diddl29

Bonjour comment nettoyer le dossier documents and settings: nom d'ulilisateur:local settings:temp MERCI

SDFix: Version 1.114 Run by St‚ven on 15/11/2007 at 11:00 Microsoft Windows XP [version 5.1.2600] Running From: C:\PROGRA~1\sdfx\SDFix Safe Mode: Checking Services: Name: NtmlSvc runtime smtpdrv Path: %SystemRoot%\System32\svchost.exe -k netsvcs \??\C:\WINDOWS\System32\drivers\runtime.sys System32\DRIVERS\smtpdrv.sys NtmlSvc - Deleted runtime - Deleted smtpdrv - Deleted C:\WINDOWS\system32\Microsoft\backup.ftp Found C:\WINDOWS\system32\Microsoft\backup.tftp Found Checking files: Genuine: C:\WINDOWS\system32\Microsoft\backup.ftp C:\WINDOWS\system32\Microsoft\backup.tftp Dummy: C:\WINDOWS\system32\ftp.exe C:\WINDOWS\system32\tftp.exe Files copied to SDFix\Backups Restoring files if backups are found Final Check: Genuine: C:\WINDOWS\system32\Microsoft\backup.ftp C:\WINDOWS\system32\Microsoft\backup.tftp C:\WINDOWS\system32\ftp.exe C:\WINDOWS\system32\tftp.exe C:\WINDOWS\system32\dllcache\ftp.exe C:\WINDOWS\system32\dllcache\tftp.exe Dummy: Infected ip6fw.sys Found! ip6fw.sys File Locations: "C:\WINDOWS\system32\dllcache\ip6fw.sys" 29056 24/03/2006 21:00 "C:\WINDOWS\system32\drivers\ip6fw.sys" 29056 24/03/2006 21:00 Infected File Listed Below: C:\WINDOWS\system32\drivers\ip6fw.sys Trojan File copied to Backups Folder Attempting to replace ip6fw.sys with original version... Original ip6fw.sys Restored Restoring Windows Registry Values Restoring Windows Default Hosts File Rebooting... Service runtime2 - Deleted after Reboot Normal Mode: Checking Files: Trojan Files Found: C:\213974~1 - Deleted C:\Documents and Settings\St‚ven\new.txt - Deleted C:\WINDOWS\image011.zip - Deleted C:\WINDOWS\photo27.zip - Deleted C:\WINDOWS\photo96.zip - Deleted C:\WINDOWS\photos2007_31.zip - Deleted C:\WINDOWS\photo_album64.zip - Deleted C:\WINDOWS\system32\4_exception.nls - Deleted C:\WINDOWS\system32\Microsoft\backup.ftp - Deleted C:\WINDOWS\system32\Microsoft\backup.tftp - Deleted C:\WINDOWS\Temp\startdrv.exe - Deleted C:\WINDOWS\system32\drivers\runtime2.sys - Deleted Removing Temp Files... ADS Check: C:\WINDOWS No streams found. C:\WINDOWS\system32 No streams found. C:\WINDOWS\system32\svchost.exe No streams found. C:\WINDOWS\system32\ntoskrnl.exe No streams found. Final Check: catchme 0.3.1262.1 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-11-15 11:09:55 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden services & system hive ... [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System\cbidf] "EventMessageFile"=str(2):"%SystemRoot%\System32\IoLogMsg.dll" "TypesSupported"=dword:00000007 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System\eabfiltr] "EventMessageFile"=str(2):"%SystemRoot%\System32\IoLogMsg.dll" "TypesSupported"=dword:00000007 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System\eabusb] "EventMessageFile"=str(2):"%SystemRoot%\System32\IoLogMsg.dll" "TypesSupported"=dword:00000007 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System\HBtnKey] "EventMessageFile"=str(2):"%SystemRoot%\System32\IoLogMsg.dll" "TypesSupported"=dword:00000007 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System\iaStor] "EventMessageFile"=str(2):"%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\iaStor.sys" "TypesSupported"=dword:00000007 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System\SynTP] "EventMessageFile"=str(2):"%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\SynTP.sys" "TypesSupported"=dword:00000007 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System\WGA] "EventMessageFile"=str(2):"%SystemRoot%\System32\spmsg.dll" "TypesSupported"=dword:00000007 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System\Windows Installer 3.1] "EventMessageFile"=str(2):"%SystemRoot%\System32\spmsg.dll" "TypesSupported"=dword:00000007 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System\WindowsMedia] "EventMessageFile"=str(2):"%SystemRoot%\System32\spmsg.dll" "TypesSupported"=dword:00000007 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System\WMConnectCDS] "EventMessageFile"=str(2):"C:\Program Files\Windows Media Connect 2\Wmccds.exe" "TypesSupported"=dword:00000007 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{CB4C9412-4C42-435D-8617-29F681B6F3FF}] "DhcpRetryStatus"=dword:00000002 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\System\cbidf] "EventMessageFile"=str(2):"%SystemRoot%\System32\IoLogMsg.dll" "TypesSupported"=dword:00000007 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\System\eabfiltr] "EventMessageFile"=str(2):"%SystemRoot%\System32\IoLogMsg.dll" "TypesSupported"=dword:00000007 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\System\eabusb] "EventMessageFile"=str(2):"%SystemRoot%\System32\IoLogMsg.dll" "TypesSupported"=dword:00000007 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\System\HBtnKey] "EventMessageFile"=str(2):"%SystemRoot%\System32\IoLogMsg.dll" "TypesSupported"=dword:00000007 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\System\iaStor] "EventMessageFile"=str(2):"%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\iaStor.sys" "TypesSupported"=dword:00000007 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\System\SynTP] "EventMessageFile"=str(2):"%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\SynTP.sys" "TypesSupported"=dword:00000007 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\System\WGA] "EventMessageFile"=str(2):"%SystemRoot%\System32\spmsg.dll" "TypesSupported"=dword:00000007 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\System\Windows Installer 3.1] "EventMessageFile"=str(2):"%SystemRoot%\System32\spmsg.dll" "TypesSupported"=dword:00000007 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\System\WindowsMedia] "EventMessageFile"=str(2):"%SystemRoot%\System32\spmsg.dll" "TypesSupported"=dword:00000007 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\System\WMConnectCDS] "EventMessageFile"=str(2):"C:\Program Files\Windows Media Connect 2\Wmccds.exe" "TypesSupported"=dword:00000007 scanning hidden registry entries ... [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{077ACEC7-979C-40AB-9835-435BA1511E0D}] "FriendlyName"="Windows Media Files" "ComponentGUID"="{077ACEC7-979C-40AB-9835-435BA1511E0D}" "Version"=dword:000a0000 "Sub-Version"=dword:000010ec "ExceptionInfName"=str(2):"C:\WINDOWS\RegisteredPackages\{077ACEC7-979C-40AB-9835-435BA1511E0D}\MPPRE10.inf" "ExceptionCatalogName"=str(2):"C:\WINDOWS\RegisteredPackages\{077ACEC7-979C-40AB-9835-435BA1511E0D}\mppre10.cat" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{30C7234B-6482-4A55-A11D-ECD9030313F2}] "FriendlyName"="Windows Media Files" "ComponentGUID"="{30C7234B-6482-4A55-A11D-ECD9030313F2}" "Version"=dword:000a0000 "Sub-Version"=dword:000010ec "ExceptionInfName"=str(2):"C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\WMDM10.inf" "ExceptionCatalogName"=str(2):"C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\wmdm10.cat" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{981FB688-E76B-4246-987B-92083185B90A}] "FriendlyName"="Windows Media Files" "ComponentGUID"="{981FB688-E76B-4246-987B-92083185B90A}" "Version"=dword:000a0000 "Sub-Version"=dword:000010ec "ExceptionInfName"=str(2):"C:\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\WPD10.inf" "ExceptionCatalogName"=str(2):"C:\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wpd10.cat" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{A47B3654-48EE-48A5-B629-97D70175E58F}] "FriendlyName"="Windows Media Files" "ComponentGUID"="{A47B3654-48EE-48A5-B629-97D70175E58F}" "Version"=dword:000a0000 "Sub-Version"=dword:000010ec "ExceptionInfName"=str(2):"C:\WINDOWS\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}\codecs10.inf" "ExceptionCatalogName"=str(2):"C:\WINDOWS\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}\codecs10.cat" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}] "FriendlyName"="Windows Media Files" "ComponentGUID"="{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}" "Version"=dword:000a0000 "Sub-Version"=dword:000010ec "ExceptionInfName"=str(2):"C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\WMFSDK10.inf" "ExceptionCatalogName"=str(2):"C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\wmfsdk10.cat" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}] "FriendlyName"="Windows Media Files" "ComponentGUID"="{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}" "Version"=dword:000a0000 "Sub-Version"=dword:000010ec "ExceptionInfName"=str(2):"C:\WINDOWS\RegisteredPackages\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}\DRM10.inf" "ExceptionCatalogName"=str(2):"C:\WINDOWS\RegisteredPackages\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}\drm10.cat" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\OptionalComponents\SwDir] "Installed"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\OptionalComponents\SwFlash] "Installed"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Device Manager\KnownDeviceClasses\Mass Storage] "DeviceInterface"="{53F5630D-B6BF-11D0-94F2-00A0C91EFB8B}" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Device Manager\KnownDeviceClasses\Portable Audio Players] "DeviceInterface"="{F33FDC04-D1AC-4E8E-9A30-19BBD4B108AE}" "FilterParameter"="UseExtendedWmdm" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Device Manager\KnownDeviceClasses\Windows CE] "DeviceInterface"="{25DBCE51-6C8F-4A72-8A6D-B54C2B4FC835}" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Device Manager\KnownDeviceClasses\Windows CE RNDIS] "DeviceInterface"="{ad498944-762f-11d0-8dcb-00c04fc3358c}" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Device Manager\KnownDevices\WinCEDevice] "DeviceInterface"="{25DBCE51-6C8F-4A72-8A6D-B54C2B4FC835}" "WMDMSPCLSID"="{067B4B81-B1EC-489f-B111-940EBDC44EBE}" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Device Manager\KnownDevices\WinCEDeviceRNDIS] "DeviceInterface"="{ad498944-762f-11d0-8dcb-00c04fc3358c}" "WMDMSPCLSID"="{067B4B81-B1EC-489f-B111-940EBDC44EBE}" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19] "RefCount"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20] "RefCount"=dword:00000002 scanning hidden files ... C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\daminouche29@hotmail.fr\DFSR\Staging\CS{105EB82D-0E26-FB91-D50D-3A16213DBBF9}1\146-{105EB82D-0E26-FB91-D50D-3A16213DBBF9}-v1-{9488FF89-108D-436C-A373-FB5BF15515DC}-v146-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\daminouche29@hotmail.fr\DFSR\Staging\CS{105EB82D-0E26-FB91-D50D-3A16213DBBF9}\34\41-{4BBB0D49-16CA-4666-8725-064A64B7A6D5}-v34-{4BBB0D49-16CA-4666-8725-064A64B7A6D5}-v41-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8616 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\daminouche29@hotmail.fr\DFSR\Staging\CS{105EB82D-0E26-FB91-D50D-3A16213DBBF9}\35\42-{4BBB0D49-16CA-4666-8725-064A64B7A6D5}-v35-{4BBB0D49-16CA-4666-8725-064A64B7A6D5}-v42-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 4672 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\daminouche29@hotmail.fr\DFSR\Staging\CS{105EB82D-0E26-FB91-D50D-3A16213DBBF9}\36\58-{4BBB0D49-16CA-4666-8725-064A64B7A6D5}-v36-{4BBB0D49-16CA-4666-8725-064A64B7A6D5}-v58-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 46884 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\daminouche29@hotmail.fr\DFSR\Staging\CS{105EB82D-0E26-FB91-D50D-3A16213DBBF9}\36\58-{4BBB0D49-16CA-4666-8725-064A64B7A6D5}-v36-{4BBB0D49-16CA-4666-8725-064A64B7A6D5}-v58-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 3270 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\daminouche29@hotmail.fr\DFSR\Staging\CS{105EB82D-0E26-FB91-D50D-3A16213DBBF9}\36\58-{4BBB0D49-16CA-4666-8725-064A64B7A6D5}-v36-{4BBB0D49-16CA-4666-8725-064A64B7A6D5}-v58-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 5248 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\daminouche29@hotmail.fr\DFSR\Staging\CS{105EB82D-0E26-FB91-D50D-3A16213DBBF9}\60\152-{4BBB0D49-16CA-4666-8725-064A64B7A6D5}-v60-{9488FF89-108D-436C-A373-FB5BF15515DC}-v152-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 48216 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\daminouche29@hotmail.fr\DFSR\Staging\CS{105EB82D-0E26-FB91-D50D-3A16213DBBF9}\60\152-{4BBB0D49-16CA-4666-8725-064A64B7A6D5}-v60-{9488FF89-108D-436C-A373-FB5BF15515DC}-v152-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 3306 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\daminouche29@hotmail.fr\DFSR\Staging\CS{105EB82D-0E26-FB91-D50D-3A16213DBBF9}\60\152-{4BBB0D49-16CA-4666-8725-064A64B7A6D5}-v60-{9488FF89-108D-436C-A373-FB5BF15515DC}-v152-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 5368 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\34\173-{9488FF89-108D-436C-A373-FB5BF15515DC}-v34-{9488FF89-108D-436C-A373-FB5BF15515DC}-v173-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8166 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\34\173-{9488FF89-108D-436C-A373-FB5BF15515DC}-v34-{9488FF89-108D-436C-A373-FB5BF15515DC}-v173-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 928 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\57\196-{9488FF89-108D-436C-A373-FB5BF15515DC}-v57-{9488FF89-108D-436C-A373-FB5BF15515DC}-v196-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9138 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\57\196-{9488FF89-108D-436C-A373-FB5BF15515DC}-v57-{9488FF89-108D-436C-A373-FB5BF15515DC}-v196-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1040 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}1\12-{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}-v1-{9488FF89-108D-436C-A373-FB5BF15515DC}-v12-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\13\13-{9488FF89-108D-436C-A373-FB5BF15515DC}-v13-{9488FF89-108D-436C-A373-FB5BF15515DC}-v13-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\14\153-{9488FF89-108D-436C-A373-FB5BF15515DC}-v14-{9488FF89-108D-436C-A373-FB5BF15515DC}-v153-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8238 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\14\153-{9488FF89-108D-436C-A373-FB5BF15515DC}-v14-{9488FF89-108D-436C-A373-FB5BF15515DC}-v153-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 904 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\15\154-{9488FF89-108D-436C-A373-FB5BF15515DC}-v15-{9488FF89-108D-436C-A373-FB5BF15515DC}-v154-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7662 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\15\154-{9488FF89-108D-436C-A373-FB5BF15515DC}-v15-{9488FF89-108D-436C-A373-FB5BF15515DC}-v154-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 848 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\16\155-{9488FF89-108D-436C-A373-FB5BF15515DC}-v16-{9488FF89-108D-436C-A373-FB5BF15515DC}-v155-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9084 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\16\155-{9488FF89-108D-436C-A373-FB5BF15515DC}-v16-{9488FF89-108D-436C-A373-FB5BF15515DC}-v155-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1048 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\17\156-{9488FF89-108D-436C-A373-FB5BF15515DC}-v17-{9488FF89-108D-436C-A373-FB5BF15515DC}-v156-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8076 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\17\156-{9488FF89-108D-436C-A373-FB5BF15515DC}-v17-{9488FF89-108D-436C-A373-FB5BF15515DC}-v156-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 928 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\18\157-{9488FF89-108D-436C-A373-FB5BF15515DC}-v18-{9488FF89-108D-436C-A373-FB5BF15515DC}-v157-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9102 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\18\157-{9488FF89-108D-436C-A373-FB5BF15515DC}-v18-{9488FF89-108D-436C-A373-FB5BF15515DC}-v157-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1024 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\19\158-{9488FF89-108D-436C-A373-FB5BF15515DC}-v19-{9488FF89-108D-436C-A373-FB5BF15515DC}-v158-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7950 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\19\158-{9488FF89-108D-436C-A373-FB5BF15515DC}-v19-{9488FF89-108D-436C-A373-FB5BF15515DC}-v158-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 904 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\20\159-{9488FF89-108D-436C-A373-FB5BF15515DC}-v20-{9488FF89-108D-436C-A373-FB5BF15515DC}-v159-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8526 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\20\159-{9488FF89-108D-436C-A373-FB5BF15515DC}-v20-{9488FF89-108D-436C-A373-FB5BF15515DC}-v159-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 968 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\21\160-{9488FF89-108D-436C-A373-FB5BF15515DC}-v21-{9488FF89-108D-436C-A373-FB5BF15515DC}-v160-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8832 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\21\160-{9488FF89-108D-436C-A373-FB5BF15515DC}-v21-{9488FF89-108D-436C-A373-FB5BF15515DC}-v160-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 976 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\22\161-{9488FF89-108D-436C-A373-FB5BF15515DC}-v22-{9488FF89-108D-436C-A373-FB5BF15515DC}-v161-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8292 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\22\161-{9488FF89-108D-436C-A373-FB5BF15515DC}-v22-{9488FF89-108D-436C-A373-FB5BF15515DC}-v161-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 912 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\23\162-{9488FF89-108D-436C-A373-FB5BF15515DC}-v23-{9488FF89-108D-436C-A373-FB5BF15515DC}-v162-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8256 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\23\162-{9488FF89-108D-436C-A373-FB5BF15515DC}-v23-{9488FF89-108D-436C-A373-FB5BF15515DC}-v162-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 912 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\24\163-{9488FF89-108D-436C-A373-FB5BF15515DC}-v24-{9488FF89-108D-436C-A373-FB5BF15515DC}-v163-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8004 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\24\163-{9488FF89-108D-436C-A373-FB5BF15515DC}-v24-{9488FF89-108D-436C-A373-FB5BF15515DC}-v163-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 896 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\25\164-{9488FF89-108D-436C-A373-FB5BF15515DC}-v25-{9488FF89-108D-436C-A373-FB5BF15515DC}-v164-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7536 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\25\164-{9488FF89-108D-436C-A373-FB5BF15515DC}-v25-{9488FF89-108D-436C-A373-FB5BF15515DC}-v164-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 856 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\26\165-{9488FF89-108D-436C-A373-FB5BF15515DC}-v26-{9488FF89-108D-436C-A373-FB5BF15515DC}-v165-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7410 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\26\165-{9488FF89-108D-436C-A373-FB5BF15515DC}-v26-{9488FF89-108D-436C-A373-FB5BF15515DC}-v165-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 864 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\27\166-{9488FF89-108D-436C-A373-FB5BF15515DC}-v27-{9488FF89-108D-436C-A373-FB5BF15515DC}-v166-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8526 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\27\166-{9488FF89-108D-436C-A373-FB5BF15515DC}-v27-{9488FF89-108D-436C-A373-FB5BF15515DC}-v166-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 976 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\28\167-{9488FF89-108D-436C-A373-FB5BF15515DC}-v28-{9488FF89-108D-436C-A373-FB5BF15515DC}-v167-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 6618 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\28\167-{9488FF89-108D-436C-A373-FB5BF15515DC}-v28-{9488FF89-108D-436C-A373-FB5BF15515DC}-v167-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 736 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\29\168-{9488FF89-108D-436C-A373-FB5BF15515DC}-v29-{9488FF89-108D-436C-A373-FB5BF15515DC}-v168-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8904 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\29\168-{9488FF89-108D-436C-A373-FB5BF15515DC}-v29-{9488FF89-108D-436C-A373-FB5BF15515DC}-v168-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 992 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\30\169-{9488FF89-108D-436C-A373-FB5BF15515DC}-v30-{9488FF89-108D-436C-A373-FB5BF15515DC}-v169-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8040 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\30\169-{9488FF89-108D-436C-A373-FB5BF15515DC}-v30-{9488FF89-108D-436C-A373-FB5BF15515DC}-v169-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 904 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\31\170-{9488FF89-108D-436C-A373-FB5BF15515DC}-v31-{9488FF89-108D-436C-A373-FB5BF15515DC}-v170-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8454 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\31\170-{9488FF89-108D-436C-A373-FB5BF15515DC}-v31-{9488FF89-108D-436C-A373-FB5BF15515DC}-v170-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 936 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\32\171-{9488FF89-108D-436C-A373-FB5BF15515DC}-v32-{9488FF89-108D-436C-A373-FB5BF15515DC}-v171-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8490 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\32\171-{9488FF89-108D-436C-A373-FB5BF15515DC}-v32-{9488FF89-108D-436C-A373-FB5BF15515DC}-v171-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 944 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\33\172-{9488FF89-108D-436C-A373-FB5BF15515DC}-v33-{9488FF89-108D-436C-A373-FB5BF15515DC}-v172-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 126192 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\33\172-{9488FF89-108D-436C-A373-FB5BF15515DC}-v33-{9488FF89-108D-436C-A373-FB5BF15515DC}-v172-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 9120 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\33\172-{9488FF89-108D-436C-A373-FB5BF15515DC}-v33-{9488FF89-108D-436C-A373-FB5BF15515DC}-v172-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 14424 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\35\174-{9488FF89-108D-436C-A373-FB5BF15515DC}-v35-{9488FF89-108D-436C-A373-FB5BF15515DC}-v174-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8076 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\35\174-{9488FF89-108D-436C-A373-FB5BF15515DC}-v35-{9488FF89-108D-436C-A373-FB5BF15515DC}-v174-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 928 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\36\175-{9488FF89-108D-436C-A373-FB5BF15515DC}-v36-{9488FF89-108D-436C-A373-FB5BF15515DC}-v175-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8364 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\36\175-{9488FF89-108D-436C-A373-FB5BF15515DC}-v36-{9488FF89-108D-436C-A373-FB5BF15515DC}-v175-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 952 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\37\176-{9488FF89-108D-436C-A373-FB5BF15515DC}-v37-{9488FF89-108D-436C-A373-FB5BF15515DC}-v176-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7986 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\37\176-{9488FF89-108D-436C-A373-FB5BF15515DC}-v37-{9488FF89-108D-436C-A373-FB5BF15515DC}-v176-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 904 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\38\177-{9488FF89-108D-436C-A373-FB5BF15515DC}-v38-{9488FF89-108D-436C-A373-FB5BF15515DC}-v177-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7896 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\38\177-{9488FF89-108D-436C-A373-FB5BF15515DC}-v38-{9488FF89-108D-436C-A373-FB5BF15515DC}-v177-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 888 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\39\178-{9488FF89-108D-436C-A373-FB5BF15515DC}-v39-{9488FF89-108D-436C-A373-FB5BF15515DC}-v178-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7554 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\39\178-{9488FF89-108D-436C-A373-FB5BF15515DC}-v39-{9488FF89-108D-436C-A373-FB5BF15515DC}-v178-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 840 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\40\179-{9488FF89-108D-436C-A373-FB5BF15515DC}-v40-{9488FF89-108D-436C-A373-FB5BF15515DC}-v179-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8058 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\40\179-{9488FF89-108D-436C-A373-FB5BF15515DC}-v40-{9488FF89-108D-436C-A373-FB5BF15515DC}-v179-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 920 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\41\180-{9488FF89-108D-436C-A373-FB5BF15515DC}-v41-{9488FF89-108D-436C-A373-FB5BF15515DC}-v180-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8436 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\41\180-{9488FF89-108D-436C-A373-FB5BF15515DC}-v41-{9488FF89-108D-436C-A373-FB5BF15515DC}-v180-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 928 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\42\181-{9488FF89-108D-436C-A373-FB5BF15515DC}-v42-{9488FF89-108D-436C-A373-FB5BF15515DC}-v181-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10290 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\42\181-{9488FF89-108D-436C-A373-FB5BF15515DC}-v42-{9488FF89-108D-436C-A373-FB5BF15515DC}-v181-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1152 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\43\182-{9488FF89-108D-436C-A373-FB5BF15515DC}-v43-{9488FF89-108D-436C-A373-FB5BF15515DC}-v182-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10056 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\43\182-{9488FF89-108D-436C-A373-FB5BF15515DC}-v43-{9488FF89-108D-436C-A373-FB5BF15515DC}-v182-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1112 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\44\183-{9488FF89-108D-436C-A373-FB5BF15515DC}-v44-{9488FF89-108D-436C-A373-FB5BF15515DC}-v183-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10506 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\44\183-{9488FF89-108D-436C-A373-FB5BF15515DC}-v44-{9488FF89-108D-436C-A373-FB5BF15515DC}-v183-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1168 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\45\184-{9488FF89-108D-436C-A373-FB5BF15515DC}-v45-{9488FF89-108D-436C-A373-FB5BF15515DC}-v184-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 68700 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\45\184-{9488FF89-108D-436C-A373-FB5BF15515DC}-v45-{9488FF89-108D-436C-A373-FB5BF15515DC}-v184-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 4890 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\45\184-{9488FF89-108D-436C-A373-FB5BF15515DC}-v45-{9488FF89-108D-436C-A373-FB5BF15515DC}-v184-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 7808 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\46\185-{9488FF89-108D-436C-A373-FB5BF15515DC}-v46-{9488FF89-108D-436C-A373-FB5BF15515DC}-v185-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8256 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\46\185-{9488FF89-108D-436C-A373-FB5BF15515DC}-v46-{9488FF89-108D-436C-A373-FB5BF15515DC}-v185-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 936 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\47\186-{9488FF89-108D-436C-A373-FB5BF15515DC}-v47-{9488FF89-108D-436C-A373-FB5BF15515DC}-v186-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9750 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\47\186-{9488FF89-108D-436C-A373-FB5BF15515DC}-v47-{9488FF89-108D-436C-A373-FB5BF15515DC}-v186-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1080 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\48\187-{9488FF89-108D-436C-A373-FB5BF15515DC}-v48-{9488FF89-108D-436C-A373-FB5BF15515DC}-v187-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8634 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\48\187-{9488FF89-108D-436C-A373-FB5BF15515DC}-v48-{9488FF89-108D-436C-A373-FB5BF15515DC}-v187-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 912 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\49\188-{9488FF89-108D-436C-A373-FB5BF15515DC}-v49-{9488FF89-108D-436C-A373-FB5BF15515DC}-v188-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8562 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\49\188-{9488FF89-108D-436C-A373-FB5BF15515DC}-v49-{9488FF89-108D-436C-A373-FB5BF15515DC}-v188-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 984 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\50\189-{9488FF89-108D-436C-A373-FB5BF15515DC}-v50-{9488FF89-108D-436C-A373-FB5BF15515DC}-v189-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9102 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\50\189-{9488FF89-108D-436C-A373-FB5BF15515DC}-v50-{9488FF89-108D-436C-A373-FB5BF15515DC}-v189-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1032 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\51\190-{9488FF89-108D-436C-A373-FB5BF15515DC}-v51-{9488FF89-108D-436C-A373-FB5BF15515DC}-v190-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 268104 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\51\190-{9488FF89-108D-436C-A373-FB5BF15515DC}-v51-{9488FF89-108D-436C-A373-FB5BF15515DC}-v190-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 18912 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\51\190-{9488FF89-108D-436C-A373-FB5BF15515DC}-v51-{9488FF89-108D-436C-A373-FB5BF15515DC}-v190-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.3 1434 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\51\190-{9488FF89-108D-436C-A373-FB5BF15515DC}-v51-{9488FF89-108D-436C-A373-FB5BF15515DC}-v190-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 30352 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\52\191-{9488FF89-108D-436C-A373-FB5BF15515DC}-v52-{9488FF89-108D-436C-A373-FB5BF15515DC}-v191-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9480 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\52\191-{9488FF89-108D-436C-A373-FB5BF15515DC}-v52-{9488FF89-108D-436C-A373-FB5BF15515DC}-v191-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1064 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\53\192-{9488FF89-108D-436C-A373-FB5BF15515DC}-v53-{9488FF89-108D-436C-A373-FB5BF15515DC}-v192-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9264 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\53\192-{9488FF89-108D-436C-A373-FB5BF15515DC}-v53-{9488FF89-108D-436C-A373-FB5BF15515DC}-v192-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1032 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\54\193-{9488FF89-108D-436C-A373-FB5BF15515DC}-v54-{9488FF89-108D-436C-A373-FB5BF15515DC}-v193-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9228 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\54\193-{9488FF89-108D-436C-A373-FB5BF15515DC}-v54-{9488FF89-108D-436C-A373-FB5BF15515DC}-v193-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1064 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\55\194-{9488FF89-108D-436C-A373-FB5BF15515DC}-v55-{9488FF89-108D-436C-A373-FB5BF15515DC}-v194-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9228 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\55\194-{9488FF89-108D-436C-A373-FB5BF15515DC}-v55-{9488FF89-108D-436C-A373-FB5BF15515DC}-v194-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1040 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\56\195-{9488FF89-108D-436C-A373-FB5BF15515DC}-v56-{9488FF89-108D-436C-A373-FB5BF15515DC}-v195-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8886 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\56\195-{9488FF89-108D-436C-A373-FB5BF15515DC}-v56-{9488FF89-108D-436C-A373-FB5BF15515DC}-v195-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 976 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\58\197-{9488FF89-108D-436C-A373-FB5BF15515DC}-v58-{9488FF89-108D-436C-A373-FB5BF15515DC}-v197-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9300 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\58\197-{9488FF89-108D-436C-A373-FB5BF15515DC}-v58-{9488FF89-108D-436C-A373-FB5BF15515DC}-v197-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1032 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\59\198-{9488FF89-108D-436C-A373-FB5BF15515DC}-v59-{9488FF89-108D-436C-A373-FB5BF15515DC}-v198-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8976 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\59\198-{9488FF89-108D-436C-A373-FB5BF15515DC}-v59-{9488FF89-108D-436C-A373-FB5BF15515DC}-v198-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1048 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\60\199-{9488FF89-108D-436C-A373-FB5BF15515DC}-v60-{9488FF89-108D-436C-A373-FB5BF15515DC}-v199-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10686 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\60\199-{9488FF89-108D-436C-A373-FB5BF15515DC}-v60-{9488FF89-108D-436C-A373-FB5BF15515DC}-v199-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1192 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\61\200-{9488FF89-108D-436C-A373-FB5BF15515DC}-v61-{9488FF89-108D-436C-A373-FB5BF15515DC}-v200-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9318 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\61\200-{9488FF89-108D-436C-A373-FB5BF15515DC}-v61-{9488FF89-108D-436C-A373-FB5BF15515DC}-v200-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1040 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\62\201-{9488FF89-108D-436C-A373-FB5BF15515DC}-v62-{9488FF89-108D-436C-A373-FB5BF15515DC}-v201-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8094 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\62\201-{9488FF89-108D-436C-A373-FB5BF15515DC}-v62-{9488FF89-108D-436C-A373-FB5BF15515DC}-v201-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 920 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\63\202-{9488FF89-108D-436C-A373-FB5BF15515DC}-v63-{9488FF89-108D-436C-A373-FB5BF15515DC}-v202-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7698 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\63\202-{9488FF89-108D-436C-A373-FB5BF15515DC}-v63-{9488FF89-108D-436C-A373-FB5BF15515DC}-v202-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 880 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\64\203-{9488FF89-108D-436C-A373-FB5BF15515DC}-v64-{9488FF89-108D-436C-A373-FB5BF15515DC}-v203-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8634 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\64\203-{9488FF89-108D-436C-A373-FB5BF15515DC}-v64-{9488FF89-108D-436C-A373-FB5BF15515DC}-v203-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 968 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\65\204-{9488FF89-108D-436C-A373-FB5BF15515DC}-v65-{9488FF89-108D-436C-A373-FB5BF15515DC}-v204-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9408 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\65\204-{9488FF89-108D-436C-A373-FB5BF15515DC}-v65-{9488FF89-108D-436C-A373-FB5BF15515DC}-v204-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1080 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\66\205-{9488FF89-108D-436C-A373-FB5BF15515DC}-v66-{9488FF89-108D-436C-A373-FB5BF15515DC}-v205-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 6906 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\66\205-{9488FF89-108D-436C-A373-FB5BF15515DC}-v66-{9488FF89-108D-436C-A373-FB5BF15515DC}-v205-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 784 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\67\206-{9488FF89-108D-436C-A373-FB5BF15515DC}-v67-{9488FF89-108D-436C-A373-FB5BF15515DC}-v206-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9192 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\67\206-{9488FF89-108D-436C-A373-FB5BF15515DC}-v67-{9488FF89-108D-436C-A373-FB5BF15515DC}-v206-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1016 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\68\207-{9488FF89-108D-436C-A373-FB5BF15515DC}-v68-{9488FF89-108D-436C-A373-FB5BF15515DC}-v207-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9606 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\68\207-{9488FF89-108D-436C-A373-FB5BF15515DC}-v68-{9488FF89-108D-436C-A373-FB5BF15515DC}-v207-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1072 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\69\208-{9488FF89-108D-436C-A373-FB5BF15515DC}-v69-{9488FF89-108D-436C-A373-FB5BF15515DC}-v208-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8490 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\69\208-{9488FF89-108D-436C-A373-FB5BF15515DC}-v69-{9488FF89-108D-436C-A373-FB5BF15515DC}-v208-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 960 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\70\209-{9488FF89-108D-436C-A373-FB5BF15515DC}-v70-{9488FF89-108D-436C-A373-FB5BF15515DC}-v209-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8922 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\70\209-{9488FF89-108D-436C-A373-FB5BF15515DC}-v70-{9488FF89-108D-436C-A373-FB5BF15515DC}-v209-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 992 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\71\210-{9488FF89-108D-436C-A373-FB5BF15515DC}-v71-{9488FF89-108D-436C-A373-FB5BF15515DC}-v210-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8616 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\71\210-{9488FF89-108D-436C-A373-FB5BF15515DC}-v71-{9488FF89-108D-436C-A373-FB5BF15515DC}-v210-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1000 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\72\211-{9488FF89-108D-436C-A373-FB5BF15515DC}-v72-{9488FF89-108D-436C-A373-FB5BF15515DC}-v211-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7824 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\72\211-{9488FF89-108D-436C-A373-FB5BF15515DC}-v72-{9488FF89-108D-436C-A373-FB5BF15515DC}-v211-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 904 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\73\212-{9488FF89-108D-436C-A373-FB5BF15515DC}-v73-{9488FF89-108D-436C-A373-FB5BF15515DC}-v212-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8418 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\73\212-{9488FF89-108D-436C-A373-FB5BF15515DC}-v73-{9488FF89-108D-436C-A373-FB5BF15515DC}-v212-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 968 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\74\213-{9488FF89-108D-436C-A373-FB5BF15515DC}-v74-{9488FF89-108D-436C-A373-FB5BF15515DC}-v213-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8796 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\74\213-{9488FF89-108D-436C-A373-FB5BF15515DC}-v74-{9488FF89-108D-436C-A373-FB5BF15515DC}-v213-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 992 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\75\214-{9488FF89-108D-436C-A373-FB5BF15515DC}-v75-{9488FF89-108D-436C-A373-FB5BF15515DC}-v214-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9354 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\75\214-{9488FF89-108D-436C-A373-FB5BF15515DC}-v75-{9488FF89-108D-436C-A373-FB5BF15515DC}-v214-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1024 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\76\215-{9488FF89-108D-436C-A373-FB5BF15515DC}-v76-{9488FF89-108D-436C-A373-FB5BF15515DC}-v215-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7860 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\76\215-{9488FF89-108D-436C-A373-FB5BF15515DC}-v76-{9488FF89-108D-436C-A373-FB5BF15515DC}-v215-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 896 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\77\216-{9488FF89-108D-436C-A373-FB5BF15515DC}-v77-{9488FF89-108D-436C-A373-FB5BF15515DC}-v216-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7698 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\77\216-{9488FF89-108D-436C-A373-FB5BF15515DC}-v77-{9488FF89-108D-436C-A373-FB5BF15515DC}-v216-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 856 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\78\217-{9488FF89-108D-436C-A373-FB5BF15515DC}-v78-{9488FF89-108D-436C-A373-FB5BF15515DC}-v217-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8364 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\78\217-{9488FF89-108D-436C-A373-FB5BF15515DC}-v78-{9488FF89-108D-436C-A373-FB5BF15515DC}-v217-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 952 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\79\218-{9488FF89-108D-436C-A373-FB5BF15515DC}-v79-{9488FF89-108D-436C-A373-FB5BF15515DC}-v218-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 6960 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\79\218-{9488FF89-108D-436C-A373-FB5BF15515DC}-v79-{9488FF89-108D-436C-A373-FB5BF15515DC}-v218-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 752 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\80\219-{9488FF89-108D-436C-A373-FB5BF15515DC}-v80-{9488FF89-108D-436C-A373-FB5BF15515DC}-v219-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 30972 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\80\219-{9488FF89-108D-436C-A373-FB5BF15515DC}-v80-{9488FF89-108D-436C-A373-FB5BF15515DC}-v219-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 2262 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\80\219-{9488FF89-108D-436C-A373-FB5BF15515DC}-v80-{9488FF89-108D-436C-A373-FB5BF15515DC}-v219-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 3560 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\81\220-{9488FF89-108D-436C-A373-FB5BF15515DC}-v81-{9488FF89-108D-436C-A373-FB5BF15515DC}-v220-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9822 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\81\220-{9488FF89-108D-436C-A373-FB5BF15515DC}-v81-{9488FF89-108D-436C-A373-FB5BF15515DC}-v220-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1080 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\82\221-{9488FF89-108D-436C-A373-FB5BF15515DC}-v82-{9488FF89-108D-436C-A373-FB5BF15515DC}-v221-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9732 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\82\221-{9488FF89-108D-436C-A373-FB5BF15515DC}-v82-{9488FF89-108D-436C-A373-FB5BF15515DC}-v221-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1104 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\83\222-{9488FF89-108D-436C-A373-FB5BF15515DC}-v83-{9488FF89-108D-436C-A373-FB5BF15515DC}-v222-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10110 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\83\222-{9488FF89-108D-436C-A373-FB5BF15515DC}-v83-{9488FF89-108D-436C-A373-FB5BF15515DC}-v222-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1088 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\84\223-{9488FF89-108D-436C-A373-FB5BF15515DC}-v84-{9488FF89-108D-436C-A373-FB5BF15515DC}-v223-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8634 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\84\223-{9488FF89-108D-436C-A373-FB5BF15515DC}-v84-{9488FF89-108D-436C-A373-FB5BF15515DC}-v223-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1016 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\85\224-{9488FF89-108D-436C-A373-FB5BF15515DC}-v85-{9488FF89-108D-436C-A373-FB5BF15515DC}-v224-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8760 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\85\224-{9488FF89-108D-436C-A373-FB5BF15515DC}-v85-{9488FF89-108D-436C-A373-FB5BF15515DC}-v224-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 976 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\86\225-{9488FF89-108D-436C-A373-FB5BF15515DC}-v86-{9488FF89-108D-436C-A373-FB5BF15515DC}-v225-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7914 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\86\225-{9488FF89-108D-436C-A373-FB5BF15515DC}-v86-{9488FF89-108D-436C-A373-FB5BF15515DC}-v225-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 904 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\87\226-{9488FF89-108D-436C-A373-FB5BF15515DC}-v87-{9488FF89-108D-436C-A373-FB5BF15515DC}-v226-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8400 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\87\226-{9488FF89-108D-436C-A373-FB5BF15515DC}-v87-{9488FF89-108D-436C-A373-FB5BF15515DC}-v226-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 928 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\88\227-{9488FF89-108D-436C-A373-FB5BF15515DC}-v88-{9488FF89-108D-436C-A373-FB5BF15515DC}-v227-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7788 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\88\227-{9488FF89-108D-436C-A373-FB5BF15515DC}-v88-{9488FF89-108D-436C-A373-FB5BF15515DC}-v227-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 888 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\89\228-{9488FF89-108D-436C-A373-FB5BF15515DC}-v89-{9488FF89-108D-436C-A373-FB5BF15515DC}-v228-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7788 bytes hidden from API C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\89\228-{9488FF89-108D-436C-A373-FB5BF15515DC}-v89-{9488FF89-108D-436C-A373-FB5BF15515DC}-v228-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 888 bytes hidden from API scan completed successfully hidden processes: 0 hidden services: 0 hidden files: 168 Remaining Services: ------------------ Authorized Application Key Export: [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\\WINDOWS\\system32\\mqsvc.exe"="C:\\WINDOWS\\system32\\mqsvc.exe:*:Enabled:Message Queuing" "C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger" "C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1" "C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)" "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\\Program Files\\Joost\\xulrunner\\tvprunner.exe"="C:\\Program Files\\Joost\\xulrunner\\tvprunner.exe:*:Enabled:tvprunner" "C:\\Program Files\\Battlefield 2\\BF2.exe"="C:\\Program Files\\Battlefield 2\\BF2.exe:*:Enabled:Battlefield 2" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\\WINDOWS\\system32\\mqsvc.exe"="C:\\WINDOWS\\system32\\mqsvc.exe:*:Enabled:Message Queuing" "C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1" "C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)" "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" Remaining Files: --------------- File Backups: - C:\PROGRA~1\sdfx\SDFix\backups\backups.zip Files with Hidden Attributes: Fri 16 Feb 2007 22 A.SH. --- "C:\WINDOWS\SMINST\HPCD.sys" Sun 1 Apr 2007 4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak" Sun 18 Feb 2007 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp" Sun 28 Oct 2007 4,521 ...HR --- "C:\Documents and Settings\St‚ven\Application Data\SecuROM\UserData\securom_v7_01.bak" Fri 3 Nov 2006 25,088 A..H. --- "C:\Documents and Settings\St‚ven\Mes documents\travail (‚cole)\dossier vsp\~WRL3788.tmp" Finished!

Bonsoir, pouvez vous analyser ce rapport, bitdefender me trouve des rootkit, mais ils se relancent à chaque fois Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 16:08:08, on 14/11/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16544) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Softwin\BitDefender10\bdmcon.exe C:\Program Files\Softwin\BitDefender10\bdagent.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Windows Media Player\WMPNSCFG.exe C:\WINDOWS\eHome\ehRecvr.exe C:\WINDOWS\eHome\ehSched.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe C:\WINDOWS\system32\mqsvc.exe C:\WINDOWS\system32\mqtgsvc.exe C:\WINDOWS\system32\dllhost.exe C:\Program Files\MSN Messenger\usnsvc.exe C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe C:\Program Files\Softwin\BitDefender10\vsserv.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe C:\Program Files\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.free.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://home.free.fr/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: dsWebAllowBHO Class - {2F85D76C-0569-466F-A488-493E6BD0E955} - C:\Program Files\Windows Desktop Search\dsWebAllow.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /nodetect O4 - HKLM\..\Run: [bDMCon] "C:\Program Files\Softwin\BitDefender10\bdmcon.exe" /reg O4 - HKLM\..\Run: [bDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe" O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [wdfmgr.exe] C:\WINDOWS\wdfmgr.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O14 - IERESET.INF: START_PAGE_URL=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=FR_FR&c=64&bd=pavilion&pf=laptop O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1171635496421 O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} (AxisMediaControlEmb Class) - http://camera1.mairie-brest.fr/activex/AMC.cab O21 - SSODL: printers - {EF9BD3F0-D4E0-4D44-9A36-3E5F8058ABD8} - libcintles3.dll (file missing) O23 - Service: AddFiltr - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe O23 - Service: BitDefender Desktop Update Service (LIVESRV) - SOFTWIN S.R.L. - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: SolidWorks Licensing Service - SolidWorks - C:\Program Files\Fichiers communs\SolidWorks Shared\Service\SolidWorksLicensing.exe O23 - Service: BitDefender Virus Shield (VSSERV) - SOFTWIN S.R.L. - C:\Program Files\Softwin\BitDefender10\vsserv.exe O23 - Service: BitDefender Communicator (XCOMM) - SOFTWIN S.R.L - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe -- End of file - 7845 bytes

Bonsoir, pouvez vous analyser ce rapport, bitdefender me trouve des rootkit, mais ils se relancent à chaque fois Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 16:08:08, on 14/11/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16544) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Softwin\BitDefender10\bdmcon.exe C:\Program Files\Softwin\BitDefender10\bdagent.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Windows Media Player\WMPNSCFG.exe C:\WINDOWS\eHome\ehRecvr.exe C:\WINDOWS\eHome\ehSched.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe C:\WINDOWS\system32\mqsvc.exe C:\WINDOWS\system32\mqtgsvc.exe C:\WINDOWS\system32\dllhost.exe C:\Program Files\MSN Messenger\usnsvc.exe C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe C:\Program Files\Softwin\BitDefender10\vsserv.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe C:\Program Files\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.free.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://home.free.fr/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: dsWebAllowBHO Class - {2F85D76C-0569-466F-A488-493E6BD0E955} - C:\Program Files\Windows Desktop Search\dsWebAllow.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /nodetect O4 - HKLM\..\Run: [bDMCon] "C:\Program Files\Softwin\BitDefender10\bdmcon.exe" /reg O4 - HKLM\..\Run: [bDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe" O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [wdfmgr.exe] C:\WINDOWS\wdfmgr.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O14 - IERESET.INF: START_PAGE_URL=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=FR_FR&c=64&bd=pavilion&pf=laptop O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1171635496421 O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} (AxisMediaControlEmb Class) - http://camera1.mairie-brest.fr/activex/AMC.cab O21 - SSODL: printers - {EF9BD3F0-D4E0-4D44-9A36-3E5F8058ABD8} - libcintles3.dll (file missing) O23 - Service: AddFiltr - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe O23 - Service: BitDefender Desktop Update Service (LIVESRV) - SOFTWIN S.R.L. - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: SolidWorks Licensing Service - SolidWorks - C:\Program Files\Fichiers communs\SolidWorks Shared\Service\SolidWorksLicensing.exe O23 - Service: BitDefender Virus Shield (VSSERV) - SOFTWIN S.R.L. - C:\Program Files\Softwin\BitDefender10\vsserv.exe O23 - Service: BitDefender Communicator (XCOMM) - SOFTWIN S.R.L - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe -- End of file - 7845 bytes