3-4 hafta önce IDM'ye işim düşmüştü, ücretsiz deneme bitti diye cracklı aradım. O zamandan beri galiba snake diye bir şey çıkmaya başladı, Alt Tab yapınca. Sonra satın aldım ama bayağı bir şey yükledim almadan önce. Geceleri de madencilik yapıyorum, winlogson diye bir şey çıkıyor. Görev yöneticisinde bazen 2-3 tane oluyor ve her biri 3.5-4 GB RAM kullanıyor hem madencilik performansını düşürüyorlar, hem oyunlarda takılmaya neden oluyorlar, çok RAM kullandığından dolayı. Daha önce bu tür şeyler olduğunu hatırlamıyorum bu 2'si neden oluyor böyle virüs müdür? Yardımcı olursanız sevinirim.

Alt Tab ekranındaki "snake" virüs mü? Alt Tab ekranındaki "snake" virüs mü? Alt Tab'da gözüken "Snake" virüs mü?

Kod:Panoya kopyala Logfile of HiJackThis Fork by Alex Dragokas v.2.10.0.10 Platform: x64 Windows 10 , 10.0.19044.2006 (ReleaseId: 2009, 21H2), Service Pack: 0 Time: 17.09.2022 - 19:49 (UTC+03:00) Language: OS: Turkish (0x41F). Display: Turkish (0x41F). Non-Unicode: Turkish (0x41F) Elevated: Yes Ran by: mfurk on FURKAN, FirstRun: no Chrome: 105.0.5195.127 Internet Explorer: 11.0.19041.1566 Default: "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave. exe" --single-argument %1 Boot mode: Normal Running processes: Number | Path 1 C:\Program Files (x86)\arcai.com\aips. exe 3 C:\Program Files (x86)\arcai.com\netcut_windows. exe 1 C:\Program Files (x86)\BraveSoftware\Update\1.3.361.133\BraveCrashHandler. exe 1 C:\Program Files (x86)\BraveSoftware\Update\1.3.361.133\BraveCrashHandler64. exe 1 C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc. exe 1 C:\Program Files (x86)\Common Files\Java\Java Update\jusched. exe 1 C:\Program Files (x86)\Common Files\Steam\SteamService. exe 1 C:\Program Files (x86)\Dell\UpdateService\ServiceShell. exe 1 C:\Program Files (x86)\FolderSize\FolderSizeSvc. exe 1 C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitReaderUpdateService. exe 1 C:\Program Files (x86)\GAMEPOWER Audio 7.1\GAMEPOWER Audio 7.1. exe 1 C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler. exe 1 C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler64. exe 1 C:\Program Files (x86)\Hotspot Shield\11.3.0\bin\cmw_srv. exe 1 C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser. exe 1 C:\Program Files (x86)\MSI Afterburner\MSIAfterburner. exe 1 C:\Program Files (x86)\MSI\One Dragon Center\CC_Engine_x64. exe 1 C:\Program Files (x86)\MSI\One Dragon Center\Game_Summary\MSI_Companion_Service. exe 1 C:\Program Files (x86)\MSI\One Dragon Center\MSI. CentralServer. exe 1 C:\Program Files (x86)\MSI\One Dragon Center\MSI_Central_Service. exe 1 C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\LEDKeeper2. exe 1 C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\LightKeeperService. exe 1 C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\Mystic_Light_Service. exe 1 C:\Program Files (x86)\MSI\One Dragon Center\True Color\MSI. True Color. exe 1 C:\Program Files (x86)\MSI\One Dragon Center\VoiceControl\VoiceControl_Service. exe 1 C:\Program Files (x86)\MSI\One Dragon Center\VoiceControl\VoiceControlEngine. exe 1 C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper. exe 1 C:\Program Files (x86)\Realtek\USB Wireless LAN Utility\RtlService. exe 1 C:\Program Files (x86)\RivaTuner Statistics Server\EncoderServer. exe 1 C:\Program Files (x86)\RivaTuner Statistics Server\RTSS. exe 1 C:\Program Files (x86)\RivaTuner Statistics Server\RTSSHooksLoader64. exe 7 C:\Program Files (x86)\Steam\bin\cef\cef. win7x64\steamwebhelper. exe 1 C:\Program Files (x86)\Steam\steam. exe 1 C:\Program Files (x86)\TeamViewer\TeamViewer_Service. exe 1 C:\Program Files\Alienware\Alienware Command Center\AWCC. Background. Server. exe 1 C:\Program Files\Alienware\Alienware Command Center\AWCC. Service. exe 1 C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun. exe 3 C:\Program Files\LGHUB\lghub. exe 1 C:\Program Files\LGHUB\lghub_agent. exe 1 C:\Program Files\LGHUB\lghub_updater. exe 1 C:\Program Files\Malwarebytes\Anti-Malware\mbam. exe 1 C:\Program Files\Malwarebytes\Anti-Malware\MBAMService. exe 1 C:\Program Files\Malwarebytes\Anti-Malware\mbamtray. exe 1 C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter. exe 1 C:\Program Files\Microsoft SQL Server\MSSQL15. FURKAN\MSSQL\Binn\sqlceip. exe 1 C:\Program Files\Microsoft SQL Server\MSSQL15. MSSQLSERVER\MSSQL\Binn\sqlceip. exe 3 C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer. exe 3 C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share. exe 1 C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64. exe 1 C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service. exe 1 C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2. exe 1 C:\Program Files\WindowsApps\DellInc. AlienwareCommandCenter_5.5.0.0_x64 htrsf667h5kn2\AWCC. exe 1 C:\Program Files\WindowsApps\DellInc. AlienwareCommandCenter_5.5.0.0_x64 htrsf667h5kn2\GameLibrary\GameLibraryAppService. exe 1 C:\Program Files\WindowsApps\Microsoft. GamingServices_4.66.9001.0_x64 8wekyb3d8bbwe\gamingservices. exe 1 C:\Program Files\WindowsApps\Microsoft. GamingServices_4.66.9001.0_x64 8wekyb3d8bbwe\gamingservicesnet. exe 2 C:\Windows\explorer. exe 1 C:\Windows\runSW. exe 1 C:\Windows\SwUSB. exe 1 C:\Windows\System32\ApplicationFrameHost. exe 1 C:\Windows\System32\AudioDeviceService. exe 1 C:\Windows\System32\audiodg. exe 4 C:\Windows\System32\conhost. exe 2 C:\Windows\System32\csrss. exe 1 C:\Windows\System32\ctfmon. exe 2 C:\Windows\System32\dllhost. exe 2 C:\Windows\System32\DriverStore\FileRepository\nv_dispi. inf_amd64_47917a79b8c7fd22\Display. NvContainer\NVDisplay. Container. exe 1 C:\Windows\System32\dwm. exe 2 C:\Windows\System32\fontdrvhost. exe 1 C:\Windows\System32\lsass. exe 1 C:\Windows\System32\msiexec. exe 1 C:\Windows\System32\rundll32. exe 4 C:\Windows\System32\RuntimeBroker. exe 1 C:\Windows\System32\SearchIndexer. exe 1 C:\Windows\System32\SearchProtocolHost. exe 1 C:\Windows\System32\SecurityHealthService. exe 1 C:\Windows\System32\SecurityHealthSystray. exe 1 C:\Windows\System32\services. exe 1 C:\Windows\System32\SgrmBroker. exe 1 C:\Windows\System32\sihost. exe 1 C:\Windows\System32\smartscreen. exe 1 C:\Windows\System32\smss. exe 1 C:\Windows\System32\spoolsv. exe 84 C:\Windows\System32\svchost. exe 1 C:\Windows\System32\taskhostw. exe 1 C:\Windows\System32\wbem\unsecapp. exe 2 C:\Windows\System32\wbem\WmiPrvSE. exe 1 C:\Windows\System32\wininit. exe 1 C:\Windows\System32\winlogon. exe 1 C:\Windows\System32\wlanext. exe 1 C:\Windows\SystemApps\Microsoft. Windows. Search_cw5n1h2txyewy\SearchApp. exe 1 C:\Windows\SystemApps\Microsoft. Windows. StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost. exe 1 C:\Windows\SystemApps\MicrosoftWindows. Client. CBS_cw5n1h2txyewy\TextInputHost. exe 1 C:\Windows\SysWOW64\wbem\WmiPrvSE. exe 1 C:\Windows\SysWOW64\WerFault. exe 1 D:\İndirilenler\HiJackThis. exe 26 E:\MSI Motherboard\Program\BraveSoftware\Brave-Browser\Application\brave. exe R4 - SearchScopes: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\ : = https://suggest.yandex.com.tr/suggest-ff. cgi?srv=ie11&uil=tr&part= &clid=2233630 - Yandex R4 - SearchScopes: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\ : = https://yandex.com.tr/search/?text= &clid=2233630 - Yandex O1 - Hosts: Reset contents to default O1 - Hosts: 109.94.209.70. fitirl-repcks. xyz # Fake FitGirl site O1 - Hosts: 109.94.209.70 fitgirlrepacks. in # Fake FitGirl site O1 - Hosts: 109.94.209.70 www.fitgirlrepacks.in # Fake FitGirl site O1 - Hosts: 109.94.209.70. fitirl-repcks. xyz # Fake FitGirl site O1 - Hosts: 109.94.209.70 fitirl-repcks. xyz # Fake FitGirl site O1 - Hosts: 109.94.209.70 www.fitgirl-repack.net # Fake FitGirl site O1 - Hosts: 109.94.209.70 fitgirlpack. site # Fake FitGirl site O1 - Hosts: 109.94.209.70 www.fitgirlpack.site # Fake FitGirl site O1 - Hosts: 109.94.209.70 fitgirlrepacks. co # Fake FitGirl site O1 - Hosts: 109.94.209.70 fitirl-repcks. cc # Fake FitGirl site O1 - Hosts: 109.94.209.70 fitirl-repcks. to # Fake FitGirl site O1 - Hosts: 109.94.209.70 fitgirl-repack.com # Fake FitGirl site O1 - Hosts: 109.94.209.70 fitirl-repcks. website # Fake FitGirl site O1 - Hosts: 109.94.209.70 fitgirlrepack. games # Fake FitGirl site O1 - Hosts: 109.94.209.70 www.fitgirlrepacks.co # Fake FitGirl site O1 - Hosts: 109.94.209.70 www.fitirl-repcks.cc # Fake FitGirl site O1 - Hosts: 109.94.209.70 www.fitirl-repcks.to # Fake FitGirl site O1 - Hosts: 109.94.209.70 www.fitgirl-repack.com # Fake FitGirl site O1 - Hosts: 109.94.209.70 www.fitirl-repcks.website # Fake FitGirl site O1 - Hosts: 109.94.209.70 ww9. fitirl-repcks. xyz # Fake FitGirl site O1 - Hosts: 109.94.209.70 www.fitgirlrepack.games # Fake FitGirl site O1 - Hosts: 109.94.209.70. fitirl-repcks. xyz # Fake FitGirl site O1 - Hosts: 127.0.0.1 checkhost. local O1 - Hosts: 109.94.209.70 fitgirl-repack. net # Fake FitGirl site O1 - Hosts: 0.0.0.0 virustotal.com O1 - Hosts: 0.0.0.0 www.virustotal.com O2 - HKLM\..\BHO: IDM Helper - - C:\Program Files (x86)\Internet Download Manager\IDMIECC64. dll O2 - HKLM\..\BHO: Java Plug-In 2 SSV Helper - - C:\Program Files\Java\jre1.8.0_333\bin\jp2ssv. dll O2 - HKLM\..\BHO: Java Plug-In SSV Helper - - C:\Program Files\Java\jre1.8.0_333\bin\ssv. dll O2-32 - HKLM\..\BHO: IDM Helper - - C:\Program Files (x86)\Internet Download Manager\IDMIECC. dll O4 - HKCU\..\Run: = C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MsMpEng. exe O4 - HKCU\..\Run: = C:\Program Files\WindowsApps\Microsoft. x64 8wekyb3gfdfdgd8bbwe\Cortana. exe O4 - HKCU\..\Run: = C:\Program Files\WindowsApps\Microsoft. x64 8wekyb3gfdfdgd8bbwe / file. exe O4 - HKCU\..\Run: = C:\Program Files (x86)\Steam\steam. exe -silent O4 - HKCU\..\Run: = C:\Program Files\Windows Defender\MpCmdRun. exe O4 - HKCU\..\Run: = C:\Windows\System32\wbem\WmiPrvSE. exe O4 - HKCU\..\RunOnce: [Application Restart

Furkan45 dedi: Kod:Panoya kopyala Logfile of HiJackThis Fork by Alex Dragokas v.2.10.0.10 Platform: x64 Windows 10 , 10.0.19044.2006 (ReleaseId: 2009, 21H2), Service Pack: 0 Time: 17.09.2022 - 19:49 (UTC+03:00) Language: OS: Turkish (0x41F). Display: Turkish (0x41F). Non-Unicode: Turkish (0x41F) Elevated: Yes Ran by: mfurk on FURKAN, FirstRun: no Chrome: 105.0.5195.127 Internet Explorer: 11.0.19041.1566 Default: "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave. exe" --single-argument %1 Boot mode: Normal Running processes: Number | Path 1 C:\Program Files (x86)\arcai.com\aips. exe 3 C:\Program Files (x86)\arcai.com\netcut_windows. exe 1 C:\Program Files (x86)\BraveSoftware\Update\1.3.361.133\BraveCrashHandler. exe 1 C:\Program Files (x86)\BraveSoftware\Update\1.3.361.133\BraveCrashHandler64. exe 1 C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc. exe 1 C:\Program Files (x86)\Common Files\Java\Java Update\jusched. exe 1 C:\Program Files (x86)\Common Files\Steam\SteamService. exe 1 C:\Program Files (x86)\Dell\UpdateService\ServiceShell. exe 1 C:\Program Files (x86)\FolderSize\FolderSizeSvc. exe 1 C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitReaderUpdateService. exe 1 C:\Program Files (x86)\GAMEPOWER Audio 7.1\GAMEPOWER Audio 7.1. exe 1 C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler. exe 1 C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler64. exe 1 C:\Program Files (x86)\Hotspot Shield\11.3.0\bin\cmw_srv. exe 1 C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser. exe 1 C:\Program Files (x86)\MSI Afterburner\MSIAfterburner. exe 1 C:\Program Files (x86)\MSI\One Dragon Center\CC_Engine_x64. exe 1 C:\Program Files (x86)\MSI\One Dragon Center\Game_Summary\MSI_Companion_Service. exe 1 C:\Program Files (x86)\MSI\One Dragon Center\MSI. CentralServer. exe 1 C:\Program Files (x86)\MSI\One Dragon Center\MSI_Central_Service. exe 1 C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\LEDKeeper2. exe 1 C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\LightKeeperService. exe 1 C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\Mystic_Light_Service. exe 1 C:\Program Files (x86)\MSI\One Dragon Center\True Color\MSI. True Color. exe 1 C:\Program Files (x86)\MSI\One Dragon Center\VoiceControl\VoiceControl_Service. exe 1 C:\Program Files (x86)\MSI\One Dragon Center\VoiceControl\VoiceControlEngine. exe 1 C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper. exe 1 C:\Program Files (x86)\Realtek\USB Wireless LAN Utility\RtlService. exe 1 C:\Program Files (x86)\RivaTuner Statistics Server\EncoderServer. exe 1 C:\Program Files (x86)\RivaTuner Statistics Server\RTSS. exe 1 C:\Program Files (x86)\RivaTuner Statistics Server\RTSSHooksLoader64. exe 7 C:\Program Files (x86)\Steam\bin\cef\cef. win7x64\steamwebhelper. exe 1 C:\Program Files (x86)\Steam\steam. exe 1 C:\Program Files (x86)\TeamViewer\TeamViewer_Service. exe 1 C:\Program Files\Alienware\Alienware Command Center\AWCC. Background. Server. exe 1 C:\Program Files\Alienware\Alienware Command Center\AWCC. Service. exe 1 C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun. exe 3 C:\Program Files\LGHUB\lghub. exe 1 C:\Program Files\LGHUB\lghub_agent. exe 1 C:\Program Files\LGHUB\lghub_updater. exe 1 C:\Program Files\Malwarebytes\Anti-Malware\mbam. exe 1 C:\Program Files\Malwarebytes\Anti-Malware\MBAMService. exe 1 C:\Program Files\Malwarebytes\Anti-Malware\mbamtray. exe 1 C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter. exe 1 C:\Program Files\Microsoft SQL Server\MSSQL15. FURKAN\MSSQL\Binn\sqlceip. exe 1 C:\Program Files\Microsoft SQL Server\MSSQL15. MSSQLSERVER\MSSQL\Binn\sqlceip. exe 3 C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer. exe 3 C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share. exe 1 C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64. exe 1 C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service. exe 1 C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2. exe 1 C:\Program Files\WindowsApps\DellInc. AlienwareCommandCenter_5.5.0.0_x64 htrsf667h5kn2\AWCC. exe 1 C:\Program Files\WindowsApps\DellInc. AlienwareCommandCenter_5.5.0.0_x64 htrsf667h5kn2\GameLibrary\GameLibraryAppService. exe 1 C:\Program Files\WindowsApps\Microsoft. GamingServices_4.66.9001.0_x64 8wekyb3d8bbwe\gamingservices. exe 1 C:\Program Files\WindowsApps\Microsoft. GamingServices_4.66.9001.0_x64 8wekyb3d8bbwe\gamingservicesnet. exe 2 C:\Windows\explorer. exe 1 C:\Windows\runSW. exe 1 C:\Windows\SwUSB. exe 1 C:\Windows\System32\ApplicationFrameHost. exe 1 C:\Windows\System32\AudioDeviceService. exe 1 C:\Windows\System32\audiodg. exe 4 C:\Windows\System32\conhost. exe 2 C:\Windows\System32\csrss. exe 1 C:\Windows\System32\ctfmon. exe 2 C:\Windows\System32\dllhost. exe 2 C:\Windows\System32\DriverStore\FileRepository\nv_dispi. inf_amd64_47917a79b8c7fd22\Display. NvContainer\NVDisplay. Container. exe 1 C:\Windows\System32\dwm. exe 2 C:\Windows\System32\fontdrvhost. exe 1 C:\Windows\System32\lsass. exe 1 C:\Windows\System32\msiexec. exe 1 C:\Windows\System32\rundll32. exe 4 C:\Windows\System32\RuntimeBroker. exe 1 C:\Windows\System32\SearchIndexer. exe 1 C:\Windows\System32\SearchProtocolHost. exe 1 C:\Windows\System32\SecurityHealthService. exe 1 C:\Windows\System32\SecurityHealthSystray. exe 1 C:\Windows\System32\services. exe 1 C:\Windows\System32\SgrmBroker. exe 1 C:\Windows\System32\sihost. exe 1 C:\Windows\System32\smartscreen. exe 1 C:\Windows\System32\smss. exe 1 C:\Windows\System32\spoolsv. exe 84 C:\Windows\System32\svchost. exe 1 C:\Windows\System32\taskhostw. exe 1 C:\Windows\System32\wbem\unsecapp. exe 2 C:\Windows\System32\wbem\WmiPrvSE. exe 1 C:\Windows\System32\wininit. exe 1 C:\Windows\System32\winlogon. exe 1 C:\Windows\System32\wlanext. exe 1 C:\Windows\SystemApps\Microsoft. Windows. Search_cw5n1h2txyewy\SearchApp. exe 1 C:\Windows\SystemApps\Microsoft. Windows. StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost. exe 1 C:\Windows\SystemApps\MicrosoftWindows. Client. CBS_cw5n1h2txyewy\TextInputHost. exe 1 C:\Windows\SysWOW64\wbem\WmiPrvSE. exe 1 C:\Windows\SysWOW64\WerFault. exe 1 D:\İndirilenler\HiJackThis. exe 26 E:\MSI Motherboard\Program\BraveSoftware\Brave-Browser\Application\brave. exe R4 - SearchScopes: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\ : = https://suggest.yandex.com.tr/suggest-ff. cgi?srv=ie11&uil=tr&part= &clid=2233630 - Yandex R4 - SearchScopes: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\ : = https://yandex.com.tr/search/?text= &clid=2233630 - Yandex O1 - Hosts: Reset contents to default O1 - Hosts: 109.94.209.70. fitirl-repcks. xyz # Fake FitGirl site O1 - Hosts: 109.94.209.70 fitgirlrepacks. in # Fake FitGirl site O1 - Hosts: 109.94.209.70 www.fitgirlrepacks.in # Fake FitGirl site O1 - Hosts: 109.94.209.70. fitirl-repcks. xyz # Fake FitGirl site O1 - Hosts: 109.94.209.70 fitirl-repcks. xyz # Fake FitGirl site O1 - Hosts: 109.94.209.70 www.fitgirl-repack.net # Fake FitGirl site O1 - Hosts: 109.94.209.70 fitgirlpack. site # Fake FitGirl site O1 - Hosts: 109.94.209.70 www.fitgirlpack.site # Fake FitGirl site O1 - Hosts: 109.94.209.70 fitgirlrepacks. co # Fake FitGirl site O1 - Hosts: 109.94.209.70 fitirl-repcks. cc # Fake FitGirl site O1 - Hosts: 109.94.209.70 fitirl-repcks. to # Fake FitGirl site O1 - Hosts: 109.94.209.70 fitgirl-repack.com # Fake FitGirl site O1 - Hosts: 109.94.209.70 fitirl-repcks. website # Fake FitGirl site O1 - Hosts: 109.94.209.70 fitgirlrepack. games # Fake FitGirl site O1 - Hosts: 109.94.209.70 www.fitgirlrepacks.co # Fake FitGirl site O1 - Hosts: 109.94.209.70 www.fitirl-repcks.cc # Fake FitGirl site O1 - Hosts: 109.94.209.70 www.fitirl-repcks.to # Fake FitGirl site O1 - Hosts: 109.94.209.70 www.fitgirl-repack.com # Fake FitGirl site O1 - Hosts: 109.94.209.70 www.fitirl-repcks.website # Fake FitGirl site O1 - Hosts: 109.94.209.70 ww9. fitirl-repcks. xyz # Fake FitGirl site O1 - Hosts: 109.94.209.70 www.fitgirlrepack.games # Fake FitGirl site O1 - Hosts: 109.94.209.70. fitirl-repcks. xyz # Fake FitGirl site O1 - Hosts: 127.0.0.1 checkhost. local O1 - Hosts: 109.94.209.70 fitgirl-repack. net # Fake FitGirl site O1 - Hosts: 0.0.0.0 virustotal.com O1 - Hosts: 0.0.0.0 www.virustotal.com O2 - HKLM\..\BHO: IDM Helper - - C:\Program Files (x86)\Internet Download Manager\IDMIECC64. dll O2 - HKLM\..\BHO: Java Plug-In 2 SSV Helper - - C:\Program Files\Java\jre1.8.0_333\bin\jp2ssv. dll O2 - HKLM\..\BHO: Java Plug-In SSV Helper - - C:\Program Files\Java\jre1.8.0_333\bin\ssv. dll O2-32 - HKLM\..\BHO: IDM Helper - - C:\Program Files (x86)\Internet Download Manager\IDMIECC. dll O4 - HKCU\..\Run: = C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MsMpEng. exe O4 - HKCU\..\Run: = C:\Program Files\WindowsApps\Microsoft. x64 8wekyb3gfdfdgd8bbwe\Cortana. exe O4 - HKCU\..\Run: = C:\Program Files\WindowsApps\Microsoft. x64 8wekyb3gfdfdgd8bbwe / file. exe O4 - HKCU\..\Run: = C:\Program Files (x86)\Steam\steam. exe -silent O4 - HKCU\..\Run: = C:\Program Files\Windows Defender\MpCmdRun. exe O4 - HKCU\..\Run: = C:\Windows\System32\wbem\WmiPrvSE. exe O4 - HKCU\..\RunOnce: [Application Restart

Bence bir de Kaspersky ile taratabilirsin son olarak.

Forumda böyle bir yazı gördüm : '''Snake Ransomware, Golang fidye yazılımında tipik olarak görülmeyen şaşırtmaca içerdiği bildirilen bir Golang fidye yazılımıdır. Bu kötü amaçlı yazılım, gölge kopyaları kaldıracak ve SCADA/ICS cihazları, sanal makineler, uzaktan yönetim araçları, ağ yönetim yazılımı ve diğerleriyle ilgili süreçleri öldürecektir. Bundan sonra, Windows sistem klasörleri ve çeşitli sistem dosyaları atlanırken, cihazdaki dosyaların şifrelenmesi başlar. Şifrelenmiş dosyalara rastgele 5 karakterlik bir dize eklenir. Bleeping Computer'a göre, bu fidye yazılımının hedeflenen bir makinedeki dosyaları şifrelemesi özellikle uzun zaman alıyor. Bu fidye yazılımının tek tek iş istasyonları yerine tüm ağı hedef aldığı bildiriliyor.'''

Büyük ihtimal virüs. O hizmetin orijinal adı "winlogon". KVRT ve Malwarebytes ile tarama yapmanı öneririm.