www.SenOyna.com - Sayfa Yükleniyor... Lütfen Bekleyiniz. |
|
www.SenOyna.com - Sayfa Yükleniyor... Lütfen Bekleyiniz. |
|
Şuan bağlı: 84 (10 üye, 74
misafir) |
||
  |
 |
|
||||||
| Uyarılar |
|
|
sXe Injected içinde [ARŞİV] sXe hatası alanlar okuyunuz. konusu , Selamlar, sXe hatası alan arkadaşların bu yolu izlemesi gerekmektedir. Öncelikle sXe log dosyasının içeriğini buraya yazmalılar. --sXe Log-- LOG şeklinde girmeliler. Daha sonra HiJackThis ...
 |
|
|
Seçenekler | Stil |
02-10-2007
|
||||
|
||||
|
[ARŞİV] sXe hatası alanlar okuyunuz.
Selamlar,
sXe hatası alan arkadaşların bu yolu izlemesi gerekmektedir. Öncelikle sXe log dosyasının içeriğini buraya yazmalılar. --sXe Log-- LOG şeklinde girmeliler. Daha sonra HiJackThis programını indirip "Do a system scan and save a logfile" tuşuna basarak sistem logunu almalılar. ve aldıkları sistem logunuda buraya    --Sistem logu-- LOG şeklinde girmeliler. Örnek bir raporlama. --sXe Log-- 2007/09/28 17:54:05 - 2007/09/28 17:54:05 - ------------------ 2007/09/28 17:54:05 - sXe-I dll starting 2007/09/28 17:54:05 - version: 3.9 2007/09/28 17:54:29 - **** Hooked 2007/09/28 17:54:29 - **** Message [0] 2007/09/28 17:54:29 - **** Alias Offline 2007/09/28 17:54:29 - **** Backup ready 2007/09/28 17:54:29 - **** Open success 2007/09/28 17:54:29 - **** ControlTime [197592407] 2007/09/28 17:54:29 - **** Link ready 2007/09/28 17:54:29 - **** Listen server Offline 2007/09/28 17:54:29 - **** GL Command Offline 2007/09/28 17:54:29 - **** Finish [3892] 2007/09/28 17:58:34 - **** Remote Ip: 62.68.207.20 2007/09/28 18:38:53 - sXe-I dll closing --Sistem Log-- Logfile of HijackThis v1.99.1 Scan saved at 03:58:05, on 02.10.2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe C:\WINDOWS\system32\hkcmd.exe C:\WINDOWS\system32\igfxpers.exe C:\WINDOWS\AGRSMMSG.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\Java\jre1.5.0\bin\jusched.exe C:\WINDOWS\VMSnap3.EXE C:\WINDOWS\system32\config\svchost.exe C:\PROGRA~1\MICROS~3\rapimgr.exe C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\wltrysvc.exe C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe C:\Program Files\MSN Messenger\usnsvc.exe C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe C:\WINDOWS\System32\bcmwltry.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\ZipGenius 6\zipgenius.exe C:\DOCUME~1\OkaN\LOCALS~1\Temp\ZGTemp\HijackThis.e xe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.turkeytravelsite.org R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = T.C. AYDIN Belediyesi Kent Bilgi Merkezi - Anasayfa R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Bağlantılar O1 - Hosts: 193.203.227.100 http://www.senoyna.com/forumlar/k144....betandwin.com O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {140BD8E3-C167-11D4-B4A3-080000180323} - (no file) O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: SysShield IE Popup Blocker - {9A23B8A4-C6C9-4A68-8FA6-5F905DC8FF80} - E:\Windows & Internet Washer\pkext.dll (file missing) O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe O4 - HKLM\..\Run: [WatchDog] C:\Program Files\InterVideo\DVD Check\DVDCheck.exe O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0\bin\jusched.exe O4 - HKLM\..\Run: [CloneCDElbyCDFL] "C:\Program Files\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFL O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [VMSnap3] C:\WINDOWS\VMSnap3.EXE O4 - HKLM\..\Run: [Domino] C:\WINDOWS\Domino.EXE O4 - HKLM\..\Run: [BigDog303] C:\WINDOWS\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH) O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [svchost] C:\WINDOWS\system32\config\svchost.exe O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe" O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdS7_0_0 O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: AirTies ADSL Hizmet Programı.lnk = ? O4 - Global Startup: DVD Check.lnk = C:\Program Files\InterVideo\DVD Check\DVDCheck.exe O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present O8 - Extra context menu item: Microsoft Excel'e Gö&nder - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll O9 - Extra 'Tools' menuitem: Mobil Sık Kullanılanı Oluştur... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll O9 - Extra button: Araştır - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O14 - IERESET.INF: START_PAGE_URL=http://www.aydin.bel.tr O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://cid-d2fbdb2e473a4ee9.spaces.l...d/MsnPUpld.cab O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll O20 - Winlogon Notify: WBSrv - C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\wbsrv.dll O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\Shared\hpqwmi.exe O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe O23 - Service: WLTRYSVC - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe Neden böyle istiyoruz? Çünkü sXe hataları genelde arka planda çalışan programların ürünü olabilmekte. Sisteminizde trojan olması durumunda bile intercepting hatası almaktasınız. Çözüm arıyorsanız bulmaya çalışacağız yeterki yukarıda belirtilen gibi yapın. İyi oyunlar, SenOyna
__________________
listen. there are times when life calls out for a change. a transition. like the seasons. our spring was wonderful, but summer is over now and we missed out on autumn. and now all of a sudden, it's cold, so cold that everything is freezing over. our love fell asleep, and the snow took it by surprise. but if you fall asleep in the snow, you don't feel death coming. take care... and remember "Vanitas vanitatum et omnia vanitas"
SenOyna referans sunucu listesi         |
|
03-10-2007
|
||||
|
||||
|
Yanıt: sXe hatası alanlar okuyunuz.
sorun çözmede etkili bir yöntem olacaktır sorun yaşayan arkadasların bu şekilde şikayetlerini yazmaları tavsiye edilir
__________________
Bizim elimizin ulaştığı yerlere onların hayalleri dahi ulaşamaz. (F.S.M)
|
|
07-10-2007
|
||||
|
||||
|
Yanıt: sXe hatası alanlar okuyunuz.
hl yi değiştirmeme rağmen ve sxe yi defalarca indirdim fakat 1.6 da oynuyorum ama 1.5 te hata veriyor.
servera bağlanıyorum ve oyun acılıyor ama Sxe lazım deyip beni oyundan atıyor. yardımcı olursanız sevinirim. sizin tarif ettiğiniz gibi benim LOG kayıtım aşağidayolladım. Logfile of HijackThis v1.99.1 Scan saved at 16:11:10, on 07.10.2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16512) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Ahead\InCD\InCDsrv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\VIA\RAID\raid_tool.exe C:\WINDOWS\SOUNDMAN.EXE C:\WINDOWS\VM_STI.EXE C:\Program Files\Ahead\InCD\InCD.exe C:\Program Files\sXe Injected\sXe Injected.exe C:\Program Files\iTunes\iTunesHelper.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\SEC\MagicTune 2.5\GammaTray.exe C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger .exe C:\Program Files\Logitech\SetPoint\SetPoint.exe C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\WINDOWS\system32\svchost.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe C:\Program Files\iTunes\iTunes.exe D:\Oyunlar\hijackthis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.bearshare.com/sidebar.html?src=ssb R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.bearshare.com/sidebar.html?src=ssb R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Bağlantılar R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O4 - HKLM\..\Run: [RaidTool] C:\Program Files\VIA\RAID\raid_tool.exe O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Vimicro USB PC Camera (ZC0301PL) O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE O4 - HKLM\..\Run: [sXe Injected] C:\Program Files\sXe Injected\sXe Injected.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: Color Calibration.lnk = ? O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger .exe O4 - Global Startup: Logitech SetPoint.lnk = ? O8 - Extra context menu item: Microsoft Excel'e Gö&nder - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Araştır - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O11 - Options group: [INTERNATIONAL] International* O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O16 - DPF: {D0BB3ACE-4ED3-4D65-BB86-1A0C6CAF351F} (AvaLaunch Control) - http://212.175.239.246:81/avaLaunch93.cab O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O20 - Winlogon Notify: avldr - C:\WINDOWS\SYSTEM32\avldr.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - C:\Program Files\Ahead\InCD\InCDsrv.exe O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe |
|
13-10-2007
|
||||
|
||||
|
Yanıt: sXe hatası alanlar okuyunuz.
Alıntı:
|
|
15-10-2007
|
||||
|
||||
|
Yanıt: sXe hatası alanlar okuyunuz.
Sistem Logu
Logfile of HijackThis v1.99.1 Scan saved at 02:39:39, on 15.10.2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe C:\WINDOWS\system32\nvsvc32.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\WINDOWS\system32\wscntfy.exe D:\Program Files\BitTorrent\bittorrent.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\WinRAR\WinRAR.exe C:\DOCUME~1\INTUIT~1\LOCALS~1\Temp\Rar$EX00.531\Hi jackThis.exe R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.gmail.com O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - d:\Program Files\FlashGet\jccatch.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - d:\Program Files\FlashGet\getflash.dll O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto O8 - Extra context menu item: &Download All with FlashGet - D:\Program Files\FlashGet\jc_all.htm O8 - Extra context menu item: &Download with FlashGet - D:\Program Files\FlashGet\jc_link.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - d:\Program Files\FlashGet\FlashGet.exe O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - d:\Program Files\FlashGet\FlashGet.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe sXe Logu 2007/10/14 23:24:38 - 2007/10/14 23:24:38 - sXe Injected starting... 2007/10/14 23:24:38 - Win XP (5.1.2600 Service Pack 2) 2007/10/14 23:24:38 - version: 3.9 2007/10/14 23:24:38 - Starting Device Driver 2007/10/14 23:24:38 - service [C:\Program Files\sXe Injected\ddsxei.sys] 2007/10/14 23:24:38 - [C:\WINDOWS\system32\ntdll.dll] 2007/10/14 23:24:38 - [35][7C90D7D2] 2007/10/14 23:24:38 - [32][7C90D793] 2007/10/14 23:24:38 - [115][7C90EA32] 2007/10/14 23:24:38 - [74][7C90DCFD] 2007/10/14 23:24:38 - [AD][7C90E1AA] 2007/10/14 23:24:38 - Waiting for game... 2007/10/14 23:24:39 - Proceso [explorer.exe](1356) injecting on PID (2012) -> (ALLOW) 2007/10/14 23:24:39 - Intercepting error 2007/10/14 23:24:39 - sXe Injected will close 2007/10/14 23:24:39 - Error:[ SYSENTER / Int2E ALTERED [0x804DE6F0] [MountMgr.sys] ] |
|
15-10-2007
|
||||
|
||||
|
Yanıt: sXe hatası alanlar okuyunuz.
Alıntı:
Birde aldığın hata MountMgr bu ya AVG'den olabilir yada USB bellek var ise o anda ondanda olabilir ama AVG daha ağır basıyor AVGyi kapatıp bir dene olmazsa sorununa bir daha bakalım. Birde farkettim Zone Alarm kurulu sistemde sXe ile Zone Alarm çakışmakta , Zone Alarm içindede sXe güvenli programlar içine eklemelisin onda böyle birşey var biliyorum  ama eğer ZoneAlarmi gördüğüm gibi hep kullanmıyorsan inan bana kaldır zaten ADSL modemlerin içindeki firewallar yeterde artar bile. Zone Alarm kaldırılmasını sXe üreticileri kendide belirtiyor. Sonuç olarak. Zone Alarm ve AVG kaldırıp denemende fayda var. Eğer hiç biri olmazsa ekte verdiğim MountMgr.sys dosyasını C:\Windows\System32\Drivers içindeki ile değiştir. Çünkü ilk kez bu hata alan biriyle karşılaşıyoruz
__________________
listen. there are times when life calls out for a change. a transition. like the seasons. our spring was wonderful, but summer is over now and we missed out on autumn. and now all of a sudden, it's cold, so cold that everything is freezing over. our love fell asleep, and the snow took it by surprise. but if you fall asleep in the snow, you don't feel death coming. take care... and remember "Vanitas vanitatum et omnia vanitas"
SenOyna referans sunucu listesi |
|
16-10-2007
|
||||
|
||||
|
Yanıt: sXe hatası alanlar okuyunuz.
Alıntı:
arkadasin makinada sanirsam bi trojan vakasi vede ad-aware kullaniyor ad-aware sxe yi blocklamiş olabilir.... vede bittorrent.exe var Bu yöntem Bittorrent.exe virüslerini temizlemek için geliştirilmiştir. Belirtileri: 1-Bilgisayarımda C,D,E.. sürücülere çift tıklama yöntemi ile açılamaması, sağ tıklayıp aç deyince açılması 2- Sürücülere çift tıklama yöntemiyle açmaya çalışınca hata vermesi 3-Sürücülere sağ tıklayınca Normalin dışında menülerin olması UYARI: Normalde sağ tuş menüleri şöyle sıralanır: Aç,Araştır,Ara.. şeklinde sıralanması lazım. Virüs ihtimali olanlarda Auto, aç araştır şeklinde gidebilir. (Bunlar basit autorun.inf virüsleridir) Yada anlamsız karakterler bulunabilir(Bunlar biraz daha zor Autorun.vbs virüsleridir) ÇÖZÜM: 1- http://kahtametem.meb.k12.tr/sil.rar Linkteki dosyayı indirip çalıştırın. işlem bitinceye kadar yaklaşık 3 dakika bekleyin. bilgisayarı kapatıp açın. sorun halledildi ise geçmiş olsun halledilmediyse 2.adim 2-başlat çalıştır regedit yazıp enterlayın. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] "Userinit"="userinit.exe" olarak ayarlamak (autorun.bat eki varsa silin. Doğru ve temiz ayar C:\WINDOWS\system32\userinit.exe, şeklinde olacak ) ve [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Explorer\Advanced] "ShowSuperHidden"=dword:1 olarak ayarlamak (00000 ise silip 1 yapın) ayrıca HKEY_CURRENT_USER\Software\microsoft\Windows\Curre ntVersion\Explorer\ içinde bulunan MountPoints2 klasörünü komple içindekilerle birlikte silmek gerekiyor.(merak etmeyin silin birşey olmaz) |
|
17-10-2007
|
||||
|
||||
|
Yanıt: sXe hatası alanlar okuyunuz.
Logfile of HijackThis v1.99.1
Scan saved at 17:27:52, on 17.10.2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Eset\nod32krn.exe C:\Program Files\MSN Messenger\usnsvc.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Documents and Settings\Administrator\Desktop\HijackThis.exe R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyServer = 80.32.92.183:80 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Bağlantılar O2 - BHO: IeCatch5 Class - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\Jccatch.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Knight Online Toolbar Helper - {9D006D63-579B-4D77-9C12-15623661ADDA} - C:\Program Files\Knight Online Toolbar\v3.2.0.0\Knight_Online_Toolbar.dll (file missing) O2 - BHO: gFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll O3 - Toolbar: Knight Online Toolbar - {E7D38ED4-2933-43B8-B0B9-52D11CE9CA10} - C:\Program Files\Knight Online Toolbar\v3.2.0.0\Knight_Online_Toolbar.dll (file missing) O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" O4 - HKLM\..\Run: [bpk] C:\WINDOWS\system32\bpk.exe O4 - HKLM\..\Run: [msnsyslog] C:\WINDOWS\msnappm.exe O4 - HKLM\..\Run: [sXe Injected] D:\Program Files\sXe Injected\sXe Injected.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O8 - Extra context menu item: Download All by FlashGet - C:\Program Files\FlashGet\jc_all.htm O8 - Extra context menu item: Download using FlashGet - C:\Program Files\FlashGet\jc_link.htm O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{9203A692-1912-4335-A6DC-F970B2C15DF5}: NameServer = 4.2.2.2,4.2.2.3 O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe sXe Log 2007/10/17 14:02:07 - 2007/10/17 14:02:07 - sXe Injected starting... 2007/10/17 14:02:07 - Win XP (5.1.2600 Service Pack 2) 2007/10/17 14:02:07 - version: 3.9 2007/10/17 14:02:07 - Starting Device Driver 2007/10/17 14:02:07 - service [C:\Program Files\sXe Injected\ddsxei.sys] 2007/10/17 14:02:07 - GetLastError(1072)(Belirtilen hizmet silmek üzere imlenmiş. ) 2007/10/17 14:02:07 - Craete service error [C:\Program Files\sXe Injected\ddsxei.sys] 2007/10/17 14:02:07 - Load error, try again ----------- 2007/10/17 14:02:07 - * Cleaning 2007/10/17 14:02:07 - service [C:\Program Files\sXe Injected\ddsxei.sys] 2007/10/17 14:02:07 - GetLastError(1072)(Belirtilen hizmet silmek üzere imlenmiş. ) 2007/10/17 14:02:07 - Craete service error [C:\Program Files\sXe Injected\ddsxei.sys] 2007/10/17 14:02:07 - Error starting Device Driver |
|
18-10-2007
|
||||
|
||||
|
Yanıt: sXe hatası alanlar okuyunuz.
Alıntı:
Nod32 büyük ihtimalle sXe'yi engelliyor Nod32yi kaldırıp bir sXe açmayı deneyiniz.
__________________
listen. there are times when life calls out for a change. a transition. like the seasons. our spring was wonderful, but summer is over now and we missed out on autumn. and now all of a sudden, it's cold, so cold that everything is freezing over. our love fell asleep, and the snow took it by surprise. but if you fall asleep in the snow, you don't feel death coming. take care... and remember "Vanitas vanitatum et omnia vanitas"
SenOyna referans sunucu listesi |
|
| Konuyu toplam 1 kişi okuyor. (0 Kayıtlı üye ve 1 misafir) | |
| Seçenekler | |
| Stil | |
|
|
Benzer konular
|
||||
| Konu | Konuyu Başlatan | Forum | Mesaj | Son mesaj |
| Sxe Şimdi Kapanacak Hatası Alanlar Okusun !!! | AnaTolia | sXe Injected | 2 | 11-04-2008 14:49 |
| sXe-I , Injected Hatası , sXe Kapatılacak Hatası alanlar içeri girsinler | k1rby.^ | sXe Injected | 9 | 05-03-2008 23:23 |
| sXe 4.3 hatası alanlar | m0rt@L | Haberler | 0 | 18-11-2007 07:41 |
| sXe 3.9 intercepting hatası alanlar | ArKhoN | sXe Injected | 50 | 29-10-2007 15:58 |
| Sxe İntercepting hatası alanlar bi okusun... | Red_L!nE | sXe Injected | 0 | 19-10-2007 22:13 |
|
Gerekli
Genel forumlar
Bizden
|
CS 1.5 İstatistikleri
COD4 İstatistikleri
OCUME~1INTUIT~1LOCALS~1TempRar.531HijackThis.ex e
Normal
