Notes

Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 22:20:11, on 04.05.2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.0020)

FIREFOX: 43.0.2 (x86 tr)
Boot mode: Normal

Running processes:
C:Program FilesWindowsAppsMicrosoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbweSkypeHost.exe
C:Program Files (x86)NVIDIA CorporationUpdate CoreNvBackend.exe
C:Program Files (x86)Common FilesAcronisSchedule2schedhlp.exe
C:Program Files (x86)Internet Download ManagerIDMan.exe
C:UsersKAANAppDataRoamingOctoshapeOctoshape Streaming ServicesOctoshapeClient.exe
C:Program Files (x86)Internet Download ManagerIEMonitor.exe
C:Program Files (x86)AcronisTrueImageHomeTrueImageMonitor.exe
C:Program Files (x86)Skillbrainslightshot5.3.0.0Lightshot.exe
C:Program Files (x86)Browny02BrotherBrStMonW.exe
C:Program Files (x86)BrownyIndBrotherBrIndicator.exe
C:Program Files (x86)Common FilesJavaJava Updatejusched.exe
D:USERDownloadsHijackThis.exe

R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=625119&clcid=0x41F
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Local Page = C:WindowsSysWOW64blank.htm
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:Program Files (x86)Internet Download ManagerIDMIECC.dll
O2 - BHO: VirtualKeyboardBrowserHelperObject - {4A66AD60-A03D-4D01-86F0-5F0F7C0EF1AD} - C:Program Files (x86)Kaspersky LabKaspersky Total Security 15.0.2IEExtie_plugin.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program Files (x86)Javajre1.8.0_77binssv.dll
O2 - BHO: ContentBlockerBrowserHelperObject - {93BC2EA7-2F17-4729-948A-D2E03FFB2412} - C:Program Files (x86)Kaspersky LabKaspersky Total Security 15.0.2IEExtie_plugin.dll
O2 - BHO: Safe Money Plugin - {AB379017-4C03-4E00-8EDF-E6D6AF7CCF82} - C:Program Files (x86)Kaspersky LabKaspersky Total Security 15.0.2IEExtie_plugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:Program Files (x86)Javajre1.8.0_77binjp2ssv.dll
O4 - HKLM..Run: [TrueImageMonitor.exe] C:Program Files (x86)AcronisTrueImageHomeTrueImageMonitor.exe
O4 - HKLM..Run: [Lightshot] C:Program Files (x86)SkillbrainslightshotLightshot.exe
O4 - HKLM..Run: [BrStsMon00] C:Program Files (x86)Browny02BrotherBrStMonW.exe /AUTORUN
O4 - HKLM..Run: [BrStsInd00] C:Program Files (x86)BrownyIndBrotherBrIndicator.exe /AUTORUN
O4 - HKLM..Run: [BlueStacks Agent] C:Program Files (x86)BlueStacksHD-Agent.exe
O4 - HKLM..Run: [SunJavaUpdateSched] "C:Program Files (x86)Common FilesJavaJava Updatejusched.exe"
O4 - HKLM..Run: [RaidCall] D:Program Files (x86)RaidCall.RUraidcall.exe
O4 - HKCU..Run: [IDMan] C:Program Files (x86)Internet Download ManagerIDMan.exe /onboot
O4 - HKCU..Run: [OneDrive] "C:UsersKAANAppDataLocalMicrosoftOneDriveOneDrive.exe" /background
O4 - HKCU..Run: [Octoshape Streaming Services] "C:UsersKAANAppDataRoamingOctoshapeOctoshape Streaming ServicesOctoshapeClient.exe" -inv:bootrun
O4 - HKCU..Run: [CyberGhost] "C:Program FilesCyberGhost 5CyberGhost.exe" /autostart /min
O4 - HKCU..Run: [icq.desktop] "C:UsersKAANAppDataRoamingICQbinicq.exe"
O4 - HKCU..Run: [WTFast Tray] "C:Program Files (x86)WTFastWTFast.exe" trayonly
O4 - HKCU..Run: [Discord] C:UsersKAANAppDataLocalDiscordapp-0.0.287Discord.exe
O4 - HKCU..Run: [Spotify Web Helper] "C:UsersKAANAppDataRoamingSpotifySpotifyWebHelper.exe"
O4 - HKCU..Run: [Spotify] "C:UsersKAANAppDataRoamingSpotifySpotify.exe" -autostart -minimized
O4 - HKUSS-1-5-19..Run: [OneDriveSetup] C:WindowsSysWOW64OneDriveSetup.exe /thfirstsetup (User 'Local Service')
O4 - HKUSS-1-5-20..Run: [OneDriveSetup] C:WindowsSysWOW64OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - HKUSS-1-5-82-3006700770-424185619-1745488364-794895919-4004696415..Run: [OneDriveSetup] C:WindowsSysWOW64OneDriveSetup.exe /thfirstsetup (User 'DefaultAppPool')
O8 - Extra context menu item: IDM ile indir - C:Program Files (x86)Internet Download ManagerIEExt.htm
O8 - Extra context menu item: Microsoft Excel'e &Ver - res://C:Program Files (x86)Microsoft OfficeOffice12EXCEL.EXE/3000
O8 - Extra context menu item: Tüm bağlantıları IDM ile indir - C:Program Files (x86)Internet Download ManagerIEGetAll.htm
O9 - Extra button: Sanal klavye - {5547CE1F-74E9-41E5-9CBF-5211ECC37341} - C:Program Files (x86)Kaspersky LabKaspersky Total Security 15.0.2IEExtie_plugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:PROGRA~2MICROS~1Office12REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:WindowsSysWOW64tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:WindowsSysWOW64tbauth.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:Program Files (x86)Windows LivePhoto GalleryAlbumDownloadProtocolHandler.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:Program Files (x86)Common FilesAcronisSchedule2schedul2.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:Program Files (x86)Common FilesAdobeARM1.0armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:WindowsSysWOW64MacromedFlashFlashPlayerUpdateService.exe
O23 - Service: AdobeUpdateService - Adobe Systems Incorporated - C:Program Files (x86)Common FilesAdobeAdobe Desktop CommonElevationManagerAdobeUpdateService.exe
O23 - Service: Acronis Nonstop Backup service (afcdpsrv) - Acronis - C:Program Files (x86)Common FilesAcronisCDPafcdpsrv.exe
O23 - Service: Adobe Genuine Software Integrity Service (AGSService) - Adobe Systems, Incorporated - C:Program Files (x86)Common FilesAdobeAdobeGCClientAGSService.exe
O23 - Service: @%SystemRoot%system32Alg.exe,-112 (ALG) - Unknown owner - C:WINDOWSSystem32alg.exe (file missing)
O23 - Service: Kaspersky Anti-Virus Hizmeti 15.0.2 (AVP15.0.2) - Kaspersky Lab ZAO - C:Program Files (x86)Kaspersky LabKaspersky Total Security 15.0.2avp.exe
O23 - Service: BrYNSvc - Brother Industries, Ltd. - C:Program Files (x86)Browny02BrYNSvc.exe
O23 - Service: @%SystemRoot%system32DiagSvcsDiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:WINDOWSsystem32DiagSvcsDiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:Windowssystem32EasyAntiCheat.exe
O23 - Service: @%SystemRoot%system32efssvc.dll,-100 (EFS) - Unknown owner - C:WINDOWSSystem32lsass.exe (file missing)
O23 - Service: @%systemroot%system32fxsresm.dll,-118 (Fax) - Unknown owner - C:WINDOWSsystem32fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:Program FilesNVIDIA CorporationGeForce Experience ServiceGfExperienceService.exe
O23 - Service: Google Güncelleme Hizmeti (gupdate) (gupdate) - Google Inc. - C:Program Files (x86)GoogleUpdateGoogleUpdate.exe
O23 - Service: Google Güncelleme Hizmeti (gupdatem) (gupdatem) - Google Inc. - C:Program Files (x86)GoogleUpdateGoogleUpdate.exe
O23 - Service: HitmanPro 3.7 Crusader (Boot) (HitmanPro37CrusaderBoot) - SurfRight B.V. - D:USERDownloadsHitmanPro_x64.exe
O23 - Service: @%SystemRoot%system32ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:WINDOWSsystem32IEEtwCollector.exe (file missing)
O23 - Service: @%windir%system32inetsrviisres.dll,-30007 (IISADMIN) - Unknown owner - C:WINDOWSsystem32inetsrvinetinfo.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:WINDOWSsystem32lsass.exe (file missing)
O23 - Service: LoL Ekran Koruyucusu (LolScreenSaverService) - Unknown owner - C:Riot GamesLolScreenSaverserviceservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:Program Files (x86)Mozilla Maintenance Servicemaintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:WINDOWSSystem32msdtc.exe (file missing)
O23 - Service: @mqutil.dll,-6102 (MSMQ) - Unknown owner - C:WINDOWSsystem32mqsvc.exe (file missing)
O23 - Service: @mqutil.dll,-6203 (MSMQTriggers) - Unknown owner - C:WINDOWSsystem32mqtgsvc.exe (file missing)
O23 - Service: @%SystemRoot%System32netlogon.dll,-102 (Netlogon) - Unknown owner - C:WINDOWSsystem32lsass.exe (file missing)
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:WINDOWSsystem32GameMon.des.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:Program Files (x86)NVIDIA CorporationNetServiceNvNetworkService.exe
O23 - Service: NVIDIA Streamer Network Service (NvStreamNetworkSvc) - NVIDIA Corporation - C:Program FilesNVIDIA CorporationNvStreamSrvNvStreamNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:Program FilesNVIDIA CorporationNvStreamSrvNvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:WINDOWSsystem32nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - D:Program Files (x86)OriginOriginClientService.exe
O23 - Service: @%systemroot%system32Locator.exe,-2 (RpcLocator) - Unknown owner - C:WINDOWSsystem32locator.exe (file missing)
O23 - Service: @%SystemRoot%system32samsrv.dll,-1 (SamSs) - Unknown owner - C:WINDOWSsystem32lsass.exe (file missing)
O23 - Service: @%SystemRoot%system32SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:WINDOWSSystem32SensorDataService.exe (file missing)
O23 - Service: SoftEther VPN Client (SEVPNCLIENT) - Unknown owner - C:Program FilesSoftEther VPN Clientvpnclient_x64.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:Program Files (x86)SkypeUpdaterUpdater.exe
O23 - Service: @%SystemRoot%system32snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:WINDOWSSystem32snmptrap.exe (file missing)
O23 - Service: @%systemroot%system32spoolsv.exe,-1 (Spooler) - Unknown owner - C:WINDOWSSystem32spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%system32sppsvc.exe,-101 (sppsvc) - Unknown owner - C:WINDOWSsystem32sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:Program Files (x86)Common FilesSteamSteamService.exe
O23 - Service: TeamViewer 11 (TeamViewer) - TeamViewer GmbH - C:Program Files (x86)TeamViewerTeamViewer_Service.exe
O23 - Service: @%SystemRoot%system32TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:WINDOWSsystem32TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%system32ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:WINDOWSsystem32UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%system32vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:WINDOWSsystem32lsass.exe (file missing)
O23 - Service: @%SystemRoot%system32vds.exe,-100 (vds) - Unknown owner - C:WINDOWSSystem32vds.exe (file missing)
O23 - Service: @%systemroot%system32vssvc.exe,-102 (VSS) - Unknown owner - C:WINDOWSsystem32vssvc.exe (file missing)
O23 - Service: @%systemroot%system32wbengine.exe,-104 (wbengine) - Unknown owner - C:WINDOWSsystem32wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%Windows DefenderMpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:Program Files (x86)Windows DefenderNisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%Windows DefenderMpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:Program Files (x86)Windows DefenderMsMpEng.exe (file missing)
O23 - Service: @%Systemroot%system32wbemwmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:WINDOWSsystem32wbemWmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%Windows Media Playerwmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:Program Files (x86)Windows Media Playerwmpnetwk.exe (file missing)

--
End of file - 13295 bytes