|
Plagegeister aller Art und deren Bekämpfung: Rootkit.Win32.TDSS.mbr - Wie entfernen?Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
24.10.2010, 22:23 | #1 |
| Rootkit.Win32.TDSS.mbr - Wie entfernen? Hallo zusammen, habe mir leider bei WinXP o.g. Virus eingefangen und bekomme ihn nicht gelöscht. Bin die bestehenden Threads hier bereits durchgegangen (leider erfolglos) und habe auch Google bemüht! TDSS-Killer, der da ja helfen soll schmeißt einen "process error" raus Habe Logs mit Hijackthis, TDSS-Killer, Malwarebytes gemacht und angehängt. Weiterer Hinweis: Seitdem dieses Rootkit sich eingenistet hat, bootet der Rechner nicht mehr (Platte hängt jetzt an anderem PC!) und auf die 2. Partition kann über Arbeitsplatz nicht mehr zugegriffen werden ("Zugriff verweigert"). In der Computerverwaltung wird die Platte aber komplett erkannt (Festplatte auf Fehler überprüfen blieb erfolglos). Hauptwunsch wäre das Ding wieder bootfähig zu bekommen und auf beide Partitionen zugreifen zu können. Falls ich noch irgendwas machen kann, bin ich sehr dankbar! Wenn Angaben fehlen bitte ich dies zu entschuldigen. Code:
ATTFilter Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 21:44:50, on 24.10.2010 Platform: Unknown Windows (WinNT 6.01.3504) MSIE: Internet Explorer v8.00 (8.00.7600.16671) Boot mode: Normal Running processes: C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe C:\Users\***\Local Settings\Apps\F.lux\flux.exe C:\Program Files (x86)\iTunes\iTunesHelper.exe C:\Program Files (x86)\Common Files\Realtime Soft\RTSHookInterop\x32\RTSHookInterop.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files (x86)\Common Files\Realtime Soft\RTSHookInterop\x32\RTSHookInterop.exe C:\Users\***\Desktop\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files (x86)\Adobe\/Adobe Contribute CS4/contributeieplugin.dll O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files (x86)\Adobe\/Adobe Contribute CS4/contributeieplugin.dll O4 - HKLM\..\Run: [AVP] "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [F.lux] "C:\Users\Simon\Local Settings\Apps\F.lux\flux.exe" /noshow O4 - HKCU\..\Run: [Google Update] "C:\Users\Simon\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOKALER DIENST') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOKALER DIENST') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETZWERKDIENST') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETZWERKDIENST') O4 - Global Startup: UltraMon.lnk = ? O8 - Extra context menu item: Hinzufügen zu Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm O9 - Extra button: &Virtuelle Tastatur - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O9 - Extra button: Li&nks untersuchen - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll O13 - Gopher Prefix: O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O20 - AppInit_DLLs: C:\PROGRA~2\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~2\KASPER~1\KASPER~1\sbhook.dll O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: ASP.NET-Zustandsdienst (aspnet_state) - Unknown owner - C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing) O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe O23 - Service: Dienst "Bonjour" (Bonjour Service) - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: FLEXnet Licensing Service 64 - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: O&O Defrag - O&O Software GmbH - C:\Program Files\OO Software\Defrag\oodag.exe O23 - Service: PostgreSQL Database Server 8.3 (pgsql-8.3) - PostgreSQL Global Development Group - C:\Program Files (x86)\PostgreSQL\8.3\bin\pg_ctl.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 9095 bytes Code:
ATTFilter 2010/10/24 22:02:05.0028 TDSS rootkit removing tool 2.4.4.0 Oct 4 2010 09:06:59 2010/10/24 22:02:05.0028 ================================================================================ 2010/10/24 22:02:05.0028 SystemInfo: 2010/10/24 22:02:05.0028 2010/10/24 22:02:05.0028 OS Version: 6.1.7600 ServicePack: 0.0 2010/10/24 22:02:05.0028 Product type: Workstation 2010/10/24 22:02:05.0028 ComputerName: ***-PC 2010/10/24 22:02:05.0028 UserName: *** 2010/10/24 22:02:05.0028 Windows directory: C:\Windows 2010/10/24 22:02:05.0028 System windows directory: C:\Windows 2010/10/24 22:02:05.0028 Running under WOW64 2010/10/24 22:02:05.0028 Processor architecture: Intel x64 2010/10/24 22:02:05.0028 Number of processors: 4 2010/10/24 22:02:05.0028 Page size: 0x1000 2010/10/24 22:02:05.0028 Boot type: Normal boot 2010/10/24 22:02:05.0028 ================================================================================ 2010/10/24 22:02:05.0028 Utility is running under WOW64 2010/10/24 22:02:05.0496 Initialize success 2010/10/24 22:02:07.0805 ================================================================================ 2010/10/24 22:02:07.0805 Scan started 2010/10/24 22:02:07.0805 Mode: Manual; 2010/10/24 22:02:07.0805 ================================================================================ 2010/10/24 22:02:09.0926 1394ohci (1b00662092f9f9568b995902f0cc40d5) C:\Windows\system32\DRIVERS\1394ohci.sys 2010/10/24 22:02:09.0958 ACPI (6f11e88748cdefd2f76aa215f97ddfe5) C:\Windows\system32\DRIVERS\ACPI.sys 2010/10/24 22:02:09.0989 AcpiPmi (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys 2010/10/24 22:02:10.0051 adfs (2f0683fd2df1d92e891caca14b45a8c1) C:\Windows\system32\drivers\adfs.sys 2010/10/24 22:02:10.0098 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys 2010/10/24 22:02:10.0145 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys 2010/10/24 22:02:10.0176 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys 2010/10/24 22:02:10.0238 AFD (b9384e03479d2506bc924c16a3db87bc) C:\Windows\system32\drivers\afd.sys 2010/10/24 22:02:10.0270 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys 2010/10/24 22:02:10.0301 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys 2010/10/24 22:02:10.0348 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys 2010/10/24 22:02:10.0426 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys 2010/10/24 22:02:10.0582 amdkmdag (1147f8816d4ddc9fc43a40df52f40500) C:\Windows\system32\DRIVERS\atipmdag.sys 2010/10/24 22:02:10.0660 amdkmdap (ebc963d8f5b04c98f5ef597aae79cddd) C:\Windows\system32\DRIVERS\atikmpag.sys 2010/10/24 22:02:10.0706 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys 2010/10/24 22:02:10.0722 amdsata (7a4b413614c055935567cf88a9734d38) C:\Windows\system32\DRIVERS\amdsata.sys 2010/10/24 22:02:10.0753 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys 2010/10/24 22:02:10.0800 amdxata (b4ad0cacbab298671dd6f6ef7e20679d) C:\Windows\system32\DRIVERS\amdxata.sys 2010/10/24 22:02:10.0831 AppID (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys 2010/10/24 22:02:10.0878 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys 2010/10/24 22:02:10.0909 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys 2010/10/24 22:02:10.0972 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys 2010/10/24 22:02:10.0987 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys 2010/10/24 22:02:11.0034 AtiHdmiService (77c149e6d702737b2e372dee166faef8) C:\Windows\system32\drivers\AtiHdmi.sys 2010/10/24 22:02:11.0096 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys 2010/10/24 22:02:11.0143 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys 2010/10/24 22:02:11.0206 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys 2010/10/24 22:02:11.0330 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys 2010/10/24 22:02:11.0408 bowser (91ce0d3dc57dd377e690a2d324022b08) C:\Windows\system32\DRIVERS\bowser.sys 2010/10/24 22:02:11.0424 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys 2010/10/24 22:02:11.0471 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys 2010/10/24 22:02:11.0518 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys 2010/10/24 22:02:11.0549 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys 2010/10/24 22:02:11.0596 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys 2010/10/24 22:02:11.0627 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys 2010/10/24 22:02:11.0674 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys 2010/10/24 22:02:11.0705 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys 2010/10/24 22:02:11.0736 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys 2010/10/24 22:02:11.0783 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys 2010/10/24 22:02:11.0861 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys 2010/10/24 22:02:11.0908 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys 2010/10/24 22:02:11.0939 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys 2010/10/24 22:02:11.0986 CNG (f95fd4cb7da00ba2a63ce9f6b5c053e1) C:\Windows\system32\Drivers\cng.sys 2010/10/24 22:02:12.0017 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys 2010/10/24 22:02:12.0064 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys 2010/10/24 22:02:12.0126 cpuz133 (95c88d25e211a4d52a82c53e5d93e634) C:\Windows\system32\drivers\cpuz133_x64.sys 2010/10/24 22:02:12.0220 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys 2010/10/24 22:02:12.0282 CSC (4a6173c2279b498cd8f57cae504564cb) C:\Windows\system32\drivers\csc.sys 2010/10/24 22:02:12.0376 DfsC (3f1dc527070acb87e40afe46ef6da749) C:\Windows\system32\Drivers\dfsc.sys 2010/10/24 22:02:12.0407 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys 2010/10/24 22:02:12.0438 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys 2010/10/24 22:02:12.0485 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys 2010/10/24 22:02:12.0547 DXGKrnl (ebce0b0924835f635f620d19f0529dce) C:\Windows\System32\drivers\dxgkrnl.sys 2010/10/24 22:02:12.0656 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys 2010/10/24 22:02:12.0719 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys 2010/10/24 22:02:12.0766 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys 2010/10/24 22:02:12.0828 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys 2010/10/24 22:02:12.0875 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys 2010/10/24 22:02:12.0922 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys 2010/10/24 22:02:12.0953 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys 2010/10/24 22:02:12.0984 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys 2010/10/24 22:02:13.0046 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys 2010/10/24 22:02:13.0093 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys 2010/10/24 22:02:13.0124 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys 2010/10/24 22:02:13.0140 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys 2010/10/24 22:02:13.0202 fvevol (ae87ba80d0ec3b57126ed2cdc15b24ed) C:\Windows\system32\DRIVERS\fvevol.sys 2010/10/24 22:02:13.0265 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys 2010/10/24 22:02:13.0312 GEARAspiWDM (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys 2010/10/24 22:02:13.0374 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys 2010/10/24 22:02:13.0436 HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\Windows\system32\drivers\HdAudio.sys 2010/10/24 22:02:13.0499 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys 2010/10/24 22:02:13.0530 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys 2010/10/24 22:02:13.0561 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys 2010/10/24 22:02:13.0608 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys 2010/10/24 22:02:13.0670 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys 2010/10/24 22:02:13.0717 HpSAMD (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys 2010/10/24 22:02:13.0780 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys 2010/10/24 22:02:13.0811 hwpolicy (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys 2010/10/24 22:02:13.0858 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys 2010/10/24 22:02:13.0889 iaStorV (d83efb6fd45df9d55e9a1afc63640d50) C:\Windows\system32\DRIVERS\iaStorV.sys 2010/10/24 22:02:13.0951 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys 2010/10/24 22:02:13.0982 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys 2010/10/24 22:02:14.0029 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys 2010/10/24 22:02:14.0060 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys 2010/10/24 22:02:14.0107 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys 2010/10/24 22:02:14.0170 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys 2010/10/24 22:02:14.0279 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys 2010/10/24 22:02:14.0310 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys 2010/10/24 22:02:14.0341 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys 2010/10/24 22:02:14.0404 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys 2010/10/24 22:02:14.0466 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys 2010/10/24 22:02:14.0513 kl1 (ae1589b6bf163797514cd90924361e29) C:\Windows\system32\DRIVERS\kl1.sys 2010/10/24 22:02:14.0560 KLBG (3b11e0c94599aadc172f977a3d4b2b33) C:\Windows\system32\DRIVERS\klbg.sys 2010/10/24 22:02:14.0575 KLIF (e692707f4e1bb2240b232d911ae4c5c5) C:\Windows\system32\DRIVERS\klif.sys 2010/10/24 22:02:14.0606 KLIM6 (3d217d7d89a4ba705d4ca14268d7d7b2) C:\Windows\system32\DRIVERS\klim6.sys 2010/10/24 22:02:14.0653 klmouflt (0bd3e79be9f60418d20315d50bdbba86) C:\Windows\system32\DRIVERS\klmouflt.sys 2010/10/24 22:02:14.0684 KSecDD (e8b6fcc9c83535c67f835d407620bd27) C:\Windows\system32\Drivers\ksecdd.sys 2010/10/24 22:02:14.0716 KSecPkg (a8c63880ef6f4d3fec7b616b9c060215) C:\Windows\system32\Drivers\ksecpkg.sys 2010/10/24 22:02:14.0747 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys 2010/10/24 22:02:14.0809 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys 2010/10/24 22:02:14.0903 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys 2010/10/24 22:02:14.0981 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys 2010/10/24 22:02:15.0028 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys 2010/10/24 22:02:15.0074 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys 2010/10/24 22:02:15.0106 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys 2010/10/24 22:02:15.0152 lvpepf64 (07389f6925e490d2db7882110e99921c) C:\Windows\system32\DRIVERS\lv302a64.sys 2010/10/24 22:02:15.0199 LVRS64 (7f0ba3a6e8996f15693c6b7d81da049e) C:\Windows\system32\DRIVERS\lvrs64.sys 2010/10/24 22:02:15.0277 LVUSBS64 (5c3ff68267a5d242ee79ee01b993d6ce) C:\Windows\system32\drivers\LVUSBS64.sys 2010/10/24 22:02:15.0324 ManyCam (d33e2b74cf8b3a652bf0a9fbd068e87a) C:\Windows\system32\DRIVERS\ManyCam_x64.sys 2010/10/24 22:02:15.0371 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys 2010/10/24 22:02:15.0402 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys 2010/10/24 22:02:15.0433 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys 2010/10/24 22:02:15.0480 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys 2010/10/24 22:02:15.0496 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys 2010/10/24 22:02:15.0542 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys 2010/10/24 22:02:15.0589 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys 2010/10/24 22:02:15.0605 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys 2010/10/24 22:02:15.0652 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys 2010/10/24 22:02:15.0683 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys 2010/10/24 22:02:15.0730 mrxsmb (767a4c3bcf9410c286ced15a2db17108) C:\Windows\system32\DRIVERS\mrxsmb.sys 2010/10/24 22:02:15.0761 mrxsmb10 (920ee0ff995fcfdeb08c41605a959e1c) C:\Windows\system32\DRIVERS\mrxsmb10.sys 2010/10/24 22:02:15.0792 mrxsmb20 (740d7ea9d72c981510a5292cf6adc941) C:\Windows\system32\DRIVERS\mrxsmb20.sys 2010/10/24 22:02:15.0808 msahci (5c37497276e3b3a5488b23a326a754b7) C:\Windows\system32\DRIVERS\msahci.sys 2010/10/24 22:02:15.0839 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys 2010/10/24 22:02:15.0901 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys 2010/10/24 22:02:15.0917 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys 2010/10/24 22:02:15.0948 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys 2010/10/24 22:02:15.0979 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys 2010/10/24 22:02:16.0042 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys 2010/10/24 22:02:16.0073 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys 2010/10/24 22:02:16.0104 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys 2010/10/24 22:02:16.0120 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys 2010/10/24 22:02:16.0135 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys 2010/10/24 22:02:16.0182 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys 2010/10/24 22:02:16.0229 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys 2010/10/24 22:02:16.0276 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys 2010/10/24 22:02:16.0400 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys 2010/10/24 22:02:16.0432 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys 2010/10/24 22:02:16.0494 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys 2010/10/24 22:02:16.0541 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys 2010/10/24 22:02:16.0588 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys 2010/10/24 22:02:16.0619 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys 2010/10/24 22:02:16.0666 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys 2010/10/24 22:02:16.0697 NetBT (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys 2010/10/24 22:02:16.0759 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys 2010/10/24 22:02:16.0790 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys 2010/10/24 22:02:16.0806 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys 2010/10/24 22:02:16.0853 Ntfs (356698a13c4630d5b31c37378d469196) C:\Windows\system32\drivers\Ntfs.sys 2010/10/24 22:02:16.0900 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys 2010/10/24 22:02:16.0915 nvraid (3e38712941e9bb4ddbee00affe3fed3d) C:\Windows\system32\DRIVERS\nvraid.sys 2010/10/24 22:02:16.0993 nvstor (477dc4d6deb99be37084c9ac6d013da1) C:\Windows\system32\DRIVERS\nvstor.sys 2010/10/24 22:02:17.0040 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys 2010/10/24 22:02:17.0087 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys 2010/10/24 22:02:17.0134 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys 2010/10/24 22:02:17.0165 partmgr (7daa117143316c4a1537e074a5a9eaf0) C:\Windows\system32\drivers\partmgr.sys 2010/10/24 22:02:17.0180 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys 2010/10/24 22:02:17.0180 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys 2010/10/24 22:02:17.0212 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys 2010/10/24 22:02:17.0243 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys 2010/10/24 22:02:17.0274 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys 2010/10/24 22:02:17.0399 PID_PEPI (087a343dfc337f37723dd7912de6b6cd) C:\Windows\system32\DRIVERS\LV302V64.SYS 2010/10/24 22:02:17.0524 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys 2010/10/24 22:02:17.0570 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys 2010/10/24 22:02:17.0617 Psched (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys 2010/10/24 22:02:17.0648 PxHlpa64 (901dba98359966a62a6548596988e931) C:\Windows\system32\Drivers\PxHlpa64.sys 2010/10/24 22:02:17.0695 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys 2010/10/24 22:02:17.0742 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys 2010/10/24 22:02:17.0773 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys 2010/10/24 22:02:17.0820 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys 2010/10/24 22:02:17.0867 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys 2010/10/24 22:02:17.0914 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys 2010/10/24 22:02:17.0945 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys 2010/10/24 22:02:17.0992 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys 2010/10/24 22:02:18.0038 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys 2010/10/24 22:02:18.0054 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys 2010/10/24 22:02:18.0085 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys 2010/10/24 22:02:18.0132 RDPDR (9706b84dbabfc4b4ca46c5a82b14dfa3) C:\Windows\system32\drivers\rdpdr.sys 2010/10/24 22:02:18.0179 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys 2010/10/24 22:02:18.0194 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys 2010/10/24 22:02:18.0226 RDPWD (8a3e6bea1c53ea6177fe2b6eba2c80d7) C:\Windows\system32\drivers\RDPWD.sys 2010/10/24 22:02:18.0272 rdyboost (634b9a2181d98f15941236886164ec8b) C:\Windows\system32\drivers\rdyboost.sys 2010/10/24 22:02:18.0335 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys 2010/10/24 22:02:18.0366 RTL8167 (baefee35d27a5440d35092ce10267bec) C:\Windows\system32\DRIVERS\Rt64win7.sys 2010/10/24 22:02:18.0397 s3cap (88af6e02ab19df7fd07ecdf9c91e9af6) C:\Windows\system32\DRIVERS\vms3cap.sys 2010/10/24 22:02:18.0444 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys 2010/10/24 22:02:18.0475 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys 2010/10/24 22:02:18.0522 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys 2010/10/24 22:02:18.0569 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys 2010/10/24 22:02:18.0616 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys 2010/10/24 22:02:18.0647 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys 2010/10/24 22:02:18.0709 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys 2010/10/24 22:02:18.0740 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys 2010/10/24 22:02:18.0756 sffp_sd (5588b8c6193eb1522490c122eb94dffa) C:\Windows\system32\DRIVERS\sffp_sd.sys 2010/10/24 22:02:18.0787 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys 2010/10/24 22:02:18.0865 sftfs (6532f56e1bd7fe50e1352b909530c651) C:\Program Files (x86)\Microsoft Application Virtualization Client\drivers\sftfslh.sys 2010/10/24 22:02:18.0928 sftplay (e6ff02b1bd81ea2f6894066d5cb6d91e) C:\Program Files (x86)\Microsoft Application Virtualization Client\drivers\sftplaylh.sys 2010/10/24 22:02:18.0974 Sftredir (cffb30b10c66f9a8c6a70d105bd4de8d) C:\Windows\system32\DRIVERS\Sftredirlh.sys 2010/10/24 22:02:18.0990 sftvol (baf32ef413025559c23754afcabca90a) C:\Program Files (x86)\Microsoft Application Virtualization Client\drivers\sftvollh.sys 2010/10/24 22:02:19.0037 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys 2010/10/24 22:02:19.0052 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys 2010/10/24 22:02:19.0099 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys 2010/10/24 22:02:19.0146 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys 2010/10/24 22:02:19.0208 sptd (602884696850c86434530790b110e8eb) C:\Windows\system32\Drivers\sptd.sys 2010/10/24 22:02:19.0208 Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: 602884696850c86434530790b110e8eb 2010/10/24 22:02:19.0208 sptd - detected Locked file (1) 2010/10/24 22:02:19.0240 srv (de6f5658da951c4bc8e498570b5b0d5f) C:\Windows\system32\DRIVERS\srv.sys 2010/10/24 22:02:19.0333 srv2 (4d33d59c0b930c523d29f9bd40cda9d2) C:\Windows\system32\DRIVERS\srv2.sys 2010/10/24 22:02:19.0411 srvnet (5a663fd67049267bc5c3f3279e631ffb) C:\Windows\system32\DRIVERS\srvnet.sys 2010/10/24 22:02:19.0505 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys 2010/10/24 22:02:19.0536 storflt (ffd7a6f15b14234b5b0e5d49e7961895) C:\Windows\system32\DRIVERS\vmstorfl.sys 2010/10/24 22:02:19.0567 storvsc (8fccbefc5c440b3c23454656e551b09a) C:\Windows\system32\DRIVERS\storvsc.sys 2010/10/24 22:02:19.0614 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys 2010/10/24 22:02:19.0692 Tcpip (90a2d722cf64d911879d6c4a4f802a4d) C:\Windows\system32\drivers\tcpip.sys 2010/10/24 22:02:19.0770 TCPIP6 (90a2d722cf64d911879d6c4a4f802a4d) C:\Windows\system32\DRIVERS\tcpip.sys 2010/10/24 22:02:19.0801 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys 2010/10/24 22:02:19.0832 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys 2010/10/24 22:02:19.0864 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys 2010/10/24 22:02:19.0910 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys 2010/10/24 22:02:19.0942 TermDD (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys 2010/10/24 22:02:19.0988 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys 2010/10/24 22:02:20.0051 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys 2010/10/24 22:02:20.0082 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys 2010/10/24 22:02:20.0129 udfs (d47baead86c65d4f4069d7ce0a4edceb) C:\Windows\system32\DRIVERS\udfs.sys 2010/10/24 22:02:20.0176 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys 2010/10/24 22:02:20.0285 UltraMonUtility (694bcf23662f97d987cf4c6739c35f8b) C:\Program Files (x86)\Common Files\Realtime Soft\UltraMonMirrorDrv\x64\UltraMonUtility.sys 2010/10/24 22:02:20.0363 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys 2010/10/24 22:02:20.0425 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys 2010/10/24 22:02:20.0488 USBAAPL64 (cd03479f2da26500b203ed075c146a7a) C:\Windows\system32\Drivers\usbaapl64.sys 2010/10/24 22:02:20.0581 usbaudio (77b01bc848298223a95d4ec23e1785a1) C:\Windows\system32\drivers\usbaudio.sys 2010/10/24 22:02:20.0644 usbccgp (b26afb54a534d634523c4fb66765b026) C:\Windows\system32\DRIVERS\usbccgp.sys 2010/10/24 22:02:20.0690 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys 2010/10/24 22:02:20.0722 usbehci (2ea4aff7be7eb4632e3aa8595b0803b5) C:\Windows\system32\DRIVERS\usbehci.sys 2010/10/24 22:02:20.0768 usbhub (4c9042b8df86c1e8e6240c218b99b39b) C:\Windows\system32\DRIVERS\usbhub.sys 2010/10/24 22:02:20.0831 usbohci (58e546bbaf87664fc57e0f6081e4f609) C:\Windows\system32\DRIVERS\usbohci.sys 2010/10/24 22:02:20.0862 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys 2010/10/24 22:02:20.0909 USBSTOR (080d3820da6c046be82fc8b45a893e83) C:\Windows\system32\DRIVERS\USBSTOR.SYS 2010/10/24 22:02:20.0971 usbuhci (81fb2216d3a60d1284455d511797db3d) C:\Windows\system32\DRIVERS\usbuhci.sys 2010/10/24 22:02:21.0018 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys 2010/10/24 22:02:21.0049 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys 2010/10/24 22:02:21.0080 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys 2010/10/24 22:02:21.0127 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys 2010/10/24 22:02:21.0174 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys 2010/10/24 22:02:21.0221 vmbus (1501699d7eda984abc4155a7da5738d1) C:\Windows\system32\DRIVERS\vmbus.sys 2010/10/24 22:02:21.0268 VMBusHID (ae10c35761889e65a6f7176937c5592c) C:\Windows\system32\DRIVERS\VMBusHID.sys 2010/10/24 22:02:21.0299 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys 2010/10/24 22:02:21.0330 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys 2010/10/24 22:02:21.0361 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys 2010/10/24 22:02:21.0470 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys 2010/10/24 22:02:21.0564 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\System32\drivers\vwifibus.sys 2010/10/24 22:02:21.0611 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys 2010/10/24 22:02:21.0658 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys 2010/10/24 22:02:21.0704 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys 2010/10/24 22:02:21.0736 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys 2010/10/24 22:02:21.0782 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys 2010/10/24 22:02:21.0829 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys 2010/10/24 22:02:21.0876 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys 2010/10/24 22:02:21.0954 WinUsb (817eaff5d38674edd7713b9dfb8e9791) C:\Windows\system32\DRIVERS\WinUsb.sys 2010/10/24 22:02:22.0001 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys 2010/10/24 22:02:22.0032 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys 2010/10/24 22:02:22.0079 WudfPf (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers\WudfPf.sys 2010/10/24 22:02:22.0141 WUDFRd (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS\WUDFRd.sys 2010/10/24 22:02:22.0235 \HardDisk1\MBR - detected Rootkit.Win32.TDSS.tdl4 (0) 2010/10/24 22:02:22.0235 ================================================================================ 2010/10/24 22:02:22.0235 Scan finished 2010/10/24 22:02:22.0235 ================================================================================ 2010/10/24 22:02:22.0235 Detected object count: 2 2010/10/24 22:02:25.0355 Locked file(sptd) - User select action: Skip 2010/10/24 22:02:25.0402 \HardDisk1\MBR - processing error 2010/10/24 22:02:25.0402 Rootkit.Win32.TDSS.tdl4(\HardDisk1\MBR) - User select action: Cure Code:
ATTFilter Norman TDSS Cleaner Version 1.9.3 Copyright © 1990 - 2010, Norman ASA. Built 2010/05/25 11:56:03 Norman Scanner Engine Version: 6.04.08 Nvcbin.def Version: 6.04.00, Date: 2010/05/25 11:56:03, Variants: 57644 Scan started: 2010/10/24 22:36:30 Running pre-scan cleanup routine: Operating System: Microsoft Windows 7 6.1.7600 Logged on user: Simons-PC\Simon Set registry value: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLS = "C:\PROGRA~2\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~2\KASPER~1\KASPER~1\sbhook.dll" -> "" Changed service configuration for "WinDefend" from 0x00000004 and 0x00000001 to 0x00000002 and 0xFFFFFFFF Started service "WinDefend" Scanning running processes and process memory... Number of processes/threads found: 2204 Number of processes/threads scanned: 2204 Number of processes/threads not scanned: 0 Number of infected processes/threads terminated: 0 Total scanning time: 29s Scanning file system... Scanning: prescan Scanning: C:\Windows\system32\drivers\* Scanning: F:\*.* F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/abseits_8421.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/abseits_8422.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/abseits_8423.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/abseits_8424.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/abseits_8425.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/abseits_8426.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/abseits_8427.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/abseits_8428.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7955.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7956.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7957.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7958.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7959.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7960.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7961.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7962.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7963.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7964.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7965.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7966.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7967.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7968.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7969.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7970.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7971.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7972.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7973.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7974.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7975.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7976.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7977.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7978.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7979.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7980.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7981.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7982.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7983.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7984.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7985.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7986.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7987.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7988.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7989.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7990.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7991.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7992.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7993.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7994.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7995.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7996.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7997.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7998.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7999.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8000.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8001.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8002.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8003.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8004.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8005.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8006.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8007.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8008.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8009.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8010.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8011.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8012.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8013.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8014.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8015.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8016.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8017.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8018.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8019.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8020.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8021.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8022.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8023.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8024.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8025.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8026.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8027.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8028.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8029.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8030.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8031.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8032.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8033.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8034.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8035.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8036.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8037.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8038.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8039.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8040.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8041.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8042.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8043.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8044.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8045.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8046.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8047.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8048.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8049.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8050.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8051.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8052.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8053.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8054.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8055.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8056.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8057.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8058.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8059.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8060.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8061.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8062.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8063.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8064.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8065.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8066.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8067.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8068.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8069.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8070.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8071.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8072.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8073.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8074.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8075.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8076.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8077.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8078.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8079.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8080.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8081.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8082.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8083.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8084.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8085.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8086.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8087.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8088.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8089.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8090.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8091.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8092.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8093.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8094.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8095.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8096.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8097.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8098.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8099.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8100.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8101.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8102.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8103.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8104.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8105.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8106.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8107.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8108.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8109.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8110.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8111.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8112.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8113.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8114.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8115.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8116.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8117.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8118.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8119.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8120.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8121.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8122.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8123.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8124.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8125.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8126.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8127.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8128.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8129.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8130.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8131.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8132.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8133.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8134.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8135.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8136.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8137.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8138.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8139.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8140.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8141.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8142.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8143.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8144.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8145.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8146.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8147.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8148.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8149.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8150.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8151.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8152.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8153.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8154.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8155.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8156.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8157.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8158.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8159.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8160.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8161.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8162.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8163.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8164.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8165.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8166.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8167.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8168.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8169.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8170.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8171.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8172.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8173.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8174.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8175.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8176.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8177.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8178.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8179.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8180.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8181.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8182.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8183.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8184.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8185.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8186.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8187.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8188.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8189.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8190.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8191.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8192.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8193.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8194.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8195.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8196.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8197.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8198.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8199.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8200.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8201.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8202.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8203.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8204.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8205.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8206.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8207.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8208.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8209.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8210.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8211.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8212.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8213.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8214.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8215.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8216.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8217.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8218.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8219.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8220.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8221.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8222.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8223.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8224.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8225.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8226.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8227.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8228.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8229.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8230.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8231.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8232.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8233.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8234.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8235.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8236.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8237.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8238.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8239.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8240.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8241.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8242.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8243.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8244.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8245.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8246.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8247.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8248.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8249.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8250.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8251.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8252.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8253.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8254.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8255.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8256.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8257.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8258.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8259.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8260.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8261.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8262.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8263.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8264.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8265.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8266.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8267.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8268.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8269.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8270.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8271.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8272.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8273.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8274.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8275.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8276.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8277.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8278.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8279.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8280.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8281.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8282.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8283.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8284.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8285.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8286.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8287.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8288.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8289.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8290.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8291.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8292.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8293.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8294.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8295.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8296.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8297.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8298.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8299.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8300.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8301.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8302.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8303.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8304.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8305.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8306.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8307.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8308.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8309.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8310.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8311.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8312.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8313.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8314.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8315.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8316.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8317.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8318.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8319.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8320.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8321.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8322.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8323.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8324.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8325.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8326.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8327.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8328.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8329.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8330.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8331.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8332.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8333.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8334.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8335.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8336.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8337.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8338.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8339.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8340.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8341.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8342.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8343.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8344.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8345.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8346.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8347.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8348.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8349.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8350.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8351.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8352.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8353.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8354.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8355.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8356.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8357.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8358.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8359.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8360.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8361.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8362.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8363.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8364.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8365.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8366.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8367.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8368.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8369.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8370.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8371.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8372.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8373.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8374.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8375.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8376.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8377.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8378.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8379.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8380.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8381.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8382.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8383.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8384.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8385.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8386.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8387.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8388.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8389.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8390.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8391.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8392.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8393.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8394.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8395.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8396.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8397.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8398.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8399.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8400.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8401.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8402.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8403.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8404.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8405.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8406.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8407.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8408.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8409.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8410.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8411.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8412.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8413.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8414.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8415.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8416.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8417.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8418.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8419.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8420.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8429.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8430.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8431.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8432.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8433.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8434.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8435.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8436.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8437.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8438.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8439.adx (Error whilst scanning file: I/O Error (0x00000001)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$R4MJL0X\opr8A11J.tmp/file0 (Error whilst scanning file: I/O Error (0x00220005)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RH9QS9U\opr89541.tmp/file0 (Error whilst scanning file: I/O Error (0x00220005)) F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RH9QS9U\opr89542.tmp/file0 (Error whilst scanning file: I/O Error (0x00220005)) Scanning: G:\*.* Scanning: postscan Running post-scan cleanup routine: Number of files found: 224226 Number of archives unpacked: 4261 Number of files scanned: 223736 Number of files not scanned: 490 Number of files skipped due to exclude list: 0 Number of infected files found: 0 Number of infected files repaired/deleted: 0 Number of infections removed: 0 Total scanning time: 40m 59s Code:
ATTFilter 24.10.2010 18:07:44 Aufgabe wurde gestartet 24.10.2010 18:07:45 Gefunden: Rootkit.Win32.TDSS.mbr \Device\Harddisk0\DR0 24.10.2010 18:07:45 Nicht desinfizierte Objekte: Rootkit.Win32.TDSS.mbr \Device\Harddisk0\DR0 Zurückgestellt 24.10.2010 18:12:40 Verarbeitungsfehler F:\Dokumente und Einstellungen\***\Desktop\PES09-Zeug\Vision-Patch 2009 v2.00 Chants Setup.exe Lesefehler 24.10.2010 18:17:44 Gefunden: HEUR:Exploit.Script.Generic F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\Opera\Opera\cache\g_0056\opr8ADJF.tmp/opr8ADJF/data0009 24.10.2010 18:17:44 Nicht desinfizierte Objekte: HEUR:Exploit.Script.Generic F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\Opera\Opera\cache\g_0056\opr8ADJF.tmp/opr8ADJF/data0009 Zurückgestellt 24.10.2010 18:17:44 Gefunden: HEUR:Exploit.Script.Generic F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\Opera\Opera\cache\g_0056\opr8ADJF.tmp/opr8ADJF/data0015 24.10.2010 18:17:44 Nicht desinfizierte Objekte: HEUR:Exploit.Script.Generic F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\Opera\Opera\cache\g_0056\opr8ADJF.tmp/opr8ADJF/data0015 Zurückgestellt 24.10.2010 18:18:02 Gefunden: HEUR:Exploit.Script.Generic F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\Opera\Opera\temporary_downloads\gtyrfwboitft.pdf/data0009 24.10.2010 18:18:02 Nicht desinfizierte Objekte: HEUR:Exploit.Script.Generic F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\Opera\Opera\temporary_downloads\gtyrfwboitft.pdf/data0009 Zurückgestellt 24.10.2010 18:18:03 Gefunden: Trojan-Dropper.Win32.TDSS.omg F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Temp\CA.tmp 24.10.2010 18:18:03 Nicht desinfizierte Objekte: Trojan-Dropper.Win32.TDSS.omg F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Temp\CA.tmp Zurückgestellt 24.10.2010 18:18:03 Gefunden: Trojan.Win32.Agent2.cxhd F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Temp\CC.tmp 24.10.2010 18:18:03 Nicht desinfizierte Objekte: Trojan.Win32.Agent2.cxhd F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Temp\CC.tmp Zurückgestellt 24.10.2010 18:18:03 Gefunden: HEUR:Exploit.Script.Generic F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\Opera\Opera\temporary_downloads\gtyrfwboitft.pdf/data0015 24.10.2010 18:19:38 Gefunden: Trojan-Downloader.Win32.Banload.aell F:\Programme\Free FLV Converter\FreeFLVConverter.exe 24.10.2010 18:19:38 Nicht desinfizierte Objekte: Trojan-Downloader.Win32.Banload.aell F:\Programme\Free FLV Converter\FreeFLVConverter.exe Zurückgestellt 24.10.2010 18:25:43 Gefunden: Backdoor.Win32.SdBot.pzj F:\Spiele\GTR2\GTR2.exe 24.10.2010 18:25:43 Nicht desinfizierte Objekte: Backdoor.Win32.SdBot.pzj F:\Spiele\GTR2\GTR2.exe Zurückgestellt 24.10.2010 18:37:01 Gefunden: HEUR:Exploit.Script.Generic F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\Opera\Opera\cache\g_0056\opr8ADJF.tmp/opr8ADJF/data0009 24.10.2010 18:37:15 Nicht desinfizierte Objekte: HEUR:Exploit.Script.Generic F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\Opera\Opera\cache\g_0056\opr8ADJF.tmp/opr8ADJF/data0009 Eintrag wird nicht unterstützt 24.10.2010 18:37:25 Gefunden: HEUR:Exploit.Script.Generic F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\Opera\Opera\cache\g_0056\opr8ADJF.tmp/opr8ADJF/data0015 24.10.2010 18:37:29 Nicht desinfizierte Objekte: HEUR:Exploit.Script.Generic F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\Opera\Opera\cache\g_0056\opr8ADJF.tmp/opr8ADJF/data0015 Eintrag wird nicht unterstützt 24.10.2010 18:37:29 Gefunden: HEUR:Exploit.Script.Generic F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\Opera\Opera\temporary_downloads\gtyrfwboitft.pdf/data0009 24.10.2010 18:37:51 Gefunden: HEUR:Exploit.Script.Generic F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\Opera\Opera\temporary_downloads\gtyrfwboitft.pdf/data0015 24.10.2010 18:37:52 Gefunden: Trojan-Dropper.Win32.TDSS.omg F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Temp\CA.tmp 24.10.2010 18:38:04 Gelöscht: Trojan-Dropper.Win32.TDSS.omg F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Temp\CA.tmp 24.10.2010 18:38:04 Gefunden: Trojan.Win32.Agent2.cxhd F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Temp\CC.tmp 24.10.2010 18:38:13 Gelöscht: Trojan.Win32.Agent2.cxhd F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Temp\CC.tmp 24.10.2010 18:38:13 Gefunden: Trojan-Downloader.Win32.Banload.aell F:\Programme\Free FLV Converter\FreeFLVConverter.exe 24.10.2010 18:38:22 Gelöscht: Trojan-Downloader.Win32.Banload.aell F:\Programme\Free FLV Converter\FreeFLVConverter.exe 24.10.2010 18:38:22 Gefunden: Backdoor.Win32.SdBot.pzj F:\Spiele\GTR2\GTR2.exe 24.10.2010 18:38:28 Nicht desinfizierte Objekte: Backdoor.Win32.SdBot.pzj F:\Spiele\GTR2\GTR2.exe Vom Benutzer übersprungen 24.10.2010 18:38:28 Gefunden: Rootkit.Win32.TDSS.mbr \Device\Harddisk0\DR0 24.10.2010 18:38:31 Nicht desinfizierte Objekte: Rootkit.Win32.TDSS.mbr \Device\Harddisk0\DR0 Desinfektion nicht möglich 24.10.2010 18:38:33 Nicht desinfizierte Objekte: Rootkit.Win32.TDSS.mbr \Device\Harddisk0\DR0 Vom Benutzer übersprungen 24.10.2010 18:38:33 Aufgabe wurde abgeschlossen Geändert von Divinho (24.10.2010 um 22:29 Uhr) |
25.10.2010, 10:20 | #2 | ||
/// Winkelfunktion /// TB-Süch-Tiger™ | Rootkit.Win32.TDSS.mbr - Wie entfernen?Zitat:
Zitat:
__________________ |
25.10.2010, 10:45 | #3 |
| Rootkit.Win32.TDSS.mbr - Wie entfernen? Die erste exe is von nem Spiel, die zweite ein Erweiterungspatch für eins.
__________________Hab die Dateien eigentlich manuell gelöscht aber offenbar hat es nicht funktioniert.. |
25.10.2010, 11:08 | #4 | |
/// Winkelfunktion /// TB-Süch-Tiger™ | Rootkit.Win32.TDSS.mbr - Wie entfernen?Zitat:
__________________ Logfiles bitte immer in CODE-Tags posten |
25.10.2010, 11:49 | #5 |
| Rootkit.Win32.TDSS.mbr - Wie entfernen? Spiel ist ne Originalversion, der Patch kommt aus dem Netz. Hab die zwei Dinger schon seit Ewigkeiten drauf, bisher ohne Auffälligkeiten. Das Rootkit habe ich mir über den Browser eingefangen. Die Frage ist: Was tun? Wie krieg ich das Ding gelöscht? :-( |
25.10.2010, 12:01 | #6 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Rootkit.Win32.TDSS.mbr - Wie entfernen? Bitte routinemäßig einen Vollscan mit Malwarebytes machen und Log posten. Denk daran, dass Malwarebytes vor jedem Scan manuell aktualisiert werden muss! Danach OTL: Systemscan mit OTL Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
__________________ --> Rootkit.Win32.TDSS.mbr - Wie entfernen? |
25.10.2010, 17:36 | #7 |
| Rootkit.Win32.TDSS.mbr - Wie entfernen? Vollscan mit aktualsiertem Malwarebytes wurde bereits durchgeführt, hier ist der von gestern (vergessen zu posten...). Oder nochmal das Ganze? Code:
ATTFilter Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Datenbank Version: 4938 Windows 6.1.7600 Internet Explorer 8.0.7600.16385 24.10.2010 22:33:22 mbam-log-2010-10-24 (22-33-22).txt Art des Suchlaufs: Vollständiger Suchlauf (F:\|G:\|) Durchsuchte Objekte: 268545 Laufzeit: 32 Minute(n), 50 Sekunde(n) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 0 Infizierte Registrierungswerte: 0 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 0 Infizierte Dateien: 1 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: F:\Dokumente und Einstellungen\XXX\Anwendungsdaten\Desktopicon\eBayShortcuts.exe (Adware.ADON) -> Quarantined and deleted successfully. Code:
ATTFilter OTL logfile created on: 25.10.2010 18:21:56 - Run 1 OTL by OldTimer - Version 3.2.17.1 Folder = C:\Users\XXX\Desktop 64bit- An unknown product (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 4,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 67,00% Memory free 8,00 Gb Paging File | 6,00 Gb Available in Paging File | 70,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 303,20 Gb Total Space | 187,64 Gb Free Space | 61,89% Space Free | Partition Type: NTFS Drive D: | 292,97 Gb Total Space | 185,28 Gb Free Space | 63,24% Space Free | Partition Type: NTFS Drive F: | 80,00 Gb Total Space | 33,16 Gb Free Space | 41,46% Space Free | Partition Type: NTFS Drive G: | 152,89 Gb Total Space | 84,99 Gb Free Space | 55,59% Space Free | Partition Type: NTFS Computer Name: XXXS-PC | User Name: XXX | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Users\XXX\Desktop\OTL.exe (OldTimer Tools) PRC - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe (Kaspersky Lab) PRC - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) PRC - C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation) PRC - C:\Program Files (x86)\Common Files\Realtime Soft\RTSHookInterop\x32\RTSHookInterop.exe (Realtime Soft Ltd) PRC - C:\Program Files (x86)\PostgreSQL\8.3\bin\pg_ctl.exe (PostgreSQL Global Development Group) PRC - C:\Program Files (x86)\PostgreSQL\8.3\bin\postgres.exe (PostgreSQL Global Development Group) PRC - C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation) PRC - C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corporation) PRC - C:\Users\XXX\Local Settings\Apps\F.lux\flux.exe () ========== Modules (SafeList) ========== MOD - C:\Users\XXX\Desktop\OTL.exe (OldTimer Tools) MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll (Microsoft Corporation) MOD - C:\Programme\UltraMon\RTSUltraMonHookX32.dll (Realtime Soft Ltd) MOD - C:\Programme\UltraMon\UltraMonResButtons.dll (Realtime Soft Ltd) MOD - C:\Windows\SysWOW64\msi.dll (Microsoft Corporation) MOD - C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\GdiPlus.dll (Microsoft Corporation) ========== Win32 Services (SafeList) ========== SRV:64bit: - (FLEXnet Licensing Service 64) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe (Acresso Software Inc.) SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD) SRV:64bit: - (O&O Defrag) -- C:\Program Files\OO Software\Defrag\oodag.exe (O&O Software GmbH) SRV:64bit: - (AppMgmt) -- C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) SRV - (AVP) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe (Kaspersky Lab) SRV - (Apple Mobile Device) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) SRV - (FLEXnet Licensing Service) -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Acresso Software Inc.) SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation) SRV - (pgsql-8.3) -- C:\Program Files (x86)\PostgreSQL\8.3\bin\pg_ctl.exe (PostgreSQL Global Development Group) SRV - (sftlist) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation) SRV - (sftvsa) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corporation) SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation) ========== Driver Services (SafeList) ========== DRV:64bit: - (sptd) -- C:\Windows\SysNative\drivers\sptd.sys () DRV:64bit: - (cpuz133) -- C:\Windows\SysNative\drivers\cpuz133_x64.sys (Windows (R) Win 7 DDK provider) DRV:64bit: - (USBAAPL64) -- C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.) DRV:64bit: - (KLIF) -- C:\Windows\SysNative\drivers\klif.sys (Kaspersky Lab) DRV:64bit: - (kl1) -- C:\Windows\SysNative\drivers\kl1.sys (Kaspersky Lab) DRV:64bit: - (amdkmdag) -- C:\Windows\SysNative\drivers\atipmdag.sys (ATI Technologies Inc.) DRV:64bit: - (amdkmdap) -- C:\Windows\SysNative\drivers\atikmpag.sys (Advanced Micro Devices, Inc.) DRV:64bit: - (AtiHdmiService) -- C:\Windows\SysNative\drivers\AtiHdmi.sys (ATI Technologies, Inc.) DRV:64bit: - (Sftredir) -- C:\Windows\SysNative\drivers\Sftredirlh.sys (Microsoft Corporation) DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices) DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices) DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.) DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation) DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company) DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology) DRV:64bit: - (Ntfs) -- C:\Windows\SysNative\wbem\ntfs.mof () DRV:64bit: - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek Corporation ) DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation) DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation) DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation) DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.) DRV:64bit: - (GEARAspiWDM) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.) DRV:64bit: - (klmouflt) -- C:\Windows\SysNative\drivers\klmouflt.sys (Kaspersky Lab) DRV:64bit: - (KLIM6) -- C:\Windows\SysNative\drivers\klim6.sys (Kaspersky Lab) DRV:64bit: - (KLBG) -- C:\Windows\SysNative\drivers\klbg.sys (Kaspersky Lab) DRV:64bit: - (LVUSBS64) -- C:\Windows\SysNative\drivers\LVUSBS64.sys (Logitech Inc.) DRV:64bit: - (LVRS64) -- C:\Windows\SysNative\drivers\lvrs64.sys (Logitech Inc.) DRV:64bit: - (PID_PEPI) Logitech QuickCam IM(PID_PEPI) -- C:\Windows\SysNative\drivers\LV302V64.SYS (Logitech Inc.) DRV:64bit: - (lvpepf64) -- C:\Windows\SysNative\drivers\lv302a64.sys (Logitech Inc.) DRV:64bit: - (ManyCam) -- C:\Windows\SysNative\drivers\ManyCam_x64.sys (ManyCam LLC.) DRV:64bit: - (PxHlpa64) -- C:\Windows\SysNative\drivers\PxHlpa64.sys (Sonic Solutions) DRV - (sftplay) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\drivers\sftplaylh.sys (Microsoft Corporation) DRV - (sftvol) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\drivers\sftvollh.sys (Microsoft Corporation) DRV - (sftfs) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\drivers\sftfslh.sys (Microsoft Corporation) DRV - (UltraMonUtility) -- C:\Program Files (x86)\Common Files\Realtime Soft\UltraMonMirrorDrv\x64\UltraMonUtility.sys (Realtime Soft Ltd) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = E2 B4 31 01 19 6A CB 01 [binary data] IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local ========== FireFox ========== FF - prefs.js..browser.startup.homepage: "hxxp://de.pokerstrategy.com/" FF - prefs.js..extensions.enabledItems: {73a6fe31-595d-460b-a920-fcc0f8843232}:2.0.3.5 FF - prefs.js..extensions.enabledItems: linkfilter@kaspersky.ru:9.0.0.459 FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2.2 FF - prefs.js..extensions.enabledItems: autopager@mozilla.org:0.6.1.30 FF - prefs.js..extensions.enabledItems: optimizegoogle@optimizegoogle.com:0.78.1 FF - prefs.js..extensions.enabledItems: {1018e4d6-728f-4b20-ad56-37578a4de76b}:4.0.10 FF - prefs.js..extensions.enabledItems: {0538E3E3-7E9B-4d49-8831-A227C80A7AD3}:2.0.2 FF - prefs.js..extensions.enabledItems: {1A2D0EC4-75F5-4c91-89C4-3656F6E44B68}:0.4.4 FF - prefs.js..extensions.enabledItems: personas@christopher.beard:1.6.1 FF - prefs.js..extensions.enabledItems: {EF522540-89F5-46b9-B6FE-1829E2B572C6}:4.9.2 FF - prefs.js..extensions.enabledItems: SkipScreen@SkipScreen:0.5.7amo FF - prefs.js..extensions.enabledItems: {dc572301-7619-498c-a57d-39143191b318}:0.3.8.4 FF - prefs.js..extensions.enabledItems: firegestures@xuldev.org:1.5.7 FF - prefs.js..extensions.enabledItems: youtube2mp3@mondayx.de:1.0.7 FF - prefs.js..extensions.enabledItems: {d40f5e7b-d2cf-4856-b441-cc613eeffbe3}:1.48.3 FF - prefs.js..extensions.enabledItems: spam@trashmail.net:2.0.4 FF - prefs.js..extensions.enabledItems: {446c03e0-2c35-11db-a98b-0800200c9a67}:0.5 FF - prefs.js..extensions.enabledItems: fbdislike@doweb.fr:1.2.1 FF - prefs.js..extensions.enabledItems: vshare@toolbar:1.0.0 FF - prefs.js..extensions.enabledItems: {0fa2149e-bb2c-4ac2-a8d3-479599819475}:1.7.2 FF - HKLM\software\mozilla\Mozilla Firefox 3.6\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010.09.26 18:12:19 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010.09.26 18:12:19 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Thunderbird 3.0.3\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2010.09.26 18:12:19 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Thunderbird 3.0.3\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2010.09.26 18:12:19 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Thunderbird\Extensions\\{eea12ec4-729d-4703-bc37-106ce9879ce2}: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\THBExt [2010.03.07 19:18:21 | 000,000,000 | ---D | M] [2010.03.07 21:21:21 | 000,000,000 | ---D | M] -- C:\Users\XXX\AppData\Roaming\mozilla\Extensions [2010.03.07 21:21:21 | 000,000,000 | ---D | M] (No name found) -- C:\Users\XXX\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6} [2010.10.25 00:43:15 | 000,000,000 | ---D | M] -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions [2010.10.18 19:57:03 | 000,000,000 | ---D | M] (Forecastfox Weather) -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3} [2010.10.22 22:04:16 | 000,000,000 | ---D | M] (URL Fixer) -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\{0fa2149e-bb2c-4ac2-a8d3-479599819475} [2010.10.18 19:57:03 | 000,000,000 | ---D | M] (Flagfox) -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b} [2010.03.07 21:57:46 | 000,000,000 | ---D | M] (Image Zoom) -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\{1A2D0EC4-75F5-4c91-89C4-3656F6E44B68} [2010.07.23 21:35:53 | 000,000,000 | ---D | M] (Favicon Picker 3) -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\{446c03e0-2c35-11db-a98b-0800200c9a67} [2010.09.19 20:50:55 | 000,000,000 | ---D | M] (FoxyTunes) -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\{463F6CA5-EE3C-4be1-B7E6-7FEE11953374} [2010.10.18 19:57:03 | 000,000,000 | ---D | M] (NoScript) -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232} [2010.08.18 13:32:58 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2010.08.02 09:33:04 | 000,000,000 | ---D | M] (No name found) -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3} [2010.06.18 13:28:47 | 000,000,000 | ---D | M] (No name found) -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\{dc572301-7619-498c-a57d-39143191b318} [2010.10.22 00:26:44 | 000,000,000 | ---D | M] (SearchPreview) -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\{EF522540-89F5-46b9-B6FE-1829E2B572C6} [2010.10.24 00:43:36 | 000,000,000 | ---D | M] -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\autopager@mozilla.org [2010.09.01 20:33:24 | 000,000,000 | ---D | M] -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\fbdislike@doweb.fr [2010.05.08 23:57:06 | 000,000,000 | ---D | M] -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\firegestures@xuldev.org [2010.09.01 00:39:40 | 000,000,000 | ---D | M] -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\foxyproxy@eric.h.jung [2010.05.26 23:50:20 | 000,000,000 | ---D | M] -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\optimizegoogle@optimizegoogle.com [2010.09.12 00:15:48 | 000,000,000 | ---D | M] -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\personas@christopher.beard [2010.08.12 00:37:10 | 000,000,000 | ---D | M] -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\SkipScreen@SkipScreen [2010.06.04 19:59:08 | 000,000,000 | ---D | M] -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\spam@trashmail.net [2010.09.21 20:24:47 | 000,000,000 | ---D | M] -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\vshare@toolbar [2010.05.08 23:57:06 | 000,000,000 | ---D | M] -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\xa@xmarks.com [2010.05.09 19:01:13 | 000,000,000 | ---D | M] -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\youtube2mp3@mondayx.de [2010.09.30 15:39:14 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\mozilla firefox\extensions [2010.09.30 15:39:14 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Program Files (x86)\mozilla firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} O1 HOSTS File: ([2010.07.13 23:53:55 | 000,002,293 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 hl2rcv.adobe.com O1 - Hosts: 127.0.0.1 adobeereg.com O1 - Hosts: 127.0.0.1 activate.adobe.com O1 - Hosts: 127.0.0.1 practivate.adobe.com O1 - Hosts: 127.0.0.1 ereg.adobe.com O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com O1 - Hosts: 127.0.0.1 ereg.wip3.adobe.com O1 - Hosts: 127.0.0.1 wip3.adobe.com O1 - Hosts: 127.0.0.1 activate-sea.adobe.com O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com O1 - Hosts: 127.0.0.1 3dns.adobe.com O1 - Hosts: 127.0.0.1 3dns-1.adobe.com O1 - Hosts: 127.0.0.1 3dns-2.adobe.com O1 - Hosts: 127.0.0.1 3dns-3.adobe.com O1 - Hosts: 127.0.0.1 3dns-4.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns-1.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns-2.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns-3.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns-4.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns-5.adobe.com O1 - Hosts: 127.0.0.1 hh-software.com O1 - Hosts: 127.0.0.1 www.hh-software.com O1 - Hosts: 127.0.0.1 activate.adobe.de O1 - Hosts: 23 more lines... O2:64bit: - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\x64\ievkbd.dll (Kaspersky Lab) O2:64bit: - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\x64\klwtbbho.dll (Kaspersky Lab) O2 - BHO: (ContributeBHO Class) - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files (x86)\Adobe\/Adobe Contribute CS4/contributeieplugin.dll () O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll (Kaspersky Lab) O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found. O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll (Kaspersky Lab) O3 - HKLM\..\Toolbar: (Contribute Toolbar) - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files (x86)\Adobe\/Adobe Contribute CS4/contributeieplugin.dll () O4 - HKLM..\Run: [AVP] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe (Kaspersky Lab) O4 - HKCU..\Run: [F.lux] C:\Users\XXX\Local Settings\Apps\F.lux\flux.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O8:64bit: - Extra context menu item: Hinzufügen zu Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm () O8 - Extra context menu item: Hinzufügen zu Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm () O9:64bit: - Extra Button: &Virtuelle Tastatur - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\x64\klwtbbho.dll (Kaspersky Lab) O9:64bit: - Extra Button: Li&nks untersuchen - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\x64\klwtbbho.dll (Kaspersky Lab) O9 - Extra Button: &Virtuelle Tastatur - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll (Kaspersky Lab) O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: Li&nks untersuchen - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll (Kaspersky Lab) O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O13 - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18) O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\KASPER~1\KASPER~1\x64\sbhook64.dll) - C:\PROGRA~2\KASPER~1\KASPER~1\x64\sbhook64.dll (Kaspersky Lab) O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\KASPER~1\KASPER~1\x64\kloehk.dll) - C:\PROGRA~2\KASPER~1\KASPER~1\x64\kloehk.dll (Kaspersky Lab) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20:64bit: - Winlogon\Notify\klogon: DllName - Reg Error: Key error. - C:\Windows\SysNative\klogon.dll (Kaspersky Lab) O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2007.10.02 22:25:16 | 000,000,000 | ---- | M] () - F:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\{856d04cd-5f68-11df-b58a-00241d83c24d}\Shell - "" = AutoRun O33 - MountPoints2\{856d04cd-5f68-11df-b58a-00241d83c24d}\Shell\AutoRun\command - "" = F:\setup.exe -- File not found O34 - HKLM BootExecute: (autocheck autochk *) - File not found O34 - HKLM BootExecute: (OODBS) - File not found O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2010.10.25 18:11:01 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Users\XXX\Desktop\OTL.exe [2010.10.24 22:13:17 | 002,661,704 | ---- | C] (Norman ASA) -- C:\Users\XXX\Desktop\Norman_TDSS_Cleaner.exe [2010.10.24 18:52:52 | 000,000,000 | ---D | C] -- C:\Users\XXX\AppData\Roaming\Malwarebytes [2010.10.24 18:52:43 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys [2010.10.24 18:52:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2010.10.24 18:52:41 | 000,024,664 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys [2010.10.24 18:52:41 | 000,000,000 | ---D | C] -- C:\Users\XXX\Desktop\Malwarebytes' Anti-Malware [2010.10.24 18:50:26 | 000,401,720 | ---- | C] (Trend Micro Inc.) -- C:\Users\XXX\Desktop\HiJackThis.exe [2010.10.24 18:22:32 | 000,000,000 | ---D | C] -- C:\Users\XXX\Desktop\tdsskiller [2010.10.14 01:01:56 | 000,000,000 | ---D | C] -- C:\Users\XXX\Desktop\Die_Ritter_der_Kokosnuss [2010.10.13 21:37:01 | 001,717,158 | ---- | C] (Zandry, LLC ) -- C:\Users\XXX\Desktop\TableScanTurbo_RC1-b5_Update.exe [2010.10.13 21:08:45 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\t2embed.dll [2010.10.13 21:08:45 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\t2embed.dll [2010.10.13 21:08:43 | 002,085,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ole32.dll [2010.10.13 21:08:35 | 000,483,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\StructuredQuery.dll [2010.10.13 21:08:30 | 000,633,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comctl32.dll [2010.10.13 21:08:29 | 001,024,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpmde.dll [2010.10.13 21:08:29 | 000,738,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpmde.dll [2010.10.13 21:08:28 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40.dll [2010.10.13 21:08:28 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40u.dll [2010.10.13 21:08:24 | 000,702,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2010.10.13 21:08:24 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeeds.dll [2010.10.13 21:08:24 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll [2010.10.13 21:08:24 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll [2010.10.13 21:08:23 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll [2010.10.13 21:08:22 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2010.10.13 21:08:22 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2010.10.13 21:08:21 | 000,256,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll [2010.10.13 21:08:21 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll [2010.10.13 21:08:21 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll [2010.10.13 21:08:20 | 000,482,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec [2010.10.13 21:08:20 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe [2010.10.13 21:08:20 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe [2010.10.13 21:08:19 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec [2010.10.13 21:08:09 | 014,627,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll [2010.10.13 21:08:08 | 011,406,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll [2010.10.13 21:08:07 | 012,625,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmploc.DLL [2010.10.13 21:08:07 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmploc.DLL [2010.10.13 21:08:05 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sscore.dll [2010.10.13 00:35:16 | 000,000,000 | ---D | C] -- C:\Users\XXX\Desktop\tabby [2010.10.11 12:29:17 | 000,000,000 | ---D | C] -- C:\Users\XXX\Local Settings [2010.09.30 15:41:20 | 000,000,000 | ---D | C] -- C:\Users\XXX\AppData\Roaming\skypePM [2010.09.30 15:40:40 | 000,000,000 | ---D | C] -- C:\Users\XXX\AppData\Roaming\Skype [2010.09.30 15:39:00 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype [2010.09.30 15:39:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype [2010.09.30 15:38:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype [2010.09.30 15:05:46 | 000,000,000 | ---D | C] -- C:\Users\XXX\Desktop\Kursfahrt [2010.09.30 12:08:56 | 000,000,000 | ---D | C] -- C:\Users\XXX\Desktop\Rosetta Stone [2010.09.28 18:08:02 | 000,000,000 | ---D | C] -- C:\Users\XXX\AppData\Local\Realtime Soft [2010.09.26 18:14:55 | 000,000,000 | ---D | C] -- C:\Programme\iTunes [2010.09.26 18:14:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes [2010.09.26 18:14:55 | 000,000,000 | ---D | C] -- C:\Programme\iPod [2010.09.26 18:11:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QuickTime [2010.09.26 18:11:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update [2010.09.26 18:09:45 | 000,000,000 | ---D | C] -- C:\Programme\Bonjour [2010.09.26 18:09:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bonjour [2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2010.10.25 18:23:39 | 000,021,104 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2010.10.25 18:23:39 | 000,021,104 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2010.10.25 18:17:00 | 000,001,118 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2315196117-2830573344-3934821959-1000UA.job [2010.10.25 18:16:15 | 000,001,102 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2010.10.25 18:16:09 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010.10.25 18:16:05 | 000,346,189 | ---- | M] () -- C:\Windows\SysNative\oodbs.lor [2010.10.25 18:11:04 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\XXX\Desktop\OTL.exe [2010.10.25 16:38:43 | 000,029,894 | ---- | M] () -- C:\Users\XXX\Desktop\Noten.xlsx [2010.10.25 16:32:00 | 000,001,106 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2010.10.25 00:41:20 | 000,028,524 | ---- | M] () -- C:\Users\XXX\Desktop\Supernova.xlsx [2010.10.24 22:13:18 | 002,661,704 | ---- | M] (Norman ASA) -- C:\Users\XXX\Desktop\Norman_TDSS_Cleaner.exe [2010.10.24 22:12:13 | 001,211,285 | ---- | M] () -- C:\Users\XXX\Desktop\tdsskiller(2).zip [2010.10.24 19:59:06 | 000,000,458 | RHS- | M] () -- C:\ProgramData\ntuser.pol [2010.10.24 18:52:45 | 000,000,684 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2010.10.24 18:50:26 | 000,401,720 | ---- | M] (Trend Micro Inc.) -- C:\Users\XXX\Desktop\HiJackThis.exe [2010.10.24 18:19:20 | 001,211,285 | ---- | M] () -- C:\Users\XXX\Desktop\tdsskiller.zip [2010.10.24 13:08:20 | 037,256,726 | ---- | M] () -- C:\Users\XXX\Desktop\nl200Crackpfeife.rar [2010.10.24 12:17:01 | 000,001,066 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2315196117-2830573344-3934821959-1000Core.job [2010.10.24 03:30:18 | 000,000,017 | ---- | M] () -- C:\Windows\SysWow64\shortcut_ex.dat [2010.10.20 15:39:12 | 001,350,136 | ---- | M] () -- C:\Users\XXX\Desktop\Playing history audit_21.10.html [2010.10.20 01:16:14 | 000,001,391 | ---- | M] () -- C:\Users\XXX\Desktop\c_bet_success_percentage.pt3stat [2010.10.18 22:40:01 | 045,984,520 | ---- | M] () -- C:\Users\XXX\Desktop\Sony Ericsson PC Suite 2.10.46.exe [2010.10.16 00:20:32 | 1020,487,986 | ---- | M] () -- C:\Users\XXX\Desktop\Rom.zip [2010.10.14 10:45:03 | 002,875,848 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2010.10.14 03:05:03 | 001,549,496 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2010.10.14 03:05:03 | 000,664,840 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat [2010.10.14 03:05:03 | 000,625,022 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2010.10.14 03:05:03 | 000,134,750 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat [2010.10.14 03:05:03 | 000,110,402 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2010.10.14 00:59:30 | 000,003,480 | ---- | M] () -- C:\Users\XXX\Desktop\94cc8389db694e51e026e73d7f8467b3.dlc [2010.10.13 21:37:03 | 001,717,158 | ---- | M] (Zandry, LLC ) -- C:\Users\XXX\Desktop\TableScanTurbo_RC1-b5_Update.exe [2010.10.11 12:35:59 | 001,740,414 | ---- | M] () -- C:\Users\XXX\Desktop\köln bei fandemo zum erhalt der fankultur 9.10.2010.mp3 [2010.10.03 00:10:03 | 000,163,874 | ---- | M] () -- C:\Users\XXX\Desktop\We_are_Cologne_II.jpg [2010.10.03 00:04:54 | 000,340,199 | ---- | M] () -- C:\Users\XXX\Desktop\We_are_cologne.jpg [2010.09.30 15:41:21 | 000,000,048 | -H-- | M] () -- C:\ProgramData\ezsidmv.dat [2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ] ========== Files Created - No Company Name ========== [2010.10.24 22:12:10 | 001,211,285 | ---- | C] () -- C:\Users\XXX\Desktop\tdsskiller(2).zip [2010.10.24 18:52:45 | 000,000,684 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2010.10.24 18:19:00 | 001,211,285 | ---- | C] () -- C:\Users\XXX\Desktop\tdsskiller.zip [2010.10.24 13:08:31 | 328,658,768 | ---- | C] () -- C:\Users\XXX\Desktop\nl200.avi [2010.10.24 12:58:41 | 037,256,726 | ---- | C] () -- C:\Users\XXX\Desktop\nl200Crackpfeife.rar [2010.10.24 03:30:18 | 000,000,017 | ---- | C] () -- C:\Windows\SysWow64\shortcut_ex.dat [2010.10.21 00:42:10 | 001,350,136 | ---- | C] () -- C:\Users\XXX\Desktop\Playing history audit_21.10.html [2010.10.20 01:16:13 | 000,001,391 | ---- | C] () -- C:\Users\XXX\Desktop\c_bet_success_percentage.pt3stat [2010.10.18 22:39:31 | 045,984,520 | ---- | C] () -- C:\Users\XXX\Desktop\Sony Ericsson PC Suite 2.10.46.exe [2010.10.16 00:08:02 | 1020,487,986 | ---- | C] () -- C:\Users\XXX\Desktop\Rom.zip [2010.10.14 00:59:29 | 000,003,480 | ---- | C] () -- C:\Users\XXX\Desktop\94cc8389db694e51e026e73d7f8467b3.dlc [2010.10.11 12:35:58 | 001,740,414 | ---- | C] () -- C:\Users\XXX\Desktop\köln bei fandemo zum erhalt der fankultur 9.10.2010.mp3 [2010.10.04 09:56:47 | 000,000,575 | ---- | C] () -- C:\Users\XXX\PokerTracker v3.07.4 beta-Crash_20101004.log [2010.10.03 00:10:01 | 000,163,874 | ---- | C] () -- C:\Users\XXX\Desktop\We_are_Cologne_II.jpg [2010.10.03 00:04:52 | 000,340,199 | ---- | C] () -- C:\Users\XXX\Desktop\We_are_cologne.jpg [2010.10.02 00:20:28 | 000,000,483 | ---- | C] () -- C:\Users\XXX\PokerTrackerHud-Crash_20101002.log [2010.09.30 15:41:21 | 000,000,048 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat [2010.09.26 00:55:43 | 000,001,391 | ---- | C] () -- C:\Users\XXX\PokerTrackerHud-Crash_20100926.log [2010.09.11 20:10:24 | 000,000,045 | ---- | C] () -- C:\Users\XXX\AppData\Local\machpro.dat [2010.07.23 00:22:08 | 000,000,090 | ---- | C] () -- C:\Windows\galaxy.ini [2010.04.02 17:17:34 | 000,179,091 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat [2010.03.08 09:24:02 | 000,004,865 | ---- | C] () -- C:\ProgramData\bltofzsb.qlf [2010.03.08 00:42:51 | 000,000,458 | RHS- | C] () -- C:\ProgramData\ntuser.pol [2010.03.07 19:48:58 | 001,528,242 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2009.07.14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009.07.13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll < End of report > Code:
ATTFilter OTL Extras logfile created on: 25.10.2010 18:21:56 - Run 1 OTL by OldTimer - Version 3.2.17.1 Folder = C:\Users\XXX\Desktop 64bit- An unknown product (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 4,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 67,00% Memory free 8,00 Gb Paging File | 6,00 Gb Available in Paging File | 70,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 303,20 Gb Total Space | 187,64 Gb Free Space | 61,89% Space Free | Partition Type: NTFS Drive D: | 292,97 Gb Total Space | 185,28 Gb Free Space | 63,24% Space Free | Partition Type: NTFS Drive F: | 80,00 Gb Total Space | 33,16 Gb Free Space | 41,46% Space Free | Partition Type: NTFS Drive G: | 152,89 Gb Total Space | 84,99 Gb Free Space | 55,59% Space Free | Partition Type: NTFS Computer Name: XXXS-PC | User Name: XXX | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Extra Registry (SafeList) ========== ========== File Associations ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .url[@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) .url [@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation) [HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) ========== Shell Spawning ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* File not found cmdfile [open] -- "%1" %* File not found comfile [open] -- "%1" %* File not found exefile [open] -- "%1" %* File not found helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" File not found inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* File not found regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" File not found scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S File not found txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" () Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" () Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" () Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" () Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] "DisableMonitoring" = 1 "" = [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] ========== Firewall Settings ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 0 ========== Authorized Applications List ========== ========== HKEY_LOCAL_MACHINE Uninstall List ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{104FB32A-7CE3-4C4B-B2AA-70C613FF9DFA}" = iTunes "{20140000-006D-0407-1000-0000000FF1CE}" = Microsoft Office Click-to-Run 2010 (Beta) "{295CFB7C-A57E-4313-93E7-68E7CE1D0332}" = Adobe WinSoft Linguistics Plugin x64 "{2D74E972-5A85-44DC-9193-8A302BA8C181}" = Photoshop Camera Raw_x64 "{33EB1061-ABF1-4470-A540-32E97A610536}" = Apple Mobile Device Support "{41BF0DE4-5BAE-4B88-AFD3-86A30B222186}" = Bonjour "{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 "{5F94D3B9-2B02-9C37-740B-A59C7B8D17CC}" = ATI Catalyst Install Manager "{6631325A-9B1B-4EE7-8E64-8CC4A6F10643}" = Adobe Fonts All x64 "{8875A1C0-6308-4790-8CF6-D34E89880052}" = Adobe Linguistics CS4 x64 "{887797BF-37A5-4199-B0C9-0D38D6196E9A}" = Adobe Anchor Service x64 CS4 "{8C8D673B-20FB-43E6-BCB7-9B3F78F2E762}" = Adobe Type Support x64 CS4 "{8DAA31EB-6830-4006-A99F-4DF8AB24714F}" = Adobe CSI CS4 x64 "{90BA8112-80B3-4617-A3C1-BD2771B60F74}" = Adobe CMaps x64 CS4 "{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting "{A3454894-144A-4D80-B605-C128FE0D7329}" = Adobe Drive CS4 x64 "{A792E67C-FDA4-A301-0C3C-53BA86EFBB5A}" = ccc-utility64 "{B37A99DD-88E2-4ED0-80B4-1E054AB354BF}" = Adobe InDesign CS4 Icon Handler x64 "{B49673F8-7AB6-4A14-8213-C8A7BE370010}" = UltraMon "{BC84C1E9-F4D4-4B8E-B35C-C88EEA0A5201}" = O&O Defrag Professional "{D40172D6-CE2D-4B72-BF5F-26A04A900B7B}" = Adobe Photoshop CS4 (64 Bit) "{DFFABE78-8173-4E97-9C5C-22FB26192FC5}" = Adobe PDF Library Files x64 CS4 "{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile "CPUID HWMonitor_is1" = CPUID HWMonitor 1.16 "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "WinRAR archiver" = WinRAR [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{045A9539-37B6-464D-94F9-E4ADFA856903}" = PokerStrategy.com Equilator "{05308C4E-7285-4066-BAE3-6B50DA6ED755}" = Adobe Update Manager CS4 "{054EFA56-2AC1-48F4-A883-0AB89874B972}" = Adobe Extension Manager CS4 "{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86 "{098727E1-775A-4450-B573-3F441F1CA243}" = kuler "{098A2A49-7CF3-4F08-A38D-FB879117152A}" = Adobe Color NA Extra Settings CS4 "{0A9C9BD5-8588-40D4-8A1A-860E3D2ED6EE}" = NBA 2K10 "{0B82D6C6-9ECC-4710-97AB-5CE482E72852}_is1" = TableScan Turbo v0.48c (BETA) "{0D6013AB-A0C7-41DC-973C-E93129C9A29F}" = Adobe Color JA Extra Settings CS4 "{0DC0E85F-36E4-463B-B3EA-4CD8ED2222A1}" = Adobe Color EU Recommended Settings CS4 "{0F723FC1-7606-4867-866C-CE80AD292DAF}" = Adobe CSI CS4 "{14F70205-1940-4000-88C7-BE799A6B2CAD}" = Adobe Soundbooth CS4 "{15BF7AAF-846C-4A6D-80E1-5D1FC7FB461B}" = Adobe SGM CS4 "{15FEDA5F-141C-4127-8D7E-B962D1742728}" = Adobe Photoshop CS5 "{1618734A-3957-4ADD-8199-F973763109A8}" = Adobe Anchor Service CS4 "{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}" = AdobeColorCommonSetRGB "{1DCA3EAA-6EB5-4563-A970-EA14D75037BA}" = Adobe InDesign CS4 "{1E04CB54-AF4E-4AC3-B4B7-C0A160BE57F1}" = Adobe InDesign CS4 Icon Handler "{20140062-0062-0407-0000-0000000FF1CE}" = Microsoft Office Home and Business 2010 (Beta) - Deutsch "{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool "{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT "{26A24AE4-039D-4CA4-87B4-2F83216018FF}" = Java(TM) 6 Update 18 "{29F0D740-8B92-4AFE-ADC2-5CA1EA70C1F5}" = iTunesControl 0.51 "{2BA722D1-48D1-406E-9123-8AE5431D63EF}" = Windows Live Fotogalerie "{2BAF2B96-7560-48B4-87D4-10178DDBE217}" = Adobe InDesign CS4 Application Feature Set Files (Roman) "{30C8AA56-4088-426F-91D1-0EDFD3A25678}" = Adobe Dreamweaver CS4 "{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}" = PDF Settings CS4 "{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}" = Adobe XMP Panels CS4 "{3A6829EF-0791-4FDD-9382-C690DD0821B9}" = Adobe Flash Player 10 ActiveX "{3D2C9DE6-9ADE-4252-A241-E43723B0CE02}" = Adobe Color - Photoshop Specific CS4 "{3D6A24EA-A543-6C84-351E-D7646E7AB86E}" = Catalyst Control Center InstallProxy "{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}" = Adobe WinSoft Linguistics Plugin "{3EFEF049-23D4-4B46-8903-4592FEA51018}" = Windows Live Movie Maker "{3FC03467-2094-4BEC-B187-FD2CCF6FE720}" = PokerStrategy.com Elephant "{41E654A9-26D0-4EAC-854B-0FA824FFFABB}" = Windows Live Messenger "{4286E640-B5FB-11DF-AC4B-005056C00008}" = Google Earth "{428FDF9F-E010-4C4C-A8BB-156960AFCA1C}" = Adobe Fireworks CS4 "{43509E18-076E-40FE-AF38-CA5ED400A5A9}" = Pixel Bender Toolkit "{44E240EC-2224-4078-A88B-2CEE0D3016EF}" = Adobe After Effects CS4 Presets "{453E5D8E-D924-4D9B-0081-13E98CF963E7}" = Madden NFL 2003 "{45EC816C-0771-4C14-AE6D-72D1B578F4C8}" = Adobe After Effects CS4 "{47C6F987-685A-41AE-B092-E75B277AEE39}" = Adobe Flash CS4 Extension - Flash Lite STI others "{47CAFF95-C3D8-ABF2-70BC-89DE00D8FB19}" = Catalyst Control Center Graphics Light "{4943EFF5-229F-435D-BEA9-BE3CAEA783A7}" = Adobe Service Manager Extension "{4962EBAC-AE7C-1B22-1EA0-0916A7E40954}" = Catalyst Control Center Graphics Full Existing "{49A62E2B-B35C-941D-DF48-601207CF14C0}" = Catalyst Control Center Graphics Previews Common "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4A52555C-032A-4083-BDD9-6A85ABFB39A8}" = Adobe SING CS4 "{52232EF4-CC12-4C21-ABCF-ADB79618302D}" = Adobe Soundbooth CS4 Codecs "{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent "{561968FD-56A1-49FD-9ED0-F55482C7C5BC}" = Adobe Media Encoder CS4 Exporter "{5EAD5443-7194-46CC-A055-428E6ABB1BAF}" = Adobe Encore CS4 "{5FC68772-6D56-41C6-9DF1-24E868198AE6}" = Windows Live Call "{60DB5894-B5A1-4B62-B0F3-669A22C0EE5D}" = Adobe Dynamiclink Support "{61D6891E-E822-4448-9F9A-0AAAAEB6AF6C}" = Adobe Creative Suite 4 Master Collection "{63C24A08-70F3-4C8E-B9FB-9F21A903801D}" = Adobe Color Video Profiles CS CS4 "{63E5CDBF-8214-4F03-84F8-CD3CE48639AD}" = Adobe Photoshop CS4 Support "{67A9747A-E1F5-4E9A-81CC-12B5D5B81B6E}" = Adobe After Effects CS4 Third Party Content "{68243FF8-83CA-466B-B2B8-9F99DA5479C4}" = AdobeColorCommonSetCMYK "{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin "{6A490E11-6C8A-777C-4E00-43F3CC16A1EC}" = CCC Help English "{6DED41BC-C9EF-4330-B4E5-46CB2C5C6E2D}" = No23 Recorder "{7406DF60-016D-476B-A2C7-55D997592047}" = Adobe OnLocation CS4 "{76618402-179D-4699-A66B-D351C59436BC}" = Windows Live Sync "{77919701-C3E7-09AA-D2F7-DBF42CD7C13D}" = Catalyst Control Center HydraVision Full "{78B2F09F-BDC7-7865-CF4C-233B64A3BE51}" = Catalyst Control Center Graphics Full New "{7CC7BDD5-6F10-4724-96A1-EAC7D9F2831C}" = Adobe InDesign CS4 Common Base Files "{7FC7AD70-1DF3-4B84-9AA2-4FB680F45572}_is1" = Hex-Editor MX "{8186FF34-D389-4B7E-9A2F-C197585BCFBD}" = Adobe Media Encoder CS4 Importer "{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}" = Adobe Type Support CS4 "{83877DB1-8B77-45BC-AB43-2BAC22E093E0}" = Adobe Bridge CS4 "{842B4B72-9E8F-4962-B3C1-1C422A5C4434}" = Suite Shared Configuration CS4 "{87532CAB-7932-4F84-8937-823337622807}" = Adobe Illustrator CS4 "{87BB78C4-F36D-4D93-A7C7-F80F18219848}" = AMD DnD V1.0.19 "{8D7133DE-27D2-47E5-B248-4180278D32AA}" = Catalyst Control Center - Branding "{8FB1B528-E260-451E-9B55-E9152F94B80B}" = Microsoft Games for Windows - LIVE Redistributable "{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86 "{931AB7EA-3656-4BB7-864D-022B09E3DD67}" = Adobe Linguistics CS4 "{94D398EB-D2FD-4FD1-B8C4-592635E8A191}" = Adobe CMaps CS4 "{974C4B12-4D02-4879-85E0-61C95CC63E9E}" = Fallout 3 "{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars "{9D8B0949-7C47-476F-9F06-F900D3B078EA}" = Kaspersky Internet Security 2010 "{A6EC82A0-1414-475D-8AFD-469089F3080D}" = Adobe Contribute CS4 "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{B05DE7B7-0B40-4411-BD4B-222CAE2D8F15}" = Adobe MotionPicture Color Files CS4 "{B15381DD-FF97-4FCD-A881-ED4DB0975500}" = Adobe Color Video Profiles AE CS4 "{B169BC97-B8AA-4ACA-9CF2-9D0FF5BABDF7}" = Adobe Premiere Pro CS4 Functional Content "{B29AD377-CC12-490A-A480-1452337C618D}" = Connect "{B3276CB1-20B6-4AF9-AAEC-E72C83816495}" = IKEA Home Planner "{B65BA85C-0A27-4BC0-A22D-A66F0E5B9494}" = Adobe Photoshop CS4 "{B823632F-3B72-4514-8861-B961CE263224}" = PostgreSQL 8.3 "{BB4E33EC-8181-4685-96F7-8554293DEC6A}" = Adobe Output Module "{BD3374D3-C2E6-42B7-A80B-E850B6886246}" = Adobe Flash CS4 STI-other "{BE9CEAAA-F069-4331-BF2F-8D350F6504F4}" = Adobe Media Encoder CS4 Additional Exporter "{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update "{C52E3EC1-048C-45E1-8D53-10B0C6509683}" = Adobe Default Language CS4 "{C938BE91-3BB5-4B84-9EF6-88F0505D0038}" = Adobe Premiere Pro CS4 Third Party Content "{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1 "{CC65635F-3A3A-48CB-8976-A1F32ED1ECA4}" = TableNinja "{CC75AB5C-2110-4A7F-AF52-708680D22FE8}" = Photoshop Camera Raw "{CF846DE0-A5F9-11D5-0089-C400C04FAE70}" = NHL 2002 Demo "{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2 "{D241BBEC-B1C7-7953-EDDE-D90A654A8D2C}" = ccc-core-static "{D499F8DE-3F31-4900-9157-61061613704B}" = Adobe Premiere Pro CS4 "{D5068583-D569-468B-9755-5FBF5848F46F}" = Sony Picture Utility "{D5C24E77-099E-9B84-5BE2-708E70B938A9}" = Catalyst Control Center Core Implementation "{DABF43D9-1104-4764-927B-5BED1274A3B0}" = Runtime "{DAEAFD68-BB4A-4507-A241-C8804D2EA66D}" = Apple Application Support "{DC4757E2-BAE3-0BFE-C6E5-576CB911FF52}" = Catalyst Control Center Graphics Previews Vista "{DEB90B8E-0DCB-48CE-B90E-8842A2BD643E}" = Adobe Media Encoder CS4 "{E7004147-2CCA-431C-AA05-2AB166B9785D}" = QuickTime "{E8EE9410-8AC4-4F43-A626-DDECA75C79F3}" = Adobe Setup "{ED00D08A-3C5F-488D-93A0-A04F21F23956}" = Windows Live Communications Platform "{EE353798-E875-42E0-B58D-7E6696182EA8}" = Adobe Media Encoder CS4 Dolby "{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU] "{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard "{F0E64E2E-3A60-40D8-A55D-92F6831875DA}" = Adobe Search for Help "{F6E99614-F042-4459-82B7-8B38B2601356}" = Adobe Flash CS4 "{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}" = Adobe ExtendScript Toolkit CS4 "{F8FF18EE-264A-43FD-B2F6-5EAD40798C2F}" = Windows Live Essentials "{F93C84A6-0DC6-42AF-89FA-776F7C377353}" = Adobe PDF Library Files CS4 "{F97E3841-CA9D-4964-9D64-26066241D26F}" = Microsoft Games for Windows - LIVE "{FB2A5FCC-B81B-48C2-A009-7804694D83E9}" = Adobe Encore CS4 Codecs "{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}" = Adobe Fonts All "Activision_THPS2UninstallKey" = Tony Hawk's Pro Skater 2 "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "Adobe Shockwave Player" = Adobe Shockwave Player 11.5 "Adobe_697a06b96d8bcbe2d77b88e7d5448d0" = Adobe Creative Suite 4 Master Collection "Alien Arena 2010_is1" = Alien Arena 2010 "AutoHotkey" = AutoHotkey 1.0.48.05 "CCleaner" = CCleaner "EVEREST Home Edition_is1" = EVEREST Home Edition v2.20 "Foxit Reader" = Foxit Reader "FoxyTunesForFirefox" = FoxyTunes for Firefox "HijackThis" = HijackThis 2.0.2 "InstallShield_{045A9539-37B6-464D-94F9-E4ADFA856903}" = PokerStrategy.com Equilator "InstallShield_{3FC03467-2094-4BEC-B187-FD2CCF6FE720}" = PokerStrategy.com Elephant "InstallWIX_{9D8B0949-7C47-476F-9F06-F900D3B078EA}" = Kaspersky Internet Security 2010 "KeePassPasswordSafe2_is1" = KeePass Password Safe 2.10 "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware "ManyCam" = ManyCam 2.4 (remove only) "Messenger Plus! Live" = Messenger Plus! Live "Mozilla Firefox (3.6)" = Mozilla Firefox (3.6) "Mozilla Thunderbird (3.0.3)" = Mozilla Thunderbird (3.0.3) "Office14.Click2Run" = Microsoft Office Click-to-Run 2010 (Beta) "OpenAL" = OpenAL "PokerStars" = PokerStars "PokerTracker3" = PokerTracker 3 (remove only) "PowerMenu" = PowerMenu 1.51 "SopCast" = SopCast 3.2.9 "StarCraft II" = StarCraft II "VLC media player" = VLC media player 1.0.5 "WinLiveSuite_Wave3" = Windows Live Essentials ========== HKEY_CURRENT_USER Uninstall List ========== [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Flux" = F.lux "Google Chrome" = Google Chrome "HHLoader" = HHLoader "Octoshape add-in for Adobe Flash Player" = Octoshape add-in for Adobe Flash Player ========== Last 10 Event Log Errors ========== [ Application Events ] Error - 24.10.2010 18:33:10 | Computer Name = XXXs-PC | Source = Bonjour Service | ID = 100 Description = 508: ERROR: read_msg errno 10054 (Eine vorhandene Verbindung wurde vom Remotehost geschlossen.) Error - 24.10.2010 18:33:10 | Computer Name = XXXs-PC | Source = Bonjour Service | ID = 100 Description = 512: ERROR: read_msg errno 10054 (Eine vorhandene Verbindung wurde vom Remotehost geschlossen.) Error - 24.10.2010 18:33:10 | Computer Name = XXXs-PC | Source = Bonjour Service | ID = 100 Description = 416: ERROR: read_msg errno 10054 (Eine vorhandene Verbindung wurde vom Remotehost geschlossen.) Error - 24.10.2010 18:33:10 | Computer Name = XXXs-PC | Source = Bonjour Service | ID = 100 Description = 220: ERROR: read_msg errno 10054 (Eine vorhandene Verbindung wurde vom Remotehost geschlossen.) Error - 24.10.2010 18:40:35 | Computer Name = XXXs-PC | Source = Application Virtualization Client | ID = 6096 Description = [de-DE] {tid=1234:usr=XXX} An error occurred while opening the virtual registry (section: false), rc: 07B01F0C-0000004A Error - 24.10.2010 18:40:35 | Computer Name = XXXs-PC | Source = Application Virtualization Client | ID = 6096 Description = [de-DE] {tid=1234} An error occurred while opening the virtual registry (section: false), rc: 07B01F0C-0000004A Error - 25.10.2010 03:10:46 | Computer Name = XXXs-PC | Source = Application Virtualization Client | ID = 6096 Description = [de-DE] {tid=704:usr=XXX} An error occurred while opening the virtual registry (section: false), rc: 07B01F0C-0000004A Error - 25.10.2010 03:10:46 | Computer Name = XXXs-PC | Source = Application Virtualization Client | ID = 6096 Description = [de-DE] {tid=704} An error occurred while opening the virtual registry (section: false), rc: 07B01F0C-0000004A Error - 25.10.2010 10:01:38 | Computer Name = XXXs-PC | Source = Application Virtualization Client | ID = 6096 Description = [de-DE] {tid=13F0:usr=XXX} An error occurred while opening the virtual registry (section: false), rc: 07B01F0C-0000004A Error - 25.10.2010 10:01:38 | Computer Name = XXXs-PC | Source = Application Virtualization Client | ID = 6096 Description = [de-DE] {tid=13F0} An error occurred while opening the virtual registry (section: false), rc: 07B01F0C-0000004A [ System Events ] Error - 25.10.2010 12:16:46 | Computer Name = XXXs-PC | Source = Service Control Manager | ID = 7001 Description = Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2140993535 Error - 25.10.2010 12:16:57 | Computer Name = XXXs-PC | Source = PNRPSvc | ID = 102 Description = Error - 25.10.2010 12:16:57 | Computer Name = XXXs-PC | Source = PNRPSvc | ID = 102 Description = Error - 25.10.2010 12:16:57 | Computer Name = XXXs-PC | Source = PNRPSvc | ID = 102 Description = Error - 25.10.2010 12:16:57 | Computer Name = XXXs-PC | Source = Service Control Manager | ID = 7023 Description = Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: %%-2140993535 Error - 25.10.2010 12:16:57 | Computer Name = XXXs-PC | Source = Service Control Manager | ID = 7001 Description = Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2140993535 Error - 25.10.2010 12:16:57 | Computer Name = XXXs-PC | Source = Service Control Manager | ID = 7001 Description = Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2140993535 Error - 25.10.2010 12:16:57 | Computer Name = XXXs-PC | Source = Service Control Manager | ID = 7023 Description = Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: %%-2140993535 Error - 25.10.2010 12:16:57 | Computer Name = XXXs-PC | Source = Service Control Manager | ID = 7001 Description = Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2140993535 Error - 25.10.2010 12:16:57 | Computer Name = XXXs-PC | Source = Service Control Manager | ID = 7023 Description = Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: %%-2140993535 < End of report > |
25.10.2010, 19:02 | #8 | |
/// Winkelfunktion /// TB-Süch-Tiger™ | Rootkit.Win32.TDSS.mbr - Wie entfernen?Zitat:
Ich bin mir ziemlich sicher, dass Du einige gecrackte Programme installiert hast oder hattest.
__________________ Logfiles bitte immer in CODE-Tags posten |
25.10.2010, 19:06 | #9 | |
| Rootkit.Win32.TDSS.mbr - Wie entfernen?Zitat:
Habe wie gesagt die Platte an nem komplett anderen fremden PC hängen da er nicht mehr bootet, kA was der Nutzer auf diesem gemacht hat. |
25.10.2010, 19:39 | #10 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Rootkit.Win32.TDSS.mbr - Wie entfernen? Achja richtig. Die Geschichte. Da macht es dann keinen Sinn, das "Fremdsystem" zu analysieren. Welches Windows ist auf Deiner Platte installiert? Edit es ist ja ein WinXP Bau mal die Platte wieder in Deinen Rechner ein. Boote von der Windows-CD und geh in die Wiederherstellungskonsole. Tipp dort den Befehl fixmbr ein (dann Enter, mit j bestätigen) danach den Befehl fixboot (dann Enter, mit j bestätigen) Mit exit (dann enter drücken) wird der Rechner neu gestartet. Bootet Windows XP wieder?
__________________ Logfiles bitte immer in CODE-Tags posten |
01.11.2010, 17:30 | #11 |
| Rootkit.Win32.TDSS.mbr - Wie entfernen? Die Wiederherstellungskonsole steht nicht zur Auswahl und scheint somit nicht installiert zu sein. Also muss erstmal ein Diskettenlaufwerk dran, ich bin begeistert! Edit: Ich weiß nicht warum aber bei eingelegter XP-CD bootet Windows wieder ganz normal und ich kann auch wieder fehlerfrei auf beide Partitionen zugreifen! Werde aber trotzdem sicherheitshalber mal die Wiederherstellungskonsole nachinstallieren. Habe ich jetzt eine Möglichkeit irgendwie dieses Rootkit zu entfernen? Geändert von Divinho (01.11.2010 um 17:49 Uhr) |
01.11.2010, 18:23 | #12 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Rootkit.Win32.TDSS.mbr - Wie entfernen? Bootet Dein Rechner wieder so wie er soll? Aber das nur bei eingelegter Windows-CD? Wenn ja, das kann so nicht sein. Entweder er bootet von der CD oder von der Festplatte. Wenn von der Festplatte gebootet wird, ist es völlig irrelevant ob eine CD eingelegt ist oder nicht.
__________________ Logfiles bitte immer in CODE-Tags posten |
01.11.2010, 18:34 | #13 | |
| Rootkit.Win32.TDSS.mbr - Wie entfernen?Zitat:
Den TDSS-Killer habe ich nochmal durchlaufen lassen und er findet nichts mehr!? |
01.11.2010, 19:04 | #14 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Rootkit.Win32.TDSS.mbr - Wie entfernen? Dann müssen wir jetzt wo der Rechner wieder vernünftig bootet das infizierte Windows überprüfen: Bitte routinemäßig einen Vollscan mit Malwarebytes machen und Log posten. Denk daran, dass Malwarebytes vor jedem Scan manuell aktualisiert werden muss! Danach OTL: Systemscan mit OTL Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
__________________ Logfiles bitte immer in CODE-Tags posten |
Themen zu Rootkit.Win32.TDSS.mbr - Wie entfernen? |
0x00000001, avp.exe, bho, desktop, entfernen, fehler, festplatte, google, hijack, internet explorer, kaspersky, mozilla, object, plug-in, recycle.bin, registry value, rootkit, rootkit.win32.tdss.tdl4, security, server, syswow64, tastatur, virus eingefangen, wie entfernen, wie entfernen?, zugriff verweigert |