Hayır hocam dosya indirmedim. Ağdan sızdığını tahmin ediyorum.

Hocam RAT'ı nasıl yediniz? Acaba yine RAT içeren dosyayı indirmiş olabilir misiniz?

Merhaba değerli forum üyeleri, 2 hafta önce RAT yemiştim. Temiz bir format atıp sorunu çözmüştüm. Aradan 1 hafta geçti ve yine aynı sorunlarla karşılaşıldı. Konusunda tecrübeli hocalarımdan rica etsem birisi bakabilir mi? HiJackThis Log'unu ekleyeceğim. Kod:Panoya kopyala Logfile of HiJackThis Fork by Alex Dragokas v.2.10.0.23 Platform: x64 Windows 7 , 6.1.7601.24544, Service Pack: 1 Time: 02.10.2022 - 18:08 (UTC+03:00) Language: OS: Turkish (0x41F). Display: Turkish (0x41F). Non-Unicode: Turkish (0x41F) Memory: 1063 MiB Free (73 %). CPU Loading: (42 %) Elevated: Yes Ran by: KARTAL on KARTAL-PC, FirstRun: yes Chrome: 106.0.5249.91 Internet Explorer: 11.0.9600.19597 Default: "C:\Program Files\Google\Chrome\Application\chrome. exe" --single-argument %1 Boot mode: Normal Running processes: Number | Path 1 C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler. exe 1 C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler64. exe 1 C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Cloud 21.3\avp. exe 1 C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Cloud 21.3\avpui. exe 1 C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Cloud 21.3\plugins_nms. exe 1 C:\Program Files (x86)\Kaspersky Lab\Kaspersky VPN 5.7\ksde. exe 1 C:\Program Files (x86)\Kaspersky Lab\Kaspersky VPN 5.7\ksdeui. exe 22 C:\Program Files\Google\Chrome\Application\chrome. exe 1 C:\Program Files\HitmanPro\hmpsched. exe 1 C:\Program Files\Realtek\Audio\HDA\RAVCpl64. exe 1 C:\Program Files\Windows Media Player\wmpnetwk. exe 1 C:\Users\KARTAL\Desktop\HiJackThis\HiJackThis. exe 1 C:\Windows\explorer. exe 1 C:\Windows\Microsoft. NET\Framework64\v3.0\WPF\PresentationFontCache. exe 1 C:\Windows\System32\audiodg. exe 1 C:\Windows\System32\cmd. exe 1 C:\Windows\System32\conhost. exe 2 C:\Windows\System32\csrss. exe 1 C:\Windows\System32\dwm. exe 1 C:\Windows\System32\igfxCUIService. exe 1 C:\Windows\System32\igfxEM. exe 1 C:\Windows\System32\igfxHK. exe 1 C:\Windows\System32\igfxTray. exe 1 C:\Windows\System32\lsass. exe 1 C:\Windows\System32\lsm. exe 1 C:\Windows\System32\SearchFilterHost. exe 1 C:\Windows\System32\SearchIndexer. exe 1 C:\Windows\System32\SearchProtocolHost. exe 1 C:\Windows\System32\services. exe 1 C:\Windows\System32\smss. exe 1 C:\Windows\System32\spoolsv. exe 12 C:\Windows\System32\svchost. exe 1 C:\Windows\System32\taskhost. exe 1 C:\Windows\System32\wininit. exe 1 C:\Windows\System32\winlogon. exe 1 C:\Windows\System32\wuauclt. exe 1 C:\Windows\System32\WUDFHost. exe O4 - HKLM\..\Run: = C:\Program Files\Realtek\Audio\HDA\RAVCpl64. exe -s O5 - Applet: C:\Windows\System32\RTSnMg64. cpl O17 - DHCP DNS 1: 192.168.1.1 O22 - Task: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WPD O22 - Tasks: \Microsoft\Windows\Windows Activation Technologies\ValidationTask - C:\Windows\system32\Wat\WatAdminSvc. exe /run O22 - Tasks: \Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline - C:\Windows\system32\schtasks. exe /run /I /TN "\Microsoft\Windows\Windows Activation Technologies\ValidationTask" O22 - Tasks: \Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - C:\Windows\system32\CompatTelRunner. exe O22 - Tasks: \Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - C:\Windows\system32\compattel\DiagTrackRunner. exe /UploadEtlFilesOnly O22 - Tasks: \Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - C:\Windows\system32\CompatTelRunner. exe O22 - Tasks: \Microsoft\Windows\Application Experience\ProgramDataUpdater - C:\Windows\system32\compattelrunner. exe -maintenance O22 - Tasks: BraveSoftwareUpdateTaskMachineCore - C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate. exe /c O22 - Tasks: BraveSoftwareUpdateTaskMachineUA - C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate. exe /ua /installsource scheduler O22 - Tasks: GoogleUpdateTaskMachineCore - C:\Program Files (x86)\Google\Update\GoogleUpdate. exe /c O22 - Tasks: GoogleUpdateTaskMachineUA - C:\Program Files (x86)\Google\Update\GoogleUpdate. exe /ua /installsource scheduler O22 - Tasks: Kaspersky_Upgrade_Launcher_ - C:\Program Files\Common Files\AV\Kaspersky Lab\upgrade_launcher. exe /waitUpgrade O23 - Service R2: Diagnostics Tracking Service - - C:\Windows\System32\svchost. exe -k utcsvc; "ServiceDll" = C:\Windows\system32\diagtrack. dll O23 - Service R2: HitmanPro Scheduler - - C:\Program Files\HitmanPro\hmpsched. exe O23 - Service R2: Intel HD Graphics Control Panel Service - (igfxCUIService1.0.0.0) - C:\Windows\system32\igfxCUIService. exe O23 - Service R2: Kaspersky Anti-Virus Hizmeti 21.3 - (AVP21.3) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Cloud 21.3\avp. exe -r O23 - Service R2: Kaspersky VPN Secure Connection Hizmeti 5.7 - (KSDE5.7) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky VPN 5.7\ksde. exe -r O23 - Service S2: Brave Güncelleme Hizmeti - - C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate. exe /svc O23 - Service S2: Google Güncelleme Hizmeti - - C:\Program Files (x86)\Google\Update\GoogleUpdate. exe /svc O23 - Service S3: Brave Elevation Service - - C:\Program Files\BraveSoftware\Brave-Browser\Application\106.1.44.105\elevation_service. exe O23 - Service S3: Brave Güncelleme Hizmeti - - C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate. exe /medsvc O23 - Service S3: Google Chrome Elevation Service - - C:\Program Files\Google\Chrome\Application\106.0.5249.91\elevation_service. exe O23 - Service S3: Google Güncelleme Hizmeti - - C:\Program Files (x86)\Google\Update\GoogleUpdate. exe /medsvc O23 - Service S3: Intel Content Protection HECI Service - - C:\Windows\SysWow64\IntelCpHeciSvc. exe O23 - Service S3: Kaspersky Volume Shadow Copy Service Bridge 21.3 - (klvssbridge64_21.3) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Cloud 21.3\x64\vssbridge64. exe -- End of file - Time spent: 14,6 sec. - 13188 bytes, CRC32: FFFFFFFF. Sign: ጓ