Net görebilmek için HJ raporu ekleyin. HijackThis Log Paylaşımı ve Çözümleri Zararlı olabilir de olmaya da bilir de.

Merhabalar. Görev yöneticisinde isimsiz üç adet işlem var. PC'yi her açtığımda açılıyorlar. Görev yöneticisinden 2-3 defa durdurarak kapatabiliyorum. Virüs olduklarını düşünüyorum. Nasıl temizleyebilirim? Son düzenleyen: Moderatör: 5 Kasım 2018

Malwarebytes indirip tarama yapın. Thank you for downloading Malwarebytes for Windows

Kod:Panoya kopyala Logfile of Trend Micro HijackThis v2.0.5 Scan saved at 23:43:10, on 5.11.2018 Platform: Unknown Windows (WinNT 6.02.1008) MSIE: Internet Explorer v11.0 (11.00.17134.0001) Boot mode: Normal Running processes: C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer. exe C:\Program Files\Malwarebytes\Anti-Malware\mbamtray. exe C:\Program Files (x86)\Hotkey\HkeyTray. exe C:\Program Files (x86)\Hotkey\ComboKeyTray. exe C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper. exe C:\Users\Myopic\Desktop\HijackThis. exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main, SearchAssistant = www.google.com R1 - HKCU\Software\Microsoft\Internet Explorer\Main, Search Bar = www.google.com R1 - HKCU\Software\Microsoft\Internet Explorer\Main, Search Page = www.google.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main, Start Page = www.google.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main, Default_Page_URL = http://go. microsoft.com/fwlink/p/?LinkId=255141 R1 - HKLM\Software\Microsoft\Internet Explorer\Main, Default_Search_URL = http://go. microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main, Search Page = http://go. microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main, Start Page = http://go. microsoft.com/fwlink/p/?LinkId=255141 R1 - HKCU\Software\Microsoft\Internet Explorer\Search, Default_Search_URL = www.google.com R0 - HKLM\Software\Microsoft\Internet Explorer\Search, SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search, CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Main, Local Page = %11%\blank.htm R0 - HKLM\Software\Microsoft\Internet Explorer\Main, Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar, LinksFolderName = O2 - BHO: IDM Helper - - C:\Program Files (x86)\Internet Download Manager\IDMIECC. dll O2 - BHO: Lync Click to Call BHO - - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper. dll O2 - BHO: URLRedirectionBHO - - C:\PROGRA 2\MICROS 1\Office15\URLREDIR. DLL O2 - BHO: Microsoft SkyDrive Pro Browser Helper - - C:\PROGRA 2\MICROS 1\Office15\GROOVEEX. DLL O4 - HKLM\..\Run: C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard. exe O4 - HKLM\..\Run: "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager. exe" -launchedbylogin O4 - HKLM\..\Run: "C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp. exe" -tray O4 - HKCU\..\Run: C:\Windows\SysWOW64\OneDriveSetup. exe /thfirstsetup O4 - HKCU\..\Run: "C:\Program Files (x86)\Steam\steam. exe" -silent O4 - HKCU\..\Run: C:\Users\Myopic\AppData\Local\Discord\app-0.0.301\Discord. exe O4 - HKCU\..\Run: "C:\Program Files\CCleaner\CCleaner64. exe" /MONITOR O4 - HKUS\S-1-5-19\..\Run: C:\Windows\SysWOW64\OneDriveSetup. exe /thfirstsetup O4 - HKUS\S-1-5-20\..\Run: C:\Windows\SysWOW64\OneDriveSetup. exe /thfirstsetup O4 - Global Startup: NewShortcut1. lnk = ? O4 - Global Startup: ScpToolkit Tray Notifications. lnk = C:\Program Files\Nefarius Software Solutions\ScpToolkit\ScpTrayApp. exe O8 - Extra context menu item: Bütün linkleri IDM ile indir - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm O8 - Extra context menu item: IDM ile indir - C:\Program Files (x86)\Internet Download Manager\IEExt.htm O8 - Extra context menu item: Microsoft Excel'e &Ver - res://C:\PROGRA 1\MICROS 1\Office15\EXCEL. EXE/3000 O8 - Extra context menu item: OneNote'a G&önder - res://C:\PROGRA 1\MICROS 1\Office15\ONBttnIE. dll/105 O9 - Extra button: OneNote'a Gönder - - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE. dll O9 - Extra 'Tools' menuitem: OneNote'a G&önder - - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE. dll O9 - Extra button: Lync Aramak İçin Tıklat - - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper. dll O9 - Extra 'Tools' menuitem: Lync Aramak İçin Tıklat - - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper. dll O9 - Extra button: OneNote Bağlantılı &Notları - - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes. dll O9 - Extra 'Tools' menuitem: OneNote Bağlantılı &Notları - - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes. dll O11 - Options group: Accelerated graphics O18 - Protocol: osf - - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB. DLL O18 - Protocol: tbauth - - C:\Windows\SysWOW64\tbauth. dll O18 - Protocol: windows. tbauth - - C:\Windows\SysWOW64\tbauth. dll O18 - Filter hijack: text/xml - - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF. DLL O23 - Service: Autodesk Desktop App Service - Autodesk Inc. - C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc. exe O23 - Service: Adobe Acrobat Update Service - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc. exe O23 - Service: Adobe Flash Player Update Service - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService. exe O23 - Service: @%SystemRoot%\system32\Alg. exe,-112 - Unknown owner - C:\WINDOWS\System32\alg. exe O23 - Service: BattlEye Service - Unknown owner - C:\Program Files (x86)\Common Files\BattlEye\BEService. exe O23 - Service: Intel Content Protection HECI Service - Intel Corporation - C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64. inf_amd64_250db833a1cd577e\IntelCpHeciSvc. exe O23 - Service: Intel Content Protection HDCP Service - Intel Corporation - C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64. inf_amd64_250db833a1cd577e\IntelCpHDCPSvc. exe O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub. StandardCollector. ServiceRes. dll,-1000 - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub. StandardCollector. Service. exe O23 - Service: SCP DSx Service (Ds3Service) - Scarlet. Crush Productions - C:\Program Files\Nefarius Software Solutions\ScpToolkit\ScpService. exe O23 - Service: @%SystemRoot%\system32\efssvc. dll,-100 - Unknown owner - C:\WINDOWS\System32\lsass. exe O23 - Service: @%systemroot%\system32\fxsresm. dll,-118 - Unknown owner - C:\WINDOWS\system32\fxssvc. exe O23 - Service: FlexNet Licensing Service 64 - Flexera Software LLC - C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64. exe O23 - Service: HotKey Clipboard Service - Insyde Software Corp. - C:\Program Files (x86)\Hotkey\Driver\x64\HKClipSvc. exe O23 - Service: @oem10. inf,%SERVICE_NAME%;Intel Bluetooth Service - Unknown owner - C:\WINDOWS\system32\ibtsiva O23 - Service: Intel HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Intel Corporation - C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64. inf_amd64_250db833a1cd577e\igfxCUIService. exe O23 - Service: Intel Capability Licensing Service TCP IP Interface - Intel Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer. exe O23 - Service: Intel Online Connect - Intel Corporation - C:\Program Files\Intel\Intel Online Connect\ioc. exe O23 - Service: Intel Online Connect Helper - Intel Corporation - C:\Program Files\Intel\Intel Online Connect\iocHelperService. exe O23 - Service: Intel Online Connect Software Asset Manager - Intel Corporation - C:\Program Files (x86)\Intel\Intel Online Connect Access\Intel Software Asset Manager\bin\IntelSoftwareAssetManagerService. exe O23 - Service: Intel Online Connect Access Legacy CS Loader (Intel TechnologyAccessLegacyCSLoader) - Intel Corporation - C:\Program Files\Intel\Intel Online Connect Access\LegacyCsLoaderService. exe O23 - Service: Intel Online Connect Access (Intel TechnologyAccessService) - Intel Corporation - C:\Program Files\Intel\Intel Online Connect Access\IntelTechnologyAccessService. exe O23 - Service: Intel Dynamic Application Loader Host Interface Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel Management Engine Components\DAL\jhi_service. exe O23 - Service: @keyiso. dll,-100 - Unknown owner - C:\WINDOWS\system32\lsass. exe O23 - Service: Intel Management and Security Application Local Management Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel Management Engine Components\LMS\LMS. exe O23 - Service: Malwarebytes Service - Malwarebytes - C:\Program Files\Malwarebytes\Anti-Malware\mbamservice. exe O23 - Service: @comres. dll,-2797 - Unknown owner - C:\WINDOWS\System32\msdtc. exe O23 - Service: @%SystemRoot%\System32\netlogon. dll,-102 - Unknown owner - C:\WINDOWS\system32\lsass. exe O23 - Service: NVIDIA LocalSystem Container - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer. exe O23 - Service: NVIDIA NetworkService Container - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer. exe O23 - Service: NVIDIA Display Container LS - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\Display. NvContainer\NVDisplay. Container. exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA. exe O23 - Service: PowerBiosServer - CLEVO CO. - C:\Program Files (x86)\Hotkey\HotkeyService. exe O23 - Service: @%systemroot%\system32\Locator. exe,-2 - Unknown owner - C:\WINDOWS\system32\locator. exe O23 - Service: @%SystemRoot%\system32\samsrv. dll,-1 - Unknown owner - C:\WINDOWS\system32\lsass. exe O23 - Service: @%systemroot%\system32\SecurityHealthAgent. dll,-1002 - Unknown owner - C:\WINDOWS\system32\SecurityHealthService. exe O23 - Service: @%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense. exe,-1001 - Unknown owner - C:\Program Files (x86)\Windows Defender Advanced Threat Protection\MsSense. exe O23 - Service: @%SystemRoot%\system32\SensorDataService. exe,-101 - Unknown owner - C:\WINDOWS\System32\SensorDataService. exe O23 - Service: @%SystemRoot%\System32\SgrmBroker. exe,-100 - Unknown owner - C:\WINDOWS\system32\SgrmBroker. exe O23 - Service: @%SystemRoot%\system32\snmptrap. exe,-3 - Unknown owner - C:\WINDOWS\System32\snmptrap. exe O23 - Service: @%systemroot%\system32\spectrum. exe,-101 - Unknown owner - C:\WINDOWS\system32\spectrum. exe O23 - Service: @%systemroot%\system32\spoolsv. exe,-1 - Unknown owner - C:\WINDOWS\System32\spoolsv. exe O23 - Service: @%SystemRoot%\system32\sppsvc. exe,-101 - Unknown owner - C:\WINDOWS\system32\sppsvc. exe O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService. exe O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard. exe O23 - Service: SynTPEnh Caller Service - Synaptics Incorporated - C:\Program Files\Synaptics\SynTP\SynTPEnhService. exe O23 - Service: TeamViewer 13 - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service. exe O23 - Service: @%SystemRoot%\system32\TieringEngineService. exe,-702 - Unknown owner - C:\WINDOWS\system32\TieringEngineService. exe O23 - Service: @%SystemRoot%\system32\vaultsvc. dll,-1003 - Unknown owner - C:\WINDOWS\system32\lsass. exe O23 - Service: @%SystemRoot%\system32\vds. exe,-100 - Unknown owner - C:\WINDOWS\System32\vds. exe O23 - Service: @%systemroot%\system32\vssvc. exe,-102 - Unknown owner - C:\WINDOWS\system32\vssvc. exe O23 - Service: @%systemroot%\system32\wbengine. exe,-104 - Unknown owner - C:\WINDOWS\system32\wbengine. exe O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv. exe,-110 - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv. exe O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk. exe,-101 - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk. exe O23 - Service: @%systemroot%\system32\xbgmsvc. exe,-100 - Unknown owner - C:\WINDOWS\system32\xbgmsvc. exe -- End of file - 13484 bytes Ayrıca bu isimsiz işlemler %20 civarında işlemciyi kullanıyor. Oyunlarda ve Google Chrome da anlık donmalara neden oluyor.

Sisteminde adwareler mevcut ama bu durum onlardan değil de kullandığın hizmetlerden kaynaklı. Gereksiz uygulama ve hizmetleri kapatman gerekecek. Öncelikle verdiğim satırları işaretleyip fixleyin. Kod:Panoya kopyala O2 - BHO: Lync Click to Call BHO - - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper. dll O2 - BHO: URLRedirectionBHO - - C:\PROGRA 2\MICROS 1\Office15\URLREDIR. DLL O2 - BHO: Microsoft SkyDrive Pro Browser Helper - - C:\PROGRA 2\MICROS 1\Office15\GROOVEEX. DLL O4 - HKLM\..\Run: C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard. exe O4 - HKLM\..\Run: "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager. exe" -launchedbylogin O4 - HKLM\..\Run: "C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp. exe" -tray O4 - HKCU\..\Run: C:\Windows\SysWOW64\OneDriveSetup. exe /thfirstsetup O4 - HKCU\..\Run: "C:\Program Files (x86)\Steam\steam. exe" -silent O4 - HKCU\..\Run: C:\Users\Myopic\AppData\Local\Discord\app-0.0.301\Discord. exe O4 - HKCU\..\Run: "C:\Program Files\CCleaner\CCleaner64. exe" /MONITOR O4 - HKUS\S-1-5-19\..\Run: C:\Windows\SysWOW64\OneDriveSetup. exe /thfirstsetup O4 - HKUS\S-1-5-20\..\Run: C:\Windows\SysWOW64\OneDriveSetup. exe /thfirstsetup O4 - Global Startup: NewShortcut1. lnk = ? O4 - Global Startup: ScpToolkit Tray Notifications. lnk = C:\Program Files\Nefarius Software Solutions\ScpToolkit\ScpTrayApp. exe O8 - Extra context menu item: Microsoft Excel'e &Ver - res://C:\PROGRA 1\MICROS 1\Office15\EXCEL. EXE/3000 O8 - Extra context menu item: OneNote'a G&önder - res://C:\PROGRA 1\MICROS 1\Office15\ONBttnIE. dll/105 O9 - Extra button: OneNote'a Gönder - - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE. dll O9 - Extra 'Tools' menuitem: OneNote'a G&önder - - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE. dll O9 - Extra button: Lync Aramak İçin Tıklat - - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper. dll O9 - Extra 'Tools' menuitem: Lync Aramak İçin Tıklat - - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper. dll O9 - Extra button: OneNote Bağlantılı &Notları - - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes. dll O9 - Extra 'Tools' menuitem: OneNote Bağlantılı &Notları - - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes. dll O18 - Protocol: osf - - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB. DLL O18 - Filter hijack: text/xml - - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF. DLL O23 - Service: Autodesk Desktop App Service - Autodesk Inc. - C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc. exe O23 - Service: Adobe Acrobat Update Service - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc. exe O23 - Service: Adobe Flash Player Update Service - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService. exe O23 - Service: Malwarebytes Service - Malwarebytes - C:\Program Files\Malwarebytes\Anti-Malware\mbamservice. exe O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService. exe O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard. exe O23 - Service: TeamViewer 13 - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service. exe O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk. exe,-101 - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk. exe Downloads - SurfRight bu adresten Hitman Pro indirip, uygulamayı çalıştırın. Taratmadan önce options dan, lisans kısmına girip 30 günlük deneme sürümünü aktif edin. Ardından tarama yapıp bulduklarını silin. Temel Sistem Bakım ve Performans Optimizasyonu Yönergesi Ardından konudaki 2, 4, 6 ve 8. adımları uygulayın. Bilgisayarı yeniden başlatın. Halen aktif olarak görünürse de Comodo Cleaning Essentials Version 10.0 - Downloading | The Security Products Kill Switch uygulamasından hizmeti ve uygulamayı devre dışı bırakın.