Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Rootkit.Win32.TDSS.mbr - Wie entfernen? (https://www.trojaner-board.de/92180-rootkit-win32-tdss-mbr-entfernen.html)

Divinho 24.10.2010 22:23

Rootkit.Win32.TDSS.mbr - Wie entfernen?
 
Hallo zusammen,

habe mir leider bei WinXP o.g. Virus eingefangen und bekomme ihn nicht gelöscht. Bin die bestehenden Threads hier bereits durchgegangen (leider erfolglos) und habe auch Google bemüht! TDSS-Killer, der da ja helfen soll schmeißt einen "process error" raus :rolleyes:

Habe Logs mit Hijackthis, TDSS-Killer, Malwarebytes gemacht und angehängt.

Weiterer Hinweis: Seitdem dieses Rootkit sich eingenistet hat, bootet der Rechner nicht mehr (Platte hängt jetzt an anderem PC!) und auf die 2. Partition kann über Arbeitsplatz nicht mehr zugegriffen werden ("Zugriff verweigert"). In der Computerverwaltung wird die Platte aber komplett erkannt (Festplatte auf Fehler überprüfen blieb erfolglos). Hauptwunsch wäre das Ding wieder bootfähig zu bekommen und auf beide Partitionen zugreifen zu können.

Falls ich noch irgendwas machen kann, bin ich sehr dankbar! Wenn Angaben fehlen bitte ich dies zu entschuldigen.

Code:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:44:50, on 24.10.2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16671)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
C:\Users\***\Local Settings\Apps\F.lux\flux.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Common Files\Realtime Soft\RTSHookInterop\x32\RTSHookInterop.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Common Files\Realtime Soft\RTSHookInterop\x32\RTSHookInterop.exe
C:\Users\***\Desktop\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files (x86)\Adobe\/Adobe Contribute CS4/contributeieplugin.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files (x86)\Adobe\/Adobe Contribute CS4/contributeieplugin.dll
O4 - HKLM\..\Run: [AVP] "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [F.lux] "C:\Users\Simon\Local Settings\Apps\F.lux\flux.exe" /noshow
O4 - HKCU\..\Run: [Google Update] "C:\Users\Simon\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETZWERKDIENST')
O4 - Global Startup: UltraMon.lnk = ?
O8 - Extra context menu item: Hinzufügen zu Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm
O9 - Extra button: &Virtuelle Tastatur - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Li&nks untersuchen - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O13 - Gopher Prefix:
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~2\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~2\KASPER~1\KASPER~1\sbhook.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: ASP.NET-Zustandsdienst (aspnet_state) - Unknown owner - C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
O23 - Service: Dienst "Bonjour" (Bonjour Service) - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FLEXnet Licensing Service 64 - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: O&O Defrag - O&O Software GmbH - C:\Program Files\OO Software\Defrag\oodag.exe
O23 - Service: PostgreSQL Database Server 8.3 (pgsql-8.3) - PostgreSQL Global Development Group - C:\Program Files (x86)\PostgreSQL\8.3\bin\pg_ctl.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9095 bytes

Code:

2010/10/24 22:02:05.0028        TDSS rootkit removing tool 2.4.4.0 Oct  4 2010 09:06:59
2010/10/24 22:02:05.0028        ================================================================================
2010/10/24 22:02:05.0028        SystemInfo:
2010/10/24 22:02:05.0028       
2010/10/24 22:02:05.0028        OS Version: 6.1.7600 ServicePack: 0.0
2010/10/24 22:02:05.0028        Product type: Workstation
2010/10/24 22:02:05.0028        ComputerName: ***-PC
2010/10/24 22:02:05.0028        UserName: ***
2010/10/24 22:02:05.0028        Windows directory: C:\Windows
2010/10/24 22:02:05.0028        System windows directory: C:\Windows
2010/10/24 22:02:05.0028        Running under WOW64
2010/10/24 22:02:05.0028        Processor architecture: Intel x64
2010/10/24 22:02:05.0028        Number of processors: 4
2010/10/24 22:02:05.0028        Page size: 0x1000
2010/10/24 22:02:05.0028        Boot type: Normal boot
2010/10/24 22:02:05.0028        ================================================================================
2010/10/24 22:02:05.0028        Utility is running under WOW64
2010/10/24 22:02:05.0496        Initialize success
2010/10/24 22:02:07.0805        ================================================================================
2010/10/24 22:02:07.0805        Scan started
2010/10/24 22:02:07.0805        Mode: Manual;
2010/10/24 22:02:07.0805        ================================================================================
2010/10/24 22:02:09.0926        1394ohci        (1b00662092f9f9568b995902f0cc40d5) C:\Windows\system32\DRIVERS\1394ohci.sys
2010/10/24 22:02:09.0958        ACPI            (6f11e88748cdefd2f76aa215f97ddfe5) C:\Windows\system32\DRIVERS\ACPI.sys
2010/10/24 22:02:09.0989        AcpiPmi        (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys
2010/10/24 22:02:10.0051        adfs            (2f0683fd2df1d92e891caca14b45a8c1) C:\Windows\system32\drivers\adfs.sys
2010/10/24 22:02:10.0098        adp94xx        (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
2010/10/24 22:02:10.0145        adpahci        (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
2010/10/24 22:02:10.0176        adpu320        (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
2010/10/24 22:02:10.0238        AFD            (b9384e03479d2506bc924c16a3db87bc) C:\Windows\system32\drivers\afd.sys
2010/10/24 22:02:10.0270        agp440          (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys
2010/10/24 22:02:10.0301        aliide          (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys
2010/10/24 22:02:10.0348        amdide          (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys
2010/10/24 22:02:10.0426        AmdK8          (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
2010/10/24 22:02:10.0582        amdkmdag        (1147f8816d4ddc9fc43a40df52f40500) C:\Windows\system32\DRIVERS\atipmdag.sys
2010/10/24 22:02:10.0660        amdkmdap        (ebc963d8f5b04c98f5ef597aae79cddd) C:\Windows\system32\DRIVERS\atikmpag.sys
2010/10/24 22:02:10.0706        AmdPPM          (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
2010/10/24 22:02:10.0722        amdsata        (7a4b413614c055935567cf88a9734d38) C:\Windows\system32\DRIVERS\amdsata.sys
2010/10/24 22:02:10.0753        amdsbs          (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
2010/10/24 22:02:10.0800        amdxata        (b4ad0cacbab298671dd6f6ef7e20679d) C:\Windows\system32\DRIVERS\amdxata.sys
2010/10/24 22:02:10.0831        AppID          (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys
2010/10/24 22:02:10.0878        arc            (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
2010/10/24 22:02:10.0909        arcsas          (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
2010/10/24 22:02:10.0972        AsyncMac        (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
2010/10/24 22:02:10.0987        atapi          (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys
2010/10/24 22:02:11.0034        AtiHdmiService  (77c149e6d702737b2e372dee166faef8) C:\Windows\system32\drivers\AtiHdmi.sys
2010/10/24 22:02:11.0096        b06bdrv        (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
2010/10/24 22:02:11.0143        b57nd60a        (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
2010/10/24 22:02:11.0206        Beep            (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
2010/10/24 22:02:11.0330        blbdrive        (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
2010/10/24 22:02:11.0408        bowser          (91ce0d3dc57dd377e690a2d324022b08) C:\Windows\system32\DRIVERS\bowser.sys
2010/10/24 22:02:11.0424        BrFiltLo        (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
2010/10/24 22:02:11.0471        BrFiltUp        (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
2010/10/24 22:02:11.0518        Brserid        (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
2010/10/24 22:02:11.0549        BrSerWdm        (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
2010/10/24 22:02:11.0596        BrUsbMdm        (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
2010/10/24 22:02:11.0627        BrUsbSer        (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
2010/10/24 22:02:11.0674        BTHMODEM        (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
2010/10/24 22:02:11.0705        cdfs            (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
2010/10/24 22:02:11.0736        cdrom          (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys
2010/10/24 22:02:11.0783        circlass        (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
2010/10/24 22:02:11.0861        CLFS            (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
2010/10/24 22:02:11.0908        CmBatt          (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
2010/10/24 22:02:11.0939        cmdide          (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys
2010/10/24 22:02:11.0986        CNG            (f95fd4cb7da00ba2a63ce9f6b5c053e1) C:\Windows\system32\Drivers\cng.sys
2010/10/24 22:02:12.0017        Compbatt        (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
2010/10/24 22:02:12.0064        CompositeBus    (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys
2010/10/24 22:02:12.0126        cpuz133        (95c88d25e211a4d52a82c53e5d93e634) C:\Windows\system32\drivers\cpuz133_x64.sys
2010/10/24 22:02:12.0220        crcdisk        (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
2010/10/24 22:02:12.0282        CSC            (4a6173c2279b498cd8f57cae504564cb) C:\Windows\system32\drivers\csc.sys
2010/10/24 22:02:12.0376        DfsC            (3f1dc527070acb87e40afe46ef6da749) C:\Windows\system32\Drivers\dfsc.sys
2010/10/24 22:02:12.0407        discache        (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
2010/10/24 22:02:12.0438        Disk            (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
2010/10/24 22:02:12.0485        drmkaud        (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
2010/10/24 22:02:12.0547        DXGKrnl        (ebce0b0924835f635f620d19f0529dce) C:\Windows\System32\drivers\dxgkrnl.sys
2010/10/24 22:02:12.0656        ebdrv          (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
2010/10/24 22:02:12.0719        elxstor        (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
2010/10/24 22:02:12.0766        ErrDev          (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys
2010/10/24 22:02:12.0828        exfat          (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
2010/10/24 22:02:12.0875        fastfat        (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
2010/10/24 22:02:12.0922        fdc            (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
2010/10/24 22:02:12.0953        FileInfo        (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
2010/10/24 22:02:12.0984        Filetrace      (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
2010/10/24 22:02:13.0046        flpydisk        (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
2010/10/24 22:02:13.0093        FltMgr          (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys
2010/10/24 22:02:13.0124        FsDepends      (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
2010/10/24 22:02:13.0140        Fs_Rec          (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
2010/10/24 22:02:13.0202        fvevol          (ae87ba80d0ec3b57126ed2cdc15b24ed) C:\Windows\system32\DRIVERS\fvevol.sys
2010/10/24 22:02:13.0265        gagp30kx        (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
2010/10/24 22:02:13.0312        GEARAspiWDM    (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
2010/10/24 22:02:13.0374        hcw85cir        (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
2010/10/24 22:02:13.0436        HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\Windows\system32\drivers\HdAudio.sys
2010/10/24 22:02:13.0499        HDAudBus        (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys
2010/10/24 22:02:13.0530        HidBatt        (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
2010/10/24 22:02:13.0561        HidBth          (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
2010/10/24 22:02:13.0608        HidIr          (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
2010/10/24 22:02:13.0670        HidUsb          (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys
2010/10/24 22:02:13.0717        HpSAMD          (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys
2010/10/24 22:02:13.0780        HTTP            (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys
2010/10/24 22:02:13.0811        hwpolicy        (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys
2010/10/24 22:02:13.0858        i8042prt        (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys
2010/10/24 22:02:13.0889        iaStorV        (d83efb6fd45df9d55e9a1afc63640d50) C:\Windows\system32\DRIVERS\iaStorV.sys
2010/10/24 22:02:13.0951        iirsp          (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
2010/10/24 22:02:13.0982        intelide        (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys
2010/10/24 22:02:14.0029        intelppm        (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
2010/10/24 22:02:14.0060        IpFilterDriver  (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys
2010/10/24 22:02:14.0107        IPMIDRV        (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys
2010/10/24 22:02:14.0170        IPNAT          (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
2010/10/24 22:02:14.0279        IRENUM          (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
2010/10/24 22:02:14.0310        isapnp          (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys
2010/10/24 22:02:14.0341        iScsiPrt        (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys
2010/10/24 22:02:14.0404        kbdclass        (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
2010/10/24 22:02:14.0466        kbdhid          (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys
2010/10/24 22:02:14.0513        kl1            (ae1589b6bf163797514cd90924361e29) C:\Windows\system32\DRIVERS\kl1.sys
2010/10/24 22:02:14.0560        KLBG            (3b11e0c94599aadc172f977a3d4b2b33) C:\Windows\system32\DRIVERS\klbg.sys
2010/10/24 22:02:14.0575        KLIF            (e692707f4e1bb2240b232d911ae4c5c5) C:\Windows\system32\DRIVERS\klif.sys
2010/10/24 22:02:14.0606        KLIM6          (3d217d7d89a4ba705d4ca14268d7d7b2) C:\Windows\system32\DRIVERS\klim6.sys
2010/10/24 22:02:14.0653        klmouflt        (0bd3e79be9f60418d20315d50bdbba86) C:\Windows\system32\DRIVERS\klmouflt.sys
2010/10/24 22:02:14.0684        KSecDD          (e8b6fcc9c83535c67f835d407620bd27) C:\Windows\system32\Drivers\ksecdd.sys
2010/10/24 22:02:14.0716        KSecPkg        (a8c63880ef6f4d3fec7b616b9c060215) C:\Windows\system32\Drivers\ksecpkg.sys
2010/10/24 22:02:14.0747        ksthunk        (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
2010/10/24 22:02:14.0809        lltdio          (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
2010/10/24 22:02:14.0903        LSI_FC          (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
2010/10/24 22:02:14.0981        LSI_SAS        (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
2010/10/24 22:02:15.0028        LSI_SAS2        (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
2010/10/24 22:02:15.0074        LSI_SCSI        (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
2010/10/24 22:02:15.0106        luafv          (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
2010/10/24 22:02:15.0152        lvpepf64        (07389f6925e490d2db7882110e99921c) C:\Windows\system32\DRIVERS\lv302a64.sys
2010/10/24 22:02:15.0199        LVRS64          (7f0ba3a6e8996f15693c6b7d81da049e) C:\Windows\system32\DRIVERS\lvrs64.sys
2010/10/24 22:02:15.0277        LVUSBS64        (5c3ff68267a5d242ee79ee01b993d6ce) C:\Windows\system32\drivers\LVUSBS64.sys
2010/10/24 22:02:15.0324        ManyCam        (d33e2b74cf8b3a652bf0a9fbd068e87a) C:\Windows\system32\DRIVERS\ManyCam_x64.sys
2010/10/24 22:02:15.0371        megasas        (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
2010/10/24 22:02:15.0402        MegaSR          (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
2010/10/24 22:02:15.0433        Modem          (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
2010/10/24 22:02:15.0480        monitor        (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
2010/10/24 22:02:15.0496        mouclass        (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
2010/10/24 22:02:15.0542        mouhid          (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
2010/10/24 22:02:15.0589        mountmgr        (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys
2010/10/24 22:02:15.0605        mpio            (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys
2010/10/24 22:02:15.0652        mpsdrv          (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
2010/10/24 22:02:15.0683        MRxDAV          (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys
2010/10/24 22:02:15.0730        mrxsmb          (767a4c3bcf9410c286ced15a2db17108) C:\Windows\system32\DRIVERS\mrxsmb.sys
2010/10/24 22:02:15.0761        mrxsmb10        (920ee0ff995fcfdeb08c41605a959e1c) C:\Windows\system32\DRIVERS\mrxsmb10.sys
2010/10/24 22:02:15.0792        mrxsmb20        (740d7ea9d72c981510a5292cf6adc941) C:\Windows\system32\DRIVERS\mrxsmb20.sys
2010/10/24 22:02:15.0808        msahci          (5c37497276e3b3a5488b23a326a754b7) C:\Windows\system32\DRIVERS\msahci.sys
2010/10/24 22:02:15.0839        msdsm          (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys
2010/10/24 22:02:15.0901        Msfs            (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
2010/10/24 22:02:15.0917        mshidkmdf      (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
2010/10/24 22:02:15.0948        msisadrv        (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys
2010/10/24 22:02:15.0979        MSKSSRV        (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
2010/10/24 22:02:16.0042        MSPCLOCK        (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
2010/10/24 22:02:16.0073        MSPQM          (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
2010/10/24 22:02:16.0104        MsRPC          (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys
2010/10/24 22:02:16.0120        mssmbios        (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys
2010/10/24 22:02:16.0135        MSTEE          (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
2010/10/24 22:02:16.0182        MTConfig        (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
2010/10/24 22:02:16.0229        Mup            (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
2010/10/24 22:02:16.0276        NativeWifiP    (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
2010/10/24 22:02:16.0400        NDIS            (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys
2010/10/24 22:02:16.0432        NdisCap        (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
2010/10/24 22:02:16.0494        NdisTapi        (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
2010/10/24 22:02:16.0541        Ndisuio        (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys
2010/10/24 22:02:16.0588        NdisWan        (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys
2010/10/24 22:02:16.0619        NDProxy        (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys
2010/10/24 22:02:16.0666        NetBIOS        (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
2010/10/24 22:02:16.0697        NetBT          (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys
2010/10/24 22:02:16.0759        nfrd960        (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
2010/10/24 22:02:16.0790        Npfs            (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
2010/10/24 22:02:16.0806        nsiproxy        (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
2010/10/24 22:02:16.0853        Ntfs            (356698a13c4630d5b31c37378d469196) C:\Windows\system32\drivers\Ntfs.sys
2010/10/24 22:02:16.0900        Null            (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
2010/10/24 22:02:16.0915        nvraid          (3e38712941e9bb4ddbee00affe3fed3d) C:\Windows\system32\DRIVERS\nvraid.sys
2010/10/24 22:02:16.0993        nvstor          (477dc4d6deb99be37084c9ac6d013da1) C:\Windows\system32\DRIVERS\nvstor.sys
2010/10/24 22:02:17.0040        nv_agp          (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys
2010/10/24 22:02:17.0087        ohci1394        (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys
2010/10/24 22:02:17.0134        Parport        (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
2010/10/24 22:02:17.0165        partmgr        (7daa117143316c4a1537e074a5a9eaf0) C:\Windows\system32\drivers\partmgr.sys
2010/10/24 22:02:17.0180        pci            (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys
2010/10/24 22:02:17.0180        pciide          (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys
2010/10/24 22:02:17.0212        pcmcia          (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
2010/10/24 22:02:17.0243        pcw            (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
2010/10/24 22:02:17.0274        PEAUTH          (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
2010/10/24 22:02:17.0399        PID_PEPI        (087a343dfc337f37723dd7912de6b6cd) C:\Windows\system32\DRIVERS\LV302V64.SYS
2010/10/24 22:02:17.0524        PptpMiniport    (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys
2010/10/24 22:02:17.0570        Processor      (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
2010/10/24 22:02:17.0617        Psched          (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys
2010/10/24 22:02:17.0648        PxHlpa64        (901dba98359966a62a6548596988e931) C:\Windows\system32\Drivers\PxHlpa64.sys
2010/10/24 22:02:17.0695        ql2300          (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
2010/10/24 22:02:17.0742        ql40xx          (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
2010/10/24 22:02:17.0773        QWAVEdrv        (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
2010/10/24 22:02:17.0820        RasAcd          (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
2010/10/24 22:02:17.0867        RasAgileVpn    (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
2010/10/24 22:02:17.0914        Rasl2tp        (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys
2010/10/24 22:02:17.0945        RasPppoe        (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
2010/10/24 22:02:17.0992        RasSstp        (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
2010/10/24 22:02:18.0038        rdbss          (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys
2010/10/24 22:02:18.0054        rdpbus          (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
2010/10/24 22:02:18.0085        RDPCDD          (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
2010/10/24 22:02:18.0132        RDPDR          (9706b84dbabfc4b4ca46c5a82b14dfa3) C:\Windows\system32\drivers\rdpdr.sys
2010/10/24 22:02:18.0179        RDPENCDD        (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
2010/10/24 22:02:18.0194        RDPREFMP        (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
2010/10/24 22:02:18.0226        RDPWD          (8a3e6bea1c53ea6177fe2b6eba2c80d7) C:\Windows\system32\drivers\RDPWD.sys
2010/10/24 22:02:18.0272        rdyboost        (634b9a2181d98f15941236886164ec8b) C:\Windows\system32\drivers\rdyboost.sys
2010/10/24 22:02:18.0335        rspndr          (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
2010/10/24 22:02:18.0366        RTL8167        (baefee35d27a5440d35092ce10267bec) C:\Windows\system32\DRIVERS\Rt64win7.sys
2010/10/24 22:02:18.0397        s3cap          (88af6e02ab19df7fd07ecdf9c91e9af6) C:\Windows\system32\DRIVERS\vms3cap.sys
2010/10/24 22:02:18.0444        sbp2port        (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys
2010/10/24 22:02:18.0475        scfilter        (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys
2010/10/24 22:02:18.0522        secdrv          (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
2010/10/24 22:02:18.0569        Serenum        (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
2010/10/24 22:02:18.0616        Serial          (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
2010/10/24 22:02:18.0647        sermouse        (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
2010/10/24 22:02:18.0709        sffdisk        (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys
2010/10/24 22:02:18.0740        sffp_mmc        (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys
2010/10/24 22:02:18.0756        sffp_sd        (5588b8c6193eb1522490c122eb94dffa) C:\Windows\system32\DRIVERS\sffp_sd.sys
2010/10/24 22:02:18.0787        sfloppy        (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
2010/10/24 22:02:18.0865        sftfs          (6532f56e1bd7fe50e1352b909530c651) C:\Program Files (x86)\Microsoft Application Virtualization Client\drivers\sftfslh.sys
2010/10/24 22:02:18.0928        sftplay        (e6ff02b1bd81ea2f6894066d5cb6d91e) C:\Program Files (x86)\Microsoft Application Virtualization Client\drivers\sftplaylh.sys
2010/10/24 22:02:18.0974        Sftredir        (cffb30b10c66f9a8c6a70d105bd4de8d) C:\Windows\system32\DRIVERS\Sftredirlh.sys
2010/10/24 22:02:18.0990        sftvol          (baf32ef413025559c23754afcabca90a) C:\Program Files (x86)\Microsoft Application Virtualization Client\drivers\sftvollh.sys
2010/10/24 22:02:19.0037        SiSRaid2        (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
2010/10/24 22:02:19.0052        SiSRaid4        (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
2010/10/24 22:02:19.0099        Smb            (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
2010/10/24 22:02:19.0146        spldr          (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
2010/10/24 22:02:19.0208        sptd            (602884696850c86434530790b110e8eb) C:\Windows\system32\Drivers\sptd.sys
2010/10/24 22:02:19.0208        Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: 602884696850c86434530790b110e8eb
2010/10/24 22:02:19.0208        sptd - detected Locked file (1)
2010/10/24 22:02:19.0240        srv            (de6f5658da951c4bc8e498570b5b0d5f) C:\Windows\system32\DRIVERS\srv.sys
2010/10/24 22:02:19.0333        srv2            (4d33d59c0b930c523d29f9bd40cda9d2) C:\Windows\system32\DRIVERS\srv2.sys
2010/10/24 22:02:19.0411        srvnet          (5a663fd67049267bc5c3f3279e631ffb) C:\Windows\system32\DRIVERS\srvnet.sys
2010/10/24 22:02:19.0505        stexstor        (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
2010/10/24 22:02:19.0536        storflt        (ffd7a6f15b14234b5b0e5d49e7961895) C:\Windows\system32\DRIVERS\vmstorfl.sys
2010/10/24 22:02:19.0567        storvsc        (8fccbefc5c440b3c23454656e551b09a) C:\Windows\system32\DRIVERS\storvsc.sys
2010/10/24 22:02:19.0614        swenum          (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys
2010/10/24 22:02:19.0692        Tcpip          (90a2d722cf64d911879d6c4a4f802a4d) C:\Windows\system32\drivers\tcpip.sys
2010/10/24 22:02:19.0770        TCPIP6          (90a2d722cf64d911879d6c4a4f802a4d) C:\Windows\system32\DRIVERS\tcpip.sys
2010/10/24 22:02:19.0801        tcpipreg        (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys
2010/10/24 22:02:19.0832        TDPIPE          (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
2010/10/24 22:02:19.0864        TDTCP          (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys
2010/10/24 22:02:19.0910        tdx            (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys
2010/10/24 22:02:19.0942        TermDD          (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys
2010/10/24 22:02:19.0988        tssecsrv        (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys
2010/10/24 22:02:20.0051        tunnel          (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys
2010/10/24 22:02:20.0082        uagp35          (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
2010/10/24 22:02:20.0129        udfs            (d47baead86c65d4f4069d7ce0a4edceb) C:\Windows\system32\DRIVERS\udfs.sys
2010/10/24 22:02:20.0176        uliagpkx        (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys
2010/10/24 22:02:20.0285        UltraMonUtility (694bcf23662f97d987cf4c6739c35f8b) C:\Program Files (x86)\Common Files\Realtime Soft\UltraMonMirrorDrv\x64\UltraMonUtility.sys
2010/10/24 22:02:20.0363        umbus          (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys
2010/10/24 22:02:20.0425        UmPass          (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
2010/10/24 22:02:20.0488        USBAAPL64      (cd03479f2da26500b203ed075c146a7a) C:\Windows\system32\Drivers\usbaapl64.sys
2010/10/24 22:02:20.0581        usbaudio        (77b01bc848298223a95d4ec23e1785a1) C:\Windows\system32\drivers\usbaudio.sys
2010/10/24 22:02:20.0644        usbccgp        (b26afb54a534d634523c4fb66765b026) C:\Windows\system32\DRIVERS\usbccgp.sys
2010/10/24 22:02:20.0690        usbcir          (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys
2010/10/24 22:02:20.0722        usbehci        (2ea4aff7be7eb4632e3aa8595b0803b5) C:\Windows\system32\DRIVERS\usbehci.sys
2010/10/24 22:02:20.0768        usbhub          (4c9042b8df86c1e8e6240c218b99b39b) C:\Windows\system32\DRIVERS\usbhub.sys
2010/10/24 22:02:20.0831        usbohci        (58e546bbaf87664fc57e0f6081e4f609) C:\Windows\system32\DRIVERS\usbohci.sys
2010/10/24 22:02:20.0862        usbprint        (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
2010/10/24 22:02:20.0909        USBSTOR        (080d3820da6c046be82fc8b45a893e83) C:\Windows\system32\DRIVERS\USBSTOR.SYS
2010/10/24 22:02:20.0971        usbuhci        (81fb2216d3a60d1284455d511797db3d) C:\Windows\system32\DRIVERS\usbuhci.sys
2010/10/24 22:02:21.0018        vdrvroot        (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys
2010/10/24 22:02:21.0049        vga            (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
2010/10/24 22:02:21.0080        VgaSave        (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
2010/10/24 22:02:21.0127        vhdmp          (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys
2010/10/24 22:02:21.0174        viaide          (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys
2010/10/24 22:02:21.0221        vmbus          (1501699d7eda984abc4155a7da5738d1) C:\Windows\system32\DRIVERS\vmbus.sys
2010/10/24 22:02:21.0268        VMBusHID        (ae10c35761889e65a6f7176937c5592c) C:\Windows\system32\DRIVERS\VMBusHID.sys
2010/10/24 22:02:21.0299        volmgr          (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys
2010/10/24 22:02:21.0330        volmgrx        (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys
2010/10/24 22:02:21.0361        volsnap        (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys
2010/10/24 22:02:21.0470        vsmraid        (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
2010/10/24 22:02:21.0564        vwifibus        (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\System32\drivers\vwifibus.sys
2010/10/24 22:02:21.0611        WacomPen        (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
2010/10/24 22:02:21.0658        WANARP          (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
2010/10/24 22:02:21.0704        Wanarpv6        (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
2010/10/24 22:02:21.0736        Wd              (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
2010/10/24 22:02:21.0782        Wdf01000        (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
2010/10/24 22:02:21.0829        WfpLwf          (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
2010/10/24 22:02:21.0876        WIMMount        (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
2010/10/24 22:02:21.0954        WinUsb          (817eaff5d38674edd7713b9dfb8e9791) C:\Windows\system32\DRIVERS\WinUsb.sys
2010/10/24 22:02:22.0001        WmiAcpi        (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys
2010/10/24 22:02:22.0032        ws2ifsl        (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
2010/10/24 22:02:22.0079        WudfPf          (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers\WudfPf.sys
2010/10/24 22:02:22.0141        WUDFRd          (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS\WUDFRd.sys
2010/10/24 22:02:22.0235        \HardDisk1\MBR - detected Rootkit.Win32.TDSS.tdl4 (0)
2010/10/24 22:02:22.0235        ================================================================================
2010/10/24 22:02:22.0235        Scan finished
2010/10/24 22:02:22.0235        ================================================================================
2010/10/24 22:02:22.0235        Detected object count: 2
2010/10/24 22:02:25.0355        Locked file(sptd) - User select action: Skip
2010/10/24 22:02:25.0402        \HardDisk1\MBR - processing error
2010/10/24 22:02:25.0402        Rootkit.Win32.TDSS.tdl4(\HardDisk1\MBR) - User select action: Cure

Code:

Norman TDSS Cleaner
Version 1.9.3
Copyright © 1990 - 2010, Norman ASA. Built 2010/05/25 11:56:03

Norman Scanner Engine Version: 6.04.08
Nvcbin.def Version: 6.04.00, Date: 2010/05/25 11:56:03, Variants: 57644

Scan started: 2010/10/24 22:36:30

Running pre-scan cleanup routine:
Operating System: Microsoft Windows 7 6.1.7600
Logged on user: Simons-PC\Simon

Set registry value: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLS = "C:\PROGRA~2\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~2\KASPER~1\KASPER~1\sbhook.dll" -> ""
Changed service configuration for "WinDefend" from 0x00000004 and 0x00000001 to 0x00000002 and 0xFFFFFFFF
Started service "WinDefend"


Scanning running processes and process memory...

Number of processes/threads found: 2204
Number of processes/threads scanned: 2204
Number of processes/threads not scanned: 0
Number of infected processes/threads terminated: 0
Total scanning time: 29s


Scanning file system...

Scanning: prescan

Scanning: C:\Windows\system32\drivers\*

Scanning: F:\*.*

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/abseits_8421.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/abseits_8422.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/abseits_8423.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/abseits_8424.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/abseits_8425.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/abseits_8426.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/abseits_8427.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/abseits_8428.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7955.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7956.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7957.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7958.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7959.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7960.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7961.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7962.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7963.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7964.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7965.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7966.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7967.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7968.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7969.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7970.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7971.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7972.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7973.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7974.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7975.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7976.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7977.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7978.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7979.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7980.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7981.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7982.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7983.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7984.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7985.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7986.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7987.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7988.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7989.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7990.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7991.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7992.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7993.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7994.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7995.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7996.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7997.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7998.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_7999.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8000.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8001.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8002.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8003.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8004.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8005.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8006.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8007.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8008.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8009.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8010.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8011.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8012.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8013.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8014.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8015.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8016.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8017.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8018.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8019.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8020.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8021.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8022.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8023.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8024.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8025.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8026.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8027.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8028.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8029.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8030.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8031.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8032.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8033.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8034.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8035.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8036.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8037.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8038.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8039.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8040.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8041.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8042.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8043.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8044.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8045.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8046.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8047.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8048.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8049.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8050.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8051.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8052.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8053.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8054.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8055.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8056.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8057.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8058.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8059.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8060.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8061.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8062.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8063.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8064.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8065.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8066.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8067.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8068.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8069.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8070.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8071.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8072.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8073.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8074.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8075.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8076.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8077.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8078.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8079.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8080.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8081.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8082.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8083.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8084.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8085.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8086.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8087.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8088.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8089.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8090.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8091.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8092.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8093.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8094.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8095.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8096.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8097.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8098.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8099.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8100.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8101.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8102.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8103.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8104.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8105.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8106.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8107.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8108.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8109.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8110.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8111.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8112.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8113.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8114.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8115.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8116.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8117.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8118.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8119.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8120.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8121.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8122.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8123.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8124.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8125.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8126.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8127.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8128.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8129.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8130.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8131.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8132.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8133.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8134.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8135.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8136.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8137.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8138.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8139.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8140.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8141.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8142.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8143.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8144.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8145.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8146.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8147.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8148.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8149.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8150.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8151.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8152.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8153.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8154.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8155.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8156.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8157.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8158.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8159.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8160.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8161.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8162.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8163.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8164.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8165.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8166.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8167.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8168.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8169.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8170.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8171.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8172.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8173.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8174.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8175.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8176.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8177.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8178.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8179.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8180.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8181.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8182.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8183.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8184.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8185.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8186.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8187.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8188.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8189.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8190.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8191.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8192.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8193.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8194.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8195.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8196.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8197.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8198.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8199.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8200.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8201.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8202.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8203.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8204.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8205.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8206.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8207.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8208.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8209.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8210.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8211.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8212.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8213.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8214.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8215.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8216.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8217.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8218.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8219.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8220.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8221.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8222.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8223.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8224.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8225.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8226.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8227.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8228.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8229.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8230.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8231.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8232.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8233.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8234.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8235.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8236.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8237.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8238.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8239.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8240.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8241.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8242.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8243.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8244.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8245.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8246.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8247.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8248.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8249.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8250.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8251.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8252.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8253.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8254.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8255.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8256.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8257.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8258.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8259.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8260.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8261.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8262.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8263.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8264.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8265.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8266.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8267.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8268.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8269.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8270.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8271.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8272.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8273.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8274.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8275.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8276.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8277.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8278.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8279.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8280.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8281.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8282.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8283.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8284.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8285.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8286.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8287.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8288.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8289.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8290.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8291.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8292.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8293.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8294.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8295.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8296.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8297.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8298.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8299.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8300.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8301.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8302.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8303.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8304.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8305.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8306.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8307.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8308.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8309.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8310.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8311.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8312.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8313.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8314.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8315.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8316.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8317.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8318.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8319.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8320.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8321.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8322.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8323.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8324.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8325.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8326.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8327.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8328.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8329.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8330.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8331.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8332.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8333.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8334.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8335.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8336.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8337.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8338.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8339.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8340.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8341.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8342.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8343.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8344.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8345.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8346.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8347.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8348.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8349.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8350.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8351.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8352.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8353.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8354.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8355.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8356.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8357.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8358.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8359.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8360.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8361.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8362.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8363.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8364.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8365.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8366.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8367.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8368.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8369.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8370.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8371.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8372.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8373.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8374.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8375.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8376.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8377.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8378.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8379.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8380.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8381.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8382.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8383.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8384.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8385.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8386.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8387.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8388.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8389.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8390.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8391.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8392.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8393.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8394.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8395.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8396.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8397.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8398.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8399.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8400.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8401.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8402.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8403.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8404.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8405.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8406.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8407.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8408.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8409.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8410.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8411.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8412.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8413.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8414.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8415.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8416.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8417.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8418.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8419.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8420.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8429.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8430.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8431.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8432.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8433.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8434.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8435.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8436.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8437.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8438.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RYWN4VJ.7z/Tormusik by Baris/unnamed_8439.adx (Error whilst scanning file: I/O Error (0x00000001))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$R4MJL0X\opr8A11J.tmp/file0 (Error whilst scanning file: I/O Error (0x00220005))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RH9QS9U\opr89541.tmp/file0 (Error whilst scanning file: I/O Error (0x00220005))

F:\$RECYCLE.BIN\S-1-5-21-2315196117-2830573344-3934821959-1000\$RH9QS9U\opr89542.tmp/file0 (Error whilst scanning file: I/O Error (0x00220005))

Scanning: G:\*.*

Scanning: postscan


Running post-scan cleanup routine:

Number of files found: 224226
Number of archives unpacked: 4261
Number of files scanned: 223736
Number of files not scanned: 490
Number of files skipped due to exclude list: 0
Number of infected files found: 0
Number of infected files repaired/deleted: 0
Number of infections removed: 0
Total scanning time: 40m 59s

Code:

24.10.2010 18:07:44        Aufgabe wurde gestartet                               
24.10.2010 18:07:45        Gefunden: Rootkit.Win32.TDSS.mbr        \Device\Harddisk0\DR0                       
24.10.2010 18:07:45        Nicht desinfizierte Objekte: Rootkit.Win32.TDSS.mbr        \Device\Harddisk0\DR0        Zurückgestellt               
24.10.2010 18:12:40        Verarbeitungsfehler        F:\Dokumente und Einstellungen\***\Desktop\PES09-Zeug\Vision-Patch 2009 v2.00 Chants Setup.exe        Lesefehler               
24.10.2010 18:17:44        Gefunden: HEUR:Exploit.Script.Generic        F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\Opera\Opera\cache\g_0056\opr8ADJF.tmp/opr8ADJF/data0009                       
24.10.2010 18:17:44        Nicht desinfizierte Objekte: HEUR:Exploit.Script.Generic        F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\Opera\Opera\cache\g_0056\opr8ADJF.tmp/opr8ADJF/data0009        Zurückgestellt               
24.10.2010 18:17:44        Gefunden: HEUR:Exploit.Script.Generic        F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\Opera\Opera\cache\g_0056\opr8ADJF.tmp/opr8ADJF/data0015                       
24.10.2010 18:17:44        Nicht desinfizierte Objekte: HEUR:Exploit.Script.Generic        F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\Opera\Opera\cache\g_0056\opr8ADJF.tmp/opr8ADJF/data0015        Zurückgestellt               
24.10.2010 18:18:02        Gefunden: HEUR:Exploit.Script.Generic        F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\Opera\Opera\temporary_downloads\gtyrfwboitft.pdf/data0009                       
24.10.2010 18:18:02        Nicht desinfizierte Objekte: HEUR:Exploit.Script.Generic        F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\Opera\Opera\temporary_downloads\gtyrfwboitft.pdf/data0009        Zurückgestellt               
24.10.2010 18:18:03        Gefunden: Trojan-Dropper.Win32.TDSS.omg        F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Temp\CA.tmp                       
24.10.2010 18:18:03        Nicht desinfizierte Objekte: Trojan-Dropper.Win32.TDSS.omg        F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Temp\CA.tmp        Zurückgestellt               
24.10.2010 18:18:03        Gefunden: Trojan.Win32.Agent2.cxhd        F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Temp\CC.tmp                       
24.10.2010 18:18:03        Nicht desinfizierte Objekte: Trojan.Win32.Agent2.cxhd        F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Temp\CC.tmp        Zurückgestellt               
24.10.2010 18:18:03        Gefunden: HEUR:Exploit.Script.Generic        F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\Opera\Opera\temporary_downloads\gtyrfwboitft.pdf/data0015                       
24.10.2010 18:19:38        Gefunden: Trojan-Downloader.Win32.Banload.aell        F:\Programme\Free FLV Converter\FreeFLVConverter.exe                       
24.10.2010 18:19:38        Nicht desinfizierte Objekte: Trojan-Downloader.Win32.Banload.aell        F:\Programme\Free FLV Converter\FreeFLVConverter.exe        Zurückgestellt               
24.10.2010 18:25:43        Gefunden: Backdoor.Win32.SdBot.pzj        F:\Spiele\GTR2\GTR2.exe                       
24.10.2010 18:25:43        Nicht desinfizierte Objekte: Backdoor.Win32.SdBot.pzj        F:\Spiele\GTR2\GTR2.exe        Zurückgestellt               
24.10.2010 18:37:01        Gefunden: HEUR:Exploit.Script.Generic        F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\Opera\Opera\cache\g_0056\opr8ADJF.tmp/opr8ADJF/data0009                       
24.10.2010 18:37:15        Nicht desinfizierte Objekte: HEUR:Exploit.Script.Generic        F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\Opera\Opera\cache\g_0056\opr8ADJF.tmp/opr8ADJF/data0009        Eintrag wird nicht unterstützt               
24.10.2010 18:37:25        Gefunden: HEUR:Exploit.Script.Generic        F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\Opera\Opera\cache\g_0056\opr8ADJF.tmp/opr8ADJF/data0015                       
24.10.2010 18:37:29        Nicht desinfizierte Objekte: HEUR:Exploit.Script.Generic        F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\Opera\Opera\cache\g_0056\opr8ADJF.tmp/opr8ADJF/data0015        Eintrag wird nicht unterstützt               
24.10.2010 18:37:29        Gefunden: HEUR:Exploit.Script.Generic        F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\Opera\Opera\temporary_downloads\gtyrfwboitft.pdf/data0009                       
24.10.2010 18:37:51        Gefunden: HEUR:Exploit.Script.Generic        F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\Opera\Opera\temporary_downloads\gtyrfwboitft.pdf/data0015                       
24.10.2010 18:37:52        Gefunden: Trojan-Dropper.Win32.TDSS.omg        F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Temp\CA.tmp                       
24.10.2010 18:38:04        Gelöscht: Trojan-Dropper.Win32.TDSS.omg        F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Temp\CA.tmp                       
24.10.2010 18:38:04        Gefunden: Trojan.Win32.Agent2.cxhd        F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Temp\CC.tmp                       
24.10.2010 18:38:13        Gelöscht: Trojan.Win32.Agent2.cxhd        F:\Dokumente und Einstellungen\***\Lokale Einstellungen\Temp\CC.tmp                       
24.10.2010 18:38:13        Gefunden: Trojan-Downloader.Win32.Banload.aell        F:\Programme\Free FLV Converter\FreeFLVConverter.exe                       
24.10.2010 18:38:22        Gelöscht: Trojan-Downloader.Win32.Banload.aell        F:\Programme\Free FLV Converter\FreeFLVConverter.exe                       
24.10.2010 18:38:22        Gefunden: Backdoor.Win32.SdBot.pzj        F:\Spiele\GTR2\GTR2.exe                       
24.10.2010 18:38:28        Nicht desinfizierte Objekte: Backdoor.Win32.SdBot.pzj        F:\Spiele\GTR2\GTR2.exe        Vom Benutzer übersprungen               
24.10.2010 18:38:28        Gefunden: Rootkit.Win32.TDSS.mbr        \Device\Harddisk0\DR0                       
24.10.2010 18:38:31        Nicht desinfizierte Objekte: Rootkit.Win32.TDSS.mbr        \Device\Harddisk0\DR0        Desinfektion nicht möglich               
24.10.2010 18:38:33        Nicht desinfizierte Objekte: Rootkit.Win32.TDSS.mbr        \Device\Harddisk0\DR0        Vom Benutzer übersprungen               
24.10.2010 18:38:33        Aufgabe wurde abgeschlossen


cosinus 25.10.2010 10:20

Zitat:

Nicht desinfizierte Objekte: Backdoor.Win32.SdBot.pzj F:\Spiele\GTR2\GTR2.exe Vom Benutzer übersprungen
Warum nicht gelöscht? Was ist das für eine Datei?

Zitat:

F:\Dokumente und Einstellungen\***\Desktop\PES09-Zeug\Vision-Patch 2009 v2.00 Chants Setup.exe
Und was ist das? :wtf:

Divinho 25.10.2010 10:45

Die erste exe is von nem Spiel, die zweite ein Erweiterungspatch für eins.

Hab die Dateien eigentlich manuell gelöscht aber offenbar hat es nicht funktioniert..:confused:

cosinus 25.10.2010 11:08

Zitat:

Die erste exe is von nem Spiel, die zweite ein Erweiterungspatch für eins.
Quelle, genauer Sinn und Zweck? Ohne Grund wird da nicht ein SdBot gefunden!

Divinho 25.10.2010 11:49

Spiel ist ne Originalversion, der Patch kommt aus dem Netz. Hab die zwei Dinger schon seit Ewigkeiten drauf, bisher ohne Auffälligkeiten. Das Rootkit habe ich mir über den Browser eingefangen.

Die Frage ist: Was tun? Wie krieg ich das Ding gelöscht? :-(

cosinus 25.10.2010 12:01

Bitte routinemäßig einen Vollscan mit malwarebytes machen und Log posten.
Denk daran, dass Malwarebytes vor jedem Scan manuell aktualisiert werden muss!

Danach OTL:

Systemscan mit OTL

Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
  • Doppelklick auf die OTL.exe
  • Vista User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen
  • Oben findest Du ein Kästchen mit Output. Wähle bitte Minimal Output
  • Unter Extra Registry, wähle bitte Use SafeList
  • Klicke nun auf Run Scan links oben
  • Wenn der Scan beendet wurde werden 2 Logfiles erstellt
  • Poste die Logfiles hier in den Thread.

Divinho 25.10.2010 17:36

Vollscan mit aktualsiertem Malwarebytes wurde bereits durchgeführt, hier ist der von gestern (vergessen zu posten...). Oder nochmal das Ganze?

Code:

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Datenbank Version: 4938

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

24.10.2010 22:33:22
mbam-log-2010-10-24 (22-33-22).txt

Art des Suchlaufs: Vollständiger Suchlauf (F:\|G:\|)
Durchsuchte Objekte: 268545
Laufzeit: 32 Minute(n), 50 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 1

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
F:\Dokumente und Einstellungen\XXX\Anwendungsdaten\Desktopicon\eBayShortcuts.exe (Adware.ADON) -> Quarantined and deleted successfully.

OTL:

Code:

OTL logfile created on: 25.10.2010 18:21:56 - Run 1
OTL by OldTimer - Version 3.2.17.1    Folder = C:\Users\XXX\Desktop
64bit- An unknown product  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
4,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 67,00% Memory free
8,00 Gb Paging File | 6,00 Gb Available in Paging File | 70,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 303,20 Gb Total Space | 187,64 Gb Free Space | 61,89% Space Free | Partition Type: NTFS
Drive D: | 292,97 Gb Total Space | 185,28 Gb Free Space | 63,24% Space Free | Partition Type: NTFS
Drive F: | 80,00 Gb Total Space | 33,16 Gb Free Space | 41,46% Space Free | Partition Type: NTFS
Drive G: | 152,89 Gb Total Space | 84,99 Gb Free Space | 55,59% Space Free | Partition Type: NTFS
 
Computer Name: XXXS-PC | User Name: XXX | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\XXX\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe (Kaspersky Lab)
PRC - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\Common Files\Realtime Soft\RTSHookInterop\x32\RTSHookInterop.exe (Realtime Soft Ltd)
PRC - C:\Program Files (x86)\PostgreSQL\8.3\bin\pg_ctl.exe (PostgreSQL Global Development Group)
PRC - C:\Program Files (x86)\PostgreSQL\8.3\bin\postgres.exe (PostgreSQL Global Development Group)
PRC - C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corporation)
PRC - C:\Users\XXX\Local Settings\Apps\F.lux\flux.exe ()
 
 
========== Modules (SafeList) ==========
 
MOD - C:\Users\XXX\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll (Microsoft Corporation)
MOD - C:\Programme\UltraMon\RTSUltraMonHookX32.dll (Realtime Soft Ltd)
MOD - C:\Programme\UltraMon\UltraMonResButtons.dll (Realtime Soft Ltd)
MOD - C:\Windows\SysWOW64\msi.dll (Microsoft Corporation)
MOD - C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\GdiPlus.dll (Microsoft Corporation)
 
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - (FLEXnet Licensing Service 64) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe (Acresso Software Inc.)
SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD)
SRV:64bit: - (O&O Defrag) -- C:\Program Files\OO Software\Defrag\oodag.exe (O&O Software GmbH)
SRV:64bit: - (AppMgmt) -- C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV - (AVP) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe (Kaspersky Lab)
SRV - (Apple Mobile Device) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (FLEXnet Licensing Service) -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Acresso Software Inc.)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (pgsql-8.3) -- C:\Program Files (x86)\PostgreSQL\8.3\bin\pg_ctl.exe (PostgreSQL Global Development Group)
SRV - (sftlist) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation)
SRV - (sftvsa) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corporation)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - (sptd) -- C:\Windows\SysNative\drivers\sptd.sys ()
DRV:64bit: - (cpuz133) -- C:\Windows\SysNative\drivers\cpuz133_x64.sys (Windows (R) Win 7 DDK provider)
DRV:64bit: - (USBAAPL64) -- C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.)
DRV:64bit: - (KLIF) -- C:\Windows\SysNative\drivers\klif.sys (Kaspersky Lab)
DRV:64bit: - (kl1) -- C:\Windows\SysNative\drivers\kl1.sys (Kaspersky Lab)
DRV:64bit: - (amdkmdag) -- C:\Windows\SysNative\drivers\atipmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (amdkmdap) -- C:\Windows\SysNative\drivers\atikmpag.sys (Advanced Micro Devices, Inc.)
DRV:64bit: - (AtiHdmiService) -- C:\Windows\SysNative\drivers\AtiHdmi.sys (ATI Technologies, Inc.)
DRV:64bit: - (Sftredir) -- C:\Windows\SysNative\drivers\Sftredirlh.sys (Microsoft Corporation)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (Ntfs) -- C:\Windows\SysNative\wbem\ntfs.mof ()
DRV:64bit: - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek Corporation                                            )
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (GEARAspiWDM) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (klmouflt) -- C:\Windows\SysNative\drivers\klmouflt.sys (Kaspersky Lab)
DRV:64bit: - (KLIM6) -- C:\Windows\SysNative\drivers\klim6.sys (Kaspersky Lab)
DRV:64bit: - (KLBG) -- C:\Windows\SysNative\drivers\klbg.sys (Kaspersky Lab)
DRV:64bit: - (LVUSBS64) -- C:\Windows\SysNative\drivers\LVUSBS64.sys (Logitech Inc.)
DRV:64bit: - (LVRS64) -- C:\Windows\SysNative\drivers\lvrs64.sys (Logitech Inc.)
DRV:64bit: - (PID_PEPI) Logitech QuickCam IM(PID_PEPI) -- C:\Windows\SysNative\drivers\LV302V64.SYS (Logitech Inc.)
DRV:64bit: - (lvpepf64) -- C:\Windows\SysNative\drivers\lv302a64.sys (Logitech Inc.)
DRV:64bit: - (ManyCam) -- C:\Windows\SysNative\drivers\ManyCam_x64.sys (ManyCam LLC.)
DRV:64bit: - (PxHlpa64) -- C:\Windows\SysNative\drivers\PxHlpa64.sys (Sonic Solutions)
DRV - (sftplay) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\drivers\sftplaylh.sys (Microsoft Corporation)
DRV - (sftvol) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\drivers\sftvollh.sys (Microsoft Corporation)
DRV - (sftfs) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\drivers\sftfslh.sys (Microsoft Corporation)
DRV - (UltraMonUtility) -- C:\Program Files (x86)\Common Files\Realtime Soft\UltraMonMirrorDrv\x64\UltraMonUtility.sys (Realtime Soft Ltd)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = E2 B4 31 01 19 6A CB 01  [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
========== FireFox ==========
 
FF - prefs.js..browser.startup.homepage: "hxxp://de.pokerstrategy.com/"
FF - prefs.js..extensions.enabledItems: {73a6fe31-595d-460b-a920-fcc0f8843232}:2.0.3.5
FF - prefs.js..extensions.enabledItems: linkfilter@kaspersky.ru:9.0.0.459
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2.2
FF - prefs.js..extensions.enabledItems: autopager@mozilla.org:0.6.1.30
FF - prefs.js..extensions.enabledItems: optimizegoogle@optimizegoogle.com:0.78.1
FF - prefs.js..extensions.enabledItems: {1018e4d6-728f-4b20-ad56-37578a4de76b}:4.0.10
FF - prefs.js..extensions.enabledItems: {0538E3E3-7E9B-4d49-8831-A227C80A7AD3}:2.0.2
FF - prefs.js..extensions.enabledItems: {1A2D0EC4-75F5-4c91-89C4-3656F6E44B68}:0.4.4
FF - prefs.js..extensions.enabledItems: personas@christopher.beard:1.6.1
FF - prefs.js..extensions.enabledItems: {EF522540-89F5-46b9-B6FE-1829E2B572C6}:4.9.2
FF - prefs.js..extensions.enabledItems: SkipScreen@SkipScreen:0.5.7amo
FF - prefs.js..extensions.enabledItems: {dc572301-7619-498c-a57d-39143191b318}:0.3.8.4
FF - prefs.js..extensions.enabledItems: firegestures@xuldev.org:1.5.7
FF - prefs.js..extensions.enabledItems: youtube2mp3@mondayx.de:1.0.7
FF - prefs.js..extensions.enabledItems: {d40f5e7b-d2cf-4856-b441-cc613eeffbe3}:1.48.3
FF - prefs.js..extensions.enabledItems: spam@trashmail.net:2.0.4
FF - prefs.js..extensions.enabledItems: {446c03e0-2c35-11db-a98b-0800200c9a67}:0.5
FF - prefs.js..extensions.enabledItems: fbdislike@doweb.fr:1.2.1
FF - prefs.js..extensions.enabledItems: vshare@toolbar:1.0.0
FF - prefs.js..extensions.enabledItems: {0fa2149e-bb2c-4ac2-a8d3-479599819475}:1.7.2
 
FF - HKLM\software\mozilla\Mozilla Firefox 3.6\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010.09.26 18:12:19 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010.09.26 18:12:19 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.0.3\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2010.09.26 18:12:19 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.0.3\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2010.09.26 18:12:19 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\{eea12ec4-729d-4703-bc37-106ce9879ce2}: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\THBExt [2010.03.07 19:18:21 | 000,000,000 | ---D | M]
 
[2010.03.07 21:21:21 | 000,000,000 | ---D | M] -- C:\Users\XXX\AppData\Roaming\mozilla\Extensions
[2010.03.07 21:21:21 | 000,000,000 | ---D | M] (No name found) -- C:\Users\XXX\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2010.10.25 00:43:15 | 000,000,000 | ---D | M] -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions
[2010.10.18 19:57:03 | 000,000,000 | ---D | M] (Forecastfox Weather) -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3}
[2010.10.22 22:04:16 | 000,000,000 | ---D | M] (URL Fixer) -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\{0fa2149e-bb2c-4ac2-a8d3-479599819475}
[2010.10.18 19:57:03 | 000,000,000 | ---D | M] (Flagfox) -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}
[2010.03.07 21:57:46 | 000,000,000 | ---D | M] (Image Zoom) -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\{1A2D0EC4-75F5-4c91-89C4-3656F6E44B68}
[2010.07.23 21:35:53 | 000,000,000 | ---D | M] (Favicon Picker 3) -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\{446c03e0-2c35-11db-a98b-0800200c9a67}
[2010.09.19 20:50:55 | 000,000,000 | ---D | M] (FoxyTunes) -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\{463F6CA5-EE3C-4be1-B7E6-7FEE11953374}
[2010.10.18 19:57:03 | 000,000,000 | ---D | M] (NoScript) -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}
[2010.08.18 13:32:58 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010.08.02 09:33:04 | 000,000,000 | ---D | M] (No name found) -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}
[2010.06.18 13:28:47 | 000,000,000 | ---D | M] (No name found) -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\{dc572301-7619-498c-a57d-39143191b318}
[2010.10.22 00:26:44 | 000,000,000 | ---D | M] (SearchPreview) -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\{EF522540-89F5-46b9-B6FE-1829E2B572C6}
[2010.10.24 00:43:36 | 000,000,000 | ---D | M] -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\autopager@mozilla.org
[2010.09.01 20:33:24 | 000,000,000 | ---D | M] -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\fbdislike@doweb.fr
[2010.05.08 23:57:06 | 000,000,000 | ---D | M] -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\firegestures@xuldev.org
[2010.09.01 00:39:40 | 000,000,000 | ---D | M] -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\foxyproxy@eric.h.jung
[2010.05.26 23:50:20 | 000,000,000 | ---D | M] -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\optimizegoogle@optimizegoogle.com
[2010.09.12 00:15:48 | 000,000,000 | ---D | M] -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\personas@christopher.beard
[2010.08.12 00:37:10 | 000,000,000 | ---D | M] -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\SkipScreen@SkipScreen
[2010.06.04 19:59:08 | 000,000,000 | ---D | M] -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\spam@trashmail.net
[2010.09.21 20:24:47 | 000,000,000 | ---D | M] -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\vshare@toolbar
[2010.05.08 23:57:06 | 000,000,000 | ---D | M] -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\xa@xmarks.com
[2010.05.09 19:01:13 | 000,000,000 | ---D | M] -- C:\Users\XXX\AppData\Roaming\mozilla\Firefox\Profiles\nuetqqsm.default\extensions\youtube2mp3@mondayx.de
[2010.09.30 15:39:14 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\mozilla firefox\extensions
[2010.09.30 15:39:14 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Program Files (x86)\mozilla firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
 
O1 HOSTS File: ([2010.07.13 23:53:55 | 000,002,293 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 hl2rcv.adobe.com
O1 - Hosts: 127.0.0.1 adobeereg.com
O1 - Hosts: 127.0.0.1 activate.adobe.com
O1 - Hosts: 127.0.0.1 practivate.adobe.com
O1 - Hosts: 127.0.0.1 ereg.adobe.com
O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com
O1 - Hosts: 127.0.0.1 ereg.wip3.adobe.com
O1 - Hosts: 127.0.0.1 wip3.adobe.com
O1 - Hosts: 127.0.0.1 activate-sea.adobe.com
O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com
O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com
O1 - Hosts: 127.0.0.1 3dns.adobe.com
O1 - Hosts: 127.0.0.1 3dns-1.adobe.com
O1 - Hosts: 127.0.0.1 3dns-2.adobe.com
O1 - Hosts: 127.0.0.1 3dns-3.adobe.com
O1 - Hosts: 127.0.0.1 3dns-4.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-1.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-2.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-3.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-4.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-5.adobe.com
O1 - Hosts: 127.0.0.1 hh-software.com
O1 - Hosts: 127.0.0.1 www.hh-software.com
O1 - Hosts: 127.0.0.1 activate.adobe.de
O1 - Hosts: 23 more lines...
O2:64bit: - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\x64\ievkbd.dll (Kaspersky Lab)
O2:64bit: - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\x64\klwtbbho.dll (Kaspersky Lab)
O2 - BHO: (ContributeBHO Class) - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files (x86)\Adobe\/Adobe Contribute CS4/contributeieplugin.dll ()
O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll (Kaspersky Lab)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll (Kaspersky Lab)
O3 - HKLM\..\Toolbar: (Contribute Toolbar) - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files (x86)\Adobe\/Adobe Contribute CS4/contributeieplugin.dll ()
O4 - HKLM..\Run: [AVP] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe (Kaspersky Lab)
O4 - HKCU..\Run: [F.lux] C:\Users\XXX\Local Settings\Apps\F.lux\flux.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: Hinzufügen zu Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm ()
O8 - Extra context menu item: Hinzufügen zu Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm ()
O9:64bit: - Extra Button: &Virtuelle Tastatur - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\x64\klwtbbho.dll (Kaspersky Lab)
O9:64bit: - Extra Button: Li&nks untersuchen - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\x64\klwtbbho.dll (Kaspersky Lab)
O9 - Extra Button: &Virtuelle Tastatur - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll (Kaspersky Lab)
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Li&nks untersuchen - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll (Kaspersky Lab)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\KASPER~1\KASPER~1\x64\sbhook64.dll) - C:\PROGRA~2\KASPER~1\KASPER~1\x64\sbhook64.dll (Kaspersky Lab)
O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\KASPER~1\KASPER~1\x64\kloehk.dll) - C:\PROGRA~2\KASPER~1\KASPER~1\x64\kloehk.dll (Kaspersky Lab)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20:64bit: - Winlogon\Notify\klogon: DllName - Reg Error: Key error. - C:\Windows\SysNative\klogon.dll (Kaspersky Lab)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2007.10.02 22:25:16 | 000,000,000 | ---- | M] () - F:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{856d04cd-5f68-11df-b58a-00241d83c24d}\Shell - "" = AutoRun
O33 - MountPoints2\{856d04cd-5f68-11df-b58a-00241d83c24d}\Shell\AutoRun\command - "" = F:\setup.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O34 - HKLM BootExecute: (OODBS) -  File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2010.10.25 18:11:01 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Users\XXX\Desktop\OTL.exe
[2010.10.24 22:13:17 | 002,661,704 | ---- | C] (Norman ASA) -- C:\Users\XXX\Desktop\Norman_TDSS_Cleaner.exe
[2010.10.24 18:52:52 | 000,000,000 | ---D | C] -- C:\Users\XXX\AppData\Roaming\Malwarebytes
[2010.10.24 18:52:43 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2010.10.24 18:52:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2010.10.24 18:52:41 | 000,024,664 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2010.10.24 18:52:41 | 000,000,000 | ---D | C] -- C:\Users\XXX\Desktop\Malwarebytes' Anti-Malware
[2010.10.24 18:50:26 | 000,401,720 | ---- | C] (Trend Micro Inc.) -- C:\Users\XXX\Desktop\HiJackThis.exe
[2010.10.24 18:22:32 | 000,000,000 | ---D | C] -- C:\Users\XXX\Desktop\tdsskiller
[2010.10.14 01:01:56 | 000,000,000 | ---D | C] -- C:\Users\XXX\Desktop\Die_Ritter_der_Kokosnuss
[2010.10.13 21:37:01 | 001,717,158 | ---- | C] (Zandry, LLC                                                ) -- C:\Users\XXX\Desktop\TableScanTurbo_RC1-b5_Update.exe
[2010.10.13 21:08:45 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\t2embed.dll
[2010.10.13 21:08:45 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\t2embed.dll
[2010.10.13 21:08:43 | 002,085,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ole32.dll
[2010.10.13 21:08:35 | 000,483,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\StructuredQuery.dll
[2010.10.13 21:08:30 | 000,633,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comctl32.dll
[2010.10.13 21:08:29 | 001,024,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpmde.dll
[2010.10.13 21:08:29 | 000,738,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpmde.dll
[2010.10.13 21:08:28 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40.dll
[2010.10.13 21:08:28 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40u.dll
[2010.10.13 21:08:24 | 000,702,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2010.10.13 21:08:24 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeeds.dll
[2010.10.13 21:08:24 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
[2010.10.13 21:08:24 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
[2010.10.13 21:08:23 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2010.10.13 21:08:22 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2010.10.13 21:08:22 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2010.10.13 21:08:21 | 000,256,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2010.10.13 21:08:21 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2010.10.13 21:08:21 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2010.10.13 21:08:20 | 000,482,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2010.10.13 21:08:20 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2010.10.13 21:08:20 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2010.10.13 21:08:19 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2010.10.13 21:08:09 | 014,627,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll
[2010.10.13 21:08:08 | 011,406,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll
[2010.10.13 21:08:07 | 012,625,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmploc.DLL
[2010.10.13 21:08:07 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmploc.DLL
[2010.10.13 21:08:05 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sscore.dll
[2010.10.13 00:35:16 | 000,000,000 | ---D | C] -- C:\Users\XXX\Desktop\tabby
[2010.10.11 12:29:17 | 000,000,000 | ---D | C] -- C:\Users\XXX\Local Settings
[2010.09.30 15:41:20 | 000,000,000 | ---D | C] -- C:\Users\XXX\AppData\Roaming\skypePM
[2010.09.30 15:40:40 | 000,000,000 | ---D | C] -- C:\Users\XXX\AppData\Roaming\Skype
[2010.09.30 15:39:00 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype
[2010.09.30 15:39:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
[2010.09.30 15:38:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
[2010.09.30 15:05:46 | 000,000,000 | ---D | C] -- C:\Users\XXX\Desktop\Kursfahrt
[2010.09.30 12:08:56 | 000,000,000 | ---D | C] -- C:\Users\XXX\Desktop\Rosetta Stone
[2010.09.28 18:08:02 | 000,000,000 | ---D | C] -- C:\Users\XXX\AppData\Local\Realtime Soft
[2010.09.26 18:14:55 | 000,000,000 | ---D | C] -- C:\Programme\iTunes
[2010.09.26 18:14:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes
[2010.09.26 18:14:55 | 000,000,000 | ---D | C] -- C:\Programme\iPod
[2010.09.26 18:11:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QuickTime
[2010.09.26 18:11:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update
[2010.09.26 18:09:45 | 000,000,000 | ---D | C] -- C:\Programme\Bonjour
[2010.09.26 18:09:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bonjour
[2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2010.10.25 18:23:39 | 000,021,104 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010.10.25 18:23:39 | 000,021,104 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010.10.25 18:17:00 | 000,001,118 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2315196117-2830573344-3934821959-1000UA.job
[2010.10.25 18:16:15 | 000,001,102 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010.10.25 18:16:09 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010.10.25 18:16:05 | 000,346,189 | ---- | M] () -- C:\Windows\SysNative\oodbs.lor
[2010.10.25 18:11:04 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\XXX\Desktop\OTL.exe
[2010.10.25 16:38:43 | 000,029,894 | ---- | M] () -- C:\Users\XXX\Desktop\Noten.xlsx
[2010.10.25 16:32:00 | 000,001,106 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010.10.25 00:41:20 | 000,028,524 | ---- | M] () -- C:\Users\XXX\Desktop\Supernova.xlsx
[2010.10.24 22:13:18 | 002,661,704 | ---- | M] (Norman ASA) -- C:\Users\XXX\Desktop\Norman_TDSS_Cleaner.exe
[2010.10.24 22:12:13 | 001,211,285 | ---- | M] () -- C:\Users\XXX\Desktop\tdsskiller(2).zip
[2010.10.24 19:59:06 | 000,000,458 | RHS- | M] () -- C:\ProgramData\ntuser.pol
[2010.10.24 18:52:45 | 000,000,684 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.10.24 18:50:26 | 000,401,720 | ---- | M] (Trend Micro Inc.) -- C:\Users\XXX\Desktop\HiJackThis.exe
[2010.10.24 18:19:20 | 001,211,285 | ---- | M] () -- C:\Users\XXX\Desktop\tdsskiller.zip
[2010.10.24 13:08:20 | 037,256,726 | ---- | M] () -- C:\Users\XXX\Desktop\nl200Crackpfeife.rar
[2010.10.24 12:17:01 | 000,001,066 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2315196117-2830573344-3934821959-1000Core.job
[2010.10.24 03:30:18 | 000,000,017 | ---- | M] () -- C:\Windows\SysWow64\shortcut_ex.dat
[2010.10.20 15:39:12 | 001,350,136 | ---- | M] () -- C:\Users\XXX\Desktop\Playing history audit_21.10.html
[2010.10.20 01:16:14 | 000,001,391 | ---- | M] () -- C:\Users\XXX\Desktop\c_bet_success_percentage.pt3stat
[2010.10.18 22:40:01 | 045,984,520 | ---- | M] () -- C:\Users\XXX\Desktop\Sony Ericsson PC Suite 2.10.46.exe
[2010.10.16 00:20:32 | 1020,487,986 | ---- | M] () -- C:\Users\XXX\Desktop\Rom.zip
[2010.10.14 10:45:03 | 002,875,848 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2010.10.14 03:05:03 | 001,549,496 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2010.10.14 03:05:03 | 000,664,840 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2010.10.14 03:05:03 | 000,625,022 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2010.10.14 03:05:03 | 000,134,750 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2010.10.14 03:05:03 | 000,110,402 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2010.10.14 00:59:30 | 000,003,480 | ---- | M] () -- C:\Users\XXX\Desktop\94cc8389db694e51e026e73d7f8467b3.dlc
[2010.10.13 21:37:03 | 001,717,158 | ---- | M] (Zandry, LLC                                                ) -- C:\Users\XXX\Desktop\TableScanTurbo_RC1-b5_Update.exe
[2010.10.11 12:35:59 | 001,740,414 | ---- | M] () -- C:\Users\XXX\Desktop\köln bei fandemo zum erhalt der fankultur 9.10.2010.mp3
[2010.10.03 00:10:03 | 000,163,874 | ---- | M] () -- C:\Users\XXX\Desktop\We_are_Cologne_II.jpg
[2010.10.03 00:04:54 | 000,340,199 | ---- | M] () -- C:\Users\XXX\Desktop\We_are_cologne.jpg
[2010.09.30 15:41:21 | 000,000,048 | -H-- | M] () -- C:\ProgramData\ezsidmv.dat
[2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2010.10.24 22:12:10 | 001,211,285 | ---- | C] () -- C:\Users\XXX\Desktop\tdsskiller(2).zip
[2010.10.24 18:52:45 | 000,000,684 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.10.24 18:19:00 | 001,211,285 | ---- | C] () -- C:\Users\XXX\Desktop\tdsskiller.zip
[2010.10.24 13:08:31 | 328,658,768 | ---- | C] () -- C:\Users\XXX\Desktop\nl200.avi
[2010.10.24 12:58:41 | 037,256,726 | ---- | C] () -- C:\Users\XXX\Desktop\nl200Crackpfeife.rar
[2010.10.24 03:30:18 | 000,000,017 | ---- | C] () -- C:\Windows\SysWow64\shortcut_ex.dat
[2010.10.21 00:42:10 | 001,350,136 | ---- | C] () -- C:\Users\XXX\Desktop\Playing history audit_21.10.html
[2010.10.20 01:16:13 | 000,001,391 | ---- | C] () -- C:\Users\XXX\Desktop\c_bet_success_percentage.pt3stat
[2010.10.18 22:39:31 | 045,984,520 | ---- | C] () -- C:\Users\XXX\Desktop\Sony Ericsson PC Suite 2.10.46.exe
[2010.10.16 00:08:02 | 1020,487,986 | ---- | C] () -- C:\Users\XXX\Desktop\Rom.zip
[2010.10.14 00:59:29 | 000,003,480 | ---- | C] () -- C:\Users\XXX\Desktop\94cc8389db694e51e026e73d7f8467b3.dlc
[2010.10.11 12:35:58 | 001,740,414 | ---- | C] () -- C:\Users\XXX\Desktop\köln bei fandemo zum erhalt der fankultur 9.10.2010.mp3
[2010.10.04 09:56:47 | 000,000,575 | ---- | C] () -- C:\Users\XXX\PokerTracker v3.07.4 beta-Crash_20101004.log
[2010.10.03 00:10:01 | 000,163,874 | ---- | C] () -- C:\Users\XXX\Desktop\We_are_Cologne_II.jpg
[2010.10.03 00:04:52 | 000,340,199 | ---- | C] () -- C:\Users\XXX\Desktop\We_are_cologne.jpg
[2010.10.02 00:20:28 | 000,000,483 | ---- | C] () -- C:\Users\XXX\PokerTrackerHud-Crash_20101002.log
[2010.09.30 15:41:21 | 000,000,048 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010.09.26 00:55:43 | 000,001,391 | ---- | C] () -- C:\Users\XXX\PokerTrackerHud-Crash_20100926.log
[2010.09.11 20:10:24 | 000,000,045 | ---- | C] () -- C:\Users\XXX\AppData\Local\machpro.dat
[2010.07.23 00:22:08 | 000,000,090 | ---- | C] () -- C:\Windows\galaxy.ini
[2010.04.02 17:17:34 | 000,179,091 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2010.03.08 09:24:02 | 000,004,865 | ---- | C] () -- C:\ProgramData\bltofzsb.qlf
[2010.03.08 00:42:51 | 000,000,458 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2010.03.07 19:48:58 | 001,528,242 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2009.07.14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll

< End of report >

Code:

OTL Extras logfile created on: 25.10.2010 18:21:56 - Run 1
OTL by OldTimer - Version 3.2.17.1    Folder = C:\Users\XXX\Desktop
64bit- An unknown product  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
4,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 67,00% Memory free
8,00 Gb Paging File | 6,00 Gb Available in Paging File | 70,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 303,20 Gb Total Space | 187,64 Gb Free Space | 61,89% Space Free | Partition Type: NTFS
Drive D: | 292,97 Gb Total Space | 185,28 Gb Free Space | 63,24% Space Free | Partition Type: NTFS
Drive F: | 80,00 Gb Total Space | 33,16 Gb Free Space | 41,46% Space Free | Partition Type: NTFS
Drive G: | 152,89 Gb Total Space | 84,99 Gb Free Space | 55,59% Space Free | Partition Type: NTFS
 
Computer Name: XXXS-PC | User Name: XXX | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.url [@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" File not found
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring" = 1
"" =
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
 
========== Authorized Applications List ==========
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{104FB32A-7CE3-4C4B-B2AA-70C613FF9DFA}" = iTunes
"{20140000-006D-0407-1000-0000000FF1CE}" = Microsoft Office Click-to-Run 2010 (Beta)
"{295CFB7C-A57E-4313-93E7-68E7CE1D0332}" = Adobe WinSoft Linguistics Plugin x64
"{2D74E972-5A85-44DC-9193-8A302BA8C181}" = Photoshop Camera Raw_x64
"{33EB1061-ABF1-4470-A540-32E97A610536}" = Apple Mobile Device Support
"{41BF0DE4-5BAE-4B88-AFD3-86A30B222186}" = Bonjour
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{5F94D3B9-2B02-9C37-740B-A59C7B8D17CC}" = ATI Catalyst Install Manager
"{6631325A-9B1B-4EE7-8E64-8CC4A6F10643}" = Adobe Fonts All x64
"{8875A1C0-6308-4790-8CF6-D34E89880052}" = Adobe Linguistics CS4 x64
"{887797BF-37A5-4199-B0C9-0D38D6196E9A}" = Adobe Anchor Service x64 CS4
"{8C8D673B-20FB-43E6-BCB7-9B3F78F2E762}" = Adobe Type Support x64 CS4
"{8DAA31EB-6830-4006-A99F-4DF8AB24714F}" = Adobe CSI CS4 x64
"{90BA8112-80B3-4617-A3C1-BD2771B60F74}" = Adobe CMaps x64 CS4
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{A3454894-144A-4D80-B605-C128FE0D7329}" = Adobe Drive CS4 x64
"{A792E67C-FDA4-A301-0C3C-53BA86EFBB5A}" = ccc-utility64
"{B37A99DD-88E2-4ED0-80B4-1E054AB354BF}" = Adobe InDesign CS4 Icon Handler x64
"{B49673F8-7AB6-4A14-8213-C8A7BE370010}" = UltraMon
"{BC84C1E9-F4D4-4B8E-B35C-C88EEA0A5201}" = O&O Defrag Professional
"{D40172D6-CE2D-4B72-BF5F-26A04A900B7B}" = Adobe Photoshop CS4 (64 Bit)
"{DFFABE78-8173-4E97-9C5C-22FB26192FC5}" = Adobe PDF Library Files x64 CS4
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"CPUID HWMonitor_is1" = CPUID HWMonitor 1.16
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"WinRAR archiver" = WinRAR
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{045A9539-37B6-464D-94F9-E4ADFA856903}" = PokerStrategy.com Equilator
"{05308C4E-7285-4066-BAE3-6B50DA6ED755}" = Adobe Update Manager CS4
"{054EFA56-2AC1-48F4-A883-0AB89874B972}" = Adobe Extension Manager CS4
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{098727E1-775A-4450-B573-3F441F1CA243}" = kuler
"{098A2A49-7CF3-4F08-A38D-FB879117152A}" = Adobe Color NA Extra Settings CS4
"{0A9C9BD5-8588-40D4-8A1A-860E3D2ED6EE}" = NBA 2K10
"{0B82D6C6-9ECC-4710-97AB-5CE482E72852}_is1" = TableScan Turbo v0.48c (BETA)
"{0D6013AB-A0C7-41DC-973C-E93129C9A29F}" = Adobe Color JA Extra Settings CS4
"{0DC0E85F-36E4-463B-B3EA-4CD8ED2222A1}" = Adobe Color EU Recommended Settings CS4
"{0F723FC1-7606-4867-866C-CE80AD292DAF}" = Adobe CSI CS4
"{14F70205-1940-4000-88C7-BE799A6B2CAD}" = Adobe Soundbooth CS4
"{15BF7AAF-846C-4A6D-80E1-5D1FC7FB461B}" = Adobe SGM CS4
"{15FEDA5F-141C-4127-8D7E-B962D1742728}" = Adobe Photoshop CS5
"{1618734A-3957-4ADD-8199-F973763109A8}" = Adobe Anchor Service CS4
"{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}" = AdobeColorCommonSetRGB
"{1DCA3EAA-6EB5-4563-A970-EA14D75037BA}" = Adobe InDesign CS4
"{1E04CB54-AF4E-4AC3-B4B7-C0A160BE57F1}" = Adobe InDesign CS4 Icon Handler
"{20140062-0062-0407-0000-0000000FF1CE}" = Microsoft Office Home and Business 2010 (Beta) - Deutsch
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{26A24AE4-039D-4CA4-87B4-2F83216018FF}" = Java(TM) 6 Update 18
"{29F0D740-8B92-4AFE-ADC2-5CA1EA70C1F5}" = iTunesControl 0.51
"{2BA722D1-48D1-406E-9123-8AE5431D63EF}" = Windows Live Fotogalerie
"{2BAF2B96-7560-48B4-87D4-10178DDBE217}" = Adobe InDesign CS4 Application Feature Set Files (Roman)
"{30C8AA56-4088-426F-91D1-0EDFD3A25678}" = Adobe Dreamweaver CS4
"{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}" = PDF Settings CS4
"{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}" = Adobe XMP Panels CS4
"{3A6829EF-0791-4FDD-9382-C690DD0821B9}" = Adobe Flash Player 10 ActiveX
"{3D2C9DE6-9ADE-4252-A241-E43723B0CE02}" = Adobe Color - Photoshop Specific CS4
"{3D6A24EA-A543-6C84-351E-D7646E7AB86E}" = Catalyst Control Center InstallProxy
"{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}" = Adobe WinSoft Linguistics Plugin
"{3EFEF049-23D4-4B46-8903-4592FEA51018}" = Windows Live Movie Maker
"{3FC03467-2094-4BEC-B187-FD2CCF6FE720}" = PokerStrategy.com Elephant
"{41E654A9-26D0-4EAC-854B-0FA824FFFABB}" = Windows Live Messenger
"{4286E640-B5FB-11DF-AC4B-005056C00008}" = Google Earth
"{428FDF9F-E010-4C4C-A8BB-156960AFCA1C}" = Adobe Fireworks CS4
"{43509E18-076E-40FE-AF38-CA5ED400A5A9}" = Pixel Bender Toolkit
"{44E240EC-2224-4078-A88B-2CEE0D3016EF}" = Adobe After Effects CS4 Presets
"{453E5D8E-D924-4D9B-0081-13E98CF963E7}" = Madden NFL 2003
"{45EC816C-0771-4C14-AE6D-72D1B578F4C8}" = Adobe After Effects CS4
"{47C6F987-685A-41AE-B092-E75B277AEE39}" = Adobe Flash CS4 Extension - Flash Lite STI others
"{47CAFF95-C3D8-ABF2-70BC-89DE00D8FB19}" = Catalyst Control Center Graphics Light
"{4943EFF5-229F-435D-BEA9-BE3CAEA783A7}" = Adobe Service Manager Extension
"{4962EBAC-AE7C-1B22-1EA0-0916A7E40954}" = Catalyst Control Center Graphics Full Existing
"{49A62E2B-B35C-941D-DF48-601207CF14C0}" = Catalyst Control Center Graphics Previews Common
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A52555C-032A-4083-BDD9-6A85ABFB39A8}" = Adobe SING CS4
"{52232EF4-CC12-4C21-ABCF-ADB79618302D}" = Adobe Soundbooth CS4 Codecs
"{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent
"{561968FD-56A1-49FD-9ED0-F55482C7C5BC}" = Adobe Media Encoder CS4 Exporter
"{5EAD5443-7194-46CC-A055-428E6ABB1BAF}" = Adobe Encore CS4
"{5FC68772-6D56-41C6-9DF1-24E868198AE6}" = Windows Live Call
"{60DB5894-B5A1-4B62-B0F3-669A22C0EE5D}" = Adobe Dynamiclink Support
"{61D6891E-E822-4448-9F9A-0AAAAEB6AF6C}" = Adobe Creative Suite 4 Master Collection
"{63C24A08-70F3-4C8E-B9FB-9F21A903801D}" = Adobe Color Video Profiles CS CS4
"{63E5CDBF-8214-4F03-84F8-CD3CE48639AD}" = Adobe Photoshop CS4 Support
"{67A9747A-E1F5-4E9A-81CC-12B5D5B81B6E}" = Adobe After Effects CS4 Third Party Content
"{68243FF8-83CA-466B-B2B8-9F99DA5479C4}" = AdobeColorCommonSetCMYK
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6A490E11-6C8A-777C-4E00-43F3CC16A1EC}" = CCC Help English
"{6DED41BC-C9EF-4330-B4E5-46CB2C5C6E2D}" = No23 Recorder
"{7406DF60-016D-476B-A2C7-55D997592047}" = Adobe OnLocation CS4
"{76618402-179D-4699-A66B-D351C59436BC}" = Windows Live Sync
"{77919701-C3E7-09AA-D2F7-DBF42CD7C13D}" = Catalyst Control Center HydraVision Full
"{78B2F09F-BDC7-7865-CF4C-233B64A3BE51}" = Catalyst Control Center Graphics Full New
"{7CC7BDD5-6F10-4724-96A1-EAC7D9F2831C}" = Adobe InDesign CS4 Common Base Files
"{7FC7AD70-1DF3-4B84-9AA2-4FB680F45572}_is1" = Hex-Editor MX
"{8186FF34-D389-4B7E-9A2F-C197585BCFBD}" = Adobe Media Encoder CS4 Importer
"{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}" = Adobe Type Support CS4
"{83877DB1-8B77-45BC-AB43-2BAC22E093E0}" = Adobe Bridge CS4
"{842B4B72-9E8F-4962-B3C1-1C422A5C4434}" = Suite Shared Configuration CS4
"{87532CAB-7932-4F84-8937-823337622807}" = Adobe Illustrator CS4
"{87BB78C4-F36D-4D93-A7C7-F80F18219848}" = AMD DnD V1.0.19
"{8D7133DE-27D2-47E5-B248-4180278D32AA}" = Catalyst Control Center - Branding
"{8FB1B528-E260-451E-9B55-E9152F94B80B}" = Microsoft Games for Windows - LIVE Redistributable
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{931AB7EA-3656-4BB7-864D-022B09E3DD67}" = Adobe Linguistics CS4
"{94D398EB-D2FD-4FD1-B8C4-592635E8A191}" = Adobe CMaps CS4
"{974C4B12-4D02-4879-85E0-61C95CC63E9E}" = Fallout 3
"{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars
"{9D8B0949-7C47-476F-9F06-F900D3B078EA}" = Kaspersky Internet Security 2010
"{A6EC82A0-1414-475D-8AFD-469089F3080D}" = Adobe Contribute CS4
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{B05DE7B7-0B40-4411-BD4B-222CAE2D8F15}" = Adobe MotionPicture Color Files CS4
"{B15381DD-FF97-4FCD-A881-ED4DB0975500}" = Adobe Color Video Profiles AE CS4
"{B169BC97-B8AA-4ACA-9CF2-9D0FF5BABDF7}" = Adobe Premiere Pro CS4 Functional Content
"{B29AD377-CC12-490A-A480-1452337C618D}" = Connect
"{B3276CB1-20B6-4AF9-AAEC-E72C83816495}" = IKEA Home Planner
"{B65BA85C-0A27-4BC0-A22D-A66F0E5B9494}" = Adobe Photoshop CS4
"{B823632F-3B72-4514-8861-B961CE263224}" = PostgreSQL 8.3
"{BB4E33EC-8181-4685-96F7-8554293DEC6A}" = Adobe Output Module
"{BD3374D3-C2E6-42B7-A80B-E850B6886246}" = Adobe Flash CS4 STI-other
"{BE9CEAAA-F069-4331-BF2F-8D350F6504F4}" = Adobe Media Encoder CS4 Additional Exporter
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{C52E3EC1-048C-45E1-8D53-10B0C6509683}" = Adobe Default Language CS4
"{C938BE91-3BB5-4B84-9EF6-88F0505D0038}" = Adobe Premiere Pro CS4 Third Party Content
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CC65635F-3A3A-48CB-8976-A1F32ED1ECA4}" = TableNinja
"{CC75AB5C-2110-4A7F-AF52-708680D22FE8}" = Photoshop Camera Raw
"{CF846DE0-A5F9-11D5-0089-C400C04FAE70}" = NHL 2002 Demo
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{D241BBEC-B1C7-7953-EDDE-D90A654A8D2C}" = ccc-core-static
"{D499F8DE-3F31-4900-9157-61061613704B}" = Adobe Premiere Pro CS4
"{D5068583-D569-468B-9755-5FBF5848F46F}" = Sony Picture Utility
"{D5C24E77-099E-9B84-5BE2-708E70B938A9}" = Catalyst Control Center Core Implementation
"{DABF43D9-1104-4764-927B-5BED1274A3B0}" = Runtime
"{DAEAFD68-BB4A-4507-A241-C8804D2EA66D}" = Apple Application Support
"{DC4757E2-BAE3-0BFE-C6E5-576CB911FF52}" = Catalyst Control Center Graphics Previews Vista
"{DEB90B8E-0DCB-48CE-B90E-8842A2BD643E}" = Adobe Media Encoder CS4
"{E7004147-2CCA-431C-AA05-2AB166B9785D}" = QuickTime
"{E8EE9410-8AC4-4F43-A626-DDECA75C79F3}" = Adobe Setup
"{ED00D08A-3C5F-488D-93A0-A04F21F23956}" = Windows Live Communications Platform
"{EE353798-E875-42E0-B58D-7E6696182EA8}" = Adobe Media Encoder CS4 Dolby
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F0E64E2E-3A60-40D8-A55D-92F6831875DA}" = Adobe Search for Help
"{F6E99614-F042-4459-82B7-8B38B2601356}" = Adobe Flash CS4
"{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}" = Adobe ExtendScript Toolkit CS4
"{F8FF18EE-264A-43FD-B2F6-5EAD40798C2F}" = Windows Live Essentials
"{F93C84A6-0DC6-42AF-89FA-776F7C377353}" = Adobe PDF Library Files CS4
"{F97E3841-CA9D-4964-9D64-26066241D26F}" = Microsoft Games for Windows - LIVE
"{FB2A5FCC-B81B-48C2-A009-7804694D83E9}" = Adobe Encore CS4 Codecs
"{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}" = Adobe Fonts All
"Activision_THPS2UninstallKey" = Tony Hawk's Pro Skater 2
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Adobe_697a06b96d8bcbe2d77b88e7d5448d0" = Adobe Creative Suite 4 Master Collection
"Alien Arena 2010_is1" = Alien Arena 2010
"AutoHotkey" = AutoHotkey 1.0.48.05
"CCleaner" = CCleaner
"EVEREST Home Edition_is1" = EVEREST Home Edition v2.20
"Foxit Reader" = Foxit Reader
"FoxyTunesForFirefox" = FoxyTunes for Firefox
"HijackThis" = HijackThis 2.0.2
"InstallShield_{045A9539-37B6-464D-94F9-E4ADFA856903}" = PokerStrategy.com Equilator
"InstallShield_{3FC03467-2094-4BEC-B187-FD2CCF6FE720}" = PokerStrategy.com Elephant
"InstallWIX_{9D8B0949-7C47-476F-9F06-F900D3B078EA}" = Kaspersky Internet Security 2010
"KeePassPasswordSafe2_is1" = KeePass Password Safe 2.10
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"ManyCam" = ManyCam 2.4 (remove only)
"Messenger Plus! Live" = Messenger Plus! Live
"Mozilla Firefox (3.6)" = Mozilla Firefox (3.6)
"Mozilla Thunderbird (3.0.3)" = Mozilla Thunderbird (3.0.3)
"Office14.Click2Run" = Microsoft Office Click-to-Run 2010 (Beta)
"OpenAL" = OpenAL
"PokerStars" = PokerStars
"PokerTracker3" = PokerTracker 3 (remove only)
"PowerMenu" = PowerMenu 1.51
"SopCast" = SopCast 3.2.9
"StarCraft II" = StarCraft II
"VLC media player" = VLC media player 1.0.5
"WinLiveSuite_Wave3" = Windows Live Essentials
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Flux" = F.lux
"Google Chrome" = Google Chrome
"HHLoader" = HHLoader
"Octoshape add-in for Adobe Flash Player" = Octoshape add-in for Adobe Flash Player
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 24.10.2010 18:33:10 | Computer Name = XXXs-PC | Source = Bonjour Service | ID = 100
Description = 508: ERROR: read_msg errno 10054 (Eine vorhandene Verbindung wurde
 vom Remotehost geschlossen.)
 
Error - 24.10.2010 18:33:10 | Computer Name = XXXs-PC | Source = Bonjour Service | ID = 100
Description = 512: ERROR: read_msg errno 10054 (Eine vorhandene Verbindung wurde
 vom Remotehost geschlossen.)
 
Error - 24.10.2010 18:33:10 | Computer Name = XXXs-PC | Source = Bonjour Service | ID = 100
Description = 416: ERROR: read_msg errno 10054 (Eine vorhandene Verbindung wurde
 vom Remotehost geschlossen.)
 
Error - 24.10.2010 18:33:10 | Computer Name = XXXs-PC | Source = Bonjour Service | ID = 100
Description = 220: ERROR: read_msg errno 10054 (Eine vorhandene Verbindung wurde
 vom Remotehost geschlossen.)
 
Error - 24.10.2010 18:40:35 | Computer Name = XXXs-PC | Source = Application Virtualization Client | ID = 6096
Description = [de-DE] {tid=1234:usr=XXX} An error occurred while opening the virtual
 registry (section: false), rc: 07B01F0C-0000004A
 
Error - 24.10.2010 18:40:35 | Computer Name = XXXs-PC | Source = Application Virtualization Client | ID = 6096
Description = [de-DE] {tid=1234} An error occurred while opening the virtual registry
 (section: false), rc: 07B01F0C-0000004A
 
Error - 25.10.2010 03:10:46 | Computer Name = XXXs-PC | Source = Application Virtualization Client | ID = 6096
Description = [de-DE] {tid=704:usr=XXX} An error occurred while opening the virtual
 registry (section: false), rc: 07B01F0C-0000004A
 
Error - 25.10.2010 03:10:46 | Computer Name = XXXs-PC | Source = Application Virtualization Client | ID = 6096
Description = [de-DE] {tid=704} An error occurred while opening the virtual registry
 (section: false), rc: 07B01F0C-0000004A
 
Error - 25.10.2010 10:01:38 | Computer Name = XXXs-PC | Source = Application Virtualization Client | ID = 6096
Description = [de-DE] {tid=13F0:usr=XXX} An error occurred while opening the virtual
 registry (section: false), rc: 07B01F0C-0000004A
 
Error - 25.10.2010 10:01:38 | Computer Name = XXXs-PC | Source = Application Virtualization Client | ID = 6096
Description = [de-DE] {tid=13F0} An error occurred while opening the virtual registry
 (section: false), rc: 07B01F0C-0000004A
 
[ System Events ]
Error - 25.10.2010 12:16:46 | Computer Name = XXXs-PC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name
 Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet
wurde:  %%-2140993535
 
Error - 25.10.2010 12:16:57 | Computer Name = XXXs-PC | Source = PNRPSvc | ID = 102
Description =
 
Error - 25.10.2010 12:16:57 | Computer Name = XXXs-PC | Source = PNRPSvc | ID = 102
Description =
 
Error - 25.10.2010 12:16:57 | Computer Name = XXXs-PC | Source = PNRPSvc | ID = 102
Description =
 
Error - 25.10.2010 12:16:57 | Computer Name = XXXs-PC | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler
 beendet:  %%-2140993535
 
Error - 25.10.2010 12:16:57 | Computer Name = XXXs-PC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name
 Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet
wurde:  %%-2140993535
 
Error - 25.10.2010 12:16:57 | Computer Name = XXXs-PC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name
 Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet
wurde:  %%-2140993535
 
Error - 25.10.2010 12:16:57 | Computer Name = XXXs-PC | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler
 beendet:  %%-2140993535
 
Error - 25.10.2010 12:16:57 | Computer Name = XXXs-PC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name
 Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet
wurde:  %%-2140993535
 
Error - 25.10.2010 12:16:57 | Computer Name = XXXs-PC | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler
 beendet:  %%-2140993535
 
 
< End of report >


cosinus 25.10.2010 19:02

Zitat:

O1 - Hosts: 127.0.0.1 hl2rcv.adobe.com
O1 - Hosts: 127.0.0.1 adobeereg.com
O1 - Hosts: 127.0.0.1 activate.adobe.com
Und wieso darf Dein Rechner adobe nicht erreichen? Von alleine kommen diese Einträge da nicht rein! Wieso soll Adobe sich nicht aktivieren können?!
Ich bin mir ziemlich sicher, dass Du einige gecrackte Programme installiert hast oder hattest.

Divinho 25.10.2010 19:06

Zitat:

Zitat von cosinus (Beitrag 582329)
Und wieso darf Dein Rechner adobe nicht erreichen? Von alleine kommen diese Einträge da nicht rein! Wieso soll Adobe sich nicht aktivieren können?!
Ich bin mir ziemlich sicher, dass Du einige gecrackte Programme installiert hast oder hattest.

Das ist ne verdammt gute Frage, die ich ehrlich nicht beantworten kann. Nutze weder Acrobat Reader noch Photoshop.

Habe wie gesagt die Platte an nem komplett anderen fremden PC hängen da er nicht mehr bootet, kA was der Nutzer auf diesem gemacht hat.

cosinus 25.10.2010 19:39

Achja richtig. Die Geschichte. Da macht es dann keinen Sinn, das "Fremdsystem" zu analysieren. Welches Windows ist auf Deiner Platte installiert?

Edit es ist ja ein WinXP :D

Bau mal die Platte wieder in Deinen Rechner ein. Boote von der Windows-CD und geh in die Wiederherstellungskonsole.
Tipp dort den Befehl fixmbr ein (dann Enter, mit j bestätigen) danach den Befehl fixboot (dann Enter, mit j bestätigen)
Mit exit (dann enter drücken) wird der Rechner neu gestartet.

Bootet Windows XP wieder?

Divinho 01.11.2010 17:30

Die Wiederherstellungskonsole steht nicht zur Auswahl und scheint somit nicht installiert zu sein. Also muss erstmal ein Diskettenlaufwerk dran, ich bin begeistert!:rolleyes:

Edit: Ich weiß nicht warum aber bei eingelegter XP-CD bootet Windows wieder ganz normal und ich kann auch wieder fehlerfrei auf beide Partitionen zugreifen! :) Werde aber trotzdem sicherheitshalber mal die Wiederherstellungskonsole nachinstallieren.

Habe ich jetzt eine Möglichkeit irgendwie dieses Rootkit zu entfernen?

cosinus 01.11.2010 18:23

Bootet Dein Rechner wieder so wie er soll? Aber das nur bei eingelegter Windows-CD? :wtf:
Wenn ja, das kann so nicht sein. Entweder er bootet von der CD oder von der Festplatte. Wenn von der Festplatte gebootet wird, ist es völlig irrelevant ob eine CD eingelegt ist oder nicht.

Divinho 01.11.2010 18:34

Zitat:

Zitat von cosinus (Beitrag 584515)
Bootet Dein Rechner wieder so wie er soll? Aber das nur bei eingelegter Windows-CD? :wtf:
Wenn ja, das kann so nicht sein. Entweder er bootet von der CD oder von der Festplatte. Wenn von der Festplatte gebootet wird, ist es völlig irrelevant ob eine CD eingelegt ist oder nicht.

Er bootet natürlich von der Festplatte. Hat er aber erst nachdem ich von CD gebootet und wegen dem Nicht-finden der Wiederherstellungskonsole das Setup abgebrochen und neugestartet habe.

Den TDSS-Killer habe ich nochmal durchlaufen lassen und er findet nichts mehr!?

cosinus 01.11.2010 19:04

Dann müssen wir jetzt wo der Rechner wieder vernünftig bootet das infizierte Windows überprüfen:


Bitte routinemäßig einen Vollscan mit malwarebytes machen und Log posten.
Denk daran, dass Malwarebytes vor jedem Scan manuell aktualisiert werden muss!

Danach OTL:

Systemscan mit OTL

Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
  • Doppelklick auf die OTL.exe
  • Vista User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen
  • Oben findest Du ein Kästchen mit Output. Wähle bitte Minimal Output
  • Unter Extra Registry, wähle bitte Use SafeList
  • Klicke nun auf Run Scan links oben
  • Wenn der Scan beendet wurde werden 2 Logfiles erstellt
  • Poste die Logfiles hier in den Thread.


Alle Zeitangaben in WEZ +1. Es ist jetzt 13:19 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131