pc qui rame !!! :(
Dernière réponse : dans Sécurité
salut a tous !!
Voila j'ai mon pc qui rame et il est trop lent,,
quelq'un pourrai m'aidé svp !!! ???
merci beaucoup
Voila j'ai mon pc qui rame et il est trop lent,,
quelq'un pourrai m'aidé svp !!! ???
merci beaucoup
Autres pages sur : rame
Lassé par la pub ? Créez un compte
Bonsoir,
Le rapport avec la section ?
Télécharge puis installe Hijackthis (Trend Micro)
Poste ensuite un rapport dans ta prochaine réponse.
AIDE : Comment utiliser Hijackthis v2.0.2
Le rapport avec la section ?
Télécharge puis installe Hijackthis (Trend Micro)
Poste ensuite un rapport dans ta prochaine réponse.
AIDE : Comment utiliser Hijackthis v2.0.2
salut,,,
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:06, on 07-10-10
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\WINDOWS\system32\slmdmsr.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\WINDOWS\system32\drivers\STDSB.exe
C:\WINDOWS\system32\drivers\Icon.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
C:\Apps\Powercinema\PCMService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe
C:\Program Files\eMule\emule.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.BIN
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Windows Live\Mail\wlmail.exe
C:\Program Files\Namtuk\MyScreenCapture\Capture My Screen\CaptureMyScreen.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\LiveUpdate-NTK.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Documents and Settings\Vanwildemeersch Elod\Bureau\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fr.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll (file missing)
O3 - Toolbar: H&otbar - {74CC49F7-EB32-4A08-B204-948962A6E3DB} - C:\Program Files\HbTools\Bin\4.8.4.0\HbtHostIE.dll (file missing)
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [STDSB] C:\WINDOWS\system32\drivers\STDSB.exe
O4 - HKLM\..\Run: [Icon] C:\WINDOWS\system32\drivers\Icon.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [Workflow] D:\Workflow.exe
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NI.UERSV_0001_N68M0602] "C:\Documents and Settings\Vanwildemeersch Elod\Bureau\ErrorSafeScannerInstall_fr.exe" -nag
O4 - HKLM\..\Run: [HbTools] C:\Program Files\HbTools\Bin\4.8.4.0\HbtOEAddOn.exe
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [LanzarL2007] "C:\DOCUME~1\VANWIL~1\LOCALS~1\Temp\{E3DA9CCF-291B-4910-9400-1D70EB7A6B21}\{D1DA2BA7-2592-4036-9BB2-DCCABDE8DC1A}\..\..\L2007tmp\Setup.exe" /SETUP:"/l0x040c"
O4 - HKLM\..\Run: [WeatherOnTray] C:\Program Files\HbTools\Bin\4.8.4.0\HbtWeatherOnTray.exe
O4 - HKLM\..\Run: [Hide Bike Bore Bits] C:\Documents and Settings\All Users\Application Data\lesseachhidebike\The Flag.exe
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [ZEject] C:\Program Files\2002 CD Eject\CDEject.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [MESS FRAG] C:\DOCUME~1\VANWIL~1\APPLIC~1\LITECA~1\pokeloud.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-3802231385-2866601845-2349470315-1009\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User '?')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll (file missing)
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown....
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.ca...
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst....
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.ca...
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab569...
O17 - HKLM\System\CCS\Services\Tcpip\..\{07C3A31A-C3F2-43AA-960F-C2A9A66C38AC}: NameServer = 80.10.246.2,80.10.246.129
O17 - HKLM\System\CS2\Services\Tcpip\..\{07C3A31A-C3F2-43AA-960F-C2A9A66C38AC}: NameServer = 80.10.246.2,80.10.246.129
O17 - HKLM\System\CS3\Services\Tcpip\..\{07C3A31A-C3F2-43AA-960F-C2A9A66C38AC}: NameServer = 80.10.246.2,80.10.246.129
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
O23 - Service: Anti-Virus Service (kavsvc) - Kaspersky Labs Ltd. - C:\Program Files\Micro Application\Sécurité Internet\Anti-Virus Perso & Pro\Anti-Spam\KAV\KAVSVC.exe
O23 - Service: MySqlInventime - Unknown owner - c:\mysql\bin\mysqld-max-nt.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slmdmsr.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe
--
End of file - 11519 bytes
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:06, on 07-10-10
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\WINDOWS\system32\slmdmsr.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\WINDOWS\system32\drivers\STDSB.exe
C:\WINDOWS\system32\drivers\Icon.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
C:\Apps\Powercinema\PCMService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe
C:\Program Files\eMule\emule.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.BIN
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Windows Live\Mail\wlmail.exe
C:\Program Files\Namtuk\MyScreenCapture\Capture My Screen\CaptureMyScreen.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\LiveUpdate-NTK.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Documents and Settings\Vanwildemeersch Elod\Bureau\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fr.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll (file missing)
O3 - Toolbar: H&otbar - {74CC49F7-EB32-4A08-B204-948962A6E3DB} - C:\Program Files\HbTools\Bin\4.8.4.0\HbtHostIE.dll (file missing)
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [STDSB] C:\WINDOWS\system32\drivers\STDSB.exe
O4 - HKLM\..\Run: [Icon] C:\WINDOWS\system32\drivers\Icon.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [Workflow] D:\Workflow.exe
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NI.UERSV_0001_N68M0602] "C:\Documents and Settings\Vanwildemeersch Elod\Bureau\ErrorSafeScannerInstall_fr.exe" -nag
O4 - HKLM\..\Run: [HbTools] C:\Program Files\HbTools\Bin\4.8.4.0\HbtOEAddOn.exe
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [LanzarL2007] "C:\DOCUME~1\VANWIL~1\LOCALS~1\Temp\{E3DA9CCF-291B-4910-9400-1D70EB7A6B21}\{D1DA2BA7-2592-4036-9BB2-DCCABDE8DC1A}\..\..\L2007tmp\Setup.exe" /SETUP:"/l0x040c"
O4 - HKLM\..\Run: [WeatherOnTray] C:\Program Files\HbTools\Bin\4.8.4.0\HbtWeatherOnTray.exe
O4 - HKLM\..\Run: [Hide Bike Bore Bits] C:\Documents and Settings\All Users\Application Data\lesseachhidebike\The Flag.exe
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [ZEject] C:\Program Files\2002 CD Eject\CDEject.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [MESS FRAG] C:\DOCUME~1\VANWIL~1\APPLIC~1\LITECA~1\pokeloud.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-3802231385-2866601845-2349470315-1009\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User '?')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll (file missing)
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown....
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.ca...
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst....
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.ca...
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab569...
O17 - HKLM\System\CCS\Services\Tcpip\..\{07C3A31A-C3F2-43AA-960F-C2A9A66C38AC}: NameServer = 80.10.246.2,80.10.246.129
O17 - HKLM\System\CS2\Services\Tcpip\..\{07C3A31A-C3F2-43AA-960F-C2A9A66C38AC}: NameServer = 80.10.246.2,80.10.246.129
O17 - HKLM\System\CS3\Services\Tcpip\..\{07C3A31A-C3F2-43AA-960F-C2A9A66C38AC}: NameServer = 80.10.246.2,80.10.246.129
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
O23 - Service: Anti-Virus Service (kavsvc) - Kaspersky Labs Ltd. - C:\Program Files\Micro Application\Sécurité Internet\Anti-Virus Perso & Pro\Anti-Spam\KAV\KAVSVC.exe
O23 - Service: MySqlInventime - Unknown owner - c:\mysql\bin\mysqld-max-nt.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slmdmsr.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe
--
End of file - 11519 bytes
Re,
Télécharge Clean.zip (de Malekal),
Décompresse-le sur ton bureau (Clique-Droit/Extraire tout), tu dois obtenir un dossier Clean.
Ouvre le dossier clean, double-clique sur clean.cmd.
Choisis l'option 1 puis patiente. Poste ensuite le contenu du rapport.
Télécharge Clean.zip (de Malekal),
Décompresse-le sur ton bureau (Clique-Droit/Extraire tout), tu dois obtenir un dossier Clean.
Ouvre le dossier clean, double-clique sur clean.cmd.
Choisis l'option 1 puis patiente. Poste ensuite le contenu du rapport.
Re,
Télécharge Lop S&D.zip.
Dézippe-le sur ton Bureau uniquement.
Ouvre le dossier Lop S&D puis double-clique sur Scan.bat. Tape sur "R" puis valide en appuyant sur "Entrée".
Un rapport sera généré, poste son contenu ici.
Télécharge Lop S&D.zip.
Dézippe-le sur ton Bureau uniquement.
Ouvre le dossier Lop S&D puis double-clique sur Scan.bat. Tape sur "R" puis valide en appuyant sur "Entrée".
Un rapport sera généré, poste son contenu ici.
-------------------------------[ Lop S&D 1.2 ]------------------------------
Version : Microsoft Windows XP [version 5.1.2600] [ OS : Windows_NT ]
Lancé depuis : "C:\Documents and Settings\Vanwildemeersch Elod\Bureau\Lop S&D"
Rapport créé : Le 07-10-10 à 18:38:07.57 PC : SNNECCI
! Faire analyser le rapport par un Helper avant intervention !
-------------[ Listing des Dossiers dans Application Data ]-------------
C:\Documents and Settings\Administrateur\Application Data\MSN6
C:\Documents and Settings\Administrateur\Application Data\MSNInstaller
C:\Documents and Settings\Administrateur\Application Data\Microsoft
C:\Documents and Settings\Administrateur\Application Data\You've Got Pictures Screensaver
C:\Documents and Settings\Administrateur\Application Data\Symantec
C:\Documents and Settings\Administrateur\Application Data\Real
C:\Documents and Settings\Administrateur\Application Data\Macromedia
C:\Documents and Settings\Administrateur\Application Data\Sun
C:\Documents and Settings\Administrateur\Application Data\Identities
C:\Documents and Settings\Administrateur\Application Data\desktop.ini
C:\Documents and Settings\All Users\Application Data\Adobe
C:\Documents and Settings\All Users\Application Data\LauncherAccess.dt
C:\Documents and Settings\All Users\Application Data\.zreglib
C:\Documents and Settings\All Users\Application Data\Microsoft
C:\Documents and Settings\All Users\Application Data\WLInstaller
C:\Documents and Settings\All Users\Application Data\lesseachhidebike
C:\Documents and Settings\All Users\Application Data\Google
C:\Documents and Settings\All Users\Application Data\AntiVir PersonalEdition Classic
C:\Documents and Settings\All Users\Application Data\addr_file.html
C:\Documents and Settings\All Users\Application Data\Elaborate Bytes
C:\Documents and Settings\All Users\Application Data\Trymedia
C:\Documents and Settings\All Users\Application Data\FLEXnet
C:\Documents and Settings\All Users\Application Data\Ulead Systems
C:\Documents and Settings\All Users\Application Data\Skype
C:\Documents and Settings\All Users\Application Data\GRETECH
C:\Documents and Settings\All Users\Application Data\DVD Shrink
C:\Documents and Settings\All Users\Application Data\HP
C:\Documents and Settings\All Users\Application Data\Messenger Plus!
C:\Documents and Settings\All Users\Application Data\Windows Live Toolbar
C:\Documents and Settings\All Users\Application Data\Symantec
C:\Documents and Settings\All Users\Application Data\Anti-Virus Personal
C:\Documents and Settings\All Users\Application Data\hpzinstall.log
C:\Documents and Settings\All Users\Application Data\AOL
C:\Documents and Settings\All Users\Application Data\Ahead
C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
C:\Documents and Settings\All Users\Application Data\OD2
C:\Documents and Settings\All Users\Application Data\MSN6
C:\Documents and Settings\All Users\Application Data\Viewpoint
C:\Documents and Settings\All Users\Application Data\QuickTime
C:\Documents and Settings\All Users\Application Data\CyberLink
C:\Documents and Settings\All Users\Application Data\SBSI
C:\Documents and Settings\All Users\Application Data\desktop.ini
C:\Documents and Settings\Default User\Application Data\Microsoft
C:\Documents and Settings\Default User\Application Data\You've Got Pictures Screensaver
C:\Documents and Settings\Default User\Application Data\Symantec
C:\Documents and Settings\Default User\Application Data\Real
C:\Documents and Settings\Default User\Application Data\Macromedia
C:\Documents and Settings\Default User\Application Data\Sun
C:\Documents and Settings\Default User\Application Data\Identities
C:\Documents and Settings\Default User\Application Data\desktop.ini
C:\Documents and Settings\LocalService\Application Data\Microsoft
C:\Documents and Settings\NetworkService\Application Data\Microsoft
C:\Documents and Settings\NetworkService\Application Data\Identities
C:\Documents and Settings\NetworkService\Application Data\Symantec
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\OpenOffice.org2
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\AdobeUM
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Adobe
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Litecastdefault
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Windows Desktop Search
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Windows Live Writer
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\InfraRecorder
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\DeepBurner
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\vlc
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Samsung
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Vso
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\pcouffin.log
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\inst.exe
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\pcouffin.cat
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\pcouffin.sys
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\pcouffin.inf
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\WinRAR
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Microsoft
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\MSNInstaller
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Mozilla
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\GRETECH
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Ahead
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Screenshot Sender
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\uTorrent
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\DivX
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\HP
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\AVSDVDPlayer.m3u
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Image Zone Express
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\AOL
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\D - Slimtype - DVDRW SOSW-833S - V9S1.dat
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\ConvertTemp
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\TransRender
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Temporary
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\CyberLink
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\FUJIFILM
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\MSN6
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Sonic
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Leadertech
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\SystemDoctor 2006 Free
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Help
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Macromedia
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Skype
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\OD2
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Symantec
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\You've Got Pictures Screensaver
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Real
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Sun
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Identities
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\desktop.ini
C:\Documents and Settings\vincent\Application Data\AOL
C:\Documents and Settings\vincent\Application Data\CyberLink
C:\Documents and Settings\vincent\Application Data\MSN6
C:\Documents and Settings\vincent\Application Data\OD2
C:\Documents and Settings\vincent\Application Data\FUJIFILM
C:\Documents and Settings\vincent\Application Data\Symantec
C:\Documents and Settings\vincent\Application Data\Microsoft
C:\Documents and Settings\vincent\Application Data\HbTools
C:\Documents and Settings\vincent\Application Data\Skype
C:\Documents and Settings\vincent\Application Data\You've Got Pictures Screensaver
C:\Documents and Settings\vincent\Application Data\Real
C:\Documents and Settings\vincent\Application Data\Macromedia
C:\Documents and Settings\vincent\Application Data\Sun
C:\Documents and Settings\vincent\Application Data\Identities
C:\Documents and Settings\vincent\Application Data\desktop.ini
----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------
C:\WINDOWS\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job
C:\WINDOWS\tasks\B27D3580950EAA44.job
C:\WINDOWS\tasks\SA.DAT
C:\WINDOWS\tasks\desktop.ini
--------------[ Listing des dossiers dans C:\Program Files ]--------------
C:\Program Files\ABC Amber Image Converter
C:\Program Files\Adobe
C:\Program Files\Adverts
C:\Program Files\Ahead
C:\Program Files\Alwil Software
C:\Program Files\AntiVir PersonalEdition Classic
C:\Program Files\Arrowkey
C:\Program Files\Astonsoft
C:\Program Files\Audacity
C:\Program Files\AviSynth 2.5
C:\Program Files\AVSMedia
C:\Program Files\Bowling 2006
C:\Program Files\Car Jacker
C:\Program Files\Core Design
C:\Program Files\CyberLink
C:\Program Files\DivX
C:\Program Files\Dream Music
C:\Program Files\Elaborate Bytes
C:\Program Files\eMule
C:\Program Files\eRightSoft
C:\Program Files\Fichiers communs
C:\Program Files\FinePixViewer
C:\Program Files\funkitron
C:\Program Files\GameSpy Arcade
C:\Program Files\Google
C:\Program Files\GRETECH
C:\Program Files\Grisoft
C:\Program Files\Hercules
C:\Program Files\HEROSOFT
C:\Program Files\Hewlett-Packard
C:\Program Files\Hijackthis Version Fran‡aise
C:\Program Files\HP
C:\Program Files\InfraRecorder
C:\Program Files\Internet Explorer
C:\Program Files\Inventel
C:\Program Files\Java
C:\Program Files\Learn2.com
C:\Program Files\Litecastdefault
C:\Program Files\Ma Pension d'Animaux
C:\Program Files\Macrogaming
C:\Program Files\Maxis
C:\Program Files\MediaCoder
C:\Program Files\Messenger
C:\Program Files\Messenger Plus! Live
C:\Program Files\Micro Application
C:\Program Files\Microsoft CAPICOM 2.1.0.2
C:\Program Files\microsoft frontpage
C:\Program Files\Microsoft Games
C:\Program Files\Microsoft Office
C:\Program Files\Microsoft SQL Server Compact Edition
C:\Program Files\Movie Maker
C:\Program Files\Mozilla Firefox
C:\Program Files\MP3 Explorer
C:\Program Files\MSN Apps
C:\Program Files\MSN Gaming Zone
C:\Program Files\MSN Messenger
C:\Program Files\Msncolor
C:\Program Files\MSXML 4.0
C:\Program Files\Namco
C:\Program Files\Namtuk
C:\Program Files\Nero
C:\Program Files\NetMeeting
C:\Program Files\Online Services
C:\Program Files\OpenOffice.org 2.2
C:\Program Files\Outlook Express
C:\Program Files\Panda Software
C:\Program Files\PhotoFiltre Studio
C:\Program Files\PSCS2
C:\Program Files\QuickTime
C:\Program Files\Real
C:\Program Files\REGSHAVE
C:\Program Files\Samsung
C:\Program Files\Services en ligne
C:\Program Files\SlySoft
C:\Program Files\Sonic
C:\Program Files\SupraASCIIArt
C:\Program Files\Synaptics
C:\Program Files\Trymedia
C:\Program Files\Ulead Systems
C:\Program Files\Unrelated Inventions
C:\Program Files\VIA
C:\Program Files\VideoLAN
C:\Program Files\VSO
C:\Program Files\Wanadoo
C:\Program Files\WBFileManager
C:\Program Files\Webteh
C:\Program Files\WinDAC32
C:\Program Files\Windows Desktop Search
C:\Program Files\Windows Live
C:\Program Files\Windows Live Toolbar
C:\Program Files\Windows Media Connect 2
C:\Program Files\Windows Media Player
C:\Program Files\Windows NT
C:\Program Files\WinRAR
C:\Program Files\Wondershare
C:\Program Files\World of Warcraft
C:\Program Files\xerox
------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]-----
C:\Program files\Fichiers Communs\Adobe
C:\Program files\Fichiers Communs\Ahead
C:\Program files\Fichiers Communs\Anti-Hacker
C:\Program files\Fichiers Communs\AOL
C:\Program files\Fichiers Communs\aolback
C:\Program files\Fichiers Communs\aolshare
C:\Program files\Fichiers Communs\AVSMedia
C:\Program files\Fichiers Communs\Blizzard Entertainment
C:\Program files\Fichiers Communs\Hewlett-Packard
C:\Program files\Fichiers Communs\HP
C:\Program files\Fichiers Communs\InstallShield
C:\Program files\Fichiers Communs\Java
C:\Program files\Fichiers Communs\Microsoft Shared
C:\Program files\Fichiers Communs\MSSoap
C:\Program files\Fichiers Communs\Nullsoft
C:\Program files\Fichiers Communs\Real
C:\Program files\Fichiers Communs\Services
C:\Program files\Fichiers Communs\Sonic Shared
C:\Program files\Fichiers Communs\SpeechEngines
C:\Program files\Fichiers Communs\SureThing Shared
C:\Program files\Fichiers Communs\System
C:\Program files\Fichiers Communs\xing shared
----------------------[ Recherche dans le Registre ]----------------------
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"Hide Bike Bore Bits"="C:\\Documents and Settings\\All Users\\Application Data\\lesseachhidebike\\The Flag.exe"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"MESS FRAG"="C:\\DOCUME~1\\VANWIL~1\\APPLIC~1\\LITECA~1\\pokeloud.exe"
-----------------[ Recherche de Fichiers - Dossiers Lop ]-----------------
C:\Documents and settings\All Users\Application Data\lesseachhidebike
C:\Documents and settings\Vanwildemeersch Elod\Application Data\LITECA~1
C:\Program files\LITECA~1
C:\Program Files\Adverts
C:\WINDOWS\tasks\B27D3580950EAA44.job
--------------------[ Vérification du fichier Hosts ]---------------------
Fichier Hosts : Propre
--------------[ Recherche de fichiers cachés avec Catchme ]---------------
catchme 0.3.1066 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-10-10 18:38:22
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden services & system hive ...
scanning hidden registry entries ...
scanning hidden files ...
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\26\2970-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2926-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2970-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1320 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\00\108-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2900-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v108-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8652 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\00\108-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2900-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v108-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 960 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\01\10-{80AB827E-605B-D964-377E-D89467543EE6}-v1-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v10-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\01\120-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2901-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v120-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10452 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\01\120-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2901-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v120-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1176 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\02\121-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2902-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v121-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8256 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\02\121-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2902-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v121-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 944 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\03\122-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2903-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v122-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7968 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\03\122-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2903-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v122-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 896 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\04\119-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2904-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v119-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10866 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\04\119-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2904-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v119-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1200 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\05\21-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2905-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v21-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8580 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\05\21-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2905-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v21-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 976 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\06\28-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2906-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v28-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8094 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\06\28-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2906-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v28-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 944 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\07\29-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2907-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v29-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9354 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\07\29-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2907-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v29-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1064 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\08\30-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2908-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v30-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10182 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\08\30-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2908-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v30-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1136 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\09\32-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2909-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v32-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9192 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\09\32-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2909-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v32-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1016 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\10\31-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2910-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v31-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7086 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\10\31-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2910-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v31-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 832 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\11\40-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2911-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v40-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9516 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\11\40-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2911-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v40-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1072 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\12\41-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2912-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v41-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7842 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\12\41-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2912-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v41-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 888 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\13\39-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2913-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v39-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7734 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\13\39-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2913-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v39-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 856 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\14\42-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2914-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v42-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7932 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\14\42-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2914-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v42-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 896 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\15\43-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2915-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v43-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8490 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\15\43-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2915-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v43-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 944 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\16\15-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2916-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v15-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8904 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\16\15-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2916-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v15-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 960 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\17\53-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2917-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v53-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10506 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\17\53-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2917-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v53-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1200 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\18\50-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2918-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v50-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9732 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\18\50-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2918-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v50-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1096 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\19\49-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2919-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v49-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 11478 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\19\49-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2919-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v49-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1264 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\20\51-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2920-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v51-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10632 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\20\51-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2920-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v51-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1168 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\21\52-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2921-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v52-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9570 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\21\52-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2921-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v52-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1064 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\22\54-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2922-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v54-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10632 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\22\54-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2922-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v54-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1256 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\23\2967-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2923-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2967-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1272 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\24\2968-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2924-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2968-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 800 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\25\2969-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2925-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2969-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1104 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\27\87-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2927-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v87-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10452 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\27\87-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2927-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v87-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1192 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\28\88-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2928-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v88-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 11172 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\28\88-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2928-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v88-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1272 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\29\89-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2929-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v89-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10848 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\29\89-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2929-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v89-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1232 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\30\90-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2930-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v90-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8490 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\30\90-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2930-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v90-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 976 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\31\91-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2931-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v91-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9012 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\31\91-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2931-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v91-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1048 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\32\92-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2932-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v92-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10398 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\32\92-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2932-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v92-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1200 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\33\95-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2933-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v95-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 6492 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\33\95-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2933-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v95-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 736 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\34\96-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2934-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v96-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9624 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\34\96-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2934-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v96-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1096 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\35\99-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2935-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v99-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8796 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\35\99-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2935-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v99-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1024 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\36\100-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2936-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v100-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9210 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\36\100-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2936-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v100-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1016 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\37\97-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2937-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v97-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8814 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\37\97-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2937-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v97-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1000 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\38\98-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2938-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v98-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7266 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\38\98-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2938-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v98-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 816 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\39\103-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2939-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v103-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10164 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\39\103-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2939-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v103-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1168 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\40\104-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2940-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v104-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9768 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\40\104-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2940-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v104-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1088 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\41\105-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2941-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v105-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9318 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\41\105-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2941-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v105-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1056 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\42\106-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2942-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v106-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9930 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\42\106-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2942-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v106-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1160 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\43\2994-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2943-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2994-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1432 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\93\2987-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2893-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2987-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 6216 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\94\22-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2894-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v22-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8022 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\94\22-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2894-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v22-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 912 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\95\23-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2895-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v23-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 11748 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\95\23-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2895-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v23-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1288 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\96\25-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2896-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v25-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7428 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\96\25-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2896-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v25-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 848 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\97\26-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2897-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v26-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 11370 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\97\26-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2897-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v26-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1256 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\98\27-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2898-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v27-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 11478 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\98\27-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2898-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v27-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1240 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\99\107-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2899-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v107-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8562 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\99\107-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2899-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v107-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 976 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\sined.prod@hotmail.fr\DFSR\Staging\CS{53870BB0-FA8A-8CC4-7A8F-FFCE59C38E34}\01\196-{53870BB0-FA8A-8CC4-7A8F-FFCE59C38E34}-v1-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v196-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\sined.prod@hotmail.fr\DFSR\Staging\CS{53870BB0-FA8A-8CC4-7A8F-FFCE59C38E34}\12\12-{365CBB0F-B0BC-46C8-B541-CF632E7A18FE}-v12-{365CBB0F-B0BC-46C8-B541-CF632E7A18FE}-v12-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 1006626 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\sined.prod@hotmail.fr\DFSR\Staging\CS{53870BB0-FA8A-8CC4-7A8F-FFCE59C38E34}\12\12-{365CBB0F-B0BC-46C8-B541-CF632E7A18FE}-v12-{365CBB0F-B0BC-46C8-B541-CF632E7A18FE}-v12-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 70824 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\sined.prod@hotmail.fr\DFSR\Staging\CS{53870BB0-FA8A-8CC4-7A8F-FFCE59C38E34}\12\12-{365CBB0F-B0BC-46C8-B541-CF632E7A18FE}-v12-{365CBB0F-B0BC-46C8-B541-CF632E7A18FE}-v12-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.3 5106 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\sined.prod@hotmail.fr\DFSR\Staging\CS{53870BB0-FA8A-8CC4-7A8F-FFCE59C38E34}\12\12-{365CBB0F-B0BC-46C8-B541-CF632E7A18FE}-v12-{365CBB0F-B0BC-46C8-B541-CF632E7A18FE}-v12-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 111800 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\lamissedu66000@hotmail.fr\SharingMetadata\prescillaa@hotmail.fr\DFSR\Staging\CS{2E7E2A74-BAF8-21B7-8B10-475C99A73049}\01\10-{2E7E2A74-BAF8-21B7-8B10-475C99A73049}-v1-{9874A4F0-4E0F-4B76-B5B7-1EC8567C61AD}-v10-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\lamissedu66000@hotmail.fr\SharingMetadata\prescillaa@hotmail.fr\DFSR\Staging\CS{2E7E2A74-BAF8-21B7-8B10-475C99A73049}\25\25-{7562E15D-D17E-4F03-883C-0F30DD937665}-v25-{7562E15D-D17E-4F03-883C-0F30DD937665}-v25-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 584 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\lamissedu66000@hotmail.fr\SharingMetadata\prescillaa@hotmail.fr\DFSR\Staging\CS{2E7E2A74-BAF8-21B7-8B10-475C99A73049}\26\26-{7562E15D-D17E-4F03-883C-0F30DD937665}-v26-{7562E15D-D17E-4F03-883C-0F30DD937665}-v26-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 600 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\vivie66000@hotmail.fr\SharingMetadata\campinas666@hotmail.fr\DFSR\Staging\CS{247E84CF-6734-4EB1-AF65-6C52FEB0EA34}\01\10-{247E84CF-6734-4EB1-AF65-6C52FEB0EA34}-v1-{B4E47A76-EF3E-47CD-85D1-C23F6912F5EE}-v10-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\vivie66000@hotmail.fr\SharingMetadata\campinas666@hotmail.fr\DFSR\Staging\CS{247E84CF-6734-4EB1-AF65-6C52FEB0EA34}\46\12-{2E23E827-54B6-42AE-973E-F0FC6DAE797A}-v146-{B4E47A76-EF3E-47CD-85D1-C23F6912F5EE}-v12-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 5970 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\vivie66000@hotmail.fr\SharingMetadata\campinas666@hotmail.fr\DFSR\Staging\CS{247E84CF-6734-4EB1-AF65-6C52FEB0EA34}\46\12-{2E23E827-54B6-42AE-973E-F0FC6DAE797A}-v146-{B4E47A76-EF3E-47CD-85D1-C23F6912F5EE}-v12-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 664 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\vivie66000@hotmail.fr\SharingMetadata\campinas666@hotmail.fr\DFSR\Staging\CS{247E84CF-6734-4EB1-AF65-6C52FEB0EA34}\47\14-{2E23E827-54B6-42AE-973E-F0FC6DAE797A}-v147-{B4E47A76-EF3E-47CD-85D1-C23F6912F5EE}-v14-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3090 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\vivie66000@hotmail.fr\SharingMetadata\campinas666@hotmail.fr\DFSR\Staging\CS{247E84CF-6734-4EB1-AF65-6C52FEB0EA34}\47\14-{2E23E827-54B6-42AE-973E-F0FC6DAE797A}-v147-{B4E47A76-EF3E-47CD-85D1-C23F6912F5EE}-v14-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 352 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\x_el-chico_x@hotmail.fr\SharingMetadata\lamissedu66000@hotmail.fr\DFSR\Staging\CS{F9616A36-2A16-3B6B-9A8B-E1A764F592AA}\32\32-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v32-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v32-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 5502 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\x_el-chico_x@hotmail.fr\SharingMetadata\lamissedu66000@hotmail.fr\DFSR\Staging\CS{F9616A36-2A16-3B6B-9A8B-E1A764F592AA}\32\32-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v32-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v32-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 592 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\x_el-chico_x@hotmail.fr\SharingMetadata\lamissedu66000@hotmail.fr\DFSR\Staging\CS{F9616A36-2A16-3B6B-9A8B-E1A764F592AA}\01\10-{F9616A36-2A16-3B6B-9A8B-E1A764F592AA}-v1-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v10-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\x_el-chico_x@hotmail.fr\SharingMetadata\lamissedu66000@hotmail.fr\DFSR\Staging\CS{F9616A36-2A16-3B6B-9A8B-E1A764F592AA}\11\11-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v11-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v11-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\x_el-chico_x@hotmail.fr\SharingMetadata\lamissedu66000@hotmail.fr\DFSR\Staging\CS{F9616A36-2A16-3B6B-9A8B-E1A764F592AA}\12\12-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v12-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v12-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 4926 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\x_el-chico_x@hotmail.fr\SharingMetadata\lamissedu66000@hotmail.fr\DFSR\Staging\CS{F9616A36-2A16-3B6B-9A8B-E1A764F592AA}\12\12-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v12-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v12-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 560 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\x_el-chico_x@hotmail.fr\SharingMetadata\lamissedu66000@hotmail.fr\DFSR\Staging\CS{F9616A36-2A16-3B6B-9A8B-E1A764F592AA}\13\13-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v13-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v13-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 5106 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\x_el-chico_x@hotmail.fr\SharingMetadata\lamissedu66000@hotmail.fr\DFSR\Staging\CS{F9616A36-2A16-3B6B-9A8B-E1A764F592AA}\13\13-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v13-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v13-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 568 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\x_el-chico_x@hotmail.fr\SharingMetadata\lamissedu66000@hotmail.fr\DFSR\Staging\CS{F9616A36-2A16-3B6B-9A8B-E1A764F592AA}\14\14-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v14-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v14-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 4980 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\x_el-chico_x@hotmail.fr\SharingMetadata\lamissedu66000@hotmail.fr\DFSR\Staging\CS{F9616A36-2A16-3B6B-9A8B-E1A764F592AA}\14\14-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v14-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v14-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 560 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\x_el-chico_x@hotmail.fr\SharingMetadata\lamissedu66000@hotmail.fr\DFSR\Staging\CS{F9616A36-2A16-3B6B-9A8B-E1A764F592AA}\15\15-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v15-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v15-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 5358 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\x_el-chico_x@hotmail.fr\SharingMetadata\lamissedu66000@hotmail.fr\DFSR\Staging\CS{F9616A36-2A16-3B6B-9A8B-E1A764F592AA}\15\15-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v15-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v15-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 576 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\x_el-chico_x@hotmail.fr\SharingMetadata\lamissedu66000@hotmail.fr\DFSR\Staging\CS{F9616A36-2A16-3B6B-9A8B-E1A764F592AA}\16\16-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v16-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v16-Downloaded.frx:{59828
Re,
Ouvre le dossier Lop S&D puis double-clique sur Scan.bat. Tape sur "S" puis valide en appuyant sur "Entrée".
[#ff0000]! Ne ferme pas la fenêtre lors de la suppression ! [/#f]
Un rapport sera généré, poste son contenu ici.
NOTE : Si ton Bureau ne réapparait pas, appuie simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches.
Rends-toi sur l'onglet "Processus". Clique en haut à gauche sur Fichier et choisis "Exécuter..."
Tape explorer puis valide.
Ouvre le dossier Lop S&D puis double-clique sur Scan.bat. Tape sur "S" puis valide en appuyant sur "Entrée".
[#ff0000]! Ne ferme pas la fenêtre lors de la suppression ! [/#f]
Un rapport sera généré, poste son contenu ici.
NOTE : Si ton Bureau ne réapparait pas, appuie simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches.
Rends-toi sur l'onglet "Processus". Clique en haut à gauche sur Fichier et choisis "Exécuter..."
Tape explorer puis valide.
-------------------------------[ Lop S&D 1.2 ]------------------------------
Version : Microsoft Windows XP [version 5.1.2600] [ OS : Windows_NT ]
Lancé depuis : "C:\Documents and Settings\Vanwildemeersch Elod\Bureau\Lop S&D"
Rapport créé : Le 07-10-10 à 20:46:00.39 PC : SNNECCI
! Faire analyser le rapport par un Helper avant intervention !
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION ///////////////////////////////
Supprimé - C:\Program Files\LITECA~1
Supprimé - C:\Documents and settings\All Users\Application Data\lesseachhidebike
Supprimé - C:\Documents and settings\Vanwildemeersch Elod\Application Data\LITECA~1
Supprimé - C:\Program Files\Adverts
Supprimé - C:\WINDOWS\tasks\B27D3580950EAA44.job
\\\\\\\\\\\\\\\\\\\\\\\\\\\ DEUXIEME PASSAGE ///////////////////////////
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Copié ! - [HKLM\Software\Microsoft\Windows\CurrentVersion\Run]
Copié ! - [HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
Supprimé - HKLM\Software\Microsoft\Windows\CurrentVersion\Run | Hide Bike Bore Bits
Supprimé - HKCU\Software\Microsoft\Windows\CurrentVersion\Run | MESS FRAG
//////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
-------------[ Listing des Dossiers dans Application Data ]-------------
C:\Documents and Settings\Administrateur\Application Data\MSN6
C:\Documents and Settings\Administrateur\Application Data\MSNInstaller
C:\Documents and Settings\Administrateur\Application Data\Microsoft
C:\Documents and Settings\Administrateur\Application Data\You've Got Pictures Screensaver
C:\Documents and Settings\Administrateur\Application Data\Symantec
C:\Documents and Settings\Administrateur\Application Data\Real
C:\Documents and Settings\Administrateur\Application Data\Macromedia
C:\Documents and Settings\Administrateur\Application Data\Sun
C:\Documents and Settings\Administrateur\Application Data\Identities
C:\Documents and Settings\Administrateur\Application Data\desktop.ini
C:\Documents and Settings\All Users\Application Data\Adobe
C:\Documents and Settings\All Users\Application Data\LauncherAccess.dt
C:\Documents and Settings\All Users\Application Data\.zreglib
C:\Documents and Settings\All Users\Application Data\Microsoft
C:\Documents and Settings\All Users\Application Data\WLInstaller
C:\Documents and Settings\All Users\Application Data\Google
C:\Documents and Settings\All Users\Application Data\AntiVir PersonalEdition Classic
C:\Documents and Settings\All Users\Application Data\addr_file.html
C:\Documents and Settings\All Users\Application Data\Elaborate Bytes
C:\Documents and Settings\All Users\Application Data\Trymedia
C:\Documents and Settings\All Users\Application Data\FLEXnet
C:\Documents and Settings\All Users\Application Data\Ulead Systems
C:\Documents and Settings\All Users\Application Data\Skype
C:\Documents and Settings\All Users\Application Data\GRETECH
C:\Documents and Settings\All Users\Application Data\DVD Shrink
C:\Documents and Settings\All Users\Application Data\HP
C:\Documents and Settings\All Users\Application Data\Messenger Plus!
C:\Documents and Settings\All Users\Application Data\Windows Live Toolbar
C:\Documents and Settings\All Users\Application Data\Symantec
C:\Documents and Settings\All Users\Application Data\Anti-Virus Personal
C:\Documents and Settings\All Users\Application Data\hpzinstall.log
C:\Documents and Settings\All Users\Application Data\AOL
C:\Documents and Settings\All Users\Application Data\Ahead
C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
C:\Documents and Settings\All Users\Application Data\OD2
C:\Documents and Settings\All Users\Application Data\MSN6
C:\Documents and Settings\All Users\Application Data\Viewpoint
C:\Documents and Settings\All Users\Application Data\QuickTime
C:\Documents and Settings\All Users\Application Data\CyberLink
C:\Documents and Settings\All Users\Application Data\SBSI
C:\Documents and Settings\All Users\Application Data\desktop.ini
C:\Documents and Settings\Default User\Application Data\Microsoft
C:\Documents and Settings\Default User\Application Data\You've Got Pictures Screensaver
C:\Documents and Settings\Default User\Application Data\Symantec
C:\Documents and Settings\Default User\Application Data\Real
C:\Documents and Settings\Default User\Application Data\Macromedia
C:\Documents and Settings\Default User\Application Data\Sun
C:\Documents and Settings\Default User\Application Data\Identities
C:\Documents and Settings\Default User\Application Data\desktop.ini
C:\Documents and Settings\LocalService\Application Data\Microsoft
C:\Documents and Settings\NetworkService\Application Data\Microsoft
C:\Documents and Settings\NetworkService\Application Data\Identities
C:\Documents and Settings\NetworkService\Application Data\Symantec
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\OpenOffice.org2
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\AdobeUM
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Adobe
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Windows Desktop Search
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Windows Live Writer
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\InfraRecorder
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\DeepBurner
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\vlc
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Samsung
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Vso
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\pcouffin.log
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\inst.exe
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\pcouffin.cat
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\pcouffin.sys
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\pcouffin.inf
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\WinRAR
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Microsoft
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\MSNInstaller
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Mozilla
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\GRETECH
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Ahead
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Screenshot Sender
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\uTorrent
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\DivX
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\HP
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\AVSDVDPlayer.m3u
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Image Zone Express
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\AOL
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\D - Slimtype - DVDRW SOSW-833S - V9S1.dat
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\ConvertTemp
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\TransRender
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Temporary
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\CyberLink
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\FUJIFILM
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\MSN6
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Sonic
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Leadertech
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\SystemDoctor 2006 Free
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Help
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Macromedia
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Skype
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\OD2
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Symantec
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\You've Got Pictures Screensaver
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Real
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Sun
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\Identities
C:\Documents and Settings\Vanwildemeersch Elod\Application Data\desktop.ini
C:\Documents and Settings\vincent\Application Data\AOL
C:\Documents and Settings\vincent\Application Data\CyberLink
C:\Documents and Settings\vincent\Application Data\MSN6
C:\Documents and Settings\vincent\Application Data\OD2
C:\Documents and Settings\vincent\Application Data\FUJIFILM
C:\Documents and Settings\vincent\Application Data\Symantec
C:\Documents and Settings\vincent\Application Data\Microsoft
C:\Documents and Settings\vincent\Application Data\HbTools
C:\Documents and Settings\vincent\Application Data\Skype
C:\Documents and Settings\vincent\Application Data\You've Got Pictures Screensaver
C:\Documents and Settings\vincent\Application Data\Real
C:\Documents and Settings\vincent\Application Data\Macromedia
C:\Documents and Settings\vincent\Application Data\Sun
C:\Documents and Settings\vincent\Application Data\Identities
C:\Documents and Settings\vincent\Application Data\desktop.ini
----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------
C:\WINDOWS\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job
C:\WINDOWS\tasks\SA.DAT
C:\WINDOWS\tasks\desktop.ini
--------------[ Listing des dossiers dans C:\Program Files ]--------------
C:\Program Files\ABC Amber Image Converter
C:\Program Files\Adobe
C:\Program Files\Ahead
C:\Program Files\Alwil Software
C:\Program Files\AntiVir PersonalEdition Classic
C:\Program Files\Arrowkey
C:\Program Files\Astonsoft
C:\Program Files\Audacity
C:\Program Files\AviSynth 2.5
C:\Program Files\AVSMedia
C:\Program Files\Bowling 2006
C:\Program Files\Car Jacker
C:\Program Files\Core Design
C:\Program Files\CyberLink
C:\Program Files\DivX
C:\Program Files\Dream Music
C:\Program Files\Elaborate Bytes
C:\Program Files\eMule
C:\Program Files\eRightSoft
C:\Program Files\Fichiers communs
C:\Program Files\FinePixViewer
C:\Program Files\funkitron
C:\Program Files\GameSpy Arcade
C:\Program Files\Google
C:\Program Files\GRETECH
C:\Program Files\Grisoft
C:\Program Files\Hercules
C:\Program Files\HEROSOFT
C:\Program Files\Hewlett-Packard
C:\Program Files\Hijackthis Version Fran‡aise
C:\Program Files\HP
C:\Program Files\InfraRecorder
C:\Program Files\Internet Explorer
C:\Program Files\Inventel
C:\Program Files\Java
C:\Program Files\Learn2.com
C:\Program Files\Ma Pension d'Animaux
C:\Program Files\Macrogaming
C:\Program Files\Maxis
C:\Program Files\MediaCoder
C:\Program Files\Messenger
C:\Program Files\Messenger Plus! Live
C:\Program Files\Micro Application
C:\Program Files\Microsoft CAPICOM 2.1.0.2
C:\Program Files\microsoft frontpage
C:\Program Files\Microsoft Games
C:\Program Files\Microsoft Office
C:\Program Files\Microsoft SQL Server Compact Edition
C:\Program Files\Movie Maker
C:\Program Files\Mozilla Firefox
C:\Program Files\MP3 Explorer
C:\Program Files\MSN Apps
C:\Program Files\MSN Gaming Zone
C:\Program Files\MSN Messenger
C:\Program Files\Msncolor
C:\Program Files\MSXML 4.0
C:\Program Files\Namco
C:\Program Files\Namtuk
C:\Program Files\Nero
C:\Program Files\NetMeeting
C:\Program Files\Online Services
C:\Program Files\OpenOffice.org 2.2
C:\Program Files\Outlook Express
C:\Program Files\Panda Software
C:\Program Files\PhotoFiltre Studio
C:\Program Files\PSCS2
C:\Program Files\QuickTime
C:\Program Files\Real
C:\Program Files\REGSHAVE
C:\Program Files\Samsung
C:\Program Files\Services en ligne
C:\Program Files\SlySoft
C:\Program Files\Sonic
C:\Program Files\SupraASCIIArt
C:\Program Files\Synaptics
C:\Program Files\Trymedia
C:\Program Files\Ulead Systems
C:\Program Files\Unrelated Inventions
C:\Program Files\VIA
C:\Program Files\VideoLAN
C:\Program Files\VSO
C:\Program Files\Wanadoo
C:\Program Files\WBFileManager
C:\Program Files\Webteh
C:\Program Files\WinDAC32
C:\Program Files\Windows Desktop Search
C:\Program Files\Windows Live
C:\Program Files\Windows Live Toolbar
C:\Program Files\Windows Media Connect 2
C:\Program Files\Windows Media Player
C:\Program Files\Windows NT
C:\Program Files\WinRAR
C:\Program Files\Wondershare
C:\Program Files\World of Warcraft
C:\Program Files\xerox
------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]-----
C:\Program files\Fichiers Communs\Adobe
C:\Program files\Fichiers Communs\Ahead
C:\Program files\Fichiers Communs\Anti-Hacker
C:\Program files\Fichiers Communs\AOL
C:\Program files\Fichiers Communs\aolback
C:\Program files\Fichiers Communs\aolshare
C:\Program files\Fichiers Communs\AVSMedia
C:\Program files\Fichiers Communs\Blizzard Entertainment
C:\Program files\Fichiers Communs\Hewlett-Packard
C:\Program files\Fichiers Communs\HP
C:\Program files\Fichiers Communs\InstallShield
C:\Program files\Fichiers Communs\Java
C:\Program files\Fichiers Communs\Microsoft Shared
C:\Program files\Fichiers Communs\MSSoap
C:\Program files\Fichiers Communs\Nullsoft
C:\Program files\Fichiers Communs\Real
C:\Program files\Fichiers Communs\Services
C:\Program files\Fichiers Communs\Sonic Shared
C:\Program files\Fichiers Communs\SpeechEngines
C:\Program files\Fichiers Communs\SureThing Shared
C:\Program files\Fichiers Communs\System
C:\Program files\Fichiers Communs\xing shared
----------------------[ Recherche dans le Registre ]----------------------
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
-----------------[ Recherche de Fichiers - Dossiers Lop ]-----------------
Aucun dossier Lop trouvé !
--------------------[ Vérification du fichier Hosts ]---------------------
Fichier Hosts : Propre
--------------[ Recherche de fichiers cachés avec Catchme ]---------------
catchme 0.3.1066 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-10-10 20:46:15
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden services & system hive ...
scanning hidden registry entries ...
scanning hidden files ...
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\26\2970-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2926-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2970-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1320 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\00\108-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2900-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v108-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8652 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\00\108-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2900-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v108-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 960 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\01\10-{80AB827E-605B-D964-377E-D89467543EE6}-v1-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v10-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\01\120-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2901-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v120-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10452 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\01\120-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2901-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v120-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1176 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\02\121-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2902-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v121-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8256 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\02\121-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2902-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v121-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 944 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\03\122-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2903-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v122-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7968 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\03\122-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2903-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v122-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 896 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\04\119-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2904-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v119-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10866 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\04\119-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2904-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v119-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1200 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\05\21-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2905-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v21-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8580 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\05\21-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2905-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v21-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 976 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\06\28-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2906-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v28-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8094 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\06\28-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2906-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v28-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 944 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\07\29-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2907-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v29-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9354 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\07\29-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2907-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v29-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1064 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\08\30-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2908-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v30-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10182 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\08\30-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2908-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v30-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1136 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\09\32-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2909-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v32-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9192 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\09\32-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2909-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v32-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1016 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\10\31-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2910-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v31-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7086 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\10\31-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2910-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v31-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 832 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\11\40-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2911-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v40-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9516 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\11\40-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2911-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v40-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1072 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\12\41-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2912-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v41-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7842 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\12\41-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2912-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v41-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 888 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\13\39-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2913-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v39-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7734 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\13\39-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2913-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v39-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 856 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\14\42-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2914-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v42-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7932 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\14\42-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2914-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v42-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 896 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\15\43-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2915-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v43-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8490 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\15\43-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2915-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v43-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 944 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\16\15-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2916-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v15-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8904 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\16\15-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2916-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v15-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 960 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\17\53-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2917-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v53-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10506 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\17\53-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2917-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v53-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1200 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\18\50-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2918-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v50-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9732 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\18\50-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2918-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v50-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1096 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\19\49-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2919-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v49-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 11478 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\19\49-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2919-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v49-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1264 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\20\51-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2920-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v51-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10632 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\20\51-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2920-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v51-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1168 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\21\52-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2921-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v52-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9570 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\21\52-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2921-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v52-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1064 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\22\54-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2922-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v54-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10632 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\22\54-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2922-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v54-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1256 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\23\2967-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2923-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2967-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1272 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\24\2968-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2924-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2968-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 800 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\25\2969-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2925-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2969-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1104 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\27\87-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2927-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v87-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10452 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\27\87-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2927-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v87-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1192 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\28\88-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2928-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v88-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 11172 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\28\88-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2928-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v88-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1272 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\29\89-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2929-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v89-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10848 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\29\89-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2929-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v89-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1232 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\30\90-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2930-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v90-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8490 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\30\90-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2930-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v90-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 976 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\31\91-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2931-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v91-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9012 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\31\91-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2931-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v91-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1048 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\32\92-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2932-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v92-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10398 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\32\92-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2932-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v92-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1200 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\33\95-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2933-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v95-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 6492 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\33\95-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2933-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v95-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 736 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\34\96-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2934-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v96-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9624 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\34\96-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2934-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v96-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1096 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\35\99-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2935-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v99-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8796 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\35\99-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2935-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v99-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1024 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\36\100-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2936-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v100-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9210 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\36\100-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2936-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v100-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1016 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\37\97-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2937-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v97-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8814 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\37\97-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2937-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v97-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1000 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\38\98-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2938-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v98-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7266 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\38\98-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2938-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v98-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 816 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\39\103-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2939-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v103-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10164 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\39\103-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2939-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v103-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1168 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\40\104-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2940-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v104-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9768 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\40\104-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2940-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v104-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1088 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\41\105-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2941-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v105-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9318 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\41\105-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2941-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v105-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1056 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\42\106-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2942-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v106-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9930 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\42\106-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2942-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v106-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1160 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\43\2994-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2943-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2994-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1432 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\93\2987-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2893-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2987-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 6216 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\94\22-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2894-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v22-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8022 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\94\22-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2894-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v22-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 912 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\95\23-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2895-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v23-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 11748 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\95\23-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2895-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v23-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1288 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\96\25-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2896-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v25-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7428 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\96\25-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2896-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v25-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 848 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\97\26-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2897-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v26-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 11370 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\97\26-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2897-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v26-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1256 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\98\27-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2898-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v27-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 11478 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\98\27-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2898-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v27-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1240 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\99\107-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2899-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v107-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8562 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\chaton62421@msn.com\DFSR\Staging\CS{80AB827E-605B-D964-377E-D89467543EE6}\99\107-{70F511C0-EE85-4D14-8CC2-9616D9E87A0B}-v2899-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v107-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 976 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\sined.prod@hotmail.fr\DFSR\Staging\CS{53870BB0-FA8A-8CC4-7A8F-FFCE59C38E34}\01\196-{53870BB0-FA8A-8CC4-7A8F-FFCE59C38E34}-v1-{2C868601-6F10-4737-8869-6AB8CD5AE268}-v196-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\sined.prod@hotmail.fr\DFSR\Staging\CS{53870BB0-FA8A-8CC4-7A8F-FFCE59C38E34}\12\12-{365CBB0F-B0BC-46C8-B541-CF632E7A18FE}-v12-{365CBB0F-B0BC-46C8-B541-CF632E7A18FE}-v12-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 1006626 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\sined.prod@hotmail.fr\DFSR\Staging\CS{53870BB0-FA8A-8CC4-7A8F-FFCE59C38E34}\12\12-{365CBB0F-B0BC-46C8-B541-CF632E7A18FE}-v12-{365CBB0F-B0BC-46C8-B541-CF632E7A18FE}-v12-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 70824 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\sined.prod@hotmail.fr\DFSR\Staging\CS{53870BB0-FA8A-8CC4-7A8F-FFCE59C38E34}\12\12-{365CBB0F-B0BC-46C8-B541-CF632E7A18FE}-v12-{365CBB0F-B0BC-46C8-B541-CF632E7A18FE}-v12-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.3 5106 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\el-chico_de_la_noche@hotmail.fr\SharingMetadata\sined.prod@hotmail.fr\DFSR\Staging\CS{53870BB0-FA8A-8CC4-7A8F-FFCE59C38E34}\12\12-{365CBB0F-B0BC-46C8-B541-CF632E7A18FE}-v12-{365CBB0F-B0BC-46C8-B541-CF632E7A18FE}-v12-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 111800 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\lamissedu66000@hotmail.fr\SharingMetadata\prescillaa@hotmail.fr\DFSR\Staging\CS{2E7E2A74-BAF8-21B7-8B10-475C99A73049}\01\10-{2E7E2A74-BAF8-21B7-8B10-475C99A73049}-v1-{9874A4F0-4E0F-4B76-B5B7-1EC8567C61AD}-v10-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\lamissedu66000@hotmail.fr\SharingMetadata\prescillaa@hotmail.fr\DFSR\Staging\CS{2E7E2A74-BAF8-21B7-8B10-475C99A73049}\25\25-{7562E15D-D17E-4F03-883C-0F30DD937665}-v25-{7562E15D-D17E-4F03-883C-0F30DD937665}-v25-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 584 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\lamissedu66000@hotmail.fr\SharingMetadata\prescillaa@hotmail.fr\DFSR\Staging\CS{2E7E2A74-BAF8-21B7-8B10-475C99A73049}\26\26-{7562E15D-D17E-4F03-883C-0F30DD937665}-v26-{7562E15D-D17E-4F03-883C-0F30DD937665}-v26-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 600 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\vivie66000@hotmail.fr\SharingMetadata\campinas666@hotmail.fr\DFSR\Staging\CS{247E84CF-6734-4EB1-AF65-6C52FEB0EA34}\01\10-{247E84CF-6734-4EB1-AF65-6C52FEB0EA34}-v1-{B4E47A76-EF3E-47CD-85D1-C23F6912F5EE}-v10-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\vivie66000@hotmail.fr\SharingMetadata\campinas666@hotmail.fr\DFSR\Staging\CS{247E84CF-6734-4EB1-AF65-6C52FEB0EA34}\46\12-{2E23E827-54B6-42AE-973E-F0FC6DAE797A}-v146-{B4E47A76-EF3E-47CD-85D1-C23F6912F5EE}-v12-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 5970 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\vivie66000@hotmail.fr\SharingMetadata\campinas666@hotmail.fr\DFSR\Staging\CS{247E84CF-6734-4EB1-AF65-6C52FEB0EA34}\46\12-{2E23E827-54B6-42AE-973E-F0FC6DAE797A}-v146-{B4E47A76-EF3E-47CD-85D1-C23F6912F5EE}-v12-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 664 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\vivie66000@hotmail.fr\SharingMetadata\campinas666@hotmail.fr\DFSR\Staging\CS{247E84CF-6734-4EB1-AF65-6C52FEB0EA34}\47\14-{2E23E827-54B6-42AE-973E-F0FC6DAE797A}-v147-{B4E47A76-EF3E-47CD-85D1-C23F6912F5EE}-v14-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3090 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\vivie66000@hotmail.fr\SharingMetadata\campinas666@hotmail.fr\DFSR\Staging\CS{247E84CF-6734-4EB1-AF65-6C52FEB0EA34}\47\14-{2E23E827-54B6-42AE-973E-F0FC6DAE797A}-v147-{B4E47A76-EF3E-47CD-85D1-C23F6912F5EE}-v14-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 352 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\x_el-chico_x@hotmail.fr\SharingMetadata\lamissedu66000@hotmail.fr\DFSR\Staging\CS{F9616A36-2A16-3B6B-9A8B-E1A764F592AA}\32\32-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v32-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v32-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 5502 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\x_el-chico_x@hotmail.fr\SharingMetadata\lamissedu66000@hotmail.fr\DFSR\Staging\CS{F9616A36-2A16-3B6B-9A8B-E1A764F592AA}\32\32-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v32-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v32-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 592 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\x_el-chico_x@hotmail.fr\SharingMetadata\lamissedu66000@hotmail.fr\DFSR\Staging\CS{F9616A36-2A16-3B6B-9A8B-E1A764F592AA}\01\10-{F9616A36-2A16-3B6B-9A8B-E1A764F592AA}-v1-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v10-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\x_el-chico_x@hotmail.fr\SharingMetadata\lamissedu66000@hotmail.fr\DFSR\Staging\CS{F9616A36-2A16-3B6B-9A8B-E1A764F592AA}\11\11-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v11-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v11-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\x_el-chico_x@hotmail.fr\SharingMetadata\lamissedu66000@hotmail.fr\DFSR\Staging\CS{F9616A36-2A16-3B6B-9A8B-E1A764F592AA}\12\12-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v12-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v12-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 4926 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\x_el-chico_x@hotmail.fr\SharingMetadata\lamissedu66000@hotmail.fr\DFSR\Staging\CS{F9616A36-2A16-3B6B-9A8B-E1A764F592AA}\12\12-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v12-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v12-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 560 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\x_el-chico_x@hotmail.fr\SharingMetadata\lamissedu66000@hotmail.fr\DFSR\Staging\CS{F9616A36-2A16-3B6B-9A8B-E1A764F592AA}\13\13-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v13-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v13-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 5106 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\x_el-chico_x@hotmail.fr\SharingMetadata\lamissedu66000@hotmail.fr\DFSR\Staging\CS{F9616A36-2A16-3B6B-9A8B-E1A764F592AA}\13\13-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v13-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v13-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 568 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\x_el-chico_x@hotmail.fr\SharingMetadata\lamissedu66000@hotmail.fr\DFSR\Staging\CS{F9616A36-2A16-3B6B-9A8B-E1A764F592AA}\14\14-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v14-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v14-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 4980 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\x_el-chico_x@hotmail.fr\SharingMetadata\lamissedu66000@hotmail.fr\DFSR\Staging\CS{F9616A36-2A16-3B6B-9A8B-E1A764F592AA}\14\14-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v14-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v14-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 560 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\x_el-chico_x@hotmail.fr\SharingMetadata\lamissedu66000@hotmail.fr\DFSR\Staging\CS{F9616A36-2A16-3B6B-9A8B-E1A764F592AA}\15\15-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v15-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v15-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 5358 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Settings\Application Data\Microsoft\Messenger\x_el-chico_x@hotmail.fr\SharingMetadata\lamissedu66000@hotmail.fr\DFSR\Staging\CS{F9616A36-2A16-3B6B-9A8B-E1A764F592AA}\15\15-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v15-{44167115-8AFC-4AC7-96AA-292E1957A56C}-v15-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 576 bytes hidden from API
C:\Documents and Settings\Vanwildemeersch Elod\Local Sett
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:48, on 07-10-11
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\Program Files\Micro Application\Sécurité Internet\Anti-Virus Perso & Pro\Anti-Spam\KAV\KAVSVC.exe
C:\WINDOWS\system32\slmdmsr.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\WINDOWS\system32\drivers\STDSB.exe
C:\WINDOWS\system32\drivers\Icon.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
C:\Apps\Powercinema\PCMService.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\eMule\emule.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.BIN
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\explorer.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Documents and Settings\Vanwildemeersch Elod\Bureau\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fr.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll (file missing)
O3 - Toolbar: H&otbar - {74CC49F7-EB32-4A08-B204-948962A6E3DB} - C:\Program Files\HbTools\Bin\4.8.4.0\HbtHostIE.dll (file missing)
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [STDSB] C:\WINDOWS\system32\drivers\STDSB.exe
O4 - HKLM\..\Run: [Icon] C:\WINDOWS\system32\drivers\Icon.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [Workflow] D:\Workflow.exe
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NI.UERSV_0001_N68M0602] "C:\Documents and Settings\Vanwildemeersch Elod\Bureau\ErrorSafeScannerInstall_fr.exe" -nag
O4 - HKLM\..\Run: [HbTools] C:\Program Files\HbTools\Bin\4.8.4.0\HbtOEAddOn.exe
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [LanzarL2007] "C:\DOCUME~1\VANWIL~1\LOCALS~1\Temp\{E3DA9CCF-291B-4910-9400-1D70EB7A6B21}\{D1DA2BA7-2592-4036-9BB2-DCCABDE8DC1A}\..\..\L2007tmp\Setup.exe" /SETUP:"/l0x040c"
O4 - HKLM\..\Run: [WeatherOnTray] C:\Program Files\HbTools\Bin\4.8.4.0\HbtWeatherOnTray.exe
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [ZEject] C:\Program Files\2002 CD Eject\CDEject.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll (file missing)
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown....
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.ca...
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst....
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.ca...
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab569...
O17 - HKLM\System\CCS\Services\Tcpip\..\{07C3A31A-C3F2-43AA-960F-C2A9A66C38AC}: NameServer = 80.10.246.2,80.10.246.129
O17 - HKLM\System\CS2\Services\Tcpip\..\{07C3A31A-C3F2-43AA-960F-C2A9A66C38AC}: NameServer = 80.10.246.2,80.10.246.129
O17 - HKLM\System\CS3\Services\Tcpip\..\{07C3A31A-C3F2-43AA-960F-C2A9A66C38AC}: NameServer = 80.10.246.2,80.10.246.129
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
O23 - Service: Anti-Virus Service (kavsvc) - Kaspersky Labs Ltd. - C:\Program Files\Micro Application\Sécurité Internet\Anti-Virus Perso & Pro\Anti-Spam\KAV\KAVSVC.exe
O23 - Service: MySqlInventime - Unknown owner - c:\mysql\bin\mysqld-max-nt.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slmdmsr.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe
--
End of file - 11315 bytes
Scan saved at 00:48, on 07-10-11
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\Program Files\Micro Application\Sécurité Internet\Anti-Virus Perso & Pro\Anti-Spam\KAV\KAVSVC.exe
C:\WINDOWS\system32\slmdmsr.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\WINDOWS\system32\drivers\STDSB.exe
C:\WINDOWS\system32\drivers\Icon.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
C:\Apps\Powercinema\PCMService.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\eMule\emule.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.BIN
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\explorer.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Documents and Settings\Vanwildemeersch Elod\Bureau\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fr.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll (file missing)
O3 - Toolbar: H&otbar - {74CC49F7-EB32-4A08-B204-948962A6E3DB} - C:\Program Files\HbTools\Bin\4.8.4.0\HbtHostIE.dll (file missing)
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [STDSB] C:\WINDOWS\system32\drivers\STDSB.exe
O4 - HKLM\..\Run: [Icon] C:\WINDOWS\system32\drivers\Icon.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [Workflow] D:\Workflow.exe
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NI.UERSV_0001_N68M0602] "C:\Documents and Settings\Vanwildemeersch Elod\Bureau\ErrorSafeScannerInstall_fr.exe" -nag
O4 - HKLM\..\Run: [HbTools] C:\Program Files\HbTools\Bin\4.8.4.0\HbtOEAddOn.exe
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [LanzarL2007] "C:\DOCUME~1\VANWIL~1\LOCALS~1\Temp\{E3DA9CCF-291B-4910-9400-1D70EB7A6B21}\{D1DA2BA7-2592-4036-9BB2-DCCABDE8DC1A}\..\..\L2007tmp\Setup.exe" /SETUP:"/l0x040c"
O4 - HKLM\..\Run: [WeatherOnTray] C:\Program Files\HbTools\Bin\4.8.4.0\HbtWeatherOnTray.exe
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [ZEject] C:\Program Files\2002 CD Eject\CDEject.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll (file missing)
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown....
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.ca...
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst....
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.ca...
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab569...
O17 - HKLM\System\CCS\Services\Tcpip\..\{07C3A31A-C3F2-43AA-960F-C2A9A66C38AC}: NameServer = 80.10.246.2,80.10.246.129
O17 - HKLM\System\CS2\Services\Tcpip\..\{07C3A31A-C3F2-43AA-960F-C2A9A66C38AC}: NameServer = 80.10.246.2,80.10.246.129
O17 - HKLM\System\CS3\Services\Tcpip\..\{07C3A31A-C3F2-43AA-960F-C2A9A66C38AC}: NameServer = 80.10.246.2,80.10.246.129
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
O23 - Service: Anti-Virus Service (kavsvc) - Kaspersky Labs Ltd. - C:\Program Files\Micro Application\Sécurité Internet\Anti-Virus Perso & Pro\Anti-Spam\KAV\KAVSVC.exe
O23 - Service: MySqlInventime - Unknown owner - c:\mysql\bin\mysqld-max-nt.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slmdmsr.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe
--
End of file - 11315 bytes
Re,
Fix les lignes en italique ci-dessous avec Hijackthis : AIDE EN IMAGES
[O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll (file missing)
O3 - Toolbar: H&otbar - {74CC49F7-EB32-4A08-B204-948962A6E3DB} - C:\Program Files\HbTools\Bin\4.8.4.0\HbtHostIE.dll (file missing)
O4 - HKLM\..\Run: [NI.UERSV_0001_N68M0602] "C:\Documents and Settings\Vanwildemeersch Elod\Bureau\ErrorSafeScannerInstall_fr.exe" -nag
O4 - HKLM\..\Run: [HbTools] C:\Program Files\HbTools\Bin\4.8.4.0\HbtOEAddOn.exe
O4 - HKLM\..\Run: [WeatherOnTray] C:\Program Files\HbTools\Bin\4.8.4.0\HbtWeatherOnTray.exe
Fix les lignes en italique ci-dessous avec Hijackthis : AIDE EN IMAGES
[O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll (file missing)
O3 - Toolbar: H&otbar - {74CC49F7-EB32-4A08-B204-948962A6E3DB} - C:\Program Files\HbTools\Bin\4.8.4.0\HbtHostIE.dll (file missing)
O4 - HKLM\..\Run: [NI.UERSV_0001_N68M0602] "C:\Documents and Settings\Vanwildemeersch Elod\Bureau\ErrorSafeScannerInstall_fr.exe" -nag
O4 - HKLM\..\Run: [HbTools] C:\Program Files\HbTools\Bin\4.8.4.0\HbtOEAddOn.exe
O4 - HKLM\..\Run: [WeatherOnTray] C:\Program Files\HbTools\Bin\4.8.4.0\HbtWeatherOnTray.exe
re,,, voila un nouveau rapport ,,
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:42, on 07-10-11
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\Program Files\Micro Application\Sécurité Internet\Anti-Virus Perso & Pro\Anti-Spam\KAV\KAVSVC.exe
C:\WINDOWS\system32\slmdmsr.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\WINDOWS\system32\drivers\STDSB.exe
C:\WINDOWS\system32\drivers\Icon.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
C:\Apps\Powercinema\PCMService.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\eMule\emule.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.BIN
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\explorer.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Documents and Settings\Vanwildemeersch Elod\Bureau\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fr.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [STDSB] C:\WINDOWS\system32\drivers\STDSB.exe
O4 - HKLM\..\Run: [Icon] C:\WINDOWS\system32\drivers\Icon.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [Workflow] D:\Workflow.exe
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [LanzarL2007] "C:\DOCUME~1\VANWIL~1\LOCALS~1\Temp\{E3DA9CCF-291B-4910-9400-1D70EB7A6B21}\{D1DA2BA7-2592-4036-9BB2-DCCABDE8DC1A}\..\..\L2007tmp\Setup.exe" /SETUP:"/l0x040c"
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [ZEject] C:\Program Files\2002 CD Eject\CDEject.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll (file missing)
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown....
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.ca...
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst....
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.ca...
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab569...
O17 - HKLM\System\CCS\Services\Tcpip\..\{07C3A31A-C3F2-43AA-960F-C2A9A66C38AC}: NameServer = 80.10.246.2,80.10.246.129
O17 - HKLM\System\CS2\Services\Tcpip\..\{07C3A31A-C3F2-43AA-960F-C2A9A66C38AC}: NameServer = 80.10.246.2,80.10.246.129
O17 - HKLM\System\CS3\Services\Tcpip\..\{07C3A31A-C3F2-43AA-960F-C2A9A66C38AC}: NameServer = 80.10.246.2,80.10.246.129
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
O23 - Service: Anti-Virus Service (kavsvc) - Kaspersky Labs Ltd. - C:\Program Files\Micro Application\Sécurité Internet\Anti-Virus Perso & Pro\Anti-Spam\KAV\KAVSVC.exe
O23 - Service: MySqlInventime - Unknown owner - c:\mysql\bin\mysqld-max-nt.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slmdmsr.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe
--
End of file - 10749 bytes
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:42, on 07-10-11
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\Program Files\Micro Application\Sécurité Internet\Anti-Virus Perso & Pro\Anti-Spam\KAV\KAVSVC.exe
C:\WINDOWS\system32\slmdmsr.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\WINDOWS\system32\drivers\STDSB.exe
C:\WINDOWS\system32\drivers\Icon.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
C:\Apps\Powercinema\PCMService.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\eMule\emule.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.BIN
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\explorer.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Documents and Settings\Vanwildemeersch Elod\Bureau\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fr.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [STDSB] C:\WINDOWS\system32\drivers\STDSB.exe
O4 - HKLM\..\Run: [Icon] C:\WINDOWS\system32\drivers\Icon.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [Workflow] D:\Workflow.exe
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [LanzarL2007] "C:\DOCUME~1\VANWIL~1\LOCALS~1\Temp\{E3DA9CCF-291B-4910-9400-1D70EB7A6B21}\{D1DA2BA7-2592-4036-9BB2-DCCABDE8DC1A}\..\..\L2007tmp\Setup.exe" /SETUP:"/l0x040c"
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [ZEject] C:\Program Files\2002 CD Eject\CDEject.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll (file missing)
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown....
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.ca...
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst....
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.ca...
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab569...
O17 - HKLM\System\CCS\Services\Tcpip\..\{07C3A31A-C3F2-43AA-960F-C2A9A66C38AC}: NameServer = 80.10.246.2,80.10.246.129
O17 - HKLM\System\CS2\Services\Tcpip\..\{07C3A31A-C3F2-43AA-960F-C2A9A66C38AC}: NameServer = 80.10.246.2,80.10.246.129
O17 - HKLM\System\CS3\Services\Tcpip\..\{07C3A31A-C3F2-43AA-960F-C2A9A66C38AC}: NameServer = 80.10.246.2,80.10.246.129
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
O23 - Service: Anti-Virus Service (kavsvc) - Kaspersky Labs Ltd. - C:\Program Files\Micro Application\Sécurité Internet\Anti-Virus Perso & Pro\Anti-Spam\KAV\KAVSVC.exe
O23 - Service: MySqlInventime - Unknown owner - c:\mysql\bin\mysqld-max-nt.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slmdmsr.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe
--
End of file - 10749 bytes
Lassé par la pub ? Créez un compte