diddl29
-
Compteur de contenus
4 -
Inscription
-
Dernière visite
Type de contenu
Profils
Forums
Blogs
Messages posté(e)s par diddl29
-
-
Bonsoir,
Télécharge SDFix (d’Andy Manchesta)
Enregistre le sur ton le bureau.
Lances le.
Fais install afin qu’il puisse s’extraire.
/!\ Ne jamais démarrer en mode sans échec via MSCONFIG /!\
Lance SDFix.
Double clique sur RunThis.bat .
Appuie sur Y pour le lancer.
Il te sera demandé d'appuyer sur une touche pour redemarrer , fais le
Il est probable que le redémarrage soit un peu plus long que d’habitude.
Une fois l’apparition de ton Bureau, il affichera Finished
Appuie sur une touche.
Un rapport est généré , poste le dans ta réponse.
Il se trouve également. dans le dossier SDFix >Report.txt<
SDFix: Version 1.114
Run by St‚ven on 15/11/2007 at 11:00
Microsoft Windows XP [version 5.1.2600]
Running From: C:\PROGRA~1\sdfx\SDFix
Safe Mode:
Checking Services:
Name:
NtmlSvc
runtime
smtpdrv
Path:
%SystemRoot%\System32\svchost.exe -k netsvcs
\??\C:\WINDOWS\System32\drivers\runtime.sys
System32\DRIVERS\smtpdrv.sys
NtmlSvc - Deleted
runtime - Deleted
smtpdrv - Deleted
C:\WINDOWS\system32\Microsoft\backup.ftp Found
C:\WINDOWS\system32\Microsoft\backup.tftp Found
Checking files:
Genuine:
C:\WINDOWS\system32\Microsoft\backup.ftp
C:\WINDOWS\system32\Microsoft\backup.tftp
Dummy:
C:\WINDOWS\system32\ftp.exe
C:\WINDOWS\system32\tftp.exe
Files copied to SDFix\Backups
Restoring files if backups are found
Final Check:
Genuine:
C:\WINDOWS\system32\Microsoft\backup.ftp
C:\WINDOWS\system32\Microsoft\backup.tftp
C:\WINDOWS\system32\ftp.exe
C:\WINDOWS\system32\tftp.exe
C:\WINDOWS\system32\dllcache\ftp.exe
C:\WINDOWS\system32\dllcache\tftp.exe
Dummy:
Infected ip6fw.sys Found!
ip6fw.sys File Locations:
"C:\WINDOWS\system32\dllcache\ip6fw.sys" 29056 24/03/2006 21:00
"C:\WINDOWS\system32\drivers\ip6fw.sys" 29056 24/03/2006 21:00
Infected File Listed Below:
C:\WINDOWS\system32\drivers\ip6fw.sys
Trojan File copied to Backups Folder
Attempting to replace ip6fw.sys with original version...
Original ip6fw.sys Restored
Restoring Windows Registry Values
Restoring Windows Default Hosts File
Rebooting...
Service runtime2 - Deleted after Reboot
Normal Mode:
Checking Files:
Trojan Files Found:
C:\213974~1 - Deleted
C:\Documents and Settings\St‚ven\new.txt - Deleted
C:\WINDOWS\image011.zip - Deleted
C:\WINDOWS\photo27.zip - Deleted
C:\WINDOWS\photo96.zip - Deleted
C:\WINDOWS\photos2007_31.zip - Deleted
C:\WINDOWS\photo_album64.zip - Deleted
C:\WINDOWS\system32\4_exception.nls - Deleted
C:\WINDOWS\system32\Microsoft\backup.ftp - Deleted
C:\WINDOWS\system32\Microsoft\backup.tftp - Deleted
C:\WINDOWS\Temp\startdrv.exe - Deleted
C:\WINDOWS\system32\drivers\runtime2.sys - Deleted
Removing Temp Files...
ADS Check:
C:\WINDOWS
No streams found.
C:\WINDOWS\system32
No streams found.
C:\WINDOWS\system32\svchost.exe
No streams found.
C:\WINDOWS\system32\ntoskrnl.exe
No streams found.
Final Check:
catchme 0.3.1262.1 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-11-15 11:09:55
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden services & system hive ...
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System\cbidf]
"EventMessageFile"=str(2):"%SystemRoot%\System32\IoLogMsg.dll"
"TypesSupported"=dword:00000007
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System\eabfiltr]
"EventMessageFile"=str(2):"%SystemRoot%\System32\IoLogMsg.dll"
"TypesSupported"=dword:00000007
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System\eabusb]
"EventMessageFile"=str(2):"%SystemRoot%\System32\IoLogMsg.dll"
"TypesSupported"=dword:00000007
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System\HBtnKey]
"EventMessageFile"=str(2):"%SystemRoot%\System32\IoLogMsg.dll"
"TypesSupported"=dword:00000007
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System\iaStor]
"EventMessageFile"=str(2):"%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\iaStor.sys"
"TypesSupported"=dword:00000007
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System\SynTP]
"EventMessageFile"=str(2):"%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\SynTP.sys"
"TypesSupported"=dword:00000007
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System\WGA]
"EventMessageFile"=str(2):"%SystemRoot%\System32\spmsg.dll"
"TypesSupported"=dword:00000007
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System\Windows Installer 3.1]
"EventMessageFile"=str(2):"%SystemRoot%\System32\spmsg.dll"
"TypesSupported"=dword:00000007
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System\WindowsMedia]
"EventMessageFile"=str(2):"%SystemRoot%\System32\spmsg.dll"
"TypesSupported"=dword:00000007
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System\WMConnectCDS]
"EventMessageFile"=str(2):"C:\Program Files\Windows Media Connect 2\Wmccds.exe"
"TypesSupported"=dword:00000007
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{CB4C9412-4C42-435D-8617-29F681B6F3FF}]
"DhcpRetryStatus"=dword:00000002
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\System\cbidf]
"EventMessageFile"=str(2):"%SystemRoot%\System32\IoLogMsg.dll"
"TypesSupported"=dword:00000007
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\System\eabfiltr]
"EventMessageFile"=str(2):"%SystemRoot%\System32\IoLogMsg.dll"
"TypesSupported"=dword:00000007
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\System\eabusb]
"EventMessageFile"=str(2):"%SystemRoot%\System32\IoLogMsg.dll"
"TypesSupported"=dword:00000007
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\System\HBtnKey]
"EventMessageFile"=str(2):"%SystemRoot%\System32\IoLogMsg.dll"
"TypesSupported"=dword:00000007
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\System\iaStor]
"EventMessageFile"=str(2):"%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\iaStor.sys"
"TypesSupported"=dword:00000007
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\System\SynTP]
"EventMessageFile"=str(2):"%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\SynTP.sys"
"TypesSupported"=dword:00000007
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\System\WGA]
"EventMessageFile"=str(2):"%SystemRoot%\System32\spmsg.dll"
"TypesSupported"=dword:00000007
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\System\Windows Installer 3.1]
"EventMessageFile"=str(2):"%SystemRoot%\System32\spmsg.dll"
"TypesSupported"=dword:00000007
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\System\WindowsMedia]
"EventMessageFile"=str(2):"%SystemRoot%\System32\spmsg.dll"
"TypesSupported"=dword:00000007
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\System\WMConnectCDS]
"EventMessageFile"=str(2):"C:\Program Files\Windows Media Connect 2\Wmccds.exe"
"TypesSupported"=dword:00000007
scanning hidden registry entries ...
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{077ACEC7-979C-40AB-9835-435BA1511E0D}]
"FriendlyName"="Windows Media Files"
"ComponentGUID"="{077ACEC7-979C-40AB-9835-435BA1511E0D}"
"Version"=dword:000a0000
"Sub-Version"=dword:000010ec
"ExceptionInfName"=str(2):"C:\WINDOWS\RegisteredPackages\{077ACEC7-979C-40AB-9835-435BA1511E0D}\MPPRE10.inf"
"ExceptionCatalogName"=str(2):"C:\WINDOWS\RegisteredPackages\{077ACEC7-979C-40AB-9835-435BA1511E0D}\mppre10.cat"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{30C7234B-6482-4A55-A11D-ECD9030313F2}]
"FriendlyName"="Windows Media Files"
"ComponentGUID"="{30C7234B-6482-4A55-A11D-ECD9030313F2}"
"Version"=dword:000a0000
"Sub-Version"=dword:000010ec
"ExceptionInfName"=str(2):"C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\WMDM10.inf"
"ExceptionCatalogName"=str(2):"C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\wmdm10.cat"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{981FB688-E76B-4246-987B-92083185B90A}]
"FriendlyName"="Windows Media Files"
"ComponentGUID"="{981FB688-E76B-4246-987B-92083185B90A}"
"Version"=dword:000a0000
"Sub-Version"=dword:000010ec
"ExceptionInfName"=str(2):"C:\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\WPD10.inf"
"ExceptionCatalogName"=str(2):"C:\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wpd10.cat"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{A47B3654-48EE-48A5-B629-97D70175E58F}]
"FriendlyName"="Windows Media Files"
"ComponentGUID"="{A47B3654-48EE-48A5-B629-97D70175E58F}"
"Version"=dword:000a0000
"Sub-Version"=dword:000010ec
"ExceptionInfName"=str(2):"C:\WINDOWS\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}\codecs10.inf"
"ExceptionCatalogName"=str(2):"C:\WINDOWS\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}\codecs10.cat"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}]
"FriendlyName"="Windows Media Files"
"ComponentGUID"="{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}"
"Version"=dword:000a0000
"Sub-Version"=dword:000010ec
"ExceptionInfName"=str(2):"C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\WMFSDK10.inf"
"ExceptionCatalogName"=str(2):"C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\wmfsdk10.cat"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}]
"FriendlyName"="Windows Media Files"
"ComponentGUID"="{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}"
"Version"=dword:000a0000
"Sub-Version"=dword:000010ec
"ExceptionInfName"=str(2):"C:\WINDOWS\RegisteredPackages\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}\DRM10.inf"
"ExceptionCatalogName"=str(2):"C:\WINDOWS\RegisteredPackages\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}\drm10.cat"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\OptionalComponents\SwDir]
"Installed"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\OptionalComponents\SwFlash]
"Installed"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Device Manager\KnownDeviceClasses\Mass Storage]
"DeviceInterface"="{53F5630D-B6BF-11D0-94F2-00A0C91EFB8B}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Device Manager\KnownDeviceClasses\Portable Audio Players]
"DeviceInterface"="{F33FDC04-D1AC-4E8E-9A30-19BBD4B108AE}"
"FilterParameter"="UseExtendedWmdm"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Device Manager\KnownDeviceClasses\Windows CE]
"DeviceInterface"="{25DBCE51-6C8F-4A72-8A6D-B54C2B4FC835}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Device Manager\KnownDeviceClasses\Windows CE RNDIS]
"DeviceInterface"="{ad498944-762f-11d0-8dcb-00c04fc3358c}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Device Manager\KnownDevices\WinCEDevice]
"DeviceInterface"="{25DBCE51-6C8F-4A72-8A6D-B54C2B4FC835}"
"WMDMSPCLSID"="{067B4B81-B1EC-489f-B111-940EBDC44EBE}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Device Manager\KnownDevices\WinCEDeviceRNDIS]
"DeviceInterface"="{ad498944-762f-11d0-8dcb-00c04fc3358c}"
"WMDMSPCLSID"="{067B4B81-B1EC-489f-B111-940EBDC44EBE}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19]
"RefCount"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20]
"RefCount"=dword:00000002
scanning hidden files ...
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\daminouche29@hotmail.fr\DFSR\Staging\CS{105EB82D-0E26-FB91-D50D-3A16213DBBF9}1\146-{105EB82D-0E26-FB91-D50D-3A16213DBBF9}-v1-{9488FF89-108D-436C-A373-FB5BF15515DC}-v146-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\daminouche29@hotmail.fr\DFSR\Staging\CS{105EB82D-0E26-FB91-D50D-3A16213DBBF9}\34\41-{4BBB0D49-16CA-4666-8725-064A64B7A6D5}-v34-{4BBB0D49-16CA-4666-8725-064A64B7A6D5}-v41-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8616 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\daminouche29@hotmail.fr\DFSR\Staging\CS{105EB82D-0E26-FB91-D50D-3A16213DBBF9}\35\42-{4BBB0D49-16CA-4666-8725-064A64B7A6D5}-v35-{4BBB0D49-16CA-4666-8725-064A64B7A6D5}-v42-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 4672 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\daminouche29@hotmail.fr\DFSR\Staging\CS{105EB82D-0E26-FB91-D50D-3A16213DBBF9}\36\58-{4BBB0D49-16CA-4666-8725-064A64B7A6D5}-v36-{4BBB0D49-16CA-4666-8725-064A64B7A6D5}-v58-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 46884 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\daminouche29@hotmail.fr\DFSR\Staging\CS{105EB82D-0E26-FB91-D50D-3A16213DBBF9}\36\58-{4BBB0D49-16CA-4666-8725-064A64B7A6D5}-v36-{4BBB0D49-16CA-4666-8725-064A64B7A6D5}-v58-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 3270 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\daminouche29@hotmail.fr\DFSR\Staging\CS{105EB82D-0E26-FB91-D50D-3A16213DBBF9}\36\58-{4BBB0D49-16CA-4666-8725-064A64B7A6D5}-v36-{4BBB0D49-16CA-4666-8725-064A64B7A6D5}-v58-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 5248 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\daminouche29@hotmail.fr\DFSR\Staging\CS{105EB82D-0E26-FB91-D50D-3A16213DBBF9}\60\152-{4BBB0D49-16CA-4666-8725-064A64B7A6D5}-v60-{9488FF89-108D-436C-A373-FB5BF15515DC}-v152-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 48216 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\daminouche29@hotmail.fr\DFSR\Staging\CS{105EB82D-0E26-FB91-D50D-3A16213DBBF9}\60\152-{4BBB0D49-16CA-4666-8725-064A64B7A6D5}-v60-{9488FF89-108D-436C-A373-FB5BF15515DC}-v152-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 3306 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\daminouche29@hotmail.fr\DFSR\Staging\CS{105EB82D-0E26-FB91-D50D-3A16213DBBF9}\60\152-{4BBB0D49-16CA-4666-8725-064A64B7A6D5}-v60-{9488FF89-108D-436C-A373-FB5BF15515DC}-v152-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 5368 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\34\173-{9488FF89-108D-436C-A373-FB5BF15515DC}-v34-{9488FF89-108D-436C-A373-FB5BF15515DC}-v173-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8166 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\34\173-{9488FF89-108D-436C-A373-FB5BF15515DC}-v34-{9488FF89-108D-436C-A373-FB5BF15515DC}-v173-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 928 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\57\196-{9488FF89-108D-436C-A373-FB5BF15515DC}-v57-{9488FF89-108D-436C-A373-FB5BF15515DC}-v196-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9138 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\57\196-{9488FF89-108D-436C-A373-FB5BF15515DC}-v57-{9488FF89-108D-436C-A373-FB5BF15515DC}-v196-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1040 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}1\12-{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}-v1-{9488FF89-108D-436C-A373-FB5BF15515DC}-v12-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\13\13-{9488FF89-108D-436C-A373-FB5BF15515DC}-v13-{9488FF89-108D-436C-A373-FB5BF15515DC}-v13-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\14\153-{9488FF89-108D-436C-A373-FB5BF15515DC}-v14-{9488FF89-108D-436C-A373-FB5BF15515DC}-v153-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8238 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\14\153-{9488FF89-108D-436C-A373-FB5BF15515DC}-v14-{9488FF89-108D-436C-A373-FB5BF15515DC}-v153-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 904 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\15\154-{9488FF89-108D-436C-A373-FB5BF15515DC}-v15-{9488FF89-108D-436C-A373-FB5BF15515DC}-v154-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7662 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\15\154-{9488FF89-108D-436C-A373-FB5BF15515DC}-v15-{9488FF89-108D-436C-A373-FB5BF15515DC}-v154-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 848 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\16\155-{9488FF89-108D-436C-A373-FB5BF15515DC}-v16-{9488FF89-108D-436C-A373-FB5BF15515DC}-v155-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9084 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\16\155-{9488FF89-108D-436C-A373-FB5BF15515DC}-v16-{9488FF89-108D-436C-A373-FB5BF15515DC}-v155-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1048 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\17\156-{9488FF89-108D-436C-A373-FB5BF15515DC}-v17-{9488FF89-108D-436C-A373-FB5BF15515DC}-v156-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8076 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\17\156-{9488FF89-108D-436C-A373-FB5BF15515DC}-v17-{9488FF89-108D-436C-A373-FB5BF15515DC}-v156-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 928 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\18\157-{9488FF89-108D-436C-A373-FB5BF15515DC}-v18-{9488FF89-108D-436C-A373-FB5BF15515DC}-v157-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9102 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\18\157-{9488FF89-108D-436C-A373-FB5BF15515DC}-v18-{9488FF89-108D-436C-A373-FB5BF15515DC}-v157-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1024 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\19\158-{9488FF89-108D-436C-A373-FB5BF15515DC}-v19-{9488FF89-108D-436C-A373-FB5BF15515DC}-v158-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7950 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\19\158-{9488FF89-108D-436C-A373-FB5BF15515DC}-v19-{9488FF89-108D-436C-A373-FB5BF15515DC}-v158-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 904 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\20\159-{9488FF89-108D-436C-A373-FB5BF15515DC}-v20-{9488FF89-108D-436C-A373-FB5BF15515DC}-v159-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8526 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\20\159-{9488FF89-108D-436C-A373-FB5BF15515DC}-v20-{9488FF89-108D-436C-A373-FB5BF15515DC}-v159-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 968 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\21\160-{9488FF89-108D-436C-A373-FB5BF15515DC}-v21-{9488FF89-108D-436C-A373-FB5BF15515DC}-v160-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8832 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\21\160-{9488FF89-108D-436C-A373-FB5BF15515DC}-v21-{9488FF89-108D-436C-A373-FB5BF15515DC}-v160-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 976 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\22\161-{9488FF89-108D-436C-A373-FB5BF15515DC}-v22-{9488FF89-108D-436C-A373-FB5BF15515DC}-v161-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8292 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\22\161-{9488FF89-108D-436C-A373-FB5BF15515DC}-v22-{9488FF89-108D-436C-A373-FB5BF15515DC}-v161-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 912 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\23\162-{9488FF89-108D-436C-A373-FB5BF15515DC}-v23-{9488FF89-108D-436C-A373-FB5BF15515DC}-v162-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8256 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\23\162-{9488FF89-108D-436C-A373-FB5BF15515DC}-v23-{9488FF89-108D-436C-A373-FB5BF15515DC}-v162-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 912 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\24\163-{9488FF89-108D-436C-A373-FB5BF15515DC}-v24-{9488FF89-108D-436C-A373-FB5BF15515DC}-v163-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8004 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\24\163-{9488FF89-108D-436C-A373-FB5BF15515DC}-v24-{9488FF89-108D-436C-A373-FB5BF15515DC}-v163-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 896 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\25\164-{9488FF89-108D-436C-A373-FB5BF15515DC}-v25-{9488FF89-108D-436C-A373-FB5BF15515DC}-v164-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7536 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\25\164-{9488FF89-108D-436C-A373-FB5BF15515DC}-v25-{9488FF89-108D-436C-A373-FB5BF15515DC}-v164-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 856 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\26\165-{9488FF89-108D-436C-A373-FB5BF15515DC}-v26-{9488FF89-108D-436C-A373-FB5BF15515DC}-v165-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7410 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\26\165-{9488FF89-108D-436C-A373-FB5BF15515DC}-v26-{9488FF89-108D-436C-A373-FB5BF15515DC}-v165-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 864 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\27\166-{9488FF89-108D-436C-A373-FB5BF15515DC}-v27-{9488FF89-108D-436C-A373-FB5BF15515DC}-v166-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8526 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\27\166-{9488FF89-108D-436C-A373-FB5BF15515DC}-v27-{9488FF89-108D-436C-A373-FB5BF15515DC}-v166-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 976 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\28\167-{9488FF89-108D-436C-A373-FB5BF15515DC}-v28-{9488FF89-108D-436C-A373-FB5BF15515DC}-v167-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 6618 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\28\167-{9488FF89-108D-436C-A373-FB5BF15515DC}-v28-{9488FF89-108D-436C-A373-FB5BF15515DC}-v167-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 736 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\29\168-{9488FF89-108D-436C-A373-FB5BF15515DC}-v29-{9488FF89-108D-436C-A373-FB5BF15515DC}-v168-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8904 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\29\168-{9488FF89-108D-436C-A373-FB5BF15515DC}-v29-{9488FF89-108D-436C-A373-FB5BF15515DC}-v168-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 992 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\30\169-{9488FF89-108D-436C-A373-FB5BF15515DC}-v30-{9488FF89-108D-436C-A373-FB5BF15515DC}-v169-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8040 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\30\169-{9488FF89-108D-436C-A373-FB5BF15515DC}-v30-{9488FF89-108D-436C-A373-FB5BF15515DC}-v169-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 904 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\31\170-{9488FF89-108D-436C-A373-FB5BF15515DC}-v31-{9488FF89-108D-436C-A373-FB5BF15515DC}-v170-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8454 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\31\170-{9488FF89-108D-436C-A373-FB5BF15515DC}-v31-{9488FF89-108D-436C-A373-FB5BF15515DC}-v170-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 936 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\32\171-{9488FF89-108D-436C-A373-FB5BF15515DC}-v32-{9488FF89-108D-436C-A373-FB5BF15515DC}-v171-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8490 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\32\171-{9488FF89-108D-436C-A373-FB5BF15515DC}-v32-{9488FF89-108D-436C-A373-FB5BF15515DC}-v171-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 944 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\33\172-{9488FF89-108D-436C-A373-FB5BF15515DC}-v33-{9488FF89-108D-436C-A373-FB5BF15515DC}-v172-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 126192 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\33\172-{9488FF89-108D-436C-A373-FB5BF15515DC}-v33-{9488FF89-108D-436C-A373-FB5BF15515DC}-v172-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 9120 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\33\172-{9488FF89-108D-436C-A373-FB5BF15515DC}-v33-{9488FF89-108D-436C-A373-FB5BF15515DC}-v172-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 14424 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\35\174-{9488FF89-108D-436C-A373-FB5BF15515DC}-v35-{9488FF89-108D-436C-A373-FB5BF15515DC}-v174-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8076 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\35\174-{9488FF89-108D-436C-A373-FB5BF15515DC}-v35-{9488FF89-108D-436C-A373-FB5BF15515DC}-v174-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 928 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\36\175-{9488FF89-108D-436C-A373-FB5BF15515DC}-v36-{9488FF89-108D-436C-A373-FB5BF15515DC}-v175-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8364 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\36\175-{9488FF89-108D-436C-A373-FB5BF15515DC}-v36-{9488FF89-108D-436C-A373-FB5BF15515DC}-v175-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 952 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\37\176-{9488FF89-108D-436C-A373-FB5BF15515DC}-v37-{9488FF89-108D-436C-A373-FB5BF15515DC}-v176-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7986 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\37\176-{9488FF89-108D-436C-A373-FB5BF15515DC}-v37-{9488FF89-108D-436C-A373-FB5BF15515DC}-v176-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 904 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\38\177-{9488FF89-108D-436C-A373-FB5BF15515DC}-v38-{9488FF89-108D-436C-A373-FB5BF15515DC}-v177-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7896 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\38\177-{9488FF89-108D-436C-A373-FB5BF15515DC}-v38-{9488FF89-108D-436C-A373-FB5BF15515DC}-v177-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 888 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\39\178-{9488FF89-108D-436C-A373-FB5BF15515DC}-v39-{9488FF89-108D-436C-A373-FB5BF15515DC}-v178-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7554 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\39\178-{9488FF89-108D-436C-A373-FB5BF15515DC}-v39-{9488FF89-108D-436C-A373-FB5BF15515DC}-v178-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 840 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\40\179-{9488FF89-108D-436C-A373-FB5BF15515DC}-v40-{9488FF89-108D-436C-A373-FB5BF15515DC}-v179-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8058 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\40\179-{9488FF89-108D-436C-A373-FB5BF15515DC}-v40-{9488FF89-108D-436C-A373-FB5BF15515DC}-v179-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 920 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\41\180-{9488FF89-108D-436C-A373-FB5BF15515DC}-v41-{9488FF89-108D-436C-A373-FB5BF15515DC}-v180-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8436 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\41\180-{9488FF89-108D-436C-A373-FB5BF15515DC}-v41-{9488FF89-108D-436C-A373-FB5BF15515DC}-v180-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 928 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\42\181-{9488FF89-108D-436C-A373-FB5BF15515DC}-v42-{9488FF89-108D-436C-A373-FB5BF15515DC}-v181-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10290 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\42\181-{9488FF89-108D-436C-A373-FB5BF15515DC}-v42-{9488FF89-108D-436C-A373-FB5BF15515DC}-v181-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1152 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\43\182-{9488FF89-108D-436C-A373-FB5BF15515DC}-v43-{9488FF89-108D-436C-A373-FB5BF15515DC}-v182-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10056 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\43\182-{9488FF89-108D-436C-A373-FB5BF15515DC}-v43-{9488FF89-108D-436C-A373-FB5BF15515DC}-v182-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1112 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\44\183-{9488FF89-108D-436C-A373-FB5BF15515DC}-v44-{9488FF89-108D-436C-A373-FB5BF15515DC}-v183-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10506 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\44\183-{9488FF89-108D-436C-A373-FB5BF15515DC}-v44-{9488FF89-108D-436C-A373-FB5BF15515DC}-v183-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1168 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\45\184-{9488FF89-108D-436C-A373-FB5BF15515DC}-v45-{9488FF89-108D-436C-A373-FB5BF15515DC}-v184-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 68700 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\45\184-{9488FF89-108D-436C-A373-FB5BF15515DC}-v45-{9488FF89-108D-436C-A373-FB5BF15515DC}-v184-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 4890 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\45\184-{9488FF89-108D-436C-A373-FB5BF15515DC}-v45-{9488FF89-108D-436C-A373-FB5BF15515DC}-v184-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 7808 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\46\185-{9488FF89-108D-436C-A373-FB5BF15515DC}-v46-{9488FF89-108D-436C-A373-FB5BF15515DC}-v185-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8256 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\46\185-{9488FF89-108D-436C-A373-FB5BF15515DC}-v46-{9488FF89-108D-436C-A373-FB5BF15515DC}-v185-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 936 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\47\186-{9488FF89-108D-436C-A373-FB5BF15515DC}-v47-{9488FF89-108D-436C-A373-FB5BF15515DC}-v186-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9750 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\47\186-{9488FF89-108D-436C-A373-FB5BF15515DC}-v47-{9488FF89-108D-436C-A373-FB5BF15515DC}-v186-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1080 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\48\187-{9488FF89-108D-436C-A373-FB5BF15515DC}-v48-{9488FF89-108D-436C-A373-FB5BF15515DC}-v187-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8634 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\48\187-{9488FF89-108D-436C-A373-FB5BF15515DC}-v48-{9488FF89-108D-436C-A373-FB5BF15515DC}-v187-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 912 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\49\188-{9488FF89-108D-436C-A373-FB5BF15515DC}-v49-{9488FF89-108D-436C-A373-FB5BF15515DC}-v188-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8562 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\49\188-{9488FF89-108D-436C-A373-FB5BF15515DC}-v49-{9488FF89-108D-436C-A373-FB5BF15515DC}-v188-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 984 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\50\189-{9488FF89-108D-436C-A373-FB5BF15515DC}-v50-{9488FF89-108D-436C-A373-FB5BF15515DC}-v189-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9102 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\50\189-{9488FF89-108D-436C-A373-FB5BF15515DC}-v50-{9488FF89-108D-436C-A373-FB5BF15515DC}-v189-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1032 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\51\190-{9488FF89-108D-436C-A373-FB5BF15515DC}-v51-{9488FF89-108D-436C-A373-FB5BF15515DC}-v190-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 268104 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\51\190-{9488FF89-108D-436C-A373-FB5BF15515DC}-v51-{9488FF89-108D-436C-A373-FB5BF15515DC}-v190-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 18912 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\51\190-{9488FF89-108D-436C-A373-FB5BF15515DC}-v51-{9488FF89-108D-436C-A373-FB5BF15515DC}-v190-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.3 1434 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\51\190-{9488FF89-108D-436C-A373-FB5BF15515DC}-v51-{9488FF89-108D-436C-A373-FB5BF15515DC}-v190-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 30352 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\52\191-{9488FF89-108D-436C-A373-FB5BF15515DC}-v52-{9488FF89-108D-436C-A373-FB5BF15515DC}-v191-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9480 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\52\191-{9488FF89-108D-436C-A373-FB5BF15515DC}-v52-{9488FF89-108D-436C-A373-FB5BF15515DC}-v191-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1064 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\53\192-{9488FF89-108D-436C-A373-FB5BF15515DC}-v53-{9488FF89-108D-436C-A373-FB5BF15515DC}-v192-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9264 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\53\192-{9488FF89-108D-436C-A373-FB5BF15515DC}-v53-{9488FF89-108D-436C-A373-FB5BF15515DC}-v192-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1032 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\54\193-{9488FF89-108D-436C-A373-FB5BF15515DC}-v54-{9488FF89-108D-436C-A373-FB5BF15515DC}-v193-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9228 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\54\193-{9488FF89-108D-436C-A373-FB5BF15515DC}-v54-{9488FF89-108D-436C-A373-FB5BF15515DC}-v193-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1064 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\55\194-{9488FF89-108D-436C-A373-FB5BF15515DC}-v55-{9488FF89-108D-436C-A373-FB5BF15515DC}-v194-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9228 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\55\194-{9488FF89-108D-436C-A373-FB5BF15515DC}-v55-{9488FF89-108D-436C-A373-FB5BF15515DC}-v194-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1040 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\56\195-{9488FF89-108D-436C-A373-FB5BF15515DC}-v56-{9488FF89-108D-436C-A373-FB5BF15515DC}-v195-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8886 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\56\195-{9488FF89-108D-436C-A373-FB5BF15515DC}-v56-{9488FF89-108D-436C-A373-FB5BF15515DC}-v195-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 976 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\58\197-{9488FF89-108D-436C-A373-FB5BF15515DC}-v58-{9488FF89-108D-436C-A373-FB5BF15515DC}-v197-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9300 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\58\197-{9488FF89-108D-436C-A373-FB5BF15515DC}-v58-{9488FF89-108D-436C-A373-FB5BF15515DC}-v197-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1032 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\59\198-{9488FF89-108D-436C-A373-FB5BF15515DC}-v59-{9488FF89-108D-436C-A373-FB5BF15515DC}-v198-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8976 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\59\198-{9488FF89-108D-436C-A373-FB5BF15515DC}-v59-{9488FF89-108D-436C-A373-FB5BF15515DC}-v198-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1048 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\60\199-{9488FF89-108D-436C-A373-FB5BF15515DC}-v60-{9488FF89-108D-436C-A373-FB5BF15515DC}-v199-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10686 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\60\199-{9488FF89-108D-436C-A373-FB5BF15515DC}-v60-{9488FF89-108D-436C-A373-FB5BF15515DC}-v199-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1192 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\61\200-{9488FF89-108D-436C-A373-FB5BF15515DC}-v61-{9488FF89-108D-436C-A373-FB5BF15515DC}-v200-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9318 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\61\200-{9488FF89-108D-436C-A373-FB5BF15515DC}-v61-{9488FF89-108D-436C-A373-FB5BF15515DC}-v200-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1040 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\62\201-{9488FF89-108D-436C-A373-FB5BF15515DC}-v62-{9488FF89-108D-436C-A373-FB5BF15515DC}-v201-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8094 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\62\201-{9488FF89-108D-436C-A373-FB5BF15515DC}-v62-{9488FF89-108D-436C-A373-FB5BF15515DC}-v201-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 920 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\63\202-{9488FF89-108D-436C-A373-FB5BF15515DC}-v63-{9488FF89-108D-436C-A373-FB5BF15515DC}-v202-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7698 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\63\202-{9488FF89-108D-436C-A373-FB5BF15515DC}-v63-{9488FF89-108D-436C-A373-FB5BF15515DC}-v202-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 880 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\64\203-{9488FF89-108D-436C-A373-FB5BF15515DC}-v64-{9488FF89-108D-436C-A373-FB5BF15515DC}-v203-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8634 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\64\203-{9488FF89-108D-436C-A373-FB5BF15515DC}-v64-{9488FF89-108D-436C-A373-FB5BF15515DC}-v203-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 968 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\65\204-{9488FF89-108D-436C-A373-FB5BF15515DC}-v65-{9488FF89-108D-436C-A373-FB5BF15515DC}-v204-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9408 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\65\204-{9488FF89-108D-436C-A373-FB5BF15515DC}-v65-{9488FF89-108D-436C-A373-FB5BF15515DC}-v204-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1080 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\66\205-{9488FF89-108D-436C-A373-FB5BF15515DC}-v66-{9488FF89-108D-436C-A373-FB5BF15515DC}-v205-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 6906 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\66\205-{9488FF89-108D-436C-A373-FB5BF15515DC}-v66-{9488FF89-108D-436C-A373-FB5BF15515DC}-v205-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 784 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\67\206-{9488FF89-108D-436C-A373-FB5BF15515DC}-v67-{9488FF89-108D-436C-A373-FB5BF15515DC}-v206-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9192 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\67\206-{9488FF89-108D-436C-A373-FB5BF15515DC}-v67-{9488FF89-108D-436C-A373-FB5BF15515DC}-v206-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1016 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\68\207-{9488FF89-108D-436C-A373-FB5BF15515DC}-v68-{9488FF89-108D-436C-A373-FB5BF15515DC}-v207-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9606 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\68\207-{9488FF89-108D-436C-A373-FB5BF15515DC}-v68-{9488FF89-108D-436C-A373-FB5BF15515DC}-v207-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1072 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\69\208-{9488FF89-108D-436C-A373-FB5BF15515DC}-v69-{9488FF89-108D-436C-A373-FB5BF15515DC}-v208-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8490 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\69\208-{9488FF89-108D-436C-A373-FB5BF15515DC}-v69-{9488FF89-108D-436C-A373-FB5BF15515DC}-v208-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 960 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\70\209-{9488FF89-108D-436C-A373-FB5BF15515DC}-v70-{9488FF89-108D-436C-A373-FB5BF15515DC}-v209-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8922 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\70\209-{9488FF89-108D-436C-A373-FB5BF15515DC}-v70-{9488FF89-108D-436C-A373-FB5BF15515DC}-v209-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 992 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\71\210-{9488FF89-108D-436C-A373-FB5BF15515DC}-v71-{9488FF89-108D-436C-A373-FB5BF15515DC}-v210-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8616 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\71\210-{9488FF89-108D-436C-A373-FB5BF15515DC}-v71-{9488FF89-108D-436C-A373-FB5BF15515DC}-v210-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1000 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\72\211-{9488FF89-108D-436C-A373-FB5BF15515DC}-v72-{9488FF89-108D-436C-A373-FB5BF15515DC}-v211-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7824 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\72\211-{9488FF89-108D-436C-A373-FB5BF15515DC}-v72-{9488FF89-108D-436C-A373-FB5BF15515DC}-v211-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 904 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\73\212-{9488FF89-108D-436C-A373-FB5BF15515DC}-v73-{9488FF89-108D-436C-A373-FB5BF15515DC}-v212-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8418 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\73\212-{9488FF89-108D-436C-A373-FB5BF15515DC}-v73-{9488FF89-108D-436C-A373-FB5BF15515DC}-v212-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 968 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\74\213-{9488FF89-108D-436C-A373-FB5BF15515DC}-v74-{9488FF89-108D-436C-A373-FB5BF15515DC}-v213-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8796 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\74\213-{9488FF89-108D-436C-A373-FB5BF15515DC}-v74-{9488FF89-108D-436C-A373-FB5BF15515DC}-v213-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 992 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\75\214-{9488FF89-108D-436C-A373-FB5BF15515DC}-v75-{9488FF89-108D-436C-A373-FB5BF15515DC}-v214-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9354 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\75\214-{9488FF89-108D-436C-A373-FB5BF15515DC}-v75-{9488FF89-108D-436C-A373-FB5BF15515DC}-v214-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1024 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\76\215-{9488FF89-108D-436C-A373-FB5BF15515DC}-v76-{9488FF89-108D-436C-A373-FB5BF15515DC}-v215-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7860 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\76\215-{9488FF89-108D-436C-A373-FB5BF15515DC}-v76-{9488FF89-108D-436C-A373-FB5BF15515DC}-v215-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 896 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\77\216-{9488FF89-108D-436C-A373-FB5BF15515DC}-v77-{9488FF89-108D-436C-A373-FB5BF15515DC}-v216-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7698 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\77\216-{9488FF89-108D-436C-A373-FB5BF15515DC}-v77-{9488FF89-108D-436C-A373-FB5BF15515DC}-v216-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 856 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\78\217-{9488FF89-108D-436C-A373-FB5BF15515DC}-v78-{9488FF89-108D-436C-A373-FB5BF15515DC}-v217-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8364 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\78\217-{9488FF89-108D-436C-A373-FB5BF15515DC}-v78-{9488FF89-108D-436C-A373-FB5BF15515DC}-v217-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 952 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\79\218-{9488FF89-108D-436C-A373-FB5BF15515DC}-v79-{9488FF89-108D-436C-A373-FB5BF15515DC}-v218-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 6960 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\79\218-{9488FF89-108D-436C-A373-FB5BF15515DC}-v79-{9488FF89-108D-436C-A373-FB5BF15515DC}-v218-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 752 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\80\219-{9488FF89-108D-436C-A373-FB5BF15515DC}-v80-{9488FF89-108D-436C-A373-FB5BF15515DC}-v219-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 30972 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\80\219-{9488FF89-108D-436C-A373-FB5BF15515DC}-v80-{9488FF89-108D-436C-A373-FB5BF15515DC}-v219-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 2262 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\80\219-{9488FF89-108D-436C-A373-FB5BF15515DC}-v80-{9488FF89-108D-436C-A373-FB5BF15515DC}-v219-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 3560 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\81\220-{9488FF89-108D-436C-A373-FB5BF15515DC}-v81-{9488FF89-108D-436C-A373-FB5BF15515DC}-v220-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9822 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\81\220-{9488FF89-108D-436C-A373-FB5BF15515DC}-v81-{9488FF89-108D-436C-A373-FB5BF15515DC}-v220-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1080 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\82\221-{9488FF89-108D-436C-A373-FB5BF15515DC}-v82-{9488FF89-108D-436C-A373-FB5BF15515DC}-v221-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9732 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\82\221-{9488FF89-108D-436C-A373-FB5BF15515DC}-v82-{9488FF89-108D-436C-A373-FB5BF15515DC}-v221-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1104 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\83\222-{9488FF89-108D-436C-A373-FB5BF15515DC}-v83-{9488FF89-108D-436C-A373-FB5BF15515DC}-v222-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10110 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\83\222-{9488FF89-108D-436C-A373-FB5BF15515DC}-v83-{9488FF89-108D-436C-A373-FB5BF15515DC}-v222-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1088 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\84\223-{9488FF89-108D-436C-A373-FB5BF15515DC}-v84-{9488FF89-108D-436C-A373-FB5BF15515DC}-v223-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8634 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\84\223-{9488FF89-108D-436C-A373-FB5BF15515DC}-v84-{9488FF89-108D-436C-A373-FB5BF15515DC}-v223-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1016 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\85\224-{9488FF89-108D-436C-A373-FB5BF15515DC}-v85-{9488FF89-108D-436C-A373-FB5BF15515DC}-v224-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8760 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\85\224-{9488FF89-108D-436C-A373-FB5BF15515DC}-v85-{9488FF89-108D-436C-A373-FB5BF15515DC}-v224-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 976 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\86\225-{9488FF89-108D-436C-A373-FB5BF15515DC}-v86-{9488FF89-108D-436C-A373-FB5BF15515DC}-v225-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7914 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\86\225-{9488FF89-108D-436C-A373-FB5BF15515DC}-v86-{9488FF89-108D-436C-A373-FB5BF15515DC}-v225-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 904 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\87\226-{9488FF89-108D-436C-A373-FB5BF15515DC}-v87-{9488FF89-108D-436C-A373-FB5BF15515DC}-v226-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8400 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\87\226-{9488FF89-108D-436C-A373-FB5BF15515DC}-v87-{9488FF89-108D-436C-A373-FB5BF15515DC}-v226-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 928 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\88\227-{9488FF89-108D-436C-A373-FB5BF15515DC}-v88-{9488FF89-108D-436C-A373-FB5BF15515DC}-v227-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7788 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\88\227-{9488FF89-108D-436C-A373-FB5BF15515DC}-v88-{9488FF89-108D-436C-A373-FB5BF15515DC}-v227-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 888 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\89\228-{9488FF89-108D-436C-A373-FB5BF15515DC}-v89-{9488FF89-108D-436C-A373-FB5BF15515DC}-v228-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7788 bytes hidden from API
C:\Documents and Settings\Stéven\Local Settings\Application Data\Microsoft\Messenger\stevenpremel@hotmail.com\SharingMetadata\el_gringo14@hotmail.com\DFSR\Staging\CS{5AB9F725-3F0C-B6D2-71FC-B9B6D7F2EAB3}\89\228-{9488FF89-108D-436C-A373-FB5BF15515DC}-v89-{9488FF89-108D-436C-A373-FB5BF15515DC}-v228-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 888 bytes hidden from API
scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 168
Remaining Services:
------------------
Authorized Application Key Export:
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\WINDOWS\\system32\\mqsvc.exe"="C:\\WINDOWS\\system32\\mqsvc.exe:*:Enabled:Message Queuing"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Joost\\xulrunner\\tvprunner.exe"="C:\\Program Files\\Joost\\xulrunner\\tvprunner.exe:*:Enabled:tvprunner"
"C:\\Program Files\\Battlefield 2\\BF2.exe"="C:\\Program Files\\Battlefield 2\\BF2.exe:*:Enabled:Battlefield 2"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\WINDOWS\\system32\\mqsvc.exe"="C:\\WINDOWS\\system32\\mqsvc.exe:*:Enabled:Message Queuing"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
Remaining Files:
---------------
File Backups: - C:\PROGRA~1\sdfx\SDFix\backups\backups.zip
Files with Hidden Attributes:
Fri 16 Feb 2007 22 A.SH. --- "C:\WINDOWS\SMINST\HPCD.sys"
Sun 1 Apr 2007 4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Sun 18 Feb 2007 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"
Sun 28 Oct 2007 4,521 ...HR --- "C:\Documents and Settings\St‚ven\Application Data\SecuROM\UserData\securom_v7_01.bak"
Fri 3 Nov 2006 25,088 A..H. --- "C:\Documents and Settings\St‚ven\Mes documents\travail (‚cole)\dossier vsp\~WRL3788.tmp"
Finished!
-
Bonsoir, pouvez vous analyser ce rapport, bitdefender me trouve des rootkit, mais ils se relancent à chaque fois
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:08:08, on 14/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Softwin\BitDefender10\bdmcon.exe
C:\Program Files\Softwin\BitDefender10\bdagent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
C:\WINDOWS\system32\mqsvc.exe
C:\WINDOWS\system32\mqtgsvc.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Softwin\BitDefender10\vsserv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.free.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://home.free.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: dsWebAllowBHO Class - {2F85D76C-0569-466F-A488-493E6BD0E955} - C:\Program Files\Windows Desktop Search\dsWebAllow.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /nodetect
O4 - HKLM\..\Run: [bDMCon] "C:\Program Files\Softwin\BitDefender10\bdmcon.exe" /reg
O4 - HKLM\..\Run: [bDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [wdfmgr.exe] C:\WINDOWS\wdfmgr.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=FR_FR&c=64&bd=pavilion&pf=laptop
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1171635496421
O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} (AxisMediaControlEmb Class) - http://camera1.mairie-brest.fr/activex/AMC.cab
O21 - SSODL: printers - {EF9BD3F0-D4E0-4D44-9A36-3E5F8058ABD8} - libcintles3.dll (file missing)
O23 - Service: AddFiltr - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - SOFTWIN S.R.L. - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SolidWorks Licensing Service - SolidWorks - C:\Program Files\Fichiers communs\SolidWorks Shared\Service\SolidWorksLicensing.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - SOFTWIN S.R.L. - C:\Program Files\Softwin\BitDefender10\vsserv.exe
O23 - Service: BitDefender Communicator (XCOMM) - SOFTWIN S.R.L - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
--
End of file - 7845 bytes
-
Bonsoir, pouvez vous analyser ce rapport, bitdefender me trouve des rootkit, mais ils se relancent à chaque fois
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:08:08, on 14/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Softwin\BitDefender10\bdmcon.exe
C:\Program Files\Softwin\BitDefender10\bdagent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
C:\WINDOWS\system32\mqsvc.exe
C:\WINDOWS\system32\mqtgsvc.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Softwin\BitDefender10\vsserv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.free.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://home.free.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: dsWebAllowBHO Class - {2F85D76C-0569-466F-A488-493E6BD0E955} - C:\Program Files\Windows Desktop Search\dsWebAllow.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /nodetect
O4 - HKLM\..\Run: [bDMCon] "C:\Program Files\Softwin\BitDefender10\bdmcon.exe" /reg
O4 - HKLM\..\Run: [bDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [wdfmgr.exe] C:\WINDOWS\wdfmgr.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=FR_FR&c=64&bd=pavilion&pf=laptop
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1171635496421
O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} (AxisMediaControlEmb Class) - http://camera1.mairie-brest.fr/activex/AMC.cab
O21 - SSODL: printers - {EF9BD3F0-D4E0-4D44-9A36-3E5F8058ABD8} - libcintles3.dll (file missing)
O23 - Service: AddFiltr - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - SOFTWIN S.R.L. - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SolidWorks Licensing Service - SolidWorks - C:\Program Files\Fichiers communs\SolidWorks Shared\Service\SolidWorksLicensing.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - SOFTWIN S.R.L. - C:\Program Files\Softwin\BitDefender10\vsserv.exe
O23 - Service: BitDefender Communicator (XCOMM) - SOFTWIN S.R.L - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
--
End of file - 7845 bytes
nettoyage dossier temp de documents and settings
dans Optimisation, Trucs & Astuces
Posté(e)
Bonjour comment nettoyer le dossier documents and settings: nom d'ulilisateur:local settings:temp MERCI