Malwarebytes' Anti-Malware 1.51.1.1800 Malwarebytes : Free anti-malware, anti-virus and spyware removal download Veritabanı sürümü: 7419 Windows 6.1.7600 Internet Explorer 8.0.7600.16385 10.08.2011 00:16:00 mbam-log-2011-08-10 (00-15-55). txt Tarama kipi: Yıldırım taraması Taranmış öğeler: 138345 Geçen süre: 1 dakika, 13 saniye Kod:Panoya kopyala Etkilenmiş Hafıza İşlemleri: 5 Etkilenmiş Hafıza Modülleri: 0 Etkilenmiş Kayıt Anahtarları: 10 Etkilenmiş Kayıt Değerleri: 36 Etkilenmiş Veri Öğeleri: 2 Etkilenmiş Klasörler: 0 Etkilenmiş Dosyalar: 28 Etkilenmiş Hafıza İşlemleri: c:\Windows\nvsvc32. exe -> 2444 -> No action taken. c:\Windows\csrss. exe -> 3340 -> No action taken. c:\Users\PC\AppData\Roaming\tskmanager. exe -> 3536 -> No action taken. c:\Windows\smss. exe -> 3772 -> No action taken. c:\Windows\Temp\windns. exe -> 4388 -> No action taken. Etkilenmiş Hafıza Modülleri: Etkilenmiş Kayıt Anahtarları: HKEY_CLASSES_ROOT\CLSID\ -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\ -> No action taken. HKEY_CLASSES_ROOT\CLSID\ -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\ -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\ -> No action taken. HKEY_CURRENT_USER\SOFTWARE\8DDYX0ZBPZ -> No action taken. HKEY_CURRENT_USER\SOFTWARE\XMZH42I4GI -> No action taken. HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\ -> No action taken. HKEY_CURRENT_USER\Software\VB and VBA Program Settings\SrvID -> No action taken. Etkilenmiş Kayıt Değerleri: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\NVIDIA driver monitor -> Value: NVIDIA driver monitor -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\NVIDIA driver monitor -> Value: NVIDIA driver monitor -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Windows System Devices Manager -> Value: Windows System Devices Manager -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Windows System Devices Manager -> Value: Windows System Devices Manager -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\tskmanager. exe -> Value: tskmanager. exe -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\tskmanager. exe -> Value: tskmanager. exe -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\#ozkan# -> Value: #ozkan# -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Windows System Controler -> Value: Windows System Controler -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Windows System Controler -> Value: Windows System Controler -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Windows Update System -> Value: Windows Update System -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Windows Update System -> Value: Windows Update System -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKLM -> Value: HKLM -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Policies -> Value: Policies -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKCU -> Value: HKCU -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Policies -> Value: Policies -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Windows UDP Control Center -> Value: Windows UDP Control Center -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Google Updater -> Value: Google Updater -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Google Updater -> Value: Google Updater -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\Google Updater -> Value: Google Updater -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\winlogon -> Value: winlogon -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\explorer. exe -> Value: explorer. exe -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\8DDYX0ZBPZ -> Value: 8DDYX0ZBPZ -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\XMZH42I4GI -> Value: XMZH42I4GI -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\WindowsUpdate -> Value: WindowsUpdate -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Windows Update -> Value: Windows Update -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Windows Login access -> Value: Windows Login access -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKEY_CURRENT_USER -> Value: HKEY_CURRENT_USER -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\Software\Microsoft\Windows\CurrentVersion\Run\NVIDIA driver monitor -> Value: NVIDIA driver monitor -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\Software\Microsoft\Windows\CurrentVersion\Run\Windows Services -> Value: Windows Services -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\Software\Microsoft\Windows\CurrentVersion\Run\Windows System Devices Manager -> Value: Windows System Devices Manager -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\HKEY_CURRENT_USER -> Value: HKEY_CURRENT_USER -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Windows Services -> Value: Windows Services -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\WindowsUpdate -> Value: WindowsUpdate -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Windows Login access -> Value: Windows Login access -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKEY_CURRENT_USER -> Value: HKEY_CURRENT_USER -> No action taken. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\Windows Update System -> Value: Windows Update System -> No action taken. Etkilenmiş Veri Öğeleri: HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Internet Explorer\control panel\HomePage -> Bad: (1) Good: (0) -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel\HomePage -> Bad: (1) Good: (0) -> No action taken. Etkilenmiş Klasörler: Etkilenmiş Dosyalar: c:\Windows\nvsvc32. exe -> No action taken. c:\Windows\csrss. exe -> No action taken. c:\Users\PC\AppData\Roaming\tskmanager. exe -> No action taken. c:\Windows\smss. exe -> No action taken. c:\Windows\Temp\windns. exe -> No action taken. c:\Users\PC\AppData\Roaming\hidserv. exe -> No action taken. c:\Users\PC\AppData\Roaming\install\svchost. exe -> No action taken. c:\Windows\winudpmgr. exe -> No action taken. c:\program files (x86)\F704A. dll -> No action taken. c:\Users\PC\AppData\Roaming\microsoft\svchost. exe -> No action taken. c:\Users\PC\AppData\Roaming\15512170203217. exe -> No action taken. c:\Users\PC\AppData\Roaming\78481612914593. exe -> No action taken. c:\Users\PC\AppData\Roaming\870020436486. exe -> No action taken. c:\Users\PC\AppData\Roaming\97731510914974. exe -> No action taken. c:\Windows\wibrf. jpg -> No action taken. c:\Windows\wiybr. png -> No action taken. c:\Users\PC\AppData\Roaming\data. dat -> No action taken. c:\Users\PC\AppData\Roaming\logs. dat -> No action taken. c:\Windows\Temp\dwm. exe -> No action taken. c:\Users\PC\AppData\Local\Temp\UuU. uUu -> No action taken. c:\Users\PC\AppData\Local\Temp\XxX. xXx -> No action taken. c:\Windows\Tasks\ . job -> No action taken. c:\Windows\Tasks\ . job -> No action taken. c:\Windows\Temp\facebook. exe -> No action taken. c:\Windows\Temp\smss. exe -> No action taken. c:\Users\PC\AppData\Roaming\ZiNixZ. txt -> No action taken. c:\Windows\lsass1. exe -> No action taken. c:\Windows\lsass. exe -> No action taken. Malwarebytes' Anti-Malware 1.51.1.1800 Malwarebytes : Free anti-malware, anti-virus and spyware removal download Veritabanı sürümü: 7419 Windows 6.1.7600 Internet Explorer 8.0.7600.16385 10.08.2011 02:03:56 mbam-log-2011-08-10 (02-03-40). txt Tarama kipi: Derin tarama Taranmış öğeler: 268362 Geçen süre: 1 saat, 14 dakika, 29 saniye Kod:Panoya kopyala Etkilenmiş Hafıza İşlemleri: 0 Etkilenmiş Hafıza Modülleri: 0 Etkilenmiş Kayıt Anahtarları: 5 Etkilenmiş Kayıt Değerleri: 5 Etkilenmiş Veri Öğeleri: 0 Etkilenmiş Klasörler: 0 Etkilenmiş Dosyalar: 31 Etkilenmiş Hafıza İşlemleri: Etkilenmiş Hafıza Modülleri: Etkilenmiş Kayıt Anahtarları: HKEY_CLASSES_ROOT\CLSID\ -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\ -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\ (Adware. ShoppingReport2) -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\ (Adware. ShoppingReport2) -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\ -> No action taken. Etkilenmiş Kayıt Değerleri: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKLM -> Value: HKLM -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Policies -> Value: Policies -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKCU -> Value: HKCU -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Policies -> Value: Policies -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\HKEY_CURRENT_USER -> Value: HKEY_CURRENT_USER -> No action taken. Etkilenmiş Veri Öğeleri: Etkilenmiş Klasörler: Etkilenmiş Dosyalar: c:\Users\PC\AppData\Roaming\install\svchost. exe -> No action taken. c:\Users\PC\downloads\Programs\facebook-pic000934519. exe -> No action taken. c:\Windows\System32\explorer102. exe -> No action taken. c:\Windows\System32\explorer139. exe -> No action taken. c:\Windows\System32\explorer15. exe -> No action taken. c:\Windows\System32\explorer154. exe -> No action taken. c:\Windows\System32\explorer161. exe -> No action taken. c:\Windows\System32\explorer26. exe -> No action taken. c:\Windows\System32\explorer4. exe -> No action taken. c:\Windows\System32\explorer43. exe -> No action taken. c:\Windows\System32\explorer50. exe -> No action taken. c:\Windows\System32\explorer84. exe -> No action taken. c:\Windows\System32\Ganja145. exe -> No action taken. c:\Windows\System32\msconfig. exe -> No action taken. c:\Windows\SysWOW64\explorer102. exe -> No action taken. c:\Windows\SysWOW64\explorer139. exe -> No action taken. c:\Windows\SysWOW64\explorer15. exe -> No action taken. c:\Windows\SysWOW64\explorer154. exe -> No action taken. c:\Windows\SysWOW64\explorer161. exe -> No action taken. c:\Windows\SysWOW64\explorer26. exe -> No action taken. c:\Windows\SysWOW64\explorer4. exe -> No action taken. c:\Windows\SysWOW64\explorer43. exe -> No action taken. c:\Windows\SysWOW64\explorer50. exe -> No action taken. c:\Windows\SysWOW64\explorer84. exe -> No action taken. c:\Windows\SysWOW64\Ganja145. exe -> No action taken. c:\Windows\SysWOW64\msconfig. exe -> No action taken. c:\Windows\Temp\netgear. exe -> No action taken. c:\Users\PC\AppData\Roaming\logs. dat -> No action taken. c:\Users\PC\AppData\Local\Temp\UuU. uUu -> No action taken. c:\Users\PC\AppData\Local\Temp\XxX. xXx -> No action taken. Malwarebytes' Anti-Malware 1.51.1.1800 Malwarebytes : Free anti-malware, anti-virus and spyware removal download Veritabanı sürümü: 7419 Windows 6.1.7600 Internet Explorer 8.0.7600.16385 10.08.2011 02:11:50 mbam-log-2011-08-10 (02-11-50). txt Tarama kipi: Derin tarama Taranmış öğeler: 268362 Geçen süre: 1 saat, 14 dakika, 29 saniye Kod:Panoya kopyala Etkilenmiş Hafıza İşlemleri: 0 Etkilenmiş Hafıza Modülleri: 0 Etkilenmiş Kayıt Anahtarları: 5 Etkilenmiş Kayıt Değerleri: 5 Etkilenmiş Veri Öğeleri: 0 Etkilenmiş Klasörler: 0 Etkilenmiş Dosyalar: 31 Etkilenmiş Hafıza İşlemleri: Etkilenmiş Hafıza Modülleri: Etkilenmiş Kayıt Anahtarları: HKEY_CLASSES_ROOT\CLSID\ -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\ -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\ (Adware. ShoppingReport2) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\ (Adware. ShoppingReport2) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\ -> Quarantined and deleted successfully. Etkilenmiş Kayıt Değerleri: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKLM -> Value: HKLM -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Policies -> Value: Policies -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKCU -> Value: HKCU -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Policies -> Value: Policies -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\HKEY_CURRENT_USER -> Value: HKEY_CURRENT_USER -> Quarantined and deleted successfully. Etkilenmiş Veri Öğeleri: Etkilenmiş Klasörler: Etkilenmiş Dosyalar: c:\Users\PC\AppData\Roaming\install\svchost. exe -> Quarantined and deleted successfully. c:\Users\PC\downloads\Programs\facebook-pic000934519. exe -> Quarantined and deleted successfully. c:\Windows\System32\explorer102. exe -> Quarantined and deleted successfully. c:\Windows\System32\explorer139. exe -> Quarantined and deleted successfully. c:\Windows\System32\explorer15. exe -> Quarantined and deleted successfully. c:\Windows\System32\explorer154. exe -> Quarantined and deleted successfully. c:\Windows\System32\explorer161. exe -> Quarantined and deleted successfully. c:\Windows\System32\explorer26. exe -> Quarantined and deleted successfully. c:\Windows\System32\explorer4. exe -> Quarantined and deleted successfully. c:\Windows\System32\explorer43. exe -> Quarantined and deleted successfully. c:\Windows\System32\explorer50. exe -> Quarantined and deleted successfully. c:\Windows\System32\explorer84. exe -> Quarantined and deleted successfully. c:\Windows\System32\Ganja145. exe -> Quarantined and deleted successfully. c:\Windows\System32\msconfig. exe -> Quarantined and deleted successfully. c:\Windows\SysWOW64\explorer102. exe -> Quarantined and deleted successfully. c:\Windows\SysWOW64\explorer139. exe -> Quarantined and deleted successfully. c:\Windows\SysWOW64\explorer15. exe -> Quarantined and deleted successfully. c:\Windows\SysWOW64\explorer154. exe -> Quarantined and deleted successfully. c:\Windows\SysWOW64\explorer161. exe -> Quarantined and deleted successfully. c:\Windows\SysWOW64\explorer26. exe -> Quarantined and deleted successfully. c:\Windows\SysWOW64\explorer4. exe -> Quarantined and deleted successfully. c:\Windows\SysWOW64\explorer43. exe -> Quarantined and deleted successfully. c:\Windows\SysWOW64\explorer50. exe -> Quarantined and deleted successfully. c:\Windows\SysWOW64\explorer84. exe -> Quarantined and deleted successfully. c:\Windows\SysWOW64\Ganja145. exe -> Quarantined and deleted successfully. c:\Windows\SysWOW64\msconfig. exe -> Quarantined and deleted successfully. c:\Windows\Temp\netgear. exe -> Quarantined and deleted successfully. c:\Users\PC\AppData\Roaming\logs. dat -> Quarantined and deleted successfully. c:\Users\PC\AppData\Local\Temp\UuU. uUu -> Quarantined and deleted successfully. c:\Users\PC\AppData\Local\Temp\XxX. xXx -> Quarantined and deleted successfully.