ajdarbaba Posted December 3, 2012 Share Posted December 3, 2012 arkadaşlar bilgisayarım normalde hiç donma yapmaz ama bu 2 gündür bilgisayarım çok donuyor cpu ısısna baktıgım zaman ise sıcaklık 50 51 dereceleri görüyor kasanın içine temizledim yine aynı ne yapabilirim pcyi eski haline getirmek için [url=http://bit.ly/c25MCx][/url] [url=http://bit.ly/c25MCx][/url] Quote Link to comment Share on other sites More sharing options...
delalbey Posted December 3, 2012 Share Posted December 3, 2012 tugrul kardeşime söylüyorum ben 3 defa aynı konuyu açsamdım şimdiye hesabımı banned yapmıştı artık düşünür kendine Quote Link to comment Share on other sites More sharing options...
ajdarbaba Posted December 3, 2012 Author Share Posted December 3, 2012 arkadaşlar k.b site ile alakalı konu konuyu yazdım gönder tuşuna bastım 2.3 dk beklettim öyle kaldı bende 4.5 defa göndere bastım böyle olmuş Quote Link to comment Share on other sites More sharing options...
ajdarbaba Posted December 3, 2012 Author Share Posted December 3, 2012 arkadaşlar combofix ile tarama yaptım sonucu nedir bakarmısınız :D ComboFix 12-12-02.01 - MAZLUM 03.12.2012 19:03:10.2.2 - x86 Microsoft Windows 7 Ultimate 6.1.7601.1.1254.90.1055.18.3071.2409 [GMT 2:00] Running from: c:\users\MAZLUM\Downloads\Programs\ComboFix-07.08-tamindir.exe SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Created a new restore point . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . ---- Previous Run ------- . C:\install.exe c:\users\MAZLUM\AppData\Roaming\Roaming\Quest3D\ShipSimExtreme\channels.lst c:\windows\system32\adsntfp.dll c:\windows\system32\ICON.ico c:\windows\system32\iphist.dat c:\windows\system32\psbasefp.dll . . ((((((((((((((((((((((((( Files Created from 2012-11-03 to 2012-12-03 ))))))))))))))))))))))))))))))) . . 2012-12-03 17:07 . 2012-12-03 17:07 -------- d-----w- c:\users\Default\AppData\Local\temp 2012-11-30 18:22 . 2012-11-08 18:00 6812136 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{385EAFFA-D661-4704-A377-D33B0990B381}\mpengine.dll 2012-11-30 17:00 . 2012-11-30 17:00 -------- d-----w- c:\program files\Maxthon3 2012-11-29 12:40 . 2012-11-29 12:40 -------- d-----w- c:\program files\FreeTime 2012-11-29 12:22 . 2012-11-29 12:22 -------- d-----w- c:\program files\HyperCam 2 2012-11-28 21:46 . 2012-11-28 21:46 -------- d-----w- c:\windows\1C4551A64743409391E41477CD655043.TMP 2012-11-26 20:08 . 2012-11-26 20:08 -------- d-----w- c:\program files\Microsoft.NET 2012-11-26 20:03 . 2012-12-03 07:58 -------- d-----w- c:\program files\Metin2 2012-11-25 12:14 . 2012-11-25 12:14 -------- d-----w- c:\program files\Common Files\Solveig Multimedia 2012-11-23 10:23 . 2012-11-23 10:23 -------- d-----w- c:\program files\NVIDIA Corporation 2012-11-23 10:19 . 2012-11-23 10:19 -------- d-----w- c:\program files\Paradox Interactive 2012-11-23 09:57 . 2012-11-28 21:46 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard 2012-11-22 20:55 . 2012-11-22 20:55 -------- d-----w- c:\windows\Sun 2012-11-21 19:56 . 2012-11-21 19:56 -------- d-----w- C:\Graphics 2012-11-21 19:56 . 2009-03-10 21:25 191488 ------w- c:\windows\system32\mwgfx.dll 2012-11-21 19:56 . 2008-10-20 11:44 237056 ------w- c:\windows\system32\mwgfx24.dll 2012-11-21 19:56 . 2008-09-05 06:32 104960 ------w- c:\windows\system32\mwdds.dll 2012-11-21 19:56 . 2007-08-19 07:37 28672 ------w- c:\windows\system32\mwgfxcopy.exe 2012-11-21 19:56 . 2004-05-14 09:13 56832 ------w- c:\windows\system32\mwace.dll 2012-11-21 13:02 . 2012-11-22 00:43 100216 ----a-w- c:\windows\system32\drivers\idmwfp.sys 2012-11-21 12:21 . 2010-01-31 23:29 175616 ----a-w- c:\windows\system32\staco.dll 2012-11-21 12:20 . 2012-11-21 12:20 -------- d-----w- C:\SwSetup 2012-11-21 08:05 . 2012-11-21 08:05 -------- d-----w- c:\program files\Microsoft Silverlight 2012-11-17 21:52 . 2012-11-29 13:11 -------- d-----w- c:\programdata\AVAST Software 2012-11-16 08:32 . 2012-11-16 08:32 -------- d-----w- c:\program files\Common Files\Windows Live 2012-11-16 08:15 . 2012-11-16 08:30 -------- d-----w- c:\program files\Total Video Converter 2012-11-16 07:39 . 2012-11-16 07:39 -------- d-----w- c:\program files\Common Files\Skype 2012-11-16 07:39 . 2012-11-16 07:39 -------- d-----r- c:\program files\Skype 2012-11-16 07:39 . 2012-11-16 07:39 -------- d-----w- c:\programdata\Skype 2012-11-15 18:22 . 2012-11-15 18:22 16304 ------w- c:\windows\system32\apl003.sys 2012-11-15 18:22 . 2012-11-15 18:22 13232 ------w- c:\windows\system32\apf003.sys 2012-11-15 17:52 . 2012-11-15 17:52 -------- d-----w- c:\program files\Joygame 2012-11-15 16:57 . 2012-11-22 15:48 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2012-11-15 16:57 . 2012-11-22 15:48 696760 ----a-w- c:\windows\system32\FlashPlayerApp.exe 2012-11-15 16:57 . 2012-11-15 16:57 -------- d-----w- c:\windows\system32\Macromed 2012-11-14 15:18 . 2012-11-14 15:18 -------- d-----w- c:\program files\Common Files\Java 2012-11-14 15:18 . 2012-11-14 15:18 93672 ----a-w- c:\windows\system32\WindowsAccessBridge.dll 2012-11-14 15:17 . 2012-11-14 15:17 -------- d-----w- c:\program files\Java 2012-11-14 13:25 . 2012-11-28 16:00 -------- d--h--w- c:\program files\InstallShield Installation Information 2012-11-14 13:25 . 2012-11-21 12:20 -------- d-----w- c:\program files\IDT 2012-11-14 13:25 . 2012-11-14 13:25 -------- d-----w- c:\program files\Common Files\InstallShield 2012-11-13 20:22 . 2012-07-26 03:39 47720 ----a-w- c:\windows\system32\drivers\WdfLdr.sys 2012-11-13 20:22 . 2012-07-26 03:39 526952 ----a-w- c:\windows\system32\drivers\Wdf01000.sys 2012-11-13 20:22 . 2012-07-26 02:46 9728 ----a-w- c:\windows\system32\Wdfres.dll 2012-11-13 20:22 . 2012-07-26 02:33 66560 ----a-w- c:\windows\system32\drivers\WUDFPf.sys 2012-11-13 20:22 . 2012-07-26 02:32 155136 ----a-w- c:\windows\system32\drivers\WUDFRd.sys 2012-11-13 20:22 . 2012-07-26 03:21 196608 ----a-w- c:\windows\system32\WUDFHost.exe 2012-11-13 20:22 . 2012-07-26 03:20 73216 ----a-w- c:\windows\system32\WUDFSvc.dll 2012-11-13 20:22 . 2012-07-26 03:20 613888 ----a-w- c:\windows\system32\WUDFx.dll 2012-11-13 20:22 . 2012-07-26 03:20 38912 ----a-w- c:\windows\system32\WUDFCoinstaller.dll 2012-11-13 20:22 . 2012-07-26 03:20 172032 ----a-w- c:\windows\system32\WUDFPlatform.dll 2012-11-13 20:08 . 2012-08-24 17:05 136560 ----a-w- c:\windows\system32\drivers\ksecpkg.sys 2012-11-13 20:08 . 2012-08-24 17:02 369856 ----a-w- c:\windows\system32\drivers\cng.sys 2012-11-13 20:08 . 2012-08-24 16:57 247808 ----a-w- c:\windows\system32\schannel.dll 2012-11-13 20:08 . 2012-08-24 16:57 220160 ----a-w- c:\windows\system32\ncrypt.dll 2012-11-13 20:08 . 2012-08-24 16:56 1039360 ----a-w- c:\windows\system32\lsasrv.dll 2012-11-13 20:08 . 2012-10-18 17:59 2345984 ----a-w- c:\windows\system32\win32k.sys 2012-11-13 19:19 . 2012-11-13 20:34 -------- d-----w- c:\programdata\DAEMON Tools Lite 2012-11-13 19:17 . 2012-11-13 19:17 -------- d-----w- c:\windows\system32\Adobe 2012-11-13 19:16 . 2012-11-14 15:18 821736 ----a-w- c:\windows\system32\npDeployJava1.dll 2012-11-13 19:16 . 2012-11-14 15:18 746984 ----a-w- c:\windows\system32\deployJava1.dll 2012-11-13 19:09 . 2012-06-09 17:21 178688 ----a-w- c:\windows\system32\unrar.dll 2012-11-13 19:09 . 2012-11-13 19:10 -------- d-----w- c:\program files\K-Lite Codec Pack 2012-11-13 19:07 . 2012-11-13 19:07 -------- d-----w- c:\program files\TeamViewer 2012-11-13 18:56 . 2012-11-13 18:56 -------- d-----w- c:\program files\uTorrent 2012-11-13 18:56 . 2012-10-12 17:09 22912 ----a-w- c:\windows\system32\RegistryDefragBootTime.exe 2012-11-13 18:53 . 2012-11-13 18:53 -------- d-----w- c:\program files\CCleaner 2012-11-13 18:51 . 2012-05-31 10:25 237072 ------w- c:\windows\system32\MpSigStub.exe 2012-11-13 18:49 . 2012-11-14 16:35 -------- d-----w- c:\programdata\IObit 2012-11-13 18:49 . 2012-11-20 22:21 -------- d-----w- c:\program files\IObit 2012-11-13 18:38 . 2012-11-29 12:53 -------- d-sh--w- c:\windows\Installer 2012-11-13 18:34 . 2008-05-30 12:11 467984 ----a-w- c:\windows\system32\d3dx10_38.dll 2012-11-13 18:33 . 2012-11-28 21:44 -------- d-----w- c:\program files\Google 2012-11-13 18:32 . 2012-06-02 22:19 53784 ----a-w- c:\windows\system32\wuauclt.exe 2012-11-13 18:32 . 2012-06-02 22:19 45080 ----a-w- c:\windows\system32\wups2.dll 2012-11-13 18:32 . 2012-06-02 22:19 1933848 ----a-w- c:\windows\system32\wuaueng.dll 2012-11-13 18:32 . 2012-06-02 22:12 2422272 ----a-w- c:\windows\system32\wucltux.dll 2012-11-13 18:32 . 2012-06-02 22:19 35864 ----a-w- c:\windows\system32\wups.dll 2012-11-13 18:32 . 2012-06-02 22:19 577048 ----a-w- c:\windows\system32\wuapi.dll 2012-11-13 18:32 . 2012-06-02 22:12 88576 ----a-w- c:\windows\system32\wudriver.dll 2012-11-13 18:32 . 2012-06-02 13:19 171904 ----a-w- c:\windows\system32\wuwebv.dll 2012-11-13 18:32 . 2012-06-02 13:12 33792 ----a-w- c:\windows\system32\wuapp.exe 2012-11-13 18:29 . 2012-12-03 11:30 -------- d-----w- c:\users\MAZLUM 2012-11-13 18:27 . 2012-11-13 18:27 -------- d-----w- C:\Recovery 2012-11-13 18:27 . 2012-11-13 18:27 -------- d-sh--we c:\users\Default\Belgelerim 2012-11-13 18:27 . 2012-11-13 18:27 -------- d-sh--we c:\programdata\Sık Kullanılanlar 2012-11-13 18:27 . 2012-11-13 18:27 -------- d-sh--we c:\programdata\Belgeler 2012-11-13 18:23 . 2012-11-13 18:23 0 ----a-w- c:\windows\ativpsrm.bin 2012-11-13 18:21 . 2012-11-21 11:02 -------- d-----w- c:\windows\Panther . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-11-17 18:45 . 2010-11-20 21:29 2755072 ----a-w- c:\windows\system32\themeui.dll 2012-11-17 18:45 . 2009-07-13 23:40 249856 ----a-w- c:\windows\system32\uxtheme.dll 2012-11-17 18:45 . 2009-07-13 23:39 37376 ----a-w- c:\windows\system32\themeservice.dll 2012-10-17 13:23 . 2012-10-17 13:23 80256 ----a-w- c:\windows\system32\drivers\amdsata.sys 2012-10-17 13:23 . 2012-10-17 13:23 74240 ----a-w- c:\windows\system32\fsutil.exe 2012-10-17 13:23 . 2012-10-17 13:23 332160 ----a-w- c:\windows\system32\drivers\iaStorV.sys 2012-10-17 13:23 . 2012-10-17 13:23 22400 ----a-w- c:\windows\system32\drivers\amdxata.sys 2012-10-17 13:23 . 2012-10-17 13:23 1699328 ----a-w- c:\windows\system32\esent.dll 2012-10-17 13:23 . 2012-10-17 13:23 148864 ----a-w- c:\windows\system32\drivers\storport.sys 2012-10-17 13:23 . 2012-10-17 13:23 143744 ----a-w- c:\windows\system32\drivers\nvstor.sys 2012-10-17 13:23 . 2012-10-17 13:23 117120 ----a-w- c:\windows\system32\drivers\nvraid.sys 2012-10-17 13:22 . 2012-10-17 13:22 2048 ----a-w- c:\windows\system32\tzres.dll 2012-10-17 13:22 . 2012-10-17 13:22 172544 ----a-w- c:\windows\system32\wintrust.dll 2012-10-17 13:22 . 2012-10-17 13:22 542208 ----a-w- c:\windows\system32\kerberos.dll 2012-10-17 13:22 . 2012-10-17 13:22 1211760 ----a-w- c:\windows\system32\drivers\ntfs.sys 2012-10-17 13:21 . 2012-10-17 13:21 240496 ----a-w- c:\windows\system32\drivers\netio.sys 2012-10-17 13:21 . 2012-10-17 13:21 187760 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS 2012-10-17 13:21 . 2012-10-17 13:21 400896 ----a-w- c:\windows\system32\srcore.dll 2012-10-17 13:21 . 2012-10-17 13:21 245760 ----a-w- c:\windows\system32\OxpsConverter.exe 2012-10-17 13:21 . 2012-10-17 13:21 6144 ---ha-w- c:\windows\system32\api-ms-win-security-base-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 5120 ---ha-w- c:\windows\system32\api-ms-win-core-file-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 4608 ---ha-w- c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 4608 ---ha-w- c:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 4096 ---ha-w- c:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 4096 ---ha-w- c:\windows\system32\api-ms-win-core-synch-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 4096 ---ha-w- c:\windows\system32\api-ms-win-core-misc-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 4096 ---ha-w- c:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 4096 ---ha-w- c:\windows\system32\api-ms-win-core-localization-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 3584 ---ha-w- c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 3584 ---ha-w- c:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 3584 ---ha-w- c:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 3584 ---ha-w- c:\windows\system32\api-ms-win-core-memory-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 3584 ---ha-w- c:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 3584 ---ha-w- c:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 3584 ---ha-w- c:\windows\system32\api-ms-win-core-heap-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 3072 ---ha-w- c:\windows\system32\api-ms-win-core-util-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 3072 ---ha-w- c:\windows\system32\api-ms-win-core-string-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 3072 ---ha-w- c:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 3072 ---ha-w- c:\windows\system32\api-ms-win-core-profile-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 3072 ---ha-w- c:\windows\system32\api-ms-win-core-io-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 3072 ---ha-w- c:\windows\system32\api-ms-win-core-handle-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 3072 ---ha-w- c:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 3072 ---ha-w- c:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 3072 ---ha-w- c:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 3072 ---ha-w- c:\windows\system32\api-ms-win-core-debug-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 3072 ---ha-w- c:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 3072 ---ha-w- c:\windows\system32\api-ms-win-core-console-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 293376 ----a-w- c:\windows\system32\KernelBase.dll 2012-10-17 13:21 . 2012-10-17 13:21 271360 ----a-w- c:\windows\system32\conhost.exe 2012-10-17 13:21 . 2012-10-17 13:21 169984 ----a-w- c:\windows\system32\winsrv.dll 2012-10-17 13:20 . 2012-10-17 13:20 3968880 ----a-w- c:\windows\system32\ntkrnlpa.exe 2012-10-17 13:20 . 2012-10-17 13:20 3914096 ----a-w- c:\windows\system32\ntoskrnl.exe 2012-10-17 13:20 . 2012-10-17 13:20 2048 ----a-w- c:\windows\system32\msxml3r.dll 2012-10-17 13:20 . 2012-10-17 13:20 1390080 ----a-w- c:\windows\system32\msxml6.dll 2012-10-17 13:20 . 2012-10-17 13:20 1236992 ----a-w- c:\windows\system32\msxml3.dll 2012-10-17 13:20 . 2012-10-17 13:20 712048 ----a-w- c:\windows\system32\drivers\ndis.sys 2012-10-17 13:20 . 2012-10-17 13:20 33280 ----a-w- c:\windows\system32\drivers\RNDISMP.sys 2012-10-17 13:19 . 2012-10-17 13:19 769024 ----a-w- c:\windows\system32\localspl.dll 2012-10-17 13:19 . 2012-10-17 13:19 164352 ----a-w- c:\windows\system32\profsvc.dll 2012-10-17 13:19 . 2012-10-17 13:19 41984 ----a-w- c:\windows\system32\browcli.dll 2012-10-17 13:19 . 2012-10-17 13:19 102912 ----a-w- c:\windows\system32\browser.dll 2012-10-17 13:19 . 2012-10-17 13:19 2342400 ----a-w- c:\windows\system32\msi.dll 2012-10-17 13:19 . 2012-10-17 13:19 805376 ----a-w- c:\windows\system32\cdosys.dll 2012-10-17 13:18 . 2012-10-17 13:18 56176 ----a-w- c:\windows\system32\drivers\partmgr.sys 2012-10-17 13:17 . 2012-10-17 13:17 183808 ----a-w- c:\windows\system32\drivers\rdpwd.sys 2012-10-17 13:17 . 2012-10-17 13:17 8192 ----a-w- c:\windows\system32\rdrmemptylst.exe 2012-10-17 13:17 . 2012-10-17 13:17 58880 ----a-w- c:\windows\system32\rdpwsx.dll 2012-10-17 13:17 . 2012-10-17 13:17 129536 ----a-w- c:\windows\system32\rdpcorekmts.dll 2012-10-17 13:17 . 2012-10-17 13:17 140288 ----a-w- c:\windows\system32\cryptsvc.dll 2012-10-17 13:17 . 2012-10-17 13:17 1159680 ----a-w- c:\windows\system32\crypt32.dll 2012-10-17 13:17 . 2012-10-17 13:17 103936 ----a-w- c:\windows\system32\cryptnet.dll 2012-10-17 13:16 . 2012-10-17 13:16 478720 ----a-w- c:\windows\system32\timedate.cpl 2012-10-17 13:15 . 2012-10-17 13:15 67440 ----a-w- c:\windows\system32\drivers\ksecdd.sys 2012-10-17 13:14 . 2012-10-17 13:14 690688 ----a-w- c:\windows\system32\msvcrt.dll 2012-10-17 13:14 . 2012-10-17 13:14 5120 ----a-w- c:\windows\system32\wmi.dll 2012-10-17 13:14 . 2012-10-17 13:14 19824 ----a-w- c:\windows\system32\drivers\fs_rec.sys 2012-10-17 13:14 . 2012-10-17 13:14 159232 ----a-w- c:\windows\system32\imagehlp.dll 2012-10-17 13:14 . 2012-10-17 13:14 492032 ----a-w- c:\windows\system32\win32spl.dll 2012-10-17 13:14 . 2012-10-17 13:14 317440 ----a-w- c:\windows\system32\spoolsv.exe 2012-10-17 13:14 . 2012-10-17 13:14 1288472 ----a-w- c:\windows\system32\ntdll.dll 2012-10-17 13:14 . 2012-10-17 13:14 442880 ----a-w- c:\windows\system32\ntshrui.dll 2012-10-17 13:13 . 2012-10-17 13:13 1328128 ----a-w- c:\windows\system32\quartz.dll 2012-10-17 13:13 . 2012-10-17 13:13 826880 ----a-w- c:\windows\system32\rdpcore.dll 2012-10-17 13:13 . 2012-10-17 13:13 24576 ----a-w- c:\windows\system32\drivers\tdtcp.sys 2012-10-17 13:13 . 2012-10-17 13:13 38912 ----a-w- c:\windows\system32\csrsrv.dll 2012-10-17 13:13 . 2012-10-17 13:13 534528 ----a-w- c:\windows\system32\EncDec.dll 2012-10-17 13:12 . 2012-10-17 13:12 314880 ----a-w- c:\windows\system32\webio.dll 2012-10-17 13:12 . 2012-10-17 13:12 22528 ----a-w- c:\windows\system32\lsass.exe 2012-10-17 13:12 . 2012-10-17 13:12 22016 ----a-w- c:\windows\system32\secur32.dll 2012-10-17 13:12 . 2012-10-17 13:12 15872 ----a-w- c:\windows\system32\sspisrv.dll 2012-10-17 13:12 . 2012-10-17 13:12 100352 ----a-w- c:\windows\system32\sspicli.dll 2012-10-17 13:12 . 2012-10-17 13:12 67072 ----a-w- c:\windows\system32\packager.dll 2012-10-17 13:11 . 2012-10-17 13:11 75776 ----a-w- c:\windows\system32\psisrndr.ax 2012-10-17 13:11 . 2012-10-17 13:11 465408 ----a-w- c:\windows\system32\psisdecd.dll 2012-10-17 13:11 . 2012-10-17 13:11 571904 ----a-w- c:\windows\system32\oleaut32.dll 2012-10-17 13:11 . 2012-10-17 13:11 233472 ----a-w- c:\windows\system32\oleacc.dll 2012-10-17 13:11 . 2012-10-17 13:11 86016 ----a-w- c:\windows\system32\odbccu32.dll 2012-10-17 13:11 . 2012-10-17 13:11 81920 ----a-w- c:\windows\system32\odbccr32.dll 2012-10-17 13:11 . 2012-10-17 13:11 319488 ----a-w- c:\windows\system32\odbcjt32.dll 2012-10-17 13:11 . 2012-10-17 13:11 163840 ----a-w- c:\windows\system32\odbctrac.dll . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\IDM Shell Extension] @="{CDC95B92-E27C-4745-A8C5-64A52A78855D}" [HKEY_CLASSES_ROOT\CLSID\{CDC95B92-E27C-4745-A8C5-64A52A78855D}] 2012-11-15 23:07 21904 ----a-w- c:\program files\Internet Download Manager\IDMShellExt.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2012-10-26 3540416] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "aux"=wdmaud.drv . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Advanced SystemCare 6] 2012-09-24 19:59 490880 ----a-w- c:\program files\IObit\Advanced SystemCare 6\ASCTray.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IDMan] 2012-10-26 12:37 3540416 ----a-w- c:\program files\Internet Download Manager\IDMan.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype] 2012-11-09 09:27 17877168 ----a-r- c:\program files\Skype\Phone\Skype.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] 2012-07-03 07:04 252848 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SysTrayApp] 2010-01-31 23:29 495708 ------w- c:\program files\IDT\WDM\sttray.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent] 2012-11-13 18:56 968592 ----a-w- c:\program files\uTorrent\uTorrent.exe . R3 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x] R3 apf003;apf003;c:\windows\system32\apf003.sys [x] R3 cpuz135;cpuz135;c:\windows\TEMP\cpuz135\cpuz135_x32.sys [x] R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [x] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x] R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x] R3 TeamViewer7;TeamViewer 7;c:\program files\TeamViewer\Version7\TeamViewer_Service.exe [x] R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x] R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [x] R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x] R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x] R3 WatAdminSvc;Windows Etkinleştirme Teknolojileri Hizmeti;c:\windows\system32\Wat\WatAdminSvc.exe [x] R3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files\IObit\Game Booster 3\Driver\WinRing0.sys [x] S2 AdvancedSystemCareService6;Advanced SystemCare Service 6;c:\program files\IObit\Advanced SystemCare 6\ASCService.exe [x] S2 IDMWFP;IDMWFP;c:\windows\system32\DRIVERS\idmwfp.sys [x] S2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [x] . . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr TBS fdrespub AppIDSvc QWAVE wcncsvc Mcx2Svc SensrSvc GPSvcGroup REG_MULTI_SZ GPSvc . HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalService FontCache . . Contents of the 'Scheduled Tasks' folder . 2012-12-03 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-11-15 15:48] . 2012-12-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2012-11-13 18:33] . 2012-12-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2012-11-13 18:33] . . ------- Supplementary Scan ------- . uStart Page = about:blank mStart Page = about:blank IE: Bütün linkleri IDM ile indir - c:\program files\Internet Download Manager\IEGetAll.htm IE: IDM ile indir - c:\program files\Internet Download Manager\IEExt.htm TCP: DhcpNameServer = 78.135.0.10 78.135.0.11 . - - - - ORPHANS REMOVED - - - - . MSConfigStartUp-DAEMON Tools Lite - c:\program files\daemon tools lite\dtlite.exe MSConfigStartUp-SDP - c:\program files\FilesFrog Update Checker\update_checker.exe . . . --------------------- LOCKED REGISTRY KEYS --------------------- . [HKEY_USERS\S-1-5-21-1804208620-2545679188-4010376965-1000\Software\SecuROM\License information*] "datasecu"=hex:ee,75,d9,3f,e5,e9,39,9b,18,7e,85,ce,43,a0,53,8a,29,e4,15,9b,57, da,09,0e,de,2d,53,5a,89,26,5b,9c,0c,31,bd,28,da,09,6f,c3,b0,2b,5b,5d,ff,e3,\ "rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98 . [HKEY_USERS\S-1-5-21-1804208620-2545679188-4010376965-1000_Classes\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C}] @Denied: (Full) (Everyone) @Allowed: (Read) (RestrictedCode) "scansk"=hex(0):2c,c3,3e,df,eb,7d,99,e5,68,cd,54,1d,ec,9c,c6,e9,4c,82,68,16,d2, 97,d5,09,0e,f7,9d,76,f7,be,c0,d3,d8,73,71,a6,80,95,bf,08,00,00,00,00,00,00,\ . [HKEY_USERS\S-1-5-21-1804208620-2545679188-4010376965-1000_Classes\CLSID\{a83fbe89-7a06-40c4-bc4d-7d68f8288870}] @Denied: (Full) (Everyone) @Allowed: (Read) (RestrictedCode) "Model"=dword:00000151 "Therad"=dword:00000015 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . ------------------------ Other Running Processes ------------------------ . c:\windows\system32\taskhost.exe c:\windows\system32\DllHost.exe c:\windows\system32\conhost.exe c:\program files\Windows Media Player\wmpnetwk.exe c:\windows\servicing\TrustedInstaller.exe . ************************************************************************** . Completion time: 2012-12-03 19:09:58 - machine was rebooted ComboFix-quarantined-files.txt 2012-12-03 17:09 . Pre-Run: 166.198.276.096 bayt boş Post-Run: 171.942.473.728 bayt boş . - - End Of File - - 5D97612169C4E1958F7D6A60BB442FD7ComboFix 12-12-02.01 - MAZLUM 03.12.2012 19:03:10.2.2 - x86 Microsoft Windows 7 Ultimate 6.1.7601.1.1254.90.1055.18.3071.2409 [GMT 2:00] Running from: c:\users\MAZLUM\Downloads\Programs\ComboFix-07.08-tamindir.exe SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Created a new restore point . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . ---- Previous Run ------- . C:\install.exe c:\users\MAZLUM\AppData\Roaming\Roaming\Quest3D\ShipSimExtreme\channels.lst c:\windows\system32\adsntfp.dll c:\windows\system32\ICON.ico c:\windows\system32\iphist.dat c:\windows\system32\psbasefp.dll . . ((((((((((((((((((((((((( Files Created from 2012-11-03 to 2012-12-03 ))))))))))))))))))))))))))))))) . . 2012-12-03 17:07 . 2012-12-03 17:07 -------- d-----w- c:\users\Default\AppData\Local\temp 2012-11-30 18:22 . 2012-11-08 18:00 6812136 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{385EAFFA-D661-4704-A377-D33B0990B381}\mpengine.dll 2012-11-30 17:00 . 2012-11-30 17:00 -------- d-----w- c:\program files\Maxthon3 2012-11-29 12:40 . 2012-11-29 12:40 -------- d-----w- c:\program files\FreeTime 2012-11-29 12:22 . 2012-11-29 12:22 -------- d-----w- c:\program files\HyperCam 2 2012-11-28 21:46 . 2012-11-28 21:46 -------- d-----w- c:\windows\1C4551A64743409391E41477CD655043.TMP 2012-11-26 20:08 . 2012-11-26 20:08 -------- d-----w- c:\program files\Microsoft.NET 2012-11-26 20:03 . 2012-12-03 07:58 -------- d-----w- c:\program files\Metin2 2012-11-25 12:14 . 2012-11-25 12:14 -------- d-----w- c:\program files\Common Files\Solveig Multimedia 2012-11-23 10:23 . 2012-11-23 10:23 -------- d-----w- c:\program files\NVIDIA Corporation 2012-11-23 10:19 . 2012-11-23 10:19 -------- d-----w- c:\program files\Paradox Interactive 2012-11-23 09:57 . 2012-11-28 21:46 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard 2012-11-22 20:55 . 2012-11-22 20:55 -------- d-----w- c:\windows\Sun 2012-11-21 19:56 . 2012-11-21 19:56 -------- d-----w- C:\Graphics 2012-11-21 19:56 . 2009-03-10 21:25 191488 ------w- c:\windows\system32\mwgfx.dll 2012-11-21 19:56 . 2008-10-20 11:44 237056 ------w- c:\windows\system32\mwgfx24.dll 2012-11-21 19:56 . 2008-09-05 06:32 104960 ------w- c:\windows\system32\mwdds.dll 2012-11-21 19:56 . 2007-08-19 07:37 28672 ------w- c:\windows\system32\mwgfxcopy.exe 2012-11-21 19:56 . 2004-05-14 09:13 56832 ------w- c:\windows\system32\mwace.dll 2012-11-21 13:02 . 2012-11-22 00:43 100216 ----a-w- c:\windows\system32\drivers\idmwfp.sys 2012-11-21 12:21 . 2010-01-31 23:29 175616 ----a-w- c:\windows\system32\staco.dll 2012-11-21 12:20 . 2012-11-21 12:20 -------- d-----w- C:\SwSetup 2012-11-21 08:05 . 2012-11-21 08:05 -------- d-----w- c:\program files\Microsoft Silverlight 2012-11-17 21:52 . 2012-11-29 13:11 -------- d-----w- c:\programdata\AVAST Software 2012-11-16 08:32 . 2012-11-16 08:32 -------- d-----w- c:\program files\Common Files\Windows Live 2012-11-16 08:15 . 2012-11-16 08:30 -------- d-----w- c:\program files\Total Video Converter 2012-11-16 07:39 . 2012-11-16 07:39 -------- d-----w- c:\program files\Common Files\Skype 2012-11-16 07:39 . 2012-11-16 07:39 -------- d-----r- c:\program files\Skype 2012-11-16 07:39 . 2012-11-16 07:39 -------- d-----w- c:\programdata\Skype 2012-11-15 18:22 . 2012-11-15 18:22 16304 ------w- c:\windows\system32\apl003.sys 2012-11-15 18:22 . 2012-11-15 18:22 13232 ------w- c:\windows\system32\apf003.sys 2012-11-15 17:52 . 2012-11-15 17:52 -------- d-----w- c:\program files\Joygame 2012-11-15 16:57 . 2012-11-22 15:48 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2012-11-15 16:57 . 2012-11-22 15:48 696760 ----a-w- c:\windows\system32\FlashPlayerApp.exe 2012-11-15 16:57 . 2012-11-15 16:57 -------- d-----w- c:\windows\system32\Macromed 2012-11-14 15:18 . 2012-11-14 15:18 -------- d-----w- c:\program files\Common Files\Java 2012-11-14 15:18 . 2012-11-14 15:18 93672 ----a-w- c:\windows\system32\WindowsAccessBridge.dll 2012-11-14 15:17 . 2012-11-14 15:17 -------- d-----w- c:\program files\Java 2012-11-14 13:25 . 2012-11-28 16:00 -------- d--h--w- c:\program files\InstallShield Installation Information 2012-11-14 13:25 . 2012-11-21 12:20 -------- d-----w- c:\program files\IDT 2012-11-14 13:25 . 2012-11-14 13:25 -------- d-----w- c:\program files\Common Files\InstallShield 2012-11-13 20:22 . 2012-07-26 03:39 47720 ----a-w- c:\windows\system32\drivers\WdfLdr.sys 2012-11-13 20:22 . 2012-07-26 03:39 526952 ----a-w- c:\windows\system32\drivers\Wdf01000.sys 2012-11-13 20:22 . 2012-07-26 02:46 9728 ----a-w- c:\windows\system32\Wdfres.dll 2012-11-13 20:22 . 2012-07-26 02:33 66560 ----a-w- c:\windows\system32\drivers\WUDFPf.sys 2012-11-13 20:22 . 2012-07-26 02:32 155136 ----a-w- c:\windows\system32\drivers\WUDFRd.sys 2012-11-13 20:22 . 2012-07-26 03:21 196608 ----a-w- c:\windows\system32\WUDFHost.exe 2012-11-13 20:22 . 2012-07-26 03:20 73216 ----a-w- c:\windows\system32\WUDFSvc.dll 2012-11-13 20:22 . 2012-07-26 03:20 613888 ----a-w- c:\windows\system32\WUDFx.dll 2012-11-13 20:22 . 2012-07-26 03:20 38912 ----a-w- c:\windows\system32\WUDFCoinstaller.dll 2012-11-13 20:22 . 2012-07-26 03:20 172032 ----a-w- c:\windows\system32\WUDFPlatform.dll 2012-11-13 20:08 . 2012-08-24 17:05 136560 ----a-w- c:\windows\system32\drivers\ksecpkg.sys 2012-11-13 20:08 . 2012-08-24 17:02 369856 ----a-w- c:\windows\system32\drivers\cng.sys 2012-11-13 20:08 . 2012-08-24 16:57 247808 ----a-w- c:\windows\system32\schannel.dll 2012-11-13 20:08 . 2012-08-24 16:57 220160 ----a-w- c:\windows\system32\ncrypt.dll 2012-11-13 20:08 . 2012-08-24 16:56 1039360 ----a-w- c:\windows\system32\lsasrv.dll 2012-11-13 20:08 . 2012-10-18 17:59 2345984 ----a-w- c:\windows\system32\win32k.sys 2012-11-13 19:19 . 2012-11-13 20:34 -------- d-----w- c:\programdata\DAEMON Tools Lite 2012-11-13 19:17 . 2012-11-13 19:17 -------- d-----w- c:\windows\system32\Adobe 2012-11-13 19:16 . 2012-11-14 15:18 821736 ----a-w- c:\windows\system32\npDeployJava1.dll 2012-11-13 19:16 . 2012-11-14 15:18 746984 ----a-w- c:\windows\system32\deployJava1.dll 2012-11-13 19:09 . 2012-06-09 17:21 178688 ----a-w- c:\windows\system32\unrar.dll 2012-11-13 19:09 . 2012-11-13 19:10 -------- d-----w- c:\program files\K-Lite Codec Pack 2012-11-13 19:07 . 2012-11-13 19:07 -------- d-----w- c:\program files\TeamViewer 2012-11-13 18:56 . 2012-11-13 18:56 -------- d-----w- c:\program files\uTorrent 2012-11-13 18:56 . 2012-10-12 17:09 22912 ----a-w- c:\windows\system32\RegistryDefragBootTime.exe 2012-11-13 18:53 . 2012-11-13 18:53 -------- d-----w- c:\program files\CCleaner 2012-11-13 18:51 . 2012-05-31 10:25 237072 ------w- c:\windows\system32\MpSigStub.exe 2012-11-13 18:49 . 2012-11-14 16:35 -------- d-----w- c:\programdata\IObit 2012-11-13 18:49 . 2012-11-20 22:21 -------- d-----w- c:\program files\IObit 2012-11-13 18:38 . 2012-11-29 12:53 -------- d-sh--w- c:\windows\Installer 2012-11-13 18:34 . 2008-05-30 12:11 467984 ----a-w- c:\windows\system32\d3dx10_38.dll 2012-11-13 18:33 . 2012-11-28 21:44 -------- d-----w- c:\program files\Google 2012-11-13 18:32 . 2012-06-02 22:19 53784 ----a-w- c:\windows\system32\wuauclt.exe 2012-11-13 18:32 . 2012-06-02 22:19 45080 ----a-w- c:\windows\system32\wups2.dll 2012-11-13 18:32 . 2012-06-02 22:19 1933848 ----a-w- c:\windows\system32\wuaueng.dll 2012-11-13 18:32 . 2012-06-02 22:12 2422272 ----a-w- c:\windows\system32\wucltux.dll 2012-11-13 18:32 . 2012-06-02 22:19 35864 ----a-w- c:\windows\system32\wups.dll 2012-11-13 18:32 . 2012-06-02 22:19 577048 ----a-w- c:\windows\system32\wuapi.dll 2012-11-13 18:32 . 2012-06-02 22:12 88576 ----a-w- c:\windows\system32\wudriver.dll 2012-11-13 18:32 . 2012-06-02 13:19 171904 ----a-w- c:\windows\system32\wuwebv.dll 2012-11-13 18:32 . 2012-06-02 13:12 33792 ----a-w- c:\windows\system32\wuapp.exe 2012-11-13 18:29 . 2012-12-03 11:30 -------- d-----w- c:\users\MAZLUM 2012-11-13 18:27 . 2012-11-13 18:27 -------- d-----w- C:\Recovery 2012-11-13 18:27 . 2012-11-13 18:27 -------- d-sh--we c:\users\Default\Belgelerim 2012-11-13 18:27 . 2012-11-13 18:27 -------- d-sh--we c:\programdata\Sık Kullanılanlar 2012-11-13 18:27 . 2012-11-13 18:27 -------- d-sh--we c:\programdata\Belgeler 2012-11-13 18:23 . 2012-11-13 18:23 0 ----a-w- c:\windows\ativpsrm.bin 2012-11-13 18:21 . 2012-11-21 11:02 -------- d-----w- c:\windows\Panther . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-11-17 18:45 . 2010-11-20 21:29 2755072 ----a-w- c:\windows\system32\themeui.dll 2012-11-17 18:45 . 2009-07-13 23:40 249856 ----a-w- c:\windows\system32\uxtheme.dll 2012-11-17 18:45 . 2009-07-13 23:39 37376 ----a-w- c:\windows\system32\themeservice.dll 2012-10-17 13:23 . 2012-10-17 13:23 80256 ----a-w- c:\windows\system32\drivers\amdsata.sys 2012-10-17 13:23 . 2012-10-17 13:23 74240 ----a-w- c:\windows\system32\fsutil.exe 2012-10-17 13:23 . 2012-10-17 13:23 332160 ----a-w- c:\windows\system32\drivers\iaStorV.sys 2012-10-17 13:23 . 2012-10-17 13:23 22400 ----a-w- c:\windows\system32\drivers\amdxata.sys 2012-10-17 13:23 . 2012-10-17 13:23 1699328 ----a-w- c:\windows\system32\esent.dll 2012-10-17 13:23 . 2012-10-17 13:23 148864 ----a-w- c:\windows\system32\drivers\storport.sys 2012-10-17 13:23 . 2012-10-17 13:23 143744 ----a-w- c:\windows\system32\drivers\nvstor.sys 2012-10-17 13:23 . 2012-10-17 13:23 117120 ----a-w- c:\windows\system32\drivers\nvraid.sys 2012-10-17 13:22 . 2012-10-17 13:22 2048 ----a-w- c:\windows\system32\tzres.dll 2012-10-17 13:22 . 2012-10-17 13:22 172544 ----a-w- c:\windows\system32\wintrust.dll 2012-10-17 13:22 . 2012-10-17 13:22 542208 ----a-w- c:\windows\system32\kerberos.dll 2012-10-17 13:22 . 2012-10-17 13:22 1211760 ----a-w- c:\windows\system32\drivers\ntfs.sys 2012-10-17 13:21 . 2012-10-17 13:21 240496 ----a-w- c:\windows\system32\drivers\netio.sys 2012-10-17 13:21 . 2012-10-17 13:21 187760 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS 2012-10-17 13:21 . 2012-10-17 13:21 400896 ----a-w- c:\windows\system32\srcore.dll 2012-10-17 13:21 . 2012-10-17 13:21 245760 ----a-w- c:\windows\system32\OxpsConverter.exe 2012-10-17 13:21 . 2012-10-17 13:21 6144 ---ha-w- c:\windows\system32\api-ms-win-security-base-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 5120 ---ha-w- c:\windows\system32\api-ms-win-core-file-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 4608 ---ha-w- c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 4608 ---ha-w- c:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 4096 ---ha-w- c:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 4096 ---ha-w- c:\windows\system32\api-ms-win-core-synch-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 4096 ---ha-w- c:\windows\system32\api-ms-win-core-misc-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 4096 ---ha-w- c:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 4096 ---ha-w- c:\windows\system32\api-ms-win-core-localization-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 3584 ---ha-w- c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 3584 ---ha-w- c:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 3584 ---ha-w- c:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 3584 ---ha-w- c:\windows\system32\api-ms-win-core-memory-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 3584 ---ha-w- c:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 3584 ---ha-w- c:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 3584 ---ha-w- c:\windows\system32\api-ms-win-core-heap-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 3072 ---ha-w- c:\windows\system32\api-ms-win-core-util-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 3072 ---ha-w- c:\windows\system32\api-ms-win-core-string-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 3072 ---ha-w- c:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 3072 ---ha-w- c:\windows\system32\api-ms-win-core-profile-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 3072 ---ha-w- c:\windows\system32\api-ms-win-core-io-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 3072 ---ha-w- c:\windows\system32\api-ms-win-core-handle-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 3072 ---ha-w- c:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 3072 ---ha-w- c:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 3072 ---ha-w- c:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 3072 ---ha-w- c:\windows\system32\api-ms-win-core-debug-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 3072 ---ha-w- c:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 3072 ---ha-w- c:\windows\system32\api-ms-win-core-console-l1-1-0.dll 2012-10-17 13:21 . 2012-10-17 13:21 293376 ----a-w- c:\windows\system32\KernelBase.dll 2012-10-17 13:21 . 2012-10-17 13:21 271360 ----a-w- c:\windows\system32\conhost.exe 2012-10-17 13:21 . 2012-10-17 13:21 169984 ----a-w- c:\windows\system32\winsrv.dll 2012-10-17 13:20 . 2012-10-17 13:20 3968880 ----a-w- c:\windows\system32\ntkrnlpa.exe 2012-10-17 13:20 . 2012-10-17 13:20 3914096 ----a-w- c:\windows\system32\ntoskrnl.exe 2012-10-17 13:20 . 2012-10-17 13:20 2048 ----a-w- c:\windows\system32\msxml3r.dll 2012-10-17 13:20 . 2012-10-17 13:20 1390080 ----a-w- c:\windows\system32\msxml6.dll 2012-10-17 13:20 . 2012-10-17 13:20 1236992 ----a-w- c:\windows\system32\msxml3.dll 2012-10-17 13:20 . 2012-10-17 13:20 712048 ----a-w- c:\windows\system32\drivers\ndis.sys 2012-10-17 13:20 . 2012-10-17 13:20 33280 ----a-w- c:\windows\system32\drivers\RNDISMP.sys 2012-10-17 13:19 . 2012-10-17 13:19 769024 ----a-w- c:\windows\system32\localspl.dll 2012-10-17 13:19 . 2012-10-17 13:19 164352 ----a-w- c:\windows\system32\profsvc.dll 2012-10-17 13:19 . 2012-10-17 13:19 41984 ----a-w- c:\windows\system32\browcli.dll 2012-10-17 13:19 . 2012-10-17 13:19 102912 ----a-w- c:\windows\system32\browser.dll 2012-10-17 13:19 . 2012-10-17 13:19 2342400 ----a-w- c:\windows\system32\msi.dll 2012-10-17 13:19 . 2012-10-17 13:19 805376 ----a-w- c:\windows\system32\cdosys.dll 2012-10-17 13:18 . 2012-10-17 13:18 56176 ----a-w- c:\windows\system32\drivers\partmgr.sys 2012-10-17 13:17 . 2012-10-17 13:17 183808 ----a-w- c:\windows\system32\drivers\rdpwd.sys 2012-10-17 13:17 . 2012-10-17 13:17 8192 ----a-w- c:\windows\system32\rdrmemptylst.exe 2012-10-17 13:17 . 2012-10-17 13:17 58880 ----a-w- c:\windows\system32\rdpwsx.dll 2012-10-17 13:17 . 2012-10-17 13:17 129536 ----a-w- c:\windows\system32\rdpcorekmts.dll 2012-10-17 13:17 . 2012-10-17 13:17 140288 ----a-w- c:\windows\system32\cryptsvc.dll 2012-10-17 13:17 . 2012-10-17 13:17 1159680 ----a-w- c:\windows\system32\crypt32.dll 2012-10-17 13:17 . 2012-10-17 13:17 103936 ----a-w- c:\windows\system32\cryptnet.dll 2012-10-17 13:16 . 2012-10-17 13:16 478720 ----a-w- c:\windows\system32\timedate.cpl 2012-10-17 13:15 . 2012-10-17 13:15 67440 ----a-w- c:\windows\system32\drivers\ksecdd.sys 2012-10-17 13:14 . 2012-10-17 13:14 690688 ----a-w- c:\windows\system32\msvcrt.dll 2012-10-17 13:14 . 2012-10-17 13:14 5120 ----a-w- c:\windows\system32\wmi.dll 2012-10-17 13:14 . 2012-10-17 13:14 19824 ----a-w- c:\windows\system32\drivers\fs_rec.sys 2012-10-17 13:14 . 2012-10-17 13:14 159232 ----a-w- c:\windows\system32\imagehlp.dll 2012-10-17 13:14 . 2012-10-17 13:14 492032 ----a-w- c:\windows\system32\win32spl.dll 2012-10-17 13:14 . 2012-10-17 13:14 317440 ----a-w- c:\windows\system32\spoolsv.exe 2012-10-17 13:14 . 2012-10-17 13:14 1288472 ----a-w- c:\windows\system32\ntdll.dll 2012-10-17 13:14 . 2012-10-17 13:14 442880 ----a-w- c:\windows\system32\ntshrui.dll 2012-10-17 13:13 . 2012-10-17 13:13 1328128 ----a-w- c:\windows\system32\quartz.dll 2012-10-17 13:13 . 2012-10-17 13:13 826880 ----a-w- c:\windows\system32\rdpcore.dll 2012-10-17 13:13 . 2012-10-17 13:13 24576 ----a-w- c:\windows\system32\drivers\tdtcp.sys 2012-10-17 13:13 . 2012-10-17 13:13 38912 ----a-w- c:\windows\system32\csrsrv.dll 2012-10-17 13:13 . 2012-10-17 13:13 534528 ----a-w- c:\windows\system32\EncDec.dll 2012-10-17 13:12 . 2012-10-17 13:12 314880 ----a-w- c:\windows\system32\webio.dll 2012-10-17 13:12 . 2012-10-17 13:12 22528 ----a-w- c:\windows\system32\lsass.exe 2012-10-17 13:12 . 2012-10-17 13:12 22016 ----a-w- c:\windows\system32\secur32.dll 2012-10-17 13:12 . 2012-10-17 13:12 15872 ----a-w- c:\windows\system32\sspisrv.dll 2012-10-17 13:12 . 2012-10-17 13:12 100352 ----a-w- c:\windows\system32\sspicli.dll 2012-10-17 13:12 . 2012-10-17 13:12 67072 ----a-w- c:\windows\system32\packager.dll 2012-10-17 13:11 . 2012-10-17 13:11 75776 ----a-w- c:\windows\system32\psisrndr.ax 2012-10-17 13:11 . 2012-10-17 13:11 465408 ----a-w- c:\windows\system32\psisdecd.dll 2012-10-17 13:11 . 2012-10-17 13:11 571904 ----a-w- c:\windows\system32\oleaut32.dll 2012-10-17 13:11 . 2012-10-17 13:11 233472 ----a-w- c:\windows\system32\oleacc.dll 2012-10-17 13:11 . 2012-10-17 13:11 86016 ----a-w- c:\windows\system32\odbccu32.dll 2012-10-17 13:11 . 2012-10-17 13:11 81920 ----a-w- c:\windows\system32\odbccr32.dll 2012-10-17 13:11 . 2012-10-17 13:11 319488 ----a-w- c:\windows\system32\odbcjt32.dll 2012-10-17 13:11 . 2012-10-17 13:11 163840 ----a-w- c:\windows\system32\odbctrac.dll . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\IDM Shell Extension] @="{CDC95B92-E27C-4745-A8C5-64A52A78855D}" [HKEY_CLASSES_ROOT\CLSID\{CDC95B92-E27C-4745-A8C5-64A52A78855D}] 2012-11-15 23:07 21904 ----a-w- c:\program files\Internet Download Manager\IDMShellExt.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2012-10-26 3540416] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "aux"=wdmaud.drv . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Advanced SystemCare 6] 2012-09-24 19:59 490880 ----a-w- c:\program files\IObit\Advanced SystemCare 6\ASCTray.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IDMan] 2012-10-26 12:37 3540416 ----a-w- c:\program files\Internet Download Manager\IDMan.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype] 2012-11-09 09:27 17877168 ----a-r- c:\program files\Skype\Phone\Skype.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] 2012-07-03 07:04 252848 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SysTrayApp] 2010-01-31 23:29 495708 ------w- c:\program files\IDT\WDM\sttray.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent] 2012-11-13 18:56 968592 ----a-w- c:\program files\uTorrent\uTorrent.exe . R3 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x] R3 apf003;apf003;c:\windows\system32\apf003.sys [x] R3 cpuz135;cpuz135;c:\windows\TEMP\cpuz135\cpuz135_x32.sys [x] R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [x] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x] R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x] R3 TeamViewer7;TeamViewer 7;c:\program files\TeamViewer\Version7\TeamViewer_Service.exe [x] R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x] R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [x] R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x] R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x] R3 WatAdminSvc;Windows Etkinleştirme Teknolojileri Hizmeti;c:\windows\system32\Wat\WatAdminSvc.exe [x] R3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files\IObit\Game Booster 3\Driver\WinRing0.sys [x] S2 AdvancedSystemCareService6;Advanced SystemCare Service 6;c:\program files\IObit\Advanced SystemCare 6\ASCService.exe [x] S2 IDMWFP;IDMWFP;c:\windows\system32\DRIVERS\idmwfp.sys [x] S2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [x] . . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr TBS fdrespub AppIDSvc QWAVE wcncsvc Mcx2Svc SensrSvc GPSvcGroup REG_MULTI_SZ GPSvc . HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalService FontCache . . Contents of the 'Scheduled Tasks' folder . 2012-12-03 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-11-15 15:48] . 2012-12-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2012-11-13 18:33] . 2012-12-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2012-11-13 18:33] . . ------- Supplementary Scan ------- . uStart Page = about:blank mStart Page = about:blank IE: Bütün linkleri IDM ile indir - c:\program files\Internet Download Manager\IEGetAll.htm IE: IDM ile indir - c:\program files\Internet Download Manager\IEExt.htm TCP: DhcpNameServer = 78.135.0.10 78.135.0.11 . - - - - ORPHANS REMOVED - - - - . MSConfigStartUp-DAEMON Tools Lite - c:\program files\daemon tools lite\dtlite.exe MSConfigStartUp-SDP - c:\program files\FilesFrog Update Checker\update_checker.exe . . . --------------------- LOCKED REGISTRY KEYS --------------------- . [HKEY_USERS\S-1-5-21-1804208620-2545679188-4010376965-1000\Software\SecuROM\License information*] "datasecu"=hex:ee,75,d9,3f,e5,e9,39,9b,18,7e,85,ce,43,a0,53,8a,29,e4,15,9b,57, da,09,0e,de,2d,53,5a,89,26,5b,9c,0c,31,bd,28,da,09,6f,c3,b0,2b,5b,5d,ff,e3,\ "rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98 . [HKEY_USERS\S-1-5-21-1804208620-2545679188-4010376965-1000_Classes\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C}] @Denied: (Full) (Everyone) @Allowed: (Read) (RestrictedCode) "scansk"=hex(0):2c,c3,3e,df,eb,7d,99,e5,68,cd,54,1d,ec,9c,c6,e9,4c,82,68,16,d2, 97,d5,09,0e,f7,9d,76,f7,be,c0,d3,d8,73,71,a6,80,95,bf,08,00,00,00,00,00,00,\ . [HKEY_USERS\S-1-5-21-1804208620-2545679188-4010376965-1000_Classes\CLSID\{a83fbe89-7a06-40c4-bc4d-7d68f8288870}] @Denied: (Full) (Everyone) @Allowed: (Read) (RestrictedCode) "Model"=dword:00000151 "Therad"=dword:00000015 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . ------------------------ Other Running Processes ------------------------ . c:\windows\system32\taskhost.exe c:\windows\system32\DllHost.exe c:\windows\system32\conhost.exe c:\program files\Windows Media Player\wmpnetwk.exe c:\windows\servicing\TrustedInstaller.exe . ************************************************************************** . Completion time: 2012-12-03 19:09:58 - machine was rebooted ComboFix-quarantined-files.txt 2012-12-03 17:09 . Pre-Run: 166.198.276.096 bayt boş Post-Run: 171.942.473.728 bayt boş . - - End Of File - - 5D97612169C4E1958F7D6A60BB442FD7 Quote Link to comment Share on other sites More sharing options...
BPlC0nNecti0n Posted December 3, 2012 Share Posted December 3, 2012 advanced system careyi denedinmi yada pcndeki gereksiz programları kapat ... çünkü normalden fazla işlem gördüm dörev yöneticisinin resminde... haydi kolay gelsin... Quote Link to comment Share on other sites More sharing options...
ajdarbaba Posted December 3, 2012 Author Share Posted December 3, 2012 dedigin programı pro olarak yaklaşık 1 yıldır kullanıyorum bundan 2 gün önce 2 tane oyun google chrome ile yootube girip müzik dinliyordum bilgisayarda 0 kasma vardı şimdi 1 tane oyun açıyom bilgisayar cok donuyor mouse çok çok yavaş hareket etiyor Quote Link to comment Share on other sites More sharing options...
ŞimşekAdam Posted December 3, 2012 Share Posted December 3, 2012 bılgısayarın normaldemı donuyor oyuna gırıncemı donuyor ayrıca laptop mu kullanıyosun yoksa bılgısayar mı Quote Link to comment Share on other sites More sharing options...
BPlC0nNecti0n Posted December 3, 2012 Share Posted December 3, 2012 o zaman knk işlemcini macununa baktınmı bide görev yöneticisinden gördüğüm kadarıyla bayağı gereksiz programda var galiba .... haydi kolay gele... Quote Link to comment Share on other sites More sharing options...
ajdarbaba Posted December 3, 2012 Author Share Posted December 3, 2012 windows 7 kullanıyorum bilgisayarım masaüstü o gereksiz şeyler windows 7nin gereksiz programları normalde hiç denemedim bilfisayarı açtıgım zaman direk oyuna girerim hiçde çıkmam :D şimdi cpu ısısı 50 lere felan ulaştıgı zaman donma oluyor bu 2 gündür böyle neden böyle anlamadım bilgisayarada virüs testi yaptım bilgisayarımda fazla program yok ondan sonra sistem bakım program var her gün kullanırım neden böyle birşey oldu hala anlamıyorum :) Quote Link to comment Share on other sites More sharing options...
ajdarbaba Posted December 4, 2012 Author Share Posted December 4, 2012 konu güncel format atsam işe yararmı ? Quote Link to comment Share on other sites More sharing options...
tutuklu8 Posted December 6, 2012 Share Posted December 6, 2012 yarar denemende fayda var Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.