Profil: hazar26eses | DonanımHaber Forum

Şimdi Ara

@hazar26eses

Takip Et 0 takipçi

Özel Mesaj

Çavuş

04 Ocak 2013
Tarihinde Katıldı

Takip Ettikleri
0 üye

Görüntülenme
Toplam: 5 (Bu ay: 0)

Fırsat Ekle

Gönderileri

Tümü (17)

Sadece Konular (17)

Sadece Bağlantılar (0)

hazar26eses (hazar tuna) · Teknik Yardım altına konu açtı. 11 yıl

Exper servis işleyişi

Yanıt Yok

Yanıtla

Favorilere Ekle

hazar26eses (hazar tuna) · Teknik Yardım altına konu açtı. 11 yıl

Exper format bios cd leri görmüyor

1 Yanıt

Yanıtla

Favorilere Ekle

hazar26eses (hazar tuna) · Teknik Yardım altına konu açtı. 11 yıl

EXPER

1 Yanıt

Yanıtla

Favorilere Ekle

hazar26eses (hazar tuna) · Teknik Yardım altına konu açtı. 11 yıl

Win 8.1 e güncelleme sonucu çökme

18 Yanıt

Yanıtla

Favorilere Ekle

hazar26eses (hazar tuna) · Teknik Yardım altına konu açtı. 11 yıl

GMAİL üzerinden SMS göndermek

4 Yanıt

Yanıtla

Favorilere Ekle

hazar26eses (hazar tuna) · Teknik Yardım altına konu açtı. 11 yıl

Modem Değişimi

7 Yanıt

Yanıtla

Favorilere Ekle

hazar26eses (hazar tuna) · Teknik Yardım altına konu açtı. 11 yıl

Ekran kartımm

4 Yanıt

Yanıtla

Favorilere Ekle

hazar26eses (hazar tuna) · Teknik Yardım altına konu açtı. 12 yıl

Ekrandaki problem

11 Yanıt

Yanıtla

Favorilere Ekle

hazar26eses (hazar tuna) · Teknik Yardım altına konu açtı. 12 yıl

Antivirüs Setupları sorunu

4 Yanıt

Yanıtla

Favorilere Ekle

hazar26eses (hazar tuna) · Teknik Yardım altına konu açtı. 12 yıl

Selamun Aleyküm arkadaşlar,
Hepinize hayırlı Ramazanlar dilerim.Benim pc ye virüs bulaştığı için combofix yükledim ve tarattım rapor budur;

ComboFix 13-07-22.01 - SERKAN 23.07.2013 10:41:37.1.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1254.90.1055.18.767.410 [GMT 3:00]
Running from: c:\documents and settings\SERKAN\Belgelerim\Downloads\ComboFix.exe
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\2fiji.com
C:\autorun.inf
c:\documents and settings\SERKAN\Application Data\PriceGong
c:\documents and settings\SERKAN\Application Data\PriceGong\Data\1.txt
c:\documents and settings\SERKAN\Application Data\PriceGong\Data\a.txt
c:\documents and settings\SERKAN\Application Data\PriceGong\Data\b.txt
c:\documents and settings\SERKAN\Application Data\PriceGong\Data\c.txt
c:\documents and settings\SERKAN\Application Data\PriceGong\Data\d.txt
c:\documents and settings\SERKAN\Application Data\PriceGong\Data\e.txt
c:\documents and settings\SERKAN\Application Data\PriceGong\Data\f.txt
c:\documents and settings\SERKAN\Application Data\PriceGong\Data\g.txt
c:\documents and settings\SERKAN\Application Data\PriceGong\Data\h.txt
c:\documents and settings\SERKAN\Application Data\PriceGong\Data\i.txt
c:\documents and settings\SERKAN\Application Data\PriceGong\Data\j.txt
c:\documents and settings\SERKAN\Application Data\PriceGong\Data\k.txt
c:\documents and settings\SERKAN\Application Data\PriceGong\Data\l.txt
c:\documents and settings\SERKAN\Application Data\PriceGong\Data\m.txt
c:\documents and settings\SERKAN\Application Data\PriceGong\Data\mru.xml
c:\documents and settings\SERKAN\Application Data\PriceGong\Data\n.txt
c:\documents and settings\SERKAN\Application Data\PriceGong\Data\o.txt
c:\documents and settings\SERKAN\Application Data\PriceGong\Data\p.txt
c:\documents and settings\SERKAN\Application Data\PriceGong\Data\q.txt
c:\documents and settings\SERKAN\Application Data\PriceGong\Data\r.txt
c:\documents and settings\SERKAN\Application Data\PriceGong\Data\s.txt
c:\documents and settings\SERKAN\Application Data\PriceGong\Data\t.txt
c:\documents and settings\SERKAN\Application Data\PriceGong\Data\u.txt
c:\documents and settings\SERKAN\Application Data\PriceGong\Data\v.txt
c:\documents and settings\SERKAN\Application Data\PriceGong\Data\w.txt
c:\documents and settings\SERKAN\Application Data\PriceGong\Data\wlu.txt
c:\documents and settings\SERKAN\Application Data\PriceGong\Data\x.txt
c:\documents and settings\SERKAN\Application Data\PriceGong\Data\y.txt
c:\documents and settings\SERKAN\Application Data\PriceGong\Data\z.txt
c:\documents and settings\SERKAN\WINDOWS
c:\windows\system32\SET129.tmp
c:\windows\system32\SET135.tmp
c:\windows\system32\SET147.tmp
c:\windows\system32\SET149.tmp
c:\windows\system32\SET157.tmp
C:\wjlthn.pif
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_AMSINT32
-------\Service_amsint32
.
.
((((((((((((((((((((((((( Files Created from 2013-06-23 to 2013-07-23 )))))))))))))))))))))))))))))))
.
.
2013-07-23 06:38 . 2013-07-23 06:38 -------- d-----w- c:\program files\CCleaner
2013-07-02 09:51 . 2013-07-02 09:51 -------- d-----w- C:\878db554f8098b31d7a9ed1bad314dee
2013-07-02 09:47 . 2013-07-02 09:47 -------- d-----w- C:\6ada6c2c0b9b9dec105d45
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-07-23 07:51 . 2013-07-23 07:51 103140 --sh--r- C:\hwupbl.exe
2013-07-23 07:28 . 2012-07-25 10:43 85504 --sh--r- c:\windows\system32\ckvo0.dll
2008-10-20 14:28 193024 --sh--r- c:\windows\system32\ckvo.exe
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[-] 2009-04-23 . 1F39C7BDBA4C5F3F01C4EABF7EDBF4B3 . 361600 . . [5.1.2600.5625] . . c:\windows\system32\drivers\tcpip.sys
.
[-] 2008-04-15 . 1893561BEC6FD56EAF6606CEA611D9A3 . 221696 . . [5.1.2600.5512] . . c:\windows\regedit.exe
.
[-] 2008-04-15 . 458AF94C61D61CAAAD14C5D7E2A6284A . 89088 . . [5.1.2600.5512] . . c:\windows\system32\ctfmon.exe
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BKK4"="c:\windows\system32\dumprep 0 -k" [X]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-05-02 13529088]
"VIARaidUtl"="c:\program files\VIA\RAID\raid_tool.exe" [2009-02-19 4992664]
"nwiz"="nwiz.exe" [2008-05-02 1708032]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-05-02 86016]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-09-23 926896]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-15 89088]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"_nltide_3"="advpack.dll" [2009-04-23 128512]
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableTaskMgr"= 1 (0x1)
"DisableRegistryTools"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"MemCheckBoxInRunDlg"= 1 (0x1)
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"MemCheckBoxInRunDlg"= 1 (0x1)
"NoSMConfigurePrograms"= 1 (0x1)
.
[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"MemCheckBoxInRunDlg"= 1 (0x1)
"NoSMConfigurePrograms"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"AntiVirusOverride"=dword:00000001
"AntiVirusDisableNotify"=dword:00000001
"FirewallDisableNotify"=dword:00000001
"FirewallOverride"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
"UacDisableNotify"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
"DisableNotifications"= 1 (0x1)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\WINDOWS\\system32\\nwiz.exe"=
"c:\\WINDOWS\\system32\\UnlockerAssistant.exe"=
"c:\\Program Files\\VIA\\RAID\\raid_tool.exe"=
"c:\\WINDOWS\\system32\\ntvdm.exe"=
"c:\\WINDOWS\\system32\\mspaint.exe"=
"c:\\WINDOWS\\system32\\msfeedssync.exe"=
"c:\\Program Files\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe"=
"c:\\Documents and Settings\\SERKAN\\Belgelerim\\Downloads\\Shockwave_Installer_Slim.exe"=
"c:\\WINDOWS\\system32\\msiexec.exe"=
"c:\\Program Files\\Google\\Chrome\\Application\\chrome.exe"=
"c:\\Program Files\\Common Files\\Java\\Java Update\\jucheck.exe"=
"c:\\Program Files\\FilesFrog Update Checker\\update_checker.exe"=
"c:\\WINDOWS\\system32\\dumprep.exe"=
"c:\\Program Files\\Common Files\\Java\\Java Update\\jusched.exe"=
"c:\\WINDOWS\\system32\\verclsid.exe"=
"c:\\WINDOWS\\system32\\cmd.exe"=
"c:\\WINDOWS\\PCHealth\\HelpCtr\\Binaries\\MSConfig.exe"=
.
R0 d347bus;d347bus;c:\windows\system32\drivers\d347bus.sys [30.01.2013 16:55 155136]
R0 d347prt;d347prt;c:\windows\system32\drivers\d347prt.sys [30.01.2013 16:55 5248]
R2 VRAID Log Service;VRAID Log Service;c:\program files\VIA\RAID\vialogsv.exe [25.07.2012 14:26 52888]
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - AMSINT32
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-06-21 12:24 1165776 ----a-w- c:\program files\Google\Chrome\Application\27.0.1453.116\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2013-07-23 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-07-30 20:11]
.
2013-07-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-11-15 15:17]
.
2013-07-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-11-15 15:17]
.
2013-07-23 c:\windows\Tasks\User_Feed_Synchronization-{FC99B4B5-9A55-43B3-BE3C-38834F3B4C5D}.job
- c:\windows\system32\msfeedssync.exe [2009-04-23 18:22]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com.tr/
mStart Page = hxxp://www.22apple.com/?utm_source=b&ch=sof&uid=SAMSUNGXSP0822N_S06QJ20Y836512&reg=1359460794
uSearchURL,(Default) = hxxp://www.google.com/keyword/%s
IE: Send To &Bluetooth - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
TCP: DhcpNameServer = 192.168.1.1
.
- - - - ORPHANS REMOVED - - - -
.
URLSearchHooks-{246adb73-110d-4be4-868a-abf6d2d90fd3} - c:\program files\TVce\prxtbTVce.dll
BHO-{246adb73-110d-4be4-868a-abf6d2d90fd3} - c:\program files\TVce\prxtbTVce.dll
Toolbar-{246adb73-110d-4be4-868a-abf6d2d90fd3} - c:\program files\TVce\prxtbTVce.dll
HKCU-Run-DAEMON Tools Lite - c:\program files\DAEMON Tools Lite\DTLite.exe
HKLM-Run-Cmaudio - cmicnfg.cpl
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,http://www.gmer.net
Rootkit scan 2013-07-23 10:51
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-790525478-2049760794-1644491937-1003\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-790525478-2049760794-1644491937-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*e*x*eU\OpenWithList]
@Class="Shell"
.
[HKEY_USERS\S-1-5-21-790525478-2049760794-1644491937-1003\Software\Policies\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (S-1-5-21-790525478-2049760794-1644491937-1003)
@Allowed: (Read) (S-1-5-21-790525478-2049760794-1644491937-1003)
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_5_502_135_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_5_502_135_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'explorer.exe'(4000)
c:\progra~1\WINDOW~3\wmpband.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Java\jre1.7.0_07\bin\jqs.exe
c:\windows\system32\nvsvc32.exe
c:\windows\system32\RUNDLL32.EXE
c:\windows\system32\RunDll32.exe
.
**************************************************************************
.
Completion time: 2013-07-23 10:54:40 - machine was rebooted
ComboFix-quarantined-files.txt 2013-07-23 07:54
.
Pre-Run: 19.852.185.600 bayt boş
Post-Run: 20.084.146.176 bayt boş
.
WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
.
- - End Of File - - 11ACABF076099BE13037E2294FA944C7
988ED281FD011A58DAB7E4AE71DED8F5

ŞİMDİDEN TEŞEKKÜRLER!!

6 Yanıt

Yanıtla

Favorilere Ekle

Hakkında

Forum İmzası:

Göz rengimiz farklı olsa da göz yaşlarımız aynıdır.

Resimler

https://forum.donanimhaber.com/cache-v2?path=https%3a%2f%2fforum.donanimhaber.com%2fstore%2f3d%2f20%2f2b%2f3d202b07f8b7d862f7ce5ebda3a64733.png&t=1&text=0&width=87

https://forum.donanimhaber.com/cache-v2?path=https%3a%2f%2fforum.donanimhaber.com%2fstore%2f82%2f77%2fa0%2f8277a090bcae225b45c7269408b5dcc6.png&t=1&text=0&width=87

https://forum.donanimhaber.com/cache-v2?path=https%3a%2f%2fforum.donanimhaber.com%2fstore%2fd0%2fdf%2fcc%2fd0dfcc96129ba1aaf1e0bdd91ebc732d.png&t=1&text=0&width=87

3 Galeride Göster

Temel Bilgiler ve İstatistikler

Aktiflik: Şu anda DH'de değil
Son Giriş: 11 yıl önce
Son Mesaj Zamanı: 11 yıl
Mesaj Sayısı: 49
Gerçek Toplam Mesaj Sayısı: 49
İkinci El Bölümü Mesajları: 0
Konularının görüntülenme sayısı: 899 (Bu ay: 21)
Toplam aldığı artı oy sayısı: 0 (Bu hafta: 0)
En çok mesaj yazdığı forum bölümü: Donanım / Hardware

Mesajları

İkinci El Referansları