Hijackthis log....Yardım lütfen

Prvlgd sormuş:
Arkadaşlar loguma bi bakar mısınız birşey varmı diye...

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 02:33:39, on 23.06.2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\Program Files\McAfee\VirusScan\McShield.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\SiteAdvisor\6261\SAService.exe
C:\Program Files\ThreatFire\TFService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\alg.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\SiteAdvisor\6261\SiteAdv.exe
C:\PROGRA~1\McAfee\MHN\McENUI.exe
C:\Program Files\ThreatFire\TFTray.exe
C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\USRobotics\Wireless USB Manager\USR54G.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Bağlantılar
O2 - BHO: IE7Pro - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files\IEPro\iepro.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll
O2 - BHO: McAntiPhishingBHO - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - c:\PROGRA~1\mcafee\msk\mcapbho.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: PicLens plug-in for Internet Explorer - {EAEE5C74-6D0D-4aca-9232-0DA4A7B866BA} - C:\Program Files\PicLensIE\PicLens.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
O4 - HKLM\..\Run: [SiteAdvisor] "C:\Program Files\SiteAdvisor\6261\SiteAdv.exe"
O4 - HKLM\..\Run: [McENUI] C:\PROGRA~1\McAfee\MHN\McENUI.exe /hide
O4 - HKLM\..\Run: [ThreatFire] C:\Program Files\ThreatFire\TFTray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup:  USRobotics Wireless USB Adapter.lnk = C:\Program Files\USRobotics\Wireless USB Manager\USR54G.exe
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O9 - Extra button: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll
O9 - Extra 'Tools' menuitem: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Launch PicLens - {3437D640-C91A-458f-89F5-B9095EA4C28B} - C:\Program Files\PicLensIE\PicLens.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://*.mcafee.com
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - http://dev.srtest.com/srl_bin/sysreqlab3.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/ ... e.cab?1212841293593
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/ ... e.cab?1212854578203
O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} (AxisMediaControlEmb Class) - http://138.237.46.59/activex/AMC.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan\McShield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: SiteAdvisor Service - Unknown owner - C:\Program Files\SiteAdvisor\6261\SAService.exe
O23 - Service: ThreatFire - PC Tools - C:\Program Files\ThreatFire\TFService.exe

--
End of file - 9762 bytes

Soru Türü: Donanım
İşletim Sistemi: Windows XP
Sistem Özellikleri:
fx5500 ekran kartı
512mb ram
3.2 ghz intel p4

İnternet Tarayıcı: Mozilla/5.0 (Windows; U; Windows NT 5.1; tr; rv:1.9) Gecko/2008052906 Firefox/3.0

ballahi şöyle bir yüzeysel baktım birşey yok gibi..
eğer olupta burada gorunse zaten mcafee ( sanırım bu antivirüsün ) engeller virüsü :)

bu arada sistemin eskimiş birazcık önümüzdeki 1-2 aylık dönem tam bir upgrade dönemi.. ekran kartı fiyatlarıda düşecek kaçırma derim.. ;)

Log' da  herhangi bir  sorun   görünmüyor ,  bunun  sebebide   kişisel güvenliğe  önem verişin.

SideAdvisor
WinDefender
Spybot,search&destroy
McAfee

Gözümden  kaçan başka koruma  yazılımınız kaldı mi :)  

1-2 haftada bir  regDefrag  yaparsan   sistemin daha sorunsuz çalışır.

Avira antivir , spyware doctor ve threatfire var ayrıca :) Bu arada şöyle bir göz atmayıp ayrıntılı şekilde baktığın için çok teşşekkür ederim. Normalde bilgisayarı açtığımda 20 saniyede masaüstünü görüyordum ama şimdi 5 dakikaya uzadı ve çıldırcam.. Herkes format diyor ve artık o herkese iyice kıl olmaya başladım.Hani şu konu hakkında pek bilgisi olmayıp ta konuşanlar olurya....

HKLM yazanLarın dısında O23, O15 Oxxx bunların hepsini fixLemen isine yarar her ne kadar guvenli kullandığım yani sistemli calısan programda desen bilgisayarının donmasını ve bazı programların duzqun calısmasını engeller. Kolay qelsin

Virus programları için gerekli olan herşey 023te..Birşeyleri yanlış mı anladım???

Mc Affee Bilgisayarı ele gecirmis zaten Onerim NOD32 kullanman Dediğimi yap pişman olmazsın .

---Ayrıca Aşağıdaki Bilgilerde İşine Yarayabilir.---
Ağ Bağlantıları - C:|WINDOWS|System32|svchost.exe -k netsvcs

Ağ DDE - C:|WINDOWS|system32|netdde.exe

Ağ DDE DSDM - C:|WINDOWS|system32|netdde.exe

Ağ Konumu Tanıma (NLA) - C:|WINDOWS|System32|svchost.exe -k netsvcs

Ağ Sağlama Hizmeti - C:|WINDOWS|System32|svchost.exe -k netsvcs

Akıllı Kart - C:|WINDOWS|System32|SCardSvr.exe

Arka Plan Akıllı Aktarım Hizmeti - C:|WINDOWS|System32|svchost.exe -k netsvcs

Bilgisayar Tarayıcısı - C:|WINDOWS|System32|svchost.exe -k netsvcs

Birim Gölge Görüntüsü - C:|WINDOWS|System32|vssvc.exe

COM+ Olay Sistemi - C:|WINDOWS|System32|svchost.exe -k netsvcs

COM+ Sistem Uygulaması - C:|WINDOWS|System32|dllhost.exe

Çıkarılabilir Depolama Birimi - C:|WINDOWS|system32|svchost.exe -k netsvcs

Dağıtılmış Bağlantı İzleme İstemcisi - C:|WINDOWS|system32|svchost.exe -k netsvcs

Dağıtılmış İşlem Düzenleyicisi - C:|WINDOWS|System32|msdtc.exe

DCOM Sunucusu İşlem Başlatıcı - C:|WINDOWS|system32|svchost -k DcomLaunch

DHCP İstemcisi - C:|WINDOWS|System32|svchost.exe -k netsvcs

Dizin Oluşturma Hizmeti - C:|WINDOWS|System32|cisvc.exe

DNS İstemcisi - C:|WINDOWS|System32|svchost.exe -k NetworkService

Evrensel Tak ve Çalıştır Aygıt Ana Makinesi - C:|WINDOWS|System32|svchost.exe -k LocalService

Görev Zamanlayıcı - C:|WINDOWS|System32|svchost.exe -k netsvcs

Güvenlik Merkezi - C:|WINDOWS|System32|svchost.exe -k netsvcs

Hata Bildirim Hizmeti - C:|WINDOWS|System32|svchost.exe -k netsvcs

Hızlı Kullanıcı Değiştirme Uyumluluğu - C:|WINDOWS|System32|svchost.exe -k netsvcs

HTTP SSL - C:|WINDOWS|System32|svchost.exe -k HTTPFilter

İkincil Oturum - C:|WINDOWS|System32|svchost.exe -k netsvcs

IMAPI CD-Yazma COM Hizmeti - C:|WINDOWS|System32|imapi.exe

İnsan Arabirim Aygıt Erişimi - C:|WINDOWS|System32|svchost.exe -k netsvcs

IPSEC Hizmetleri - C:|WINDOWS|System32|lsass.exe

İş İstasyonu - C:|WINDOWS|System32|svchost.exe -k netsvcs

Kablosuz Sıfır Yapılandırma - C:|WINDOWS|System32|svchost.exe -k netsvcs

Kabuk Donanım Algılaması - C:|WINDOWS|System32|svchost.exe -k netsvcs

Kesintisiz Güç Kaynağı - C:|WINDOWS|System32|ups.exe

Korumalı Depolama - C:|WINDOWS|system32|lsass.exe

Mantıksal Disk Yöneticisi - C:|WINDOWS|System32|svchost.exe -k netsvcs

Mantıksal Disk Yöneticisi Yönetim Hizmetleri - C:|WINDOWS|System32|dmadmin.exe /com

Messenger - C:|WINDOWS|System32|svchost.exe -k netsvcs

MS Software Shadow Copy Provider - C:|WINDOWS|System32|dllhost.exe

Net Logon - C:|WINDOWS|System32|lsass.exe

NetMeeting Remote Desktop Sharing - C:|WINDOWS|System32|mnmsrvc.exe

NT LM Güvenlik Desteği Sağlayıcısı - C:|WINDOWS|System32|lsass.exe

NVIDIA Display Driver Service - C:|WINDOWS|system32|nvsvc32.exe

Olay Günlüğü - C:|WINDOWS|system32|services.exe

Otomatik Güncelleştirmeler - C:|WINDOWS|system32|svchost.exe -k netsvcs

Outpost Firewall Service - C:|PROGRA~1|Agnitum|OUTPOS~1|outpost.exe /service

Pano Defteri - C:|WINDOWS|system32|clipsrv.exe

Performans Günlükleri ve Uyarıları - C:|WINDOWS|system32|smlogsvc.exe

QoS RSVP - C:|WINDOWS|System32|rsvp.exe

Remote Desktop Help Session Manager - C:|WINDOWS|system32|sessmgr.exe

Security Accounts Manager - C:|WINDOWS|system32|lsass.exe

Sistem Geri Yükleme Hizmeti - C:|WINDOWS|System32|svchost.exe -k netsvcs

Sistem Olay Bildirimi - C:|WINDOWS|system32|svchost.exe -k netsvcs

SSDP Bulma Hizmeti - C:|WINDOWS|System32|svchost.exe -k LocalService

Sunucu - C:|WINDOWS|System32|svchost.exe -k netsvcs

Şifreleme Hizmetleri - C:|WINDOWS|system32|svchost.exe -k netsvcs

Tak ve Kullan - C:|WINDOWS|system32|services.exe

Taşınabilir Ortam Seri Numarası Hizmeti - C:|WINDOWS|System32|svchost.exe -k netsvcs

TCP/IP NetBIOS Yardımcısı - C:|WINDOWS|System32|svchost.exe -k LocalService

Telefon - C:|WINDOWS|System32|svchost.exe -k netsvcs

Telnet - C:|WINDOWS|System32|tlntsvr.exe

Temalar - C:|WINDOWS|System32|svchost.exe -k netsvcs

Terminal Hizmetleri - C:|WINDOWS|System32|svchost -k DComLaunch

Uyarıcı - C:|WINDOWS|System32|svchost.exe -k LocalService

Uygulama Katmanı Ağ Geçidi Hizmeti - C:|WINDOWS|System32|alg.exe

Uygulama Yönetimi - C:|WINDOWS|system32|svchost.exe -k netsvcs

Uzaktan Erişim Bağlantı Yöneticisi - C:|WINDOWS|System32|svchost.exe -k netsvcs

Uzaktan Erişim Otomatik Bağlantı Yöneticisi - C:|WINDOWS|System32|svchost.exe -k netsvcs

Uzaktan Kayıt Defteri - C:|WINDOWS|system32|svchost.exe -k LocalService

Uzaktan Yordam Çağrısı (RPC) - C:|WINDOWS|system32|svchost -k rpcss

Uzaktan Yordam Çağrısı (RPC) Konumlandırıcı - C:|WINDOWS|System32|locator.exe

WebClient - C:|WINDOWS|System32|svchost.exe -k LocalService

Windows Güvenlik Duvarı/Internet Bağlantı Paylaşımı (ICS) - C:|WINDOWS|System32|svchost.exe -k netsvcs

Windows Image Acquisition (WIA) - C:|WINDOWS|System32|svchost.exe -k imgsvc

Windows Installer - C:|WINDOWS|System32|msiexec.exe /V

Windows Saati - C:|WINDOWS|System32|svchost.exe -k netsvcs

Windows Ses - C:|WINDOWS|System32|svchost.exe -k netsvcs

Windows Yönetim Araçları Sürücü Uzantıları - C:|WINDOWS|System32|svchost.exe -k netsvcs

Windows Yönetim Yardımcıları - C:|WINDOWS|system32|svchost.exe -k netsvcs

WMI Performans Bağdaştırıcısı - C:|WINDOWS|System32|wbem|wmiapsrv.exe

Yardım ve Destek - C:|WINDOWS|System32|svchost.exe -k netsvcs

Yazdırma Biriktiricisi - C:|WINDOWS|system32|spoolsv.exe

Yönlendirme ve Uzaktan Erişim - C:|WINDOWS|System32|svchost.exe -k netsvcs

Hiç bişi yok istersen hijackthis.de adresine sor.