LEGACY_sharedaccess: ATTENTION!

LEGACY_sharedaccess: ATTENTION! sorunu FRST raporlarında çıkıyor arkadaşlar.

Checking LEGACY_sharedaccess: ATTENTION!=====> Unable to open LEGACY_sharedaccess\0000 registry key. The key does not exist.

Sorunun çözümü aşağıda:

SharedAccess.reg (5.7 KB) Dosyasını direkt masaüstüne indiriyoruz.

 http://download.bleepingcomputer.com/win-services/xp/SharedAccess.reg

• Win7/Vista sağ tık> yönetici olarak çalıştır diyoruz.
• Birleştirme seçilip, istenilenleri kabul ediyoruz.
  

Rapor aşağıda;

Farbar Service Scanner Version: 23-12-2012
Ran by Matt (administrator) on 02-01-2013 at 21:13:53
Running from "F:\"
Microsoft Windows XP Service Pack 3 (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============
Dnscache Service is not running. Checking service configuration:
The start type of Dnscache service is OK.
The ImagePath of Dnscache service is OK.
The ServiceDll of Dnscache service is OK.

Dhcp Service is not running. Checking service configuration:
The start type of Dhcp service is OK.
The ImagePath of Dhcp service is OK.
The ServiceDll of Dhcp service is OK.


Connection Status:
==============
Localhost is accessible.
LAN connected.
Attempt to access Google IP returned error. Google IP is unreachable
Attempt to access Google.com returned error: Other errors
Attempt to access Yahoo IP returned error. Yahoo IP is unreachable
Attempt to access Yahoo.com returned error: Other errors


Windows Firewall:
=============
sharedaccess Service is not running. Checking service configuration:
Checking Start type: ATTENTION!=====> Unable to retrieve start type of sharedaccess. The value does not exist.
Checking ImagePath: ATTENTION!=====> Unable to retrieve ImagePath of sharedaccess. The value does not exist.
Checking ServiceDll: ATTENTION!=====> Unable to open sharedaccess registry key. The service key does not exist.
Checking LEGACY_sharedaccess: ATTENTION!=====> Unable to open LEGACY_sharedaccess\0000 registry key. The key does not exist.

netman Service is not running. Checking service configuration:
The start type of netman service is OK.
The ImagePath of netman service is OK.
The ServiceDll of netman service is OK.

winmgmt Service is not running. Checking service configuration:
The start type of winmgmt service is OK.
The ImagePath of winmgmt service is OK.
The ServiceDll of winmgmt service is OK.


Firewall Disabled Policy:
==================


System Restore:
============
Srservice Service is not running. Checking service configuration:
The start type of Srservice service is OK.
The ImagePath of Srservice service is OK.
The ServiceDll of Srservice: "C:\WINDOWS\system32\srsvc.dll".


System Restore Disabled Policy:
========================


Security Center:
============
wscsvc Service is not running. Checking service configuration:
The start type of wscsvc service is OK.
The ImagePath of wscsvc: "C:\WINDOWS\System32\svchost.exe -k netsvcs".
The ServiceDll of wscsvc: ""C:\WINDOWS\system32\wscsvc.dll"".

winmgmt Service is not running. Checking service configuration:
The start type of winmgmt service is OK.
The ImagePath of winmgmt service is OK.
The ServiceDll of winmgmt service is OK.


Windows Update:
============
wuauserv Service is not running. Checking service configuration:
The start type of wuauserv service is OK.
The ImagePath of wuauserv service is OK.
The ServiceDll of wuauserv: "C:\WINDOWS\system32\wuauserv.dll".

BITS Service is not running. Checking service configuration:
The start type of BITS service is set to Demand. The default start type is Auto.
The ImagePath of BITS service is OK.
The ServiceDll of BITS: "C:\WINDOWS\system32\qmgr.dll".

EventSystem Service is not running. Checking service configuration:
The start type of EventSystem service is OK.
The ImagePath of EventSystem: "C:\WINDOWS\system32\svchost.exe -k netsvcs".
The ServiceDll of EventSystem: "C:\WINDOWS\system32\es.dll".

cryptsvc Service is not running. Checking service configuration:
The start type of cryptsvc service is OK.
The ImagePath of cryptsvc service is OK.
The ServiceDll of cryptsvc service is OK.


Windows Autoupdate Disabled Policy:
============================

RpcSs Service is not running. Checking service configuration:
The start type of RpcSs service is OK.
The ImagePath of RpcSs service is OK.
The ServiceDll of RpcSs service is OK.


File Check:
========
C:\WINDOWS\system32\dhcpcsvc.dll => MD5 is legit
C:\WINDOWS\system32\Drivers\afd.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\netbt.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\tcpip.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\ipsec.sys => MD5 is legit
C:\WINDOWS\system32\dnsrslvr.dll => MD5 is legit
C:\WINDOWS\system32\ipnathlp.dll => MD5 is legit
C:\WINDOWS\system32\netman.dll => MD5 is legit
C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit
C:\WINDOWS\system32\srsvc.dll => MD5 is legit
C:\WINDOWS\system32\Drivers\sr.sys => MD5 is legit
C:\WINDOWS\system32\wscsvc.dll => MD5 is legit
C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit
C:\WINDOWS\system32\wuauserv.dll => MD5 is legit
C:\WINDOWS\system32\qmgr.dll => MD5 is legit
C:\WINDOWS\system32\es.dll => MD5 is legit
C:\WINDOWS\system32\cryptsvc.dll => MD5 is legit

ATTENTION!=====> C:\WINDOWS\system32\svchost.exe FILE IS MISSING AND SHOULD BE RESTORED.

C:\WINDOWS\system32\rpcss.dll => MD5 is legit
C:\WINDOWS\system32\services.exe => MD5 is legit

Extra List:
=======
AegisP(13) DNE(12) Gpc(6) IPSec(4) NetBT(5) PSched(7) Tcpip(3)
0x0D00000004000000010000000200000003000000050000000600000007000000090000000A0000​000B0000000C0000000D00000008000000
IpSec Tag value is correct.

**** End of log ****

 Hijackthis Takımı
Yeni sitemiz:  http://trmalwarefix.freeforums.net/

Windows Kayıt Defteri yedekleme. + Video Anlatım

Windows kayıt defteri yedekleme için iki yöntem anlatılıyor; biri sistem geri yükleme noktası oluşturarak , diğeri windows kayıt defteri editörü, regedit.exe üzerinden tek bir reg dosyası olarak.

1.Yöntem:

Başlat > Bilgisayar > Sistem özellikleri > Sistem koruması:
''Sistem koruması açık olan sürücüler için hemen şimdi sistem geri yükleme noktası oluşturun'' satırındaki ''Oluştur'' butonuna basın.Gelen menü penceresine günün tarihini yazın ve tamam deyin. İşlem bitince de menüyü kapatabilirsiniz.

2.Yöntem:

Başlat çalıştır'a;
''Regedit'' yazıp, kayıt defteri düzenleyicisinde bilgisayar'a tıklayarak vurguluyoruz.
Dosya > Ver diyerek masaüstüne ''günün tarihi'' ni yazıp kaydediyoruz.


https://www.youtube.com/watch?v=ENFy8PfP6TM&feature=player_embedded


3.Yöntem:

Kayıt defterini sadece bir komut ile yedekleme yapabiliyoruz arkadaşlar.

Başlat > Çalıştır' a

Kod: [Tümünü Seç]

regedit /e c:\registrybackup.reg

yazıp, Tamam diyoruz.

Oluşturulan kayıt defteri klasörünü aşağıdaki adreste bulabilirsiniz.

C:\registrybackup

İyi günler.

İşletim sistemleri kayıt defteri (Reg) onarma dosyaları

Çeşitli işletim sistemlerine ait kayıt defteri (Reg) onarma bilgileri aşağıdadır.

http://download.bleepingcomputer.com/win-services/

7/
8/
vista/
xp/

Onarmanın nasıl yapılacağına dair yardımı Hijackthis Tr Takımı 'ndan alabilirsiniz. Yanlış uygulamanın sisteminizde onarılması güç hasara yol açabileceğini belki de sistemin çökmesine neden olabileceğini unutmayınız.

İyi günler.