Combofix log analizi

Bu konuyu okuyanlar

gunescelik71

Öğrenci
Katılım
1 Mar 2018
Mesajlar
1
Reaksiyon puanı
0
Puanları
1
Yaş
27
Arkadaşlar son zamanlarda bilgisayarıma virüs bulaştığı konusunda içime kurt düştü . Bende combofixle pcyi tarattıım. Log dosyasını analiz konusunda yardımcı olabilcek varmı. Log dosyası aşağıdaki gibi:
Kod:
ComboFix 18-02-16.01 - Furkan 01.03.2018  20:21:28.1.8 - x64 NETWORK

Microsoft Windows 7 Ultimate   6.1.7601.1.1254.90.1055.18.8101.7140 [GMT 3:00]

Running from: c:\users\Furkan\Downloads\ComboFix.exe

SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

* Created a new restore point

.

.

(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\programdata\FinalDeleteFile.exe

c:\users\Furkan\AppData\Roaming\Declare.ini

.

.

(((((((((((((((((((((((((   Files Created from 2018-02-01 to 2018-03-01  )))))))))))))))))))))))))))))))

.

.

2018-03-01 17:25 . 2018-03-01 17:25    --------    d-----w-    c:\users\Default\AppData\Local\temp

2018-02-28 13:44 . 2018-02-28 13:44    --------    d-----w-    c:\windows\SysWow64\NV

2018-02-28 13:44 . 2018-02-28 13:44    --------    d-----w-    c:\windows\system32\NV

2018-02-27 13:19 . 2017-12-08 22:25    798520    ----a-w-    c:\windows\SysWow64\vulkan-1.dll

2018-02-27 13:19 . 2017-12-08 22:25    490808    ----a-w-    c:\windows\SysWow64\vulkaninfo.exe

2018-02-27 13:19 . 2017-12-08 22:24    928568    ----a-w-    c:\windows\system32\vulkan-1.dll

2018-02-27 13:19 . 2017-12-08 22:24    591672    ----a-w-    c:\windows\system32\vulkaninfo.exe

2018-02-27 13:19 . 2018-02-27 13:19    --------    d-----w-    c:\program files (x86)\VulkanRT

2018-02-27 12:28 . 2018-02-27 12:28    --------    d-----w-    c:\users\Furkan\AppData\Local\IsolatedStorage

2018-02-27 12:27 . 2018-02-27 12:27    --------    d-----w-    c:\program files (x86)\Microsoft XNA

2018-02-25 07:53 . 2018-02-25 07:53    --------    d-----w-    c:\users\Furkan\AppData\Roaming\KingRoot

2018-02-25 07:53 . 2018-02-25 07:53    --------    d-----w-    c:\users\Furkan\AppData\Roaming\Tencent

2018-02-25 07:53 . 2018-02-25 08:36    --------    d-----w-    c:\program files (x86)\KingRoot

2018-02-24 15:58 . 2018-02-24 15:59    --------    d-----w-    c:\users\Furkan\AppData\Local\Discord

2018-02-24 07:33 . 2018-02-24 07:33    --------    d-----w-    c:\programdata\Synaptics

2018-02-22 14:02 . 2018-02-22 18:12    --------    d-----w-    c:\users\Furkan\AppData\Roaming\FileZilla

2018-02-22 14:02 . 2018-02-22 14:20    --------    d-----w-    c:\users\Furkan\AppData\Local\FileZilla

2018-02-22 14:02 . 2018-02-22 14:02    --------    d-----w-    c:\program files\FileZilla FTP Client

2018-02-22 13:30 . 2017-09-05 01:54    69104    ----a-w-    c:\windows\system32\vsocklib.dll

2018-02-22 13:30 . 2017-09-05 01:54    65008    ----a-w-    c:\windows\SysWow64\vsocklib.dll

2018-02-22 13:30 . 2017-09-05 01:54    93248    ----a-w-    c:\windows\system32\drivers\vsock.sys

2018-02-22 13:30 . 2017-09-18 03:21    95704    ----a-w-    c:\windows\system32\drivers\vmx86.sys

2018-02-22 13:30 . 2017-09-18 03:32    367080    ----a-w-    c:\windows\SysWow64\vmnetdhcp.exe

2018-02-22 13:30 . 2017-09-18 03:32    402408    ----a-w-    c:\windows\SysWow64\vmnat.exe

2018-02-22 13:29 . 2017-09-18 03:32    46040    ----a-w-    c:\windows\system32\drivers\vmnet.sys

2018-02-22 13:29 . 2017-09-18 03:32    43992    ----a-w-    c:\windows\system32\drivers\vmnetuserif.sys

2018-02-22 13:29 . 2017-09-18 03:32    134104    ----a-w-    c:\windows\system32\vnetinst.dll

2018-02-22 13:29 . 2017-09-18 03:33    1134056    ----a-w-    c:\windows\system32\vnetlib64.dll

2018-02-22 13:29 . 2017-08-30 22:11    83008    ----a-w-    c:\windows\system32\drivers\hcmon.sys

2018-02-22 13:28 . 2018-02-22 13:28    --------    d-----w-    c:\program files (x86)\Common Files\ThinPrint

2018-02-22 13:28 . 2018-02-22 13:28    --------    d-----w-    c:\program files\Common Files\VMware

2018-02-19 16:44 . 2018-02-19 19:10    --------    d-----w-    c:\users\furkanözel

2018-02-19 16:13 . 2018-02-19 16:13    --------    d-----w-    c:\programdata\Furkan

2018-02-19 08:01 . 2018-02-19 19:03    --------    d-----w-    c:\program files\CCleaner

2018-02-18 19:04 . 2018-02-19 19:03    --------    d-----w-    c:\program files\KMSpico

2018-02-18 18:34 . 2018-02-18 18:34    --------    d-----w-    c:\users\Furkan\AppData\Roaming\EpicNet Inc

2018-02-18 18:32 . 2018-02-18 20:07    --------    d-----w-    c:\program files (x86)\Xum2wqPNitLT

2018-02-18 18:32 . 2018-02-18 18:32    --------    d-----w-    c:\users\Furkan\AppData\Roaming\FastDataX

2018-02-18 18:32 . 2018-02-18 19:34    --------    d-----w-    C:\Applications

2018-02-18 18:31 . 2018-02-19 04:41    --------    d--h--w-    c:\windows\rss

2018-02-17 07:51 . 2018-02-17 07:51    --------    d-----w-    c:\program files (x86)\VMware

2018-02-16 18:26 . 2018-02-16 18:26    --------    d-----w-    c:\windows\system32\appmgmt

2018-02-15 15:03 . 2018-02-15 15:03    --------    d-----w-    c:\users\Furkan\ansel

2018-02-15 15:02 . 2017-12-15 02:03    59240    ----a-w-    c:\windows\system32\drivers\nvvad64v.sys

2018-02-15 15:01 . 2018-02-15 15:01    --------    d-----w-    c:\programdata\GroupPolicy

2018-02-12 13:18 . 2018-02-25 21:31    --------    d-----w-    c:\users\Furkan\AppData\Roaming\VMware

2018-02-12 13:18 . 2018-02-25 21:31    --------    d-----w-    c:\users\Furkan\AppData\Local\VMware

2018-02-12 13:16 . 2018-02-22 13:30    --------    dc----w-    c:\windows\system32\DRVSTORE

2018-02-12 13:15 . 2018-03-01 05:54    --------    d-----w-    c:\programdata\VMware

2018-02-12 13:14 . 2018-02-22 13:28    --------    d-----w-    c:\program files (x86)\Common Files\VMware

2018-02-10 19:03 . 2018-02-10 19:49    --------    d-----w-    c:\users\Furkan\AppData\Roaming\Hideman

2018-02-10 19:01 . 2018-02-10 19:02    --------    d-----w-    c:\program files (x86)\Hideman

2018-02-10 00:34 . 2008-07-12 06:18    467984    ----a-w-    c:\windows\SysWow64\d3dx10_39.dll

2018-02-10 00:34 . 2008-07-12 06:18    1493528    ----a-w-    c:\windows\SysWow64\D3DCompiler_39.dll

2018-02-09 23:24 . 2018-02-23 13:44    --------    d-----w-    c:\program files (x86)\Zemana AntiMalware

2018-02-09 23:24 . 2018-02-09 23:24    --------    d-----w-    c:\users\Furkan\AppData\Local\Zemana

2018-02-09 15:13 . 2018-02-09 15:20    --------    d-----w-    C:\W7P_Backups

2018-02-09 15:12 . 2018-02-09 15:20    --------    d-----w-    C:\SkinPack

2018-02-05 16:20 . 2018-02-22 18:22    --------    d-----w-    C:\PAYDAY 2

2018-02-03 22:40 . 2018-02-03 23:31    --------    d-----w-    c:\users\Furkan\AppData\Roaming\Wise_Reminder

2018-02-03 22:39 . 2018-02-03 22:39    --------    d-----w-    c:\program files (x86)\Wise

.

.

.

((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2018-02-25 05:36 . 2018-01-19 15:56    505232    ----a-w-    c:\windows\system32\nvumdshimx.dll

2018-02-25 05:36 . 2018-01-19 15:56    419488    ----a-w-    c:\windows\SysWow64\nvumdshim.dll

2018-02-25 05:35 . 2018-01-19 15:56    182600    ----a-w-    c:\windows\system32\nvinitx.dll

2018-02-25 05:35 . 2018-01-19 15:56    159712    ----a-w-    c:\windows\SysWow64\nvinit.dll

2018-02-25 05:34 . 2018-01-19 15:56    15558416    ----a-w-    c:\windows\SysWow64\nvd3dum.dll

2018-02-25 05:34 . 2018-01-19 15:56    4424400    ----a-w-    c:\windows\system32\nvapi64.dll

2018-02-23 20:01 . 2018-01-19 15:58    1951    ----a-w-    c:\windows\NvContainerRecovery.bat

2018-02-23 19:22 . 2018-01-19 15:58    5953096    ----a-w-    c:\windows\system32\nvcpl.dll

2018-02-23 19:22 . 2018-01-19 15:58    2587992    ----a-w-    c:\windows\system32\nvsvc64.dll

2018-02-23 19:22 . 2018-01-19 15:58    81752    ----a-w-    c:\windows\system32\nv3dappshextr.dll

2018-02-23 19:22 . 2018-01-19 15:58    633984    ----a-w-    c:\windows\system32\nv3dappshext.dll

2018-02-23 19:22 . 2018-01-19 15:58    451144    ----a-w-    c:\windows\system32\nvmctray.dll

2018-02-23 19:22 . 2018-01-19 15:58    1768008    ----a-w-    c:\windows\system32\nvsvcr.dll

2018-02-23 19:22 . 2018-01-19 15:58    122896    ----a-w-    c:\windows\system32\nvshext.dll

2018-02-16 14:48 . 2018-01-19 15:58    8083703    ----a-w-    c:\windows\system32\nvcoproc.bin

2018-01-21 12:16 . 2018-01-21 12:16    803328    ----a-w-    c:\windows\SysWow64\FlashPlayerApp.exe

2018-01-21 12:16 . 2018-01-21 12:16    144896    ----a-w-    c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2018-01-19 15:14 . 2018-01-19 12:58    65456    ----a-w-    c:\windows\system32\drivers\UAExt.sys

2018-01-19 11:57 . 2018-01-19 11:56    3851784    ----a-w-    c:\windows\SysWow64\d3dx9_39.dll

2018-01-10 14:33 . 2018-01-19 15:58    2425656    ----a-w-    c:\windows\system32\nvspcap64.dll

2018-01-10 14:33 . 2018-01-19 15:58    2090800    ----a-w-    c:\windows\SysWow64\nvspcap.dll

2018-01-10 14:33 . 2018-01-19 15:58    1310008    ----a-w-    c:\windows\system32\NvRtmpStreamer64.dll

2018-01-10 09:41 . 2018-01-19 15:58    1951    ----a-w-    c:\windows\NvTelemetryContainerRecovery.bat

2018-01-04 01:39 . 2018-01-19 15:56    57792    ----a-w-    c:\windows\system32\drivers\nvvhci.sys

2018-01-04 01:39 . 2018-01-19 15:56    1975184    ----a-w-    c:\windows\system32\nvdispco6439065.dll

2018-01-04 01:39 . 2018-01-19 15:56    1674544    ----a-w-    c:\windows\system32\nvdispgenco6439065.dll

2018-01-04 01:39 . 2018-01-19 13:52    532792    ----a-w-    c:\windows\system32\OpenCL.DLL

2018-01-04 01:39 . 2018-01-19 13:52    437648    ----a-w-    c:\windows\SysWow64\OpenCL.DLL

2017-12-22 09:35 . 2018-01-22 18:03    4936432    ----a-w-    c:\programdata\Microsoft\Windows\Templates\Bloody6\Setup.exe

2017-12-21 23:59 . 2017-12-21 23:59    105984    ----a-w-    c:\windows\system32\frapsv64.dll

2017-12-21 23:59 . 2017-12-21 23:59    94208    ----a-w-    c:\windows\SysWow64\frapsvid.dll

2017-12-18 12:07 . 2018-01-19 15:58    187704    ----a-w-    c:\windows\system32\nvaudcap64v.dll

2017-12-18 12:06 . 2018-01-19 15:58    152976    ----a-w-    c:\windows\SysWow64\nvaudcap32v.dll

2017-12-08 22:25 . 2017-12-08 22:25    798520    ----a-w-    c:\windows\SysWow64\vulkan-1-1-0-65-1.dll

2017-12-08 22:25 . 2017-12-08 22:25    490808    ----a-w-    c:\windows\SysWow64\vulkaninfo-1-1-0-65-1.exe

2017-12-08 22:24 . 2017-12-08 22:24    928568    ----a-w-    c:\windows\system32\vulkan-1-1-0-65-1.dll

2017-12-08 22:24 . 2017-12-08 22:24    591672    ----a-w-    c:\windows\system32\vulkaninfo-1-1-0-65-1.exe

.

.

(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* empty entries & legit default entries are not shown

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Steam"="c:\program files (x86)\Steam\steam.exe" [2017-12-15 3111712]

"Bloody2"="c:\program files (x86)\Bloody6\Bloody6\Bloody6.exe" [2018-01-15 16226032]

"Discord"="c:\users\Furkan\AppData\Local\Discord\app-0.0.300\Discord.exe" [2018-01-08 57821176]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 0 (0x0)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableLUA"= 0 (0x0)

"EnableUIADesktopToggle"= 0 (0x0)

"PromptOnSecureDesktop"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]

"LoadAppInit_DLLs"=1 (0x1)

"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]

BootExecute    REG_MULTI_SZ       autocheck autochk *\0aswBoot.exe /M:a781ac904 /wow /dir:C:\Program

.

R1 ZAM;ZAM Helper Driver;c:\windows\System32\drivers\zam64.sys;c:\windows\SYSNATIVE\drivers\zam64.sys [x]

R1 ZAM_Guard;ZAM Guard Driver;c:\windows\System32\drivers\zamguard64.sys;c:\windows\SYSNATIVE\drivers\zamguard64.sys [x]

R2 AudioDeviceService;AudioDeviceService;c:\windows\system32\AudioDeviceService.exe;c:\windows\SYSNATIVE\AudioDeviceService.exe [x]

R2 AvrcpService;AvrcpService;c:\program files (x86)\REALTEK\Realtek Bluetooth\AvrcpService.exe;c:\program files (x86)\REALTEK\Realtek Bluetooth\AvrcpService.exe [x]

R2 BTDevManager;BTDevManager;c:\program files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe;c:\program files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [x]

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]

R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]

R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]

R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]

R2 NvContainerLocalSystem;NVIDIA LocalSystem Container;c:\program files\NVIDIA Corporation\NvContainer\nvcontainer.exe;c:\program files\NVIDIA Corporation\NvContainer\nvcontainer.exe [x]

R2 NVDisplay.ContainerLocalSystem;NVIDIA Display Container LS;c:\program files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe;c:\program files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [x]

R2 NvTelemetryContainer;NVIDIA Telemetry Container;c:\program files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe;c:\program files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [x]

R2 RtkBleServ;RtkBleServ;c:\program files (x86)\REALTEK\Realtek Bluetooth\RtkBleServ.exe;c:\program files (x86)\REALTEK\Realtek Bluetooth\RtkBleServ.exe [x]

R2 UnsignedThemes;Unsigned Themes;c:\windows\UnsignedThemesSvc.exe;c:\windows\UnsignedThemesSvc.exe [x]

R2 uxpatch;uxpatch;c:\windows\system32\drivers\uxpatch.sys;c:\windows\SYSNATIVE\drivers\uxpatch.sys [x]

R2 VMUSBArbService;VMware USB Arbitration Service;c:\program files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe;c:\program files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe [x]

R2 VMwareHostd;VMware Workstation Server;c:\program files (x86)\VMware\VMware Workstation\vmware-hostd.exe;c:\program files (x86)\VMware\VMware Workstation\vmware-hostd.exe [x]

R2 vstor2-mntapi20-shared;Vstor2 MntApi 2.0 Driver (shared);SysWOW64\drivers\vstor2-mntapi20-shared.sys;SysWOW64\drivers\vstor2-mntapi20-shared.sys [x]

R2 YandexBrowserService;Yandex.Browser Update Service;c:\program files (x86)\Yandex\YandexBrowser\18.1.1.839\service_update.exe;c:\program files (x86)\Yandex\YandexBrowser\18.1.1.839\service_update.exe [x]

R3 BEService;BattlEye Service;c:\program files (x86)\Common Files\BattlEye\BEService.exe;c:\program files (x86)\Common Files\BattlEye\BEService.exe [x]

R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]

R3 IntcDAud;Intel(R) Ekran İçin Ses;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]

R3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface;c:\program files\Intel\iCLS Client\SocketHeciServer.exe;c:\program files\Intel\iCLS Client\SocketHeciServer.exe [x]

R3 NvContainerNetworkService;NVIDIA NetworkService Container;c:\program files\NVIDIA Corporation\NvContainer\nvcontainer.exe;c:\program files\NVIDIA Corporation\NvContainer\nvcontainer.exe [x]

R3 NvStreamKms;NVIDIA KMS;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [x]

R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]

R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]

R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]

R3 RtkBtFilter;Realtek Bluetooth Filter Driver;c:\windows\system32\DRIVERS\RtkBtfilter.sys;c:\windows\SYSNATIVE\DRIVERS\RtkBtfilter.sys [x]

R3 RTSUER;Realtek USB Card Reader - UER;c:\windows\system32\Drivers\RtsUer.sys;c:\windows\SYSNATIVE\Drivers\RtsUer.sys [x]

R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]

R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys;c:\windows\SYSNATIVE\drivers\terminpt.sys [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]

R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]

R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]

R3 UAExt;UAExt;c:\windows\system32\DRIVERS\UAExt.sys;c:\windows\SYSNATIVE\DRIVERS\UAExt.sys [x]

R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]

S0 iaStorA;iaStorA;c:\windows\system32\DRIVERS\iaStorA.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorA.sys [x]

S0 iaStorF;iaStorF;c:\windows\system32\DRIVERS\iaStorF.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorF.sys [x]

S0 iusb3hcs;Intel(R) USB 3.0 Ana Bilgisayar Denetleyici Değiştirici Sürücüsü;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]

S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]

S0 vmci;VMware VMCI Bus Driver;c:\windows\system32\DRIVERS\vmci.sys;c:\windows\SYSNATIVE\DRIVERS\vmci.sys [x]

S0 vsock;vSockets Virtual Machine Communication Interface Sockets driver;c:\windows\system32\DRIVERS\vsock.sys;c:\windows\SYSNATIVE\DRIVERS\vsock.sys [x]

S3 iusb3hub;Intel(R) USB 3.0 Hub Sürücüsü;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]

S3 iusb3xhc;Intel(R) USB 3.0 Genişletilebilir Ana Bilgisayar Denetleyici Sürücüsü;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]

S3 nvvhci;NVVHCI Enumerator Service;c:\windows\system32\DRIVERS\nvvhci.sys;c:\windows\SYSNATIVE\DRIVERS\nvvhci.sys [x]

S3 SmbDrvI;SmbDrvI;c:\windows\system32\DRIVERS\Smb_driver_Intel.sys;c:\windows\SYSNATIVE\DRIVERS\Smb_driver_Intel.sys [x]

.

.

Contents of the 'Scheduled Tasks' folder

.

2018-03-01 c:\windows\Tasks\Yandex Browser güncellemesi.job

- c:\users\Furkan\AppData\Local\Yandex\YandexBrowser\Application\browser.exe [2018-01-19 10:12]

.

2018-03-01 c:\windows\Tasks\Yandex Browser'ın sistem güncellemesi.job

- c:\program files (x86)\Yandex\YandexBrowser\18.1.1.839\service_update.exe [2018-02-20 10:12]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]

"BtServer"="c:\program files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe" [2014-06-06 217088]

"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2013-05-30 13550152]

.

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\SharedTaskScheduler]

"{F791A188-699D-4FD4-955A-EB59E89B1907}"= "c:\skinpack\ThemeResourceChanger.dll" [BU]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"AppInit_DLLs"=c:\windows\System32\nvinitx.dll

.

------- Supplementary Scan -------

.

uLocal Page = c:\windows\system32\blank.htm

mLocal Page = c:\windows\SysWOW64\blank.htm

LSP: %windir%\system32\vsocklib.dll

TCP: DhcpNameServer = 192.168.42.129

.

- - - - ORPHANS REMOVED - - - -

.

ShellIconOverlayIdentifiers-{472083B0-C522-11CF-8763-00608CC02F24} - (no file)

AddRemove-Reload Icons Cache 1.00 - c:\program files (x86)\Mr Blade Design's\Reload Icons Cache\Uninstall.exe

AddRemove-TSEV Skyrim LE_is1 - d:\tsev skyrim le\unins000.exe

AddRemove-{AEFF9E60-3E93-41EE-9895-311F7D1C5FFD} - c:\windows\system32\SupportAppPBHostless Modem\Setup.exe

.

.

.

--------------------- LOCKED REGISTRY KEYS ---------------------

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Completion time: 2018-03-01  20:26:45

ComboFix-quarantined-files.txt  2018-03-01 17:26

ComboFix2.txt  2018-02-19 16:36

.

Pre-Run: 328.117.927.936 bayt boş

Post-Run: 328.057.651.200 bayt boş

.

- - End Of File - - 9C7ECA1C234298DDD3EF3F4FFD408452

A36C5E4F47E84449FF07ED3517B43A31
 

Ekli dosyalar

  • log.txt
    19.3 KB · Görüntüleme: 649

Türkçesever

Profesör
Katılım
12 Eyl 2016
Mesajlar
1,582
Reaksiyon puanı
2,977
Puanları
113
ComboFix, yaygın zararlıları temizler. Malwarebytes Anti-Malware ile sistemi tarayın.
 

Son mesajlar

Üst