\wscntfy.exe 
  . 
  ************************************************************************** 
  . 
  Completion time: 2010-12-12  05:38:34 - machine was rebooted 
  ComboFix-quarantined-files.txt  2010-12-12 03:38 
  ComboFix2.txt  2010-04-04 20:53 
   
  Pre-Run: 18.864.484.352 bytes free 
  Post-Run: 20.051.910.656 bytes free 
   
  - - End Of File - - E5905D7A6A0457459FC9BF880A6F7D34 
  

Logfile of Trend Micro HijackThis v2.0.4 
  Scan saved at 14:27:13, on 11.12.2010 
  Platform: Windows XP SP3 (WinNT 5.01.2600) 
  MSIE: Internet Explorer v8.00 (8.00.6001.18702) 
  Boot mode: Normal 
   
  Running processes: 
  C:\WINDOWS\System32\smss.exe 
  C:\WINDOWS\system32\winlogon.exe 
  C:\WINDOWS\system32\services.exe 
  C:\WINDOWS\system32\lsass.exe 
  C:\WINDOWS\system32\svchost.exe 
  C:\WINDOWS\System32\svchost.exe 
  C:\WINDOWS\Explorer.EXE 
  C:\WINDOWS\system32\spoolsv.exe 
  C:\Program Files\Avira\AntiVir Desktop\sched.exe 
  C:\Program Files\HP\HP Software Update\HPWuSchd2.exe 
  C:\Program Files\Avira\AntiVir Desktop\avgnt.exe 
  C:\Program Files\Real\RealPlayer\update\realsched.exe 
  C:\WINDOWS\system32\ctfmon.exe 
  C:\Program Files\Steam\steam.exe 
  C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe 
  C:\Program Files\Avira\AntiVir Desktop\avguard.exe 
  C:\WINDOWS\system32\svchost.exe 
  C:\WINDOWS\system32\svchost.exe 
  C:\Program Files\Java\jre6\bin\jqs.exe 
  C:\WINDOWS\system32\srvany.exe 
  C:\WINDOWS\KMService.exe 
  C:\WINDOWS\System32\svchost.exe 
  C:\Program Files\Avira\AntiVir Desktop\avshadow.exe 
  C:\WINDOWS\system32\nvsvc32.exe 
  C:\WINDOWS\System32\svchost.exe 
  C:\WINDOWS\system32\PnkBstrA.exe 
  C:\WINDOWS\system32\svchost.exe 
  C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe 
  C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe 
  C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe 
  C:\Program Files\Opera\opera.exe 
  C:\Program Files\Internet Download Manager\IDMan.exe 
  C:\Program Files\Internet Download Manager\IEMonitor.exe 
  C:\WINDOWS\system32\msiexec.exe 
  C:\Program Files\HiJackThis\Trend Micro\HiJackThis\HiJackThis.exe 
   
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =http://go.microsoft.com/fwlink/?LinkId=69157 
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =http://go.microsoft.com/fwlink/?LinkId=54896 
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =http://go.microsoft.com/fwlink/?LinkId=54896 
  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =http://go.microsoft.com/fwlink/?LinkId=69157 
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Bağlantılar 
  O1 - Hosts: 74.125.43.103 docs.google.com 
  O1 - Hosts: 74.125.43.103 youtube.com 
  O1 - Hosts: 74.125.43.103 docs.google.com 
  O1 - Hosts: 74.125.43.103 translate.google.com 
  O1 - Hosts: 74.125.43.103 code.google.com 
  O1 - Hosts: 74.125.43.103 pages.google.com 
  O1 - Hosts: 74.125.43.103 video.google.com 
  O1 - Hosts: 74.125.43.103 translate.google.com.tr 
  O1 - Hosts: 74.125.43.103 docs.google.com 
  O1 - Hosts: 74.125.43.103 sites.google.com 
  O1 - Hosts: 74.125.43.103 books.google.com 
  O1 - Hosts: 74.125.43.103 chrome.google.com 
  O1 - Hosts: 74.125.43.103 sketchup.google.com 
  O1 - Hosts: 74.125.43.103 froogle.google.com 
  O1 - Hosts: 74.125.43.103 labs.google.com 
  O1 - Hosts: 74.125.43.103 mars.google.com 
  O1 - Hosts: 74.125.43.103 moon.google.com 
  O1 - Hosts: 74.125.43.103 notebook.google.com 
  O1 - Hosts: 74.125.43.103 toolbar.google.com 
  O1 - Hosts: 74.125.43.103 browsersync.google.com 
  O1 - Hosts: 74.125.43.103 catalog.google.com 
  O1 - Hosts: 74.125.43.103 codesearch.google.com 
  O1 - Hosts: 74.125.43.103 dir.google.com 
  O1 - Hosts: 74.125.43.103 earth.google.com 
  O1 - Hosts: 74.125.43.103 groups.google.com.tr 
  O1 - Hosts: 74.125.43.103 shopping.google.com 
  O1 - Hosts: 74.125.43.103 sky.google.com 
  O1 - Hosts: 74.125.43.103 support.google.com 
  O1 - Hosts: 74.125.43.103 tools.google.com 
  O1 - Hosts: 74.125.43.103 wap.google.com 
  O1 - Hosts: 74.125.43.103 answers.google.com 
  O1 - Hosts: 74.125.43.103 google-analystics.com 
  O1 - Hosts: 74.125.43.103 clients2.google.com 
  O1 - Hosts: 74.125.43.103 youtube.com 
  O1 - Hosts: 74.125.43.103 www.youtube.com 
  O1 - Hosts: 74.125.43.103 docs.google.com 
  O1 - Hosts: 74.125.43.103 video.google.com 
  O1 - Hosts: 74.125.43.103 books.google.com 
  O1 - Hosts: 74.125.43.103 translate.google.com 
  O1 - Hosts: 74.125.43.103 sites.google.com 
  O1 - Hosts: 74.125.43.103 groups.google.com 
  O1 - Hosts: 74.125.43.103 code.google.com 
  O1 - Hosts: 74.125.43.105 www.google-analytics.com 
  O1 - Hosts: 74.125.43.105 google-analytics.com 
  O1 - Hosts: 74.125.43.103 clients1.google.com 
  O1 - Hosts: 74.125.43.103 www.clients1.google.com 
  O1 - Hosts: 74.125.43.105 lh9.ggpht.com 
  O1 - Hosts: 74.125.43.105 lh8.ggpht.com 
  O1 - Hosts: 74.125.43.105 lh7.ggpht.com 
  O1 - Hosts: 74.125.43.105 lh6.ggpht.com 
  O1 - Hosts: 74.125.43.105 lh5.ggpht.com 
  O1 - Hosts: 74.125.43.105 lh4.ggpht.com 
  O1 - Hosts: 74.125.43.105 lh3.ggpht.com 
  O1 - Hosts: 74.125.43.105 lh2.ggpht.com 
  O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll 
  O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll 
  O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll 
  O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) 
  O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL 
  O2 - BHO: Windows Live Oturum Açma Yardım Aracı - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll 
  O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL 
  O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll 
  O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll 
  O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll 
  O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup 
  O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe 
  O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min 
  O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Real\RealPlayer\update\realsched.exe"  -osboot 
  O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k 
  O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" 
  O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" 
  O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background 
  O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe 
  O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\steam.exe" -silent 
  O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE') 
  O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE') 
  O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') 
  O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') 
  O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe 
  O8 - Extra context menu item: Bütün linkleri IDM ile indir - C:\Program Files\Internet Download Manager\IEGetAll.htm 
  O8 - Extra context menu item: FLV video içeriğini IDM ile indir - C:\Program Files\Internet Download Manager\IEGetVL.htm 
  O8 - Extra context menu item: IDM ile indir - C:\Program Files\Internet Download Manager\IEExt.htm 
  O8 - Extra context menu item: Microsoft Excel'e &Ver - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000 
  O8 - Extra context menu item: OneNote'a G&önder - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105 
  O9 - Extra button: OneNote'a Gönder - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll 
  O9 - Extra 'Tools' menuitem: OneNote'a G&önder - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll 
  O9 - Extra button: OneNote Bağlantılı &Notları - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll 
  O9 - Extra 'Tools' menuitem: OneNote Bağlantılı &Notları - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll 
  O9 - Extra button: HP Smart Web Printing göster veya gizle - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll 
  O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe 
  O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe 
  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe 
  O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe 
  O17 - HKLM\System\CCS\Services\Tcpip\..\{3D96CB1F-0768-4A0E-B4DD-3B6A5D870BC1}: NameServer = 8.8.8.8,8.8.4.4 
  O17 - HKLM\System\CS1\Services\Tcpip\..\{3D96CB1F-0768-4A0E-B4DD-3B6A5D870BC1}: NameServer = 8.8.8.8,8.8.4.4 
  O17 - HKLM\System\CS2\Services\Tcpip\..\{3D96CB1F-0768-4A0E-B4DD-3B6A5D870BC1}: NameServer = 8.8.8.8,8.8.4.4 
  O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL 
  O22 - SharedTaskScheduler: Browseui önceden yükleyicisi - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll 
  O22 - SharedTaskScheduler: Bileşen Katergorileri önbellek daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll 
  O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe 
  O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe 
  O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe 
  O23 - Service: KMService - Unknown owner - C:\WINDOWS\system32\srvany.exe 
  O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe 
  O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe 
   
  -- 
  End of file - 10478 bytes 
  

Logfile of Trend Micro HijackThis v2.0.2 
  Scan saved at 19:09:30, on 17.12.2010 
  Platform: Windows XP SP3 (WinNT 5.01.2600) 
  MSIE: Internet Explorer v8.00 (8.00.6001.18702) 
  Boot mode: Normal 
   
  Running processes: 
  C:\WINDOWS\System32\smss.exe 
  C:\WINDOWS\SYSTEM32\winlogon.exe 
  C:\WINDOWS\system32\services.exe 
  C:\WINDOWS\system32\lsass.exe 
  C:\WINDOWS\system32\nvsvc32.exe 
  C:\WINDOWS\system32\svchost.exe 
  C:\WINDOWS\System32\svchost.exe 
  C:\WINDOWS\system32\svchost.exe 
  C:\WINDOWS\system32\spoolsv.exe 
  C:\WINDOWS\Explorer.EXE 
  C:\Program Files\Avira\AntiVir Desktop\sched.exe 
  C:\Program Files\USB ADSL\CnxDslTb.exe 
  C:\Program Files\Common Files\Java\Java Update\jusched.exe 
  C:\WINDOWS\system32\RUNDLL32.EXE 
  C:\Program Files\Avira\AntiVir Desktop\avgnt.exe 
  C:\WINDOWS\system32\ctfmon.exe 
  C:\Program Files\TP-LINK\TP-LINK Kolay Kurulum program\ADSL Setup Assistant.exe 
  C:\Program Files\Avira\AntiVir Desktop\avguard.exe 
  C:\Program Files\Ashampoo\Ashampoo Magical Defrag 2\bin\aDefragService.exe 
  C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe 
  C:\Program Files\Avira\AntiVir Desktop\avshadow.exe 
  C:\Program Files\Bonjour\mDNSResponder.exe 
  C:\Program Files\Ashampoo\Ashampoo Magical Defrag 2\bin\defragActivityMonitor.exe 
  C:\WINDOWS\system32\CTsvcCDA.exe 
  C:\Program Files\LogMeIn Hamachi\hamachi-2.exe 
  C:\Program Files\Java\jre6\bin\jqs.exe 
  C:\WINDOWS\system32\srvany.exe 
  C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe 
  C:\WINDOWS\KMService.exe 
  C:\WINDOWS\system32\PnkBstrA.exe 
  C:\Program Files\CyberLink\Shared files\RichVideo.exe 
  C:\Program Files\Photodex\ProShowGold\ScsiAccess.exe 
  C:\WINDOWS\System32\svchost.exe 
  C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe 
  C:\WINDOWS\system32\wscntfy.exe 
  C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe 
  C:\Mozilla Firefox\firefox.exe 
  C:\Program Files\Azureus\Azureus.exe 
  C:\WINDOWS\system32\wuauclt.exe 
  C:\Documents and Settings\Oğuz\Belgelerim\HiJackThis.exe 
   
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =http://search.localstrike.com.ar/ 
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =http://tr.msn.com/ 
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =http://search.localstrike.com.ar/ 
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =http://search.localstrike.com.ar/ 
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =http://search.localstrike.com.ar/ 
  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =http://search.localstrike.com.ar/ 
  R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local 
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Bağlantılar 
  R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) 
  O1 - Hosts: 178.211.55.100 www.oyunyoneticisi.com 
  O1 - Hosts: 178.211.55.100 www.oyunyoneticisi.net 
  O1 - Hosts: 178.211.55.100 www.oyunyoneticisi.org 
  O1 - Hosts: 178.211.55.100 www.sxe-anticheat.com 
  O1 - Hosts: 178.211.55.100 www.sxe-anticheat.net 
  O1 - Hosts: 178.211.55.100 www.sxe-anticheat.pl 
  O1 - Hosts: 178.211.55.100 www.sxe-anticheat.ru 
  O1 - Hosts: 178.211.51.2 Cs2.Oyna.La 
  O1 - Hosts: 178.211.51.3 Cs3.Oyna.La 
  O1 - Hosts: 178.211.51.4 Cs4.Oyna.La 
  O1 - Hosts: 178.211.51.5 Cs5.Oyna.La 
  O1 - Hosts: 178.211.51.6 Cs6.Oyna.La 
  O1 - Hosts: 178.211.51.7 Cs7.Oyna.La 
  O1 - Hosts: 178.211.51.8 Cs8.Oyna.La 
  O1 - Hosts: 178.211.51.9 Cs9.Oyna.La 
  O1 - Hosts: 178.211.51.10 Cs10.Oyna.La 
  O1 - Hosts: 178.211.51.11 Cs11.Oyna.La 
  O1 - Hosts: 178.211.51.12 Cs12.Oyna.La 
  O1 - Hosts: 178.211.51.13 Cs13.Oyna.La 
  O1 - Hosts: 178.211.51.14 Cs14.Oyna.La 
  O1 - Hosts: 178.211.51.15 Cs15.Oyna.La 
  O1 - Hosts: 178.211.51.16 Cs16.Oyna.La 
  O1 - Hosts: 178.211.51.17 Cs17.Oyna.La 
  O1 - Hosts: 178.211.51.18 Cs18.Oyna.La 
  O1 - Hosts: 178.211.51.19 Cs19.Oyna.La 
  O1 - Hosts: 178.211.51.20 Cs20.Oyna.La 
  O1 - Hosts: 178.211.51.21 Cs21.Oyna.La 
  O1 - Hosts: 178.211.51.22 Cs22.Oyna.La 
  O1 - Hosts: 178.211.51.23 Cs23.Oyna.La 
  O1 - Hosts: 178.211.51.24 Cs24.Oyna.La 
  O1 - Hosts: 178.211.51.25 Cs25.Oyna.La 
  O1 - Hosts: 178.211.51.26 Cs26.Oyna.La 
  O1 - Hosts: 178.211.51.27 Cs27.Oyna.La 
  O1 - Hosts: 178.211.51.28 Cs28.Oyna.La 
  O1 - Hosts: 178.211.51.29 Cs29.Oyna.La 
  O1 - Hosts: 178.211.51.30 Cs30.Oyna.La 
  O1 - Hosts: 178.211.51.31 Cs31.Oyna.La 
  O1 - Hosts: 178.211.51.32 Cs32.Oyna.La 
  O1 - Hosts: 178.211.51.33 Cs33.Oyna.La 
  O1 - Hosts: 178.211.51.34 Cs34.Oyna.La 
  O1 - Hosts: 178.211.51.35 Cs35.Oyna.La 
  O1 - Hosts: 178.211.51.36 Cs36.Oyna.La 
  O1 - Hosts: 178.211.51.37 Cs37.Oyna.La 
  O1 - Hosts: 178.211.51.38 Cs38.Oyna.La 
  O1 - Hosts: 178.211.51.39 Cs39.Oyna.La 
  O1 - Hosts: 178.211.51.40 Cs40.Oyna.La 
  O1 - Hosts: 178.211.51.41 Cs41.Oyna.La 
  O1 - Hosts: 178.211.51.42 Cs42.Oyna.La 
  O1 - Hosts: 178.211.51.43 Cs43.Oyna.La 
  O1 - Hosts: 178.211.51.44 Cs44.Oyna.La 
  O1 - Hosts: 178.211.51.45 Cs45.Oyna.La 
  O1 - Hosts: 178.211.51.46 Cs46.Oyna.La 
  O1 - Hosts: 178.211.51.47 Cs47.Oyna.La 
  O1 - Hosts: 178.211.51.48 Cs48.Oyna.La 
  O1 - Hosts: 178.211.51.49 Cs49.Oyna.La 
  O1 - Hosts: 178.211.51.50 Cs50.Oyna.La 
  O1 - Hosts: 178.211.51.51 Cs51.Oyna.La 
  O1 - Hosts: 178.211.51.52 Cs52.Oyna.La 
  O1 - Hosts: 178.211.51.53 Cs53.Oyna.La 
  O1 - Hosts: 178.211.51.54 Cs54.Oyna.La 
  O1 - Hosts: 178.211.51.55 Cs55.Oyna.La 
  O1 - Hosts: 178.211.51.56 Cs56.Oyna.La 
  O1 - Hosts: 178.211.51.57 Cs57.Oyna.La 
  O1 - Hosts: 178.211.51.58 Cs58.Oyna.La 
  O1 - Hosts: 178.211.51.59 Cs59.Oyna.La 
  O1 - Hosts: 178.211.51.60 Cs60.Oyna.La 
  O1 - Hosts: 178.211.51.61 Cs61.Oyna.La 
  O1 - Hosts: 178.211.51.62 Cs62.Oyna.La 
  O1 - Hosts: 178.211.51.63 Cs63.Oyna.La 
  O1 - Hosts: 178.211.51.64 Cs64.Oyna.La 
  O1 - Hosts: 178.211.51.65 Cs65.Oyna.La 
  O1 - Hosts: 178.211.51.66 Cs66.Oyna.La 
  O1 - Hosts: 178.211.51.67 Cs67.Oyna.La 
  O1 - Hosts: 178.211.51.68 Cs68.Oyna.La 
  O1 - Hosts: 178.211.51.69 Cs69.Oyna.La 
  O1 - Hosts: 178.211.51.70 Cs70.Oyna.La 
  O1 - Hosts: 178.211.51.71 Cs71.Oyna.La 
  O1 - Hosts: 178.211.51.2 Cs72.Oyna.La 
  O1 - Hosts: 178.211.51.3 Cs73.Oyna.La 
  O1 - Hosts: 178.211.51.4 Cs74.Oyna.La 
  O1 - Hosts: 178.211.51.5 Cs75.Oyna.La 
  O1 - Hosts: 178.211.51.6 Cs76.Oyna.La 
  O1 - Hosts: 178.211.51.7 Cs77.Oyna.La 
  O1 - Hosts: 178.211.51.8 Cs78.Oyna.La 
  O1 - Hosts: 178.211.51.9 Cs79.Oyna.La 
  O1 - Hosts: 178.211.51.10 Cs80.Oyna.La 
  O1 - Hosts: 178.211.51.11 Cs81.Oyna.La 
  O1 - Hosts: 178.211.51.12 Cs82.Oyna.La 
  O1 - Hosts: 178.211.51.13 Cs83.Oyna.La 
  O1 - Hosts: 178.211.51.14 Cs84.Oyna.La 
  O1 - Hosts: 178.211.51.15 Cs85.Oyna.La 
  O1 - Hosts: 178.211.51.16 Cs86.Oyna.La 
  O1 - Hosts: 178.211.51.17 Cs87.Oyna.La 
  O1 - Hosts: 178.211.51.18 Cs88.Oyna.La 
  O1 - Hosts: 178.211.51.19 Cs89.Oyna.La 
  O1 - Hosts: 178.211.51.20 Cs90.Oyna.La 
  O1 - Hosts: 178.211.51.21 Cs91.Oyna.La 
  O1 - Hosts: 178.211.51.22 Cs92.Oyna.La 
  O1 - Hosts: 178.211.51.23 Cs93.Oyna.La 
  O1 - Hosts: 178.211.51.24 Cs94.Oyna.La 
  O1 - Hosts: 178.211.51.25 Cs95.Oyna.La 
  O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll 
  O2 - BHO: LinkAirBrowserHelper HistoryTriggerBHO - {21A88CB9-84D2-4020-A2D1-B25A21034884} - C:\Program Files\LG Electronics\LG PC Suite IV\LinkAir\LinkAirBrowserHelper.dll 
  O2 - BHO: (no name) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file) 
  O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll 
  O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) 
  O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll 
  O2 - BHO: Windows Live Oturum Açma Yardım Aracı - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll 
  O2 - BHO: Babylon IE plugin - {9CFACCB6-2F3F-4177-94EA-0D2B72D384C1} - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll 
  O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll 
  O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL 
  O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll 
  O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll 
  O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll 
  O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll 
  O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\USB ADSL\CnxDslTb.exe" 
  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" 
  O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit 
  O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup 
  O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet 
  O4 - HKLM\..\Run: [B2C_AGENT] C:\Documents and Settings\All Users\Application Data\LGMOBILEAX\B2C_Client\B2CNotiAgent.exe 
  O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min 
  O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe 
  O4 - Global Startup: Kolay Kurulum Program.lnk = ? 
  O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html 
  O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html 
  O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html 
  O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html 
  O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html 
  O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html 
  O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html 
  O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html 
  O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Documents and Settings\Oğuz\Application Data\DVDVideoSoftIEHelpers\youtubetomp3.htm 
  O8 - Extra context menu item: LG Air Sync (R-Click) - Save as Mobile Image - res://C:\Program Files\LG Electronics\LG PC Suite IV\LinkAir\IEContextMenu.dll/206 
  O8 - Extra context menu item: LG Air Sync (R-Click) - Save as Mobile Memo - res://C:\Program Files\LG Electronics\LG PC Suite IV\LinkAir\IEContextMenu.dll/208 
  O8 - Extra context menu item: LG Air Sync (R-Click) - Save as Mobile Text file - res://C:\Program Files\LG Electronics\LG PC Suite IV\LinkAir\IEContextMenu.dll/210 
  O8 - Extra context menu item: LG Air Sync (R-Click) - Set as Mobile Wallpaper - res://C:\Program Files\LG Electronics\LG PC Suite IV\LinkAir\IEContextMenu.dll/205 
  O8 - Extra context menu item: LG Air Sync Option - res://C:\Program Files\LG Electronics\LG PC Suite IV\LinkAir\IEContextMenu.dll/209 
  O8 - Extra context menu item: Microsoft Excel'e &Ver - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000 
  O8 - Extra context menu item: Translate this web page with Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/ActionTU.htm 
  O8 - Extra context menu item: Translate with Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Action.htm 
  O9 - Extra button: OneNote'a Gönder - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll 
  O9 - Extra 'Tools' menuitem: OneNote'a G&önder - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll 
  O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL 
  O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll 
  O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll 
  O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe 
  O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe 
  O9 - Extra button: Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll 
  O9 - Extra 'Tools' menuitem: Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll 
  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe 
  O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe 
  O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll 
  O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) -http://gfx1.hotmail.com/mail/w3/resources/MSNPUpld.cab 
  O16 - DPF: {B49C4597-8721-4789-9250-315DFBD9F525} (IWinAmpActiveX Class) -http://www.yayinizle.com/live/ampx2.6.1.11_en_dl.cab 
  O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll 
  O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL 
  O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe 
  O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe 
  O23 - Service: AshampooDefragService -   - C:\Program Files\Ashampoo\Ashampoo Magical Defrag 2\bin\aDefragService.exe 
  O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe 
  O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe 
  O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe 
  O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe 
  O23 - Service: Google Güncelleme Hizmeti (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe 
  O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe 
  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe 
  O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe 
  O23 - Service: KMService - Unknown owner - C:\WINDOWS\system32\srvany.exe 
  O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe 
  O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe 
  O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe 
  O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe 
  O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe 
  O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe 
  O23 - Service: ScsiAccess - Unknown owner - C:\Program Files\Photodex\ProShowGold\ScsiAccess.exe 
  O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe 
   
  -- 
  End of file - 16685 bytes 
  

Logfile of Trend Micro HijackThis v2.0.2 
  Scan saved at 01:02:37, on 26.12.2010 
  Platform: Unknown Windows (WinNT 6.01.3504) 
  MSIE: Unable to get Internet Explorer version! 
  Boot mode: Normal 
   
  Running processes: 
  C:\Windows\system32\Dwm.exe 
  C:\Windows\system32\taskhost.exe 
  C:\Windows\Explorer.EXE 
  C:\Windows\system32\taskeng.exe 
  C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe 
  C:\Program Files\Razer\Lycosa\razerhid.exe 
  C:\Program Files\Razer\Lycosa\razertra.exe 
  C:\Program Files\DivX\DivX Update\DivXUpdate.exe 
  C:\Program Files\DivX\DivX Plus Web Player\DDMService.exe 
  C:\Program Files\Common Files\Java\Java Update\jusched.exe 
  C:\Program Files\DAEMON Tools Lite\DTLite.exe 
  C:\Program Files\OSCAR Editor\OscarEditor.exe 
  C:\Program Files\AirTies\ADSL Hizmet Programı\AirTies_util3.exe 
  C:\Program Files\OSCAR Editor\OscarData\Tools\MyShowMessage.exe 
  C:\Program Files\USB Disk Security\USBGuard.exe 
  C:\Program Files\seba14mods\µtorrent 2.2.0 (build 23235) Leecher Pack\utorrent 2.2.0 (23235)_mult10_leecher.exe 
  C:\Program Files\Opera\opera.exe 
  C:\Program Files\Java\jre6\bin\javaw.exe 
  C:\Windows\system32\SearchFilterHost.exe 
  C:\Users\Burak\Desktop\HiJackThis.exe 
   
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =http://go.microsoft.com/fwlink/?LinkId=54896 
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =http://go.microsoft.com/fwlink/?LinkId=69157 
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =http://go.microsoft.com/fwlink/?LinkId=69157 
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =http://go.microsoft.com/fwlink/?LinkId=54896 
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =http://go.microsoft.com/fwlink/?LinkId=54896 
  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =http://go.microsoft.com/fwlink/?LinkId=69157 
  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =  
  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =  
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =  
  R3 - URLSearchHook: Mercan Programlar Toolbar - {b475cfd8-45d8-4905-b319-ad995327abeb} - C:\Program Files\Mercan_Programlar\tbMer0.dll 
  O1 - Hosts: 67.192.157.197 winter.metacafe.com 
  O1 - Hosts: 72.32.120.190 soap1.metacafe.com 
  O1 - Hosts: 66.235.126.128 www.vimeo.com 
  O1 - Hosts: 66.235.126.128 vimeo.com 
  O1 - Hosts: 207.114.197.89 assets.vimeo.com 
  O1 - Hosts: 207.114.197.95 av.vimeo.com 
  O1 - Hosts: 66.235.126.122 utmtrk.vimeo.com 
  O1 - Hosts: 66.235.126.127 t.vimeo.com 
  O1 - Hosts: 212.95.41.84 www.gunlukfilm.com 
  O1 - Hosts: 212.95.41.84 gunlukfilm.com 
  O1 - Hosts: 212.95.47.128 www.direkizle.net 
  O1 - Hosts: 212.95.47.128 direkizle.net 
  O1 - Hosts: 193.110.128.199 www.elmundo.es 
  O1 - Hosts: 193.110.128.199 elmundo.es 
  O1 - Hosts: 130.117.88.12 estaticos.elmundo.es 
  O1 - Hosts: 130.117.88.10 cache.elmundo.es 
  O1 - Hosts: 130.117.88.12 estaticos01.elmundo.es 
  O1 - Hosts: 130.117.88.16 estaticos01.elmundo.es 
  O1 - Hosts: 130.117.88.20 estaticos01.elmundo.es 
  O1 - Hosts: 195.81.202.101 estaticos01.elmundo.es 
  O1 - Hosts: 195.81.202.110 estaticos02.elmundo.es 
  O1 - Hosts: 195.81.202.114 estaticos02.elmundo.es 
  O1 - Hosts: 195.81.202.118 estaticos02.elmundo.es 
  O1 - Hosts: 195.219.3.72 estaticos02.elmundo.es 
  O1 - Hosts: 80.239.175.43 estaticos03.elmundo.es 
  O1 - Hosts: 80.239.175.47 estaticos03.elmundo.es 
  O1 - Hosts: 80.239.175.51 estaticos03.elmundo.es 
  O1 - Hosts: 195.219.3.89 estaticos03.elmundo.es 
  O1 - Hosts: 80.239.175.44 estaticos04.elmundo.es 
  O1 - Hosts: 195.219.3.82 estaticos04.elmundo.es 
  O1 - Hosts: 195.219.3.86 estaticos04.elmundo.es 
  O1 - Hosts: 195.219.3.90 estaticos04.elmundo.es 
  O1 - Hosts: 193.110.128.196 anapixel.elmundo.es 
  O1 - Hosts: 193.110.128.197 pixelcounter.elmundo.es 
  O1 - Hosts: 80.239.175.58 cachevideos.elmundo.es 
  O1 - Hosts: 193.110.128.199 www.marca.com 
  O1 - Hosts: 193.110.128.199 marca.com 
  O1 - Hosts: 130.117.88.12 estaticos.marca.com 
  O1 - Hosts: 193.110.128.199 www.marcamotor.com 
  O1 - Hosts: 193.110.128.199 marcamotor.com 
  O1 - Hosts: 130.117.88.10 estaticos.marcamotor.com 
  O1 - Hosts: 130.117.88.12 estaticos.marcaplayer.com 
  O1 - Hosts: 193.110.128.196 anapixel.marca.com 
  O1 - Hosts: 193.110.128.199 php.marca.com 
  O1 - Hosts: 193.110.128.197 pixelcounter.marca.com 
  O1 - Hosts: 80.239.175.56 cachevideos.marca.com 
  O1 - Hosts: 195.81.202.105 estaticos01.marca.com 
  O1 - Hosts: 195.81.202.109 estaticos01.marca.com 
  O1 - Hosts: 195.81.202.113 estaticos01.marca.com 
  O1 - Hosts: 195.81.202.117 estaticos01.marca.com 
  O1 - Hosts: 195.219.3.72 estaticos02.marca.com 
  O1 - Hosts: 195.81.202.110 estaticos02.marca.com 
  O1 - Hosts: 195.81.202.114 estaticos02.marca.com 
  O1 - Hosts: 195.81.202.118 estaticos02.marca.com 
  O1 - Hosts: 195.219.3.89 estaticos03.marca.com 
  O1 - Hosts: 80.239.175.43 estaticos03.marca.com 
  O1 - Hosts: 80.239.175.47 estaticos03.marca.com 
  O1 - Hosts: 80.239.175.51 estaticos03.marca.com 
  O1 - Hosts: 195.219.3.90 estaticos04.marca.com 
  O1 - Hosts: 80.239.175.44 estaticos04.marca.com 
  O1 - Hosts: 195.219.3.82 estaticos04.marca.com 
  O1 - Hosts: 195.219.3.86 estaticos04.marca.com 
  O1 - Hosts: 212.80.144.35 www.marcamedia.com 
  O1 - Hosts: 212.80.144.35 marcamedia.com 
  O1 - Hosts: 193.110.128.199 marca.tv 
  O1 - Hosts: 193.110.128.199 www.marca.tv 
  O1 - Hosts: 193.110.128.199 elmundo.orbyt.es 
  O1 - Hosts: 193.110.128.199 tiramillas.net 
  O1 - Hosts: 130.117.88.10 estaticos.tiramillas.net 
  O1 - Hosts: 195.110.126.144 www.ocio.marca.com 
  O1 - Hosts: 193.110.128.199 www.tiramillas.net 
  O1 - Hosts: 193.110.128.199 www.jugandovoy.com 
  O1 - Hosts: 193.110.128.199 jugandovoy.com 
  O1 - Hosts: 195.81.226.211 xml.betclick.com 
  O1 - Hosts: 91.121.241.50 gacetauniversitaria.es 
  O1 - Hosts: 193.110.128.199 www.expansion.com 
  O1 - Hosts: 193.110.128.199 www.expansionyempleo.com 
  O1 - Hosts: 193.110.128.199 www.ocholeguas.com 
  O1 - Hosts: 193.110.128.199 www.veo.es 
  O1 - Hosts: 193.110.128.199 www.marcaplayer.com 
  O1 - Hosts: 130.117.88.12 active.cache.el-mundo.net 
  O1 - Hosts: 193.110.128.213 marcawas5.recoletos.es 
  O1 - Hosts: 193.110.128.199 www.latiendademarca.com 
  O1 - Hosts: 193.110.128.199 www.unidadeditorial.com 
  O1 - Hosts: 212.36.82.134 www.marcacamps.com 
  O1 - Hosts: 217.116.0.144 www.seveballesteros.com 
  O1 - Hosts: 193.110.128.199 www.telva.com 
  O1 - Hosts: 72.21.81.133 astatic.weborama.fr 
  O1 - Hosts: 130.117.88.10 estaticos.archivo.marca.com 
  O1 - Hosts: 193.110.128.195 anajs.marca.com 
  O1 - Hosts: 207.114.197.81 ff.connextra.com 
  O1 - Hosts: 130.117.88.12 estaticos.expansion.com 
  O1 - Hosts: 193.110.128.213 app.marca.com 
  O1 - Hosts: 193.110.128.213 escuderias.marca.com 
  O1 - Hosts: 188.72.196.118 www.imlahatasi.com 
  O1 - Hosts: 188.72.196.118 imlahatasi.com 
  O1 - Hosts: 188.72.196.118 video.imlahatasi.com 
  O1 - Hosts: 8.19.240.53 listen.grooveshark.com 
  O1 - Hosts: 8.19.240.53 grooveshark.com 
  O1 - Hosts: 8.19.240.53 www.grooveshark.com 
  O1 - Hosts: 174.140.154.23 www.megaupload.com 
  O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll 
  O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll 
  O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll 
  O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll 
  O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll 
  O2 - BHO: Mercan Programlar Toolbar - {b475cfd8-45d8-4905-b319-ad995327abeb} - C:\Program Files\Mercan_Programlar\tbMer0.dll 
  O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll 
  O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll 
  O3 - Toolbar: Mercan Programlar Toolbar - {b475cfd8-45d8-4905-b319-ad995327abeb} - C:\Program Files\Mercan_Programlar\tbMer0.dll 
  O4 - HKLM\..\Run: [Lycosa] "C:\Program Files\Razer\Lycosa\razerhid.exe" 
  O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" 
  O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" 
  O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW 
  O4 - HKLM\..\Run: [DivX Download Manager] "C:\Program Files\DivX\DivX Plus Web Player\DDmService.exe" start 
  O4 - HKLM\..\Run: [USB Antivirus] C:\Program Files\USB Disk Security\RunUSBGuard.exe 
  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" 
  O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun 
  O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background 
  O4 - HKCU\..\Run: [Advanced SystemCare 3] "C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe" /startup 
  O4 - HKCU\..\Run: [OscarEditor] "C:\Program Files\OSCAR Editor\OscarEditor.exe" Minimum 
  O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'Local Service') 
  O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'Local Service') 
  O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') 
  O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') 
  O4 - Global Startup: AirTies ADSL Hizmet Programı.lnk = ? 
  O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll 
  O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll 
  O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll 
  O10 - Unknown file in Winsock LSP: c:\program files\iobit\advanced systemcare 3\spictrl.dll 
  O10 - Unknown file in Winsock LSP: c:\program files\iobit\advanced systemcare 3\spictrl.dll 
  O10 - Unknown file in Winsock LSP: c:\program files\iobit\advanced systemcare 3\spictrl.dll 
  O10 - Unknown file in Winsock LSP: c:\program files\iobit\advanced systemcare 3\spictrl.dll 
  O13 - Gopher Prefix:  
  O17 - HKLM\System\CCS\Services\Tcpip\..\{EFFCF764-FCCF-4599-949A-9307596D6103}: NameServer = 208.67.222.222,208.67.220.220 
  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe 
  O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe 
  O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe 
  O23 - Service: TunngleService - Tunngle.net GmbH - C:\Program Files\Tunngle\TnglCtrl.exe 
   
  -- 
  End of file - 11328 bytes 
  

Logfile of Trend Micro HijackThis v2.0.2 
  Scan saved at 01:06:27, on 26.12.2010 
  Platform: Windows Vista SP1 (WinNT 6.00.1905) 
  MSIE: Internet Explorer v7.00 (7.00.6001.18542) 
  Boot mode: Normal 
   
  Running processes: 
  C:\Windows\system32\Dwm.exe 
  C:\Windows\Explorer.EXE 
  C:\Windows\system32\taskeng.exe 
  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe 
  C:\Program Files\IDT\WDM\sttray.exe 
  C:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe 
  C:\Program Files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe 
  C:\Program Files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe 
  C:\Program Files\Hewlett-Packard\Media\TV\TVAgent.exe 
  C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe 
  C:\Program Files\Windows Defender\MSASCui.exe 
  C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe 
  C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe 
  C:\Program Files\HP\HP Software Update\hpwuSchd2.exe 
  C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe 
  C:\Program Files\Winamp\winampa.exe 
  C:\Program Files\TTNET Internet\UIExec.exe 
  C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe 
  C:\Program Files\iTunes\iTunesHelper.exe 
  C:\Windows\VM303_STI.EXE 
  C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe 
  C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe 
  C:\Program Files\Windows Media Player\wmpnscfg.exe 
  C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe 
  C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe 
  C:\Users\Betül\AppData\Local\Google\Update\1.2.183.39\GoogleCrashHandler.exe 
  C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe 
  C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe 
  C:\Users\Betül\AppData\Local\Google\Chrome\Application\chrome.exe 
  C:\Users\Betül\AppData\Local\Google\Chrome\Application\chrome.exe 
  C:\Users\Betül\AppData\Local\Google\Chrome\Application\chrome.exe 
  C:\Program Files\Synaptics\SynTP\SynTPHelper.exe 
  C:\Windows\system32\conime.exe 
  C:\Program Files\Norton Internet Security\Engine\16.8.0.41\ccSvcHst.exe 
  C:\Program Files\Hewlett-Packard\Shared\hpqToaster.exe 
  C:\Windows\system32\wuauclt.exe 
  C:\Users\Betül\AppData\Local\Google\Chrome\Application\chrome.exe 
  C:\Program Files\Windows Live\Messenger\msnmsgr.exe 
  C:\Program Files\Windows Live\Contacts\wlcomm.exe 
  C:\Users\Betül\AppData\Local\Google\Chrome\Application\chrome.exe 
  C:\Program Files\Winamp\winamp.exe 
  C:\Program Files\Mozilla Firefox\firefox.exe 
  C:\Program Files\Mozilla Firefox\plugin-container.exe 
  C:\Windows\system32\SearchFilterHost.exe 
  C:\Users\Betül\Downloads\HiJackThis.exe 
   
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=tr_tr&c=91&bd=Pavilion&pf=cnnb 
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =http://go.microsoft.com/fwlink/?LinkId=54896 
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =http://search.conduit.com?SearchSource=10&ctid=CT1210541 
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=tr_tr&c=91&bd=Pavilion&pf=cnnb 
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =http://go.microsoft.com/fwlink/?LinkId=54896 
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =http://go.microsoft.com/fwlink/?LinkId=54896 
  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=tr_tr&c=91&bd=Pavilion&pf=cnnb 
  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =  
  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =  
  R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) =http://search.yahoo.com/search?fr=mcafee&p=%s 
  R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local 
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =  
  R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll 
  R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll 
  R3 - URLSearchHook: Online Sharing Toolbar - {8567a644-e36c-470c-86cf-9c5b4f37db81} - C:\Program Files\Online_Sharing\tbOnli.dll 
  R3 - URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll 
  O1 - Hosts: ::1 localhost 
  O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll 
  O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll 
  O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) 
  O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\16.8.0.41\coIEPlg.dll 
  O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\16.8.0.41\IPSBHO.DLL 
  O2 - BHO: AOL Toolbar BHO - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL AraÇubugu 5.0\aoltb.dll 
  O2 - BHO: Online Sharing Toolbar - {8567a644-e36c-470c-86cf-9c5b4f37db81} - C:\Program Files\Online_Sharing\tbOnli.dll 
  O2 - BHO: Windows Live Oturum Açma Yardım Aracı - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll 
  O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll 
  O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\progra~1\mcafee\sitead~1\mcieplg.dll 
  O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll 
  O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll 
  O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\16.8.0.41\coIEPlg.dll 
  O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL AraÇubugu 5.0\aoltb.dll 
  O3 - Toolbar: Online Sharing Toolbar - {8567a644-e36c-470c-86cf-9c5b4f37db81} - C:\Program Files\Online_Sharing\tbOnli.dll 
  O3 - Toolbar: LimeWire Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll 
  O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll 
  O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll 
  O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun 
  O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe 
  O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe 
  O4 - HKLM\..\Run: [DVDAgent] "C:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe" 
  O4 - HKLM\..\Run: [TSMAgent] "C:\Program Files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe" 
  O4 - HKLM\..\Run: [CLMLServer for HP TouchSmart] "C:\Program Files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe" 
  O4 - HKLM\..\Run: [TVAgent] "C:\Program Files\Hewlett-Packard\Media\TV\TVAgent.exe" 
  O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Hewlett-Packard\Media\Webcam" update "Software\Hewlett-Packard\Media\Webcam" 
  O4 - HKLM\..\Run: [SmartMenu] %ProgramFiles%\Hewlett-Packard\HP MediaSmart\SmartMenu.exe 
  O4 - HKLM\..\Run: [UpdateLBPShortCut] "C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5" 
  O4 - HKLM\..\Run: [UpdatePSTShortCut] "C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\DVD Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter" 
  O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide 
  O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start 
  O4 - HKLM\..\Run: [UpdateP2GoShortCut] "C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0" 
  O4 - HKLM\..\Run: [UpdatePDIRShortCut] "C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\PowerDirector" UpdateWithCreateOnce "SOFTWARE\CyberLink\PowerDirector\7.0" 
  O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe 
  O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe 
  O4 - HKLM\..\Run: [WirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe 
  O4 - HKLM\..\Run: [NeroFilterCheck] C:\Windows\system32\NeroCheck.exe 
  O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe" 
  O4 - HKLM\..\Run: [UIExec] "C:\Program Files\TTNET Internet\UIExec.exe" 
  O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" 
  O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" 
  O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" 
  O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe 
  O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin 
  O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" 
  O4 - HKLM\..\Run: [BigDog303] C:\Windows\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH) 
  O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start 
  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime 
  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" 
  O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background 
  O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden 
  O4 - HKCU\..\Run: [Google Update] "C:\Users\Betül\AppData\Local\Google\Update\GoogleUpdate.exe" /c 
  O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe 
  O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE') 
  O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE') 
  O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE') 
  O4 - Startup: LimeWire On Startup.lnk = C:\Program Files\LimeWire\LimeWire.exe 
  O4 - Global Startup: Bluetooth.lnk = ? 
  O4 - Global Startup: McAfee Security Scan Plus.lnk = ? 
  O8 - Extra context menu item: &AOL Araç Çubuğu Araması - C:\ProgramData\AOL\ieToolbar\resources\tr-TR\local\search.html 
  O8 - Extra context menu item: &Winamp Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html 
  O8 - Extra context menu item: Microsoft Excel'e &Ver - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 
  O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm 
  O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm 
  O9 - Extra button: OneNote'a Gönder - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll 
  O9 - Extra 'Tools' menuitem: OneNote'a G&önder - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll 
  O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll 
  O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll 
  O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL 
  O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm 
  O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm 
  O13 - Gopher Prefix:  
  O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} -http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab 
  O17 - HKLM\System\CCS\Services\Tcpip\..\{31BE8463-2E30-4D22-BD39-A9CF9C1D1BC9}: NameServer = 195.175.39.39,195.175.39.40 
  O17 - HKLM\System\CCS\Services\Tcpip\..\{918C6B6F-75CD-46CE-AB8A-13230DC2430B}: NameServer = 195.175.39.39,195.175.39.40 
  O17 - HKLM\System\CS1\Services\Tcpip\..\{31BE8463-2E30-4D22-BD39-A9CF9C1D1BC9}: NameServer = 195.175.39.39,195.175.39.40 
  O17 - HKLM\System\CS2\Services\Tcpip\..\{31BE8463-2E30-4D22-BD39-A9CF9C1D1BC9}: NameServer = 195.175.39.39,195.175.39.40 
  O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\mcieplg.dll 
  O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\mcieplg.dll 
  O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll 
  O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL 
  O18 - Protocol: symres - {AA1061FE-6C41-421F-9344-69640C9732AB} - C:\Program Files\Norton Internet Security\Engine\16.8.0.41\coIEPlg.dll 
  O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_52c73ccb\aestsrv.exe 
  O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 
  O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe 
  O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe 
  O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe 
  O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe 
  O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe 
  O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe 
  O23 - Service: HP Service (hpsrv) - Hewlett-Packard Corporation - C:\Windows\system32\Hpservice.exe 
  O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe 
  O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe 
  O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe 
  O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe 
  O23 - Service: Norton Internet Security - Symantec Corporation - C:\Program Files\Norton Internet Security\Engine\16.8.0.41\ccSvcHst.exe 
  O23 - Service: Recovery Service for Windows - Unknown owner - C:\Program Files\SMINST\BLService.exe 
  O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe 
  O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe 
  O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_52c73ccb\STacSV.exe 
  O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe 
  O23 - Service: TV Background Capture Service (TVBCS) (TVCapSvc) - Unknown owner - C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe 
  O23 - Service: TV Task Scheduler (TVTS) (TVSched) - Unknown owner - C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe 
  O23 - Service: UI Assistant Service - Unknown owner - C:\Program Files\TTNET Internet\AssistantServices.exe 
   
  -- 
  End of file - 16847 bytes 
  

Logfile of Trend Micro HijackThis v2.0.2 
  Scan saved at 01:14:19, on 26.12.2010 
  Platform: Unknown Windows (WinNT 6.01.3504) 
  MSIE: Internet Explorer v8.00 (8.00.7600.16700) 
  Boot mode: Normal 
   
  Running processes: 
  C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe 
  C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe 
  C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe 
  C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe 
  C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe 
  C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe 
  C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe 
  C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe 
  C:\Program Files (x86)\PowerISO\PWRISOVM.EXE 
  C:\Program Files (x86)\TTNET Internet\UIExec.exe 
  C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe 
  C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
  C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe 
  C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe 
  C:\Users\ali\Downloads\HiJackThis.exe 
   
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =http://asus.msn.com 
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =http://go.microsoft.com/fwlink/?LinkId=54896 
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =http://go.microsoft.com/fwlink/?LinkId=69157 
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =http://go.microsoft.com/fwlink/?LinkId=54896 
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =http://go.microsoft.com/fwlink/?LinkId=54896 
  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =http://go.microsoft.com/fwlink/?LinkId=69157 
  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =  
  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =  
  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm 
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =  
  R3 - URLSearchHook: Mercan Programlar Toolbar - {b475cfd8-45d8-4905-b319-ad995327abeb} - C:\Program Files (x86)\Mercan_Programlar\tbMer0.dll 
  F2 - REG:system.ini: UserInit=userinit.exe 
  O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll 
  O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) 
  O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll 
  O2 - BHO: Windows Live ID Oturum Açma Yardım Aracı - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll 
  O2 - BHO: Mercan Programlar Toolbar - {b475cfd8-45d8-4905-b319-ad995327abeb} - C:\Program Files (x86)\Mercan_Programlar\tbMer0.dll 
  O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll 
  O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll 
  O3 - Toolbar: Mercan Programlar Toolbar - {b475cfd8-45d8-4905-b319-ad995327abeb} - C:\Program Files (x86)\Mercan_Programlar\tbMer0.dll 
  O4 - HKLM\..\Run: [Microsoft Pinyin IME Migration] C:\PROGRA~2\COMMON~1\MICROS~1\IME12\IMESC\IMSCMIG.EXE /INSTALL 
  O4 - HKLM\..\Run: [UpdatePDRShortCut] "C:\Program Files (x86)\Cyberlink\PowerDirector\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Cyberlink\PowerDirector" UpdateWithCreateOnce "Software\CyberLink\PowerDirector\7.0" 
  O4 - HKLM\..\Run: [RemoteControl9] "C:\Program Files (x86)\Cyberlink\PowerDVD9\PDVD9Serv.exe" 
  O4 - HKLM\..\Run: [PDVD9LanguageShortcut] "C:\Program Files (x86)\Cyberlink\PowerDVD9\Language\Language.exe" 
  O4 - HKLM\..\Run: [UpdatePSTShortCut] "C:\Program Files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Cyberlink\DVD Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter" 
  O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe 
  O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe 
  O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe 
  O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files (x86)\PowerISO\PWRISOVM.EXE 
  O4 - HKLM\..\Run: [UIExec] "C:\Program Files (x86)\TTNET Internet\UIExec.exe" 
  O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background 
  O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'Local Service') 
  O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'Local Service') 
  O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') 
  O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') 
  O4 - Global Startup: Bluetooth.lnk = ? 
  O4 - Global Startup: FancyStart daemon.lnk = ? 
  O4 - Global Startup: SRS Premium Sound.lnk = ? 
  O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 
  O8 - Extra context menu item: Görüntüyü &Bluetooth Aygıtına Gönder... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm 
  O8 - Extra context menu item: Sayfayı &Bluetooth Aygıtına Gönder... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm 
  O9 - Extra button: Bunu Bloga Al - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll 
  O9 - Extra 'Tools' menuitem: Windows Live Writer içinde &Bunu Web Günlüğüne Al - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll 
  O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL 
  O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm 
  O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm 
  O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll 
  O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll 
  O13 - Gopher Prefix:  
  O23 - Service: ADSM Service (ADSMService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe 
  O23 - Service: AFBAgent - Unknown owner - C:\Windows\system32\FBAgent.exe (file missing) 
  O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) 
  O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe 
  O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe 
  O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe 
  O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) 
  O23 - Service: FastBootAgent - ASUSTeK Computer Inc. - C:\Windows\SysWOW64\Fast Boot\FastBootAgent.exe 
  O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) 
  O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) 
  O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) 
  O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) 
  O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) 
  O23 - Service: Oberon Media Game Console service (OberonGameConsoleService) - Unknown owner - C:\Program Files (x86)\Asus\Game Park\GameConsole\OberonGameConsoleService.exe 
  O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) 
  O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe 
  O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) 
  O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) 
  O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) 
  O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) 
  O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) 
  O23 - Service: UI Assistant Service - Unknown owner - C:\Program Files (x86)\TTNET Internet\AssistantServices.exe 
  O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) 
  O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) 
  O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) 
  O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) 
  O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) 
  O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) 
  O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) 
  O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) 
   
  -- 
  End of file - 10386 bytes