Se connecter / S'enregistrer
Votre question

Nouvel assaut du virus "Nokia 19"[résolu]

Tags :
  • Nokia
  • Sécurité
Dernière réponse : dans Sécurité et virus
4 Novembre 2007 00:16:30

SLT
G besoin d'aid SVP
G attraP "nokia 19" par msn///G essayè de suivr ls dmarch d1 otr internautes ayan le mm problem mè g croi ke b1 si g b1 suivi l'otr sujet kil me fo kelk1 pr controler ms rapports danalyz

Dc ke kelk1 SVP me contacte afin de controler mè rapport danalyz et me dir cekil len è


SVP SVP SVP SVP :sweat:  //merci davance :D 

Autres pages sur : nouvel assaut virus nokia resolu

4 Novembre 2007 11:28:10

Modération : Tu nous la refais en français ?
4 Novembre 2007 11:52:58

"mè g croi ke b1 si g b1 suivi l'otr sujet kil me fo kelk1 pr controler ms rapports danalyz"

à partir de là j'ai rien comprit -_- toi parler francais ??
Contenus similaires
4 Novembre 2007 14:00:21

Bon ok// je reprend:
J'ai attrapé com beaucoup d'autre avant moi le virus "Nokia 19"
Dc com jai remarqué qu'il ne se contente pas d'infecter mn ordi ,il s'auto envoi a mes contactes Msn, j'ai alor cherchè un moyen rapide sur ce forum pour savoir comment s'endébarrasser convenablement
J'ai ainsi suivi les instructions donné a quelqu'un qui avait le mm problèm


Ma preoccupation a moi est que j'ai besoin que quelqu'un voi mes rapports d'analyze afin de m'informer de ce kil en ai


Sè assez clair nn??:D 
4 Novembre 2007 17:45:24

bonsoir

Citation :
Sè assez clair nn??:D 


non !

tu t'obtines à ne pas respecter les règles.

essaye de résoudre ton problème avec tes copains en sms, si ça ne marche pas, essaye de nous parler correctement et respectueusement.
4 Novembre 2007 20:46:40

Veuiller m'excuser si j'ai été insolent mais SVP j'ai vraiment besoin d'aide//SVP SVP SVP
4 Novembre 2007 23:32:57

bonsoir

Télécharge puis installe Hijackthis (Trend Micro)
Poste ensuite un rapport dans ta prochaine réponse.
AIDE : Comment utiliser Hijackthis v2.0.2

++++++++


Poste le rapport situé dans le dossier MSNFix d'après ce que je comprends tu l'as utilisé.
Le nom du rapport correspond au moment de sa création : date_heure.log
5 Novembre 2007 12:21:50

+1 Sham-rock pour Hijackthis
5 Novembre 2007 19:58:33

Voila le rapport d'Hijackthis:



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:57:40, on 05/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\MSMSGS.EXE
C:\Program Files\X'nBeep 1.1\XnBeep.exe
C:\Program Files\Pando Networks\Pando\Pando.exe
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\WINDOWS\system32\sistray.exe
C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
C:\WINDOWS\BricoPacks\Crystal Clear\RocketDock\RocketDock.exe
C:\WINDOWS\BricoPacks\Crystal Clear\UberIcon\UberIcon Manager.exe
C:\WINDOWS\BricoPacks\Crystal Clear\YzToolbar\YzToolBar.exe
C:\Program Files\Fichiers communs\Teleca Shared\CapabilityManager.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Documents and Settings\Hermes\Bureau\Utilitaires\HijackThis.exe
C:\WINDOWS\System32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ci/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Config\lsass.exe
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {7411F8BA-29A3-3216-9DE7-024AC0AAB9F6} - C:\WINDOWS\System32\viyjhai.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: IEHlprObj Class - {CE7C3CF0-4B15-11D1-ABED-709549C10111} - C:\Program Files\TrueDownloader\truedownloaderie.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Adssite Toolbar - {41C29B07-6F91-4966-91BE-2E2841643C83} - C:\Program Files\Adssite Advanced Toolbar\toolbar.dll (file missing)
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
O4 - HKLM\..\Run: [antihost] C:\WINDOWS\system32\ahr.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [LBTWiz.exe] C:\WINDOWS\LBTWiz.exe
O4 - HKLM\..\Run: [runner1] C:\WINDOWS\mrofinu1148.exe 61A847B5BBF72813339F30466188719AB689201522886B092CBD44BD8689220221DD3257
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\RunOnce: [MessengerPlusLiveUninstall] "C:\DOCUME~1\Hermes\LOCALS~1\Temp\MsgPlusUninstall.exe" /Cleanup
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\MSMSGS.EXE" /background
O4 - HKCU\..\Run: [X'nBeep] C:\Program Files\X'nBeep 1.1\XnBeep.exe
O4 - HKCU\..\Run: [Pando] "C:\Program Files\Pando Networks\Pando\Pando.exe" /Minimized
O4 - HKCU\..\Run: [Magentic] C:\PROGRA~1\Magentic\bin\Magentic.exe /c
O4 - HKCU\..\Run: [TrueDownloaderAutoStart] C:\Program Files\TrueDownloader\TrueDownloader.exe /silent
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: Outil de détection de support de Cyber-shot Viewer.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
O4 - Startup: Reboot.exe
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Crystal Clear\RocketDock\RocketDock.exe
O4 - Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Crystal Clear\UberIcon\UberIcon Manager.exe
O4 - Startup: Y'z Toolbar.lnk = C:\WINDOWS\BricoPacks\Crystal Clear\YzToolbar\YzToolBar.exe
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?611557c71b9f4b36b7268c86543e5259
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?611557c71b9f4b36b7268c86543e5259
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: {0835BC90-6ABC-4F52-A103-4FC3A61F2C33} (A18X Control) - http://www.albatross18.com/season2/cabs/A18X.ocx
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts...
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.mail.live.com/mail/w1/resources/MSNPUpld.ca...
O16 - DPF: {5F5F9FB8-878E-4455-95E0-F64B2314288A} (ijjiPlugin2 Class) - http://gamedownload.ijjimax.com/gamedownload/dist/hgsta...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Contro...
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://incredimailintl.oberon-media.com/online/online2/...
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://agbouuuuuu.spaces.live.com/PhotoUpload/MsnPUpld....
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst....
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
O16 - DPF: {D1D98C0F-A339-42AB-BD5F-EA0FF5D0E65F} (RockYou Image Uploader Control) - http://www.rockyou.com/RockYouImageUploader.cab
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://3dlifeplayer.dl.3dvia.com/player/install/install...
O17 - HKLM\System\CCS\Services\Tcpip\..\{0FE88AD7-F786-4FF7-BD3C-D7525390D43B}: NameServer = 213.150.193.1,213.150.201.25
O17 - HKLM\System\CS1\Services\Tcpip\..\{0FE88AD7-F786-4FF7-BD3C-D7525390D43B}: NameServer = 213.150.193.1,213.150.201.25
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe

--
End of file - 12421 bytes
5 Novembre 2007 20:30:51

bonsoir

Télécharge MSNFix.zip (!aur3n7[/#f]) sur ton Bureau.
Décompresse-le sur ton bureau (Clique-Droit/Extraire tout).
[#ff0000]
Il est indispensable que l'outil soit executé à partir du bureau.


Ouvre le dossier MSNFix puis double-clique sur MSNFix.bat.
- Exécute l'option R.
-- Si l'infection est détectée, presse une touche pour lancer le nettoyage.

[#ff0000]Si une erreur de suppression est détectée un message s'affichera demandant de redémarrer l'ordinateur afin de terminer les opérations.
Dans ce cas il suffit de redémarrer l'ordinateur manuellement.[/#f]

Poste le rapport situé dans le dossier MSNFix.
Le nom du rapport correspond au moment de sa création : date_heure.log

->Tutorial de Malekal<-
5 Novembre 2007 22:11:54

Re :) 
Voici le rapport de MSNfix:

MSNFix 1.562

C:\Documents and Settings\Hermes\Bureau\MSNFix
Fix exécuté le 05/11/2007 - 20:58:12,84 By Hermes
mode normal

************************ Recherche les fichiers présents

Aucun Fichier trouvé

************************ Recherche les dossiers présents

... C:\Program Files\Fichiers communs\Carlson\




************************ Suppression des fichiers



************************ Suppression des dossiers

.. OK ... C:\Program Files\Fichiers communs\Carlson\


************************ Nettoyage du registre



************************ Fichiers suspects

Aucun Fichier trouvé


Les fichiers et clés de registre supprimés ont été sauvegardés dans le fichier 05112007_21074948.zip


------------------------------------------------------------------------
Auteur : !aur3n7 Contact: http://changelog.fr
------------------------------------------------------------------------

--------------------------------------------- END ---------------------------------------------

5 Novembre 2007 22:27:00

ok

Télécharge SDFix(créé par AndyManchesta) et sauvegarde le sur ton Bureau.
***Si le lien ne fonctionne pas, essaie celui-ci : http://download.bleepingcomputer.com/andymanchesta/SDFi... ***

Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau. Redémarre ton ordinateur en mode sans échec en suivant la procédure que voici :
  • Redémarre ton ordinateur
  • Après avoir entendu l'ordinateur biper lors du démarrage, mais avant que l'icône Windows apparaisse, tapote la touche F8 (une pression par seconde).
  • A la place du chargement normal de Windows, un menu avec différentes options devrait apparaître.
  • Choisis la première option, pour exécuter Windows en mode sans échec, puis appuie sur "Entrée".
  • Choisis ton compte.
    Déroule la liste des instructions ci-dessous :
  • Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le script.
  • Appuie sur Y pour commencer le processus de nettoyage.
  • Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
  • Appuie sur une touche pour redémarrer le PC.
  • Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
  • Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
  • Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
  • Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
  • Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum, avec un nouveau log Hijackthis !
    10 Novembre 2007 11:44:14

    Bjr :) 

    Voici le rapport de SDFix

    catchme 0.3.1253 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2007-11-10 06:42:17
    Windows 5.1.2600 Service Pack 2 NTFS

    scanning hidden processes ...

    scanning hidden services & system hive ...

    scanning hidden registry entries ...

    scanning hidden files ...

    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{6039796C-F7AB-DE0C-99A1-DFB9E58334DA}\00\112-{9D35705E-E6A0-487F-B411-1789426E8705}-v100-{9D35705E-E6A0-487F-B411-1789426E8705}-v112-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 642 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{6039796C-F7AB-DE0C-99A1-DFB9E58334DA}\00\112-{9D35705E-E6A0-487F-B411-1789426E8705}-v100-{9D35705E-E6A0-487F-B411-1789426E8705}-v112-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 72 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{6039796C-F7AB-DE0C-99A1-DFB9E58334DA}\01\101-{9D35705E-E6A0-487F-B411-1789426E8705}-v101-{9D35705E-E6A0-487F-B411-1789426E8705}-v101-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 96 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{6039796C-F7AB-DE0C-99A1-DFB9E58334DA}\01\103-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v101-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v103-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 45588 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{6039796C-F7AB-DE0C-99A1-DFB9E58334DA}\01\103-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v101-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v103-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 3342 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{6039796C-F7AB-DE0C-99A1-DFB9E58334DA}\01\103-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v101-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v103-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 5096 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{6039796C-F7AB-DE0C-99A1-DFB9E58334DA}\01\13-{6039796C-F7AB-DE0C-99A1-DFB9E58334DA}-v1-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v13-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{6039796C-F7AB-DE0C-99A1-DFB9E58334DA}\03\110-{9D35705E-E6A0-487F-B411-1789426E8705}-v103-{9D35705E-E6A0-487F-B411-1789426E8705}-v110-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 822 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{6039796C-F7AB-DE0C-99A1-DFB9E58334DA}\03\110-{9D35705E-E6A0-487F-B411-1789426E8705}-v103-{9D35705E-E6A0-487F-B411-1789426E8705}-v110-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 88 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{6039796C-F7AB-DE0C-99A1-DFB9E58334DA}\40\40-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v40-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v40-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 52536 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{6039796C-F7AB-DE0C-99A1-DFB9E58334DA}\40\40-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v40-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v40-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 3846 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{6039796C-F7AB-DE0C-99A1-DFB9E58334DA}\40\40-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v40-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v40-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 5896 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{6039796C-F7AB-DE0C-99A1-DFB9E58334DA}\41\41-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v41-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v41-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 56928 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{6039796C-F7AB-DE0C-99A1-DFB9E58334DA}\41\41-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v41-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v41-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 4242 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{6039796C-F7AB-DE0C-99A1-DFB9E58334DA}\41\41-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v41-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v41-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 6320 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{6039796C-F7AB-DE0C-99A1-DFB9E58334DA}\75\75-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v75-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v75-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 53562 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{6039796C-F7AB-DE0C-99A1-DFB9E58334DA}\75\75-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v75-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v75-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 6016 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\cissoumar@hotmail.com\DFSR\Staging\CS{BFC53924-101E-F2C2-AA57-011244E0FB17}\01\11-{BFC53924-101E-F2C2-AA57-011244E0FB17}-v1-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v11-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\ergisjohnson@hotmail.com\DFSR\Staging\CS{39EA9B6C-8DF4-8F80-51EA-91303A7B2585}\01\132-{39EA9B6C-8DF4-8F80-51EA-91303A7B2585}-v1-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v132-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\ergisjohnson@hotmail.com\DFSR\Staging\CS{39EA9B6C-8DF4-8F80-51EA-91303A7B2585}\33\134-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v133-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v134-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 44166 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\ergisjohnson@hotmail.com\DFSR\Staging\CS{39EA9B6C-8DF4-8F80-51EA-91303A7B2585}\33\134-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v133-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v134-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 3234 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\ergisjohnson@hotmail.com\DFSR\Staging\CS{39EA9B6C-8DF4-8F80-51EA-91303A7B2585}\33\134-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v133-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v134-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 4920 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\ergisjohnson@hotmail.com\DFSR\Staging\CS{39EA9B6C-8DF4-8F80-51EA-91303A7B2585}\48\1148-{CD7F9434-E13B-4BFB-A285-AEA34006623A}-v1148-{CD7F9434-E13B-4BFB-A285-AEA34006623A}-v1148-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 38064 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\ergisjohnson@hotmail.com\DFSR\Staging\CS{39EA9B6C-8DF4-8F80-51EA-91303A7B2585}\48\1148-{CD7F9434-E13B-4BFB-A285-AEA34006623A}-v1148-{CD7F9434-E13B-4BFB-A285-AEA34006623A}-v1148-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 2874 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\ergisjohnson@hotmail.com\DFSR\Staging\CS{39EA9B6C-8DF4-8F80-51EA-91303A7B2585}\48\1148-{CD7F9434-E13B-4BFB-A285-AEA34006623A}-v1148-{CD7F9434-E13B-4BFB-A285-AEA34006623A}-v1148-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 4464 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\ergisjohnson@hotmail.com\DFSR\Staging\CS{39EA9B6C-8DF4-8F80-51EA-91303A7B2585}\68\1068-{CD7F9434-E13B-4BFB-A285-AEA34006623A}-v1068-{CD7F9434-E13B-4BFB-A285-AEA34006623A}-v1068-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 107652 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\ergisjohnson@hotmail.com\DFSR\Staging\CS{39EA9B6C-8DF4-8F80-51EA-91303A7B2585}\68\1068-{CD7F9434-E13B-4BFB-A285-AEA34006623A}-v1068-{CD7F9434-E13B-4BFB-A285-AEA34006623A}-v1068-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 7608 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\ergisjohnson@hotmail.com\DFSR\Staging\CS{39EA9B6C-8DF4-8F80-51EA-91303A7B2585}\68\1068-{CD7F9434-E13B-4BFB-A285-AEA34006623A}-v1068-{CD7F9434-E13B-4BFB-A285-AEA34006623A}-v1068-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 12008 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\ergisjohnson@hotmail.com\DFSR\Staging\CS{39EA9B6C-8DF4-8F80-51EA-91303A7B2585}\69\1069-{CD7F9434-E13B-4BFB-A285-AEA34006623A}-v1069-{CD7F9434-E13B-4BFB-A285-AEA34006623A}-v1069-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 47928 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\ergisjohnson@hotmail.com\DFSR\Staging\CS{39EA9B6C-8DF4-8F80-51EA-91303A7B2585}\69\1069-{CD7F9434-E13B-4BFB-A285-AEA34006623A}-v1069-{CD7F9434-E13B-4BFB-A285-AEA34006623A}-v1069-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 3468 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\ergisjohnson@hotmail.com\DFSR\Staging\CS{39EA9B6C-8DF4-8F80-51EA-91303A7B2585}\69\1069-{CD7F9434-E13B-4BFB-A285-AEA34006623A}-v1069-{CD7F9434-E13B-4BFB-A285-AEA34006623A}-v1069-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 5496 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\ergisjohnson@hotmail.com\DFSR\Staging\CS{39EA9B6C-8DF4-8F80-51EA-91303A7B2585}\70\161-{CD7F9434-E13B-4BFB-A285-AEA34006623A}-v1070-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v161-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 48900 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\ergisjohnson@hotmail.com\DFSR\Staging\CS{39EA9B6C-8DF4-8F80-51EA-91303A7B2585}\70\161-{CD7F9434-E13B-4BFB-A285-AEA34006623A}-v1070-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v161-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 5408 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\ergisjohnson@hotmail.com\DFSR\Staging\CS{39EA9B6C-8DF4-8F80-51EA-91303A7B2585}\71\162-{CD7F9434-E13B-4BFB-A285-AEA34006623A}-v1071-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v162-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 51006 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\ergisjohnson@hotmail.com\DFSR\Staging\CS{39EA9B6C-8DF4-8F80-51EA-91303A7B2585}\71\162-{CD7F9434-E13B-4BFB-A285-AEA34006623A}-v1071-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v162-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 5768 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\ergisjohnson@hotmail.com\DFSR\Staging\CS{39EA9B6C-8DF4-8F80-51EA-91303A7B2585}\72\1072-{CD7F9434-E13B-4BFB-A285-AEA34006623A}-v1072-{CD7F9434-E13B-4BFB-A285-AEA34006623A}-v1072-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 44958 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\ergisjohnson@hotmail.com\DFSR\Staging\CS{39EA9B6C-8DF4-8F80-51EA-91303A7B2585}\72\1072-{CD7F9434-E13B-4BFB-A285-AEA34006623A}-v1072-{CD7F9434-E13B-4BFB-A285-AEA34006623A}-v1072-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 3342 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\ergisjohnson@hotmail.com\DFSR\Staging\CS{39EA9B6C-8DF4-8F80-51EA-91303A7B2585}\72\1072-{CD7F9434-E13B-4BFB-A285-AEA34006623A}-v1072-{CD7F9434-E13B-4BFB-A285-AEA34006623A}-v1072-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 5184 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\ergisjohnson@hotmail.com\DFSR\Staging\CS{39EA9B6C-8DF4-8F80-51EA-91303A7B2585}\73\1073-{CD7F9434-E13B-4BFB-A285-AEA34006623A}-v1073-{CD7F9434-E13B-4BFB-A285-AEA34006623A}-v1073-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 3128 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\ergisjohnson@hotmail.com\DFSR\Staging\CS{39EA9B6C-8DF4-8F80-51EA-91303A7B2585}\74\1074-{CD7F9434-E13B-4BFB-A285-AEA34006623A}-v1074-{CD7F9434-E13B-4BFB-A285-AEA34006623A}-v1074-Partial.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 4096 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\henry-michell@hotmail.com\DFSR\Staging\CS{A003108F-C104-8504-DECE-CD720AD23178}\01\83-{A003108F-C104-8504-DECE-CD720AD23178}-v1-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v83-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\henry-michell@hotmail.com\DFSR\Staging\CS{A003108F-C104-8504-DECE-CD720AD23178}\84\84-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v84-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v84-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 47874 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\henry-michell@hotmail.com\DFSR\Staging\CS{A003108F-C104-8504-DECE-CD720AD23178}\84\84-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v84-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v84-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 3414 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\henry-michell@hotmail.com\DFSR\Staging\CS{A003108F-C104-8504-DECE-CD720AD23178}\84\84-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v84-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v84-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 5304 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\kouassi93@hotmail.com\DFSR\Staging\CS{1292A833-ABFA-0E97-149B-A121CBE40B95}\01\42-{1292A833-ABFA-0E97-149B-A121CBE40B95}-v1-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v42-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\kouassi93@hotmail.com\DFSR\Staging\CS{1292A833-ABFA-0E97-149B-A121CBE40B95}\45\45-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v45-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v45-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 984 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\kouassi93@hotmail.com\DFSR\Staging\CS{1292A833-ABFA-0E97-149B-A121CBE40B95}\45\45-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v45-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v45-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 128 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\kouassi93@hotmail.com\DFSR\Staging\CS{1292A833-ABFA-0E97-149B-A121CBE40B95}\49\49-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v49-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v49-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 1380 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\kouassi93@hotmail.com\DFSR\Staging\CS{1292A833-ABFA-0E97-149B-A121CBE40B95}\49\49-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v49-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v49-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 160 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\kouassi93@hotmail.com\DFSR\Staging\CS{1292A833-ABFA-0E97-149B-A121CBE40B95}\54\54-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v54-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v54-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 1074 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\kouassi93@hotmail.com\DFSR\Staging\CS{1292A833-ABFA-0E97-149B-A121CBE40B95}\54\54-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v54-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v54-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 120 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\kouassi93@hotmail.com\DFSR\Staging\CS{1292A833-ABFA-0E97-149B-A121CBE40B95}\56\56-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v56-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v56-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 120 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\kouassi93@hotmail.com\DFSR\Staging\CS{1292A833-ABFA-0E97-149B-A121CBE40B95}\56\56-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v56-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v56-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 128 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\kouassi93@hotmail.com\DFSR\Staging\CS{1292A833-ABFA-0E97-149B-A121CBE40B95}\57\57-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v57-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v57-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 1254 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\kouassi93@hotmail.com\DFSR\Staging\CS{1292A833-ABFA-0E97-149B-A121CBE40B95}\57\57-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v57-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v57-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 144 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\kouassi93@hotmail.com\DFSR\Staging\CS{1292A833-ABFA-0E97-149B-A121CBE40B95}\74\74-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v74-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v74-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 27498 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\kouassi93@hotmail.com\DFSR\Staging\CS{1292A833-ABFA-0E97-149B-A121CBE40B95}\74\74-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v74-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v74-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 2028 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\kouassi93@hotmail.com\DFSR\Staging\CS{1292A833-ABFA-0E97-149B-A121CBE40B95}\74\74-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v74-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v74-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 3096 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\kouassiwilliam3@hotmail.com\DFSR\Staging\CS{C2E2F3AD-DE1D-D15A-8D9D-EA3019AE245F}\83\170-{284D5D76-AC2F-4982-BB9C-E62C1AA40940}-v83-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v170-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 1490736 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\kouassiwilliam3@hotmail.com\DFSR\Staging\CS{C2E2F3AD-DE1D-D15A-8D9D-EA3019AE245F}\83\170-{284D5D76-AC2F-4982-BB9C-E62C1AA40940}-v83-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v170-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 165888 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\maryaste92@hotmail.com\DFSR\Staging\CS{DD5A4E85-F74E-383E-0355-043A7D473856}\01\12-{DD5A4E85-F74E-383E-0355-043A7D473856}-v1-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v12-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\maryaste92@hotmail.com\DFSR\Staging\CS{DD5A4E85-F74E-383E-0355-043A7D473856}\76\76-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v76-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v76-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 49710 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\maryaste92@hotmail.com\DFSR\Staging\CS{DD5A4E85-F74E-383E-0355-043A7D473856}\76\76-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v76-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v76-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 3288 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\maryaste92@hotmail.com\DFSR\Staging\CS{DD5A4E85-F74E-383E-0355-043A7D473856}\76\76-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v76-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v76-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 5536 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\maryaste92@hotmail.com\DFSR\Staging\CS{DD5A4E85-F74E-383E-0355-043A7D473856}\77\77-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v77-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v77-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 60996 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\maryaste92@hotmail.com\DFSR\Staging\CS{DD5A4E85-F74E-383E-0355-043A7D473856}\77\77-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v77-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v77-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 4242 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\maryaste92@hotmail.com\DFSR\Staging\CS{DD5A4E85-F74E-383E-0355-043A7D473856}\77\77-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v77-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v77-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 6824 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\nfabien2100@hotmail.com\DFSR\Staging\CS{89C8869D-45EF-5503-34F8-1677B2A06C4B}\01\136-{89C8869D-45EF-5503-34F8-1677B2A06C4B}-v1-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v136-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\nfabien2100@hotmail.com\DFSR\Staging\CS{89C8869D-45EF-5503-34F8-1677B2A06C4B}\37\142-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v137-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v142-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 27498 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\nfabien2100@hotmail.com\DFSR\Staging\CS{89C8869D-45EF-5503-34F8-1677B2A06C4B}\37\142-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v137-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v142-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 2028 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\nfabien2100@hotmail.com\DFSR\Staging\CS{89C8869D-45EF-5503-34F8-1677B2A06C4B}\37\142-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v137-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v142-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 3096 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\nfabien2100@hotmail.com\DFSR\Staging\CS{89C8869D-45EF-5503-34F8-1677B2A06C4B}\40\148-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v140-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v148-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 104556 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\nfabien2100@hotmail.com\DFSR\Staging\CS{89C8869D-45EF-5503-34F8-1677B2A06C4B}\40\148-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v140-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v148-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 7356 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\nfabien2100@hotmail.com\DFSR\Staging\CS{89C8869D-45EF-5503-34F8-1677B2A06C4B}\40\148-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v140-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v148-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 11720 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\nfabien2100@hotmail.com\DFSR\Staging\CS{89C8869D-45EF-5503-34F8-1677B2A06C4B}\44\153-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v144-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v153-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 55164 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\nfabien2100@hotmail.com\DFSR\Staging\CS{89C8869D-45EF-5503-34F8-1677B2A06C4B}\44\153-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v144-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v153-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 6120 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\nfabien2100@hotmail.com\DFSR\Staging\CS{89C8869D-45EF-5503-34F8-1677B2A06C4B}\54\157-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v154-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v157-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 53562 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\katchinhermes@hotmail.fr\SharingMetadata\nfabien2100@hotmail.com\DFSR\Staging\CS{89C8869D-45EF-5503-34F8-1677B2A06C4B}\54\157-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v154-{6D8EE41E-EE4A-4F62-91BA-B948169E269B}-v157-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 6016 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\34\134-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v134-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v134-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 52410 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\34\134-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v134-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v134-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 5768 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\00\100-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v100-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v100-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 28722 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\00\100-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v100-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v100-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 3208 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\01\101-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v101-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v101-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 61068 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\01\101-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v101-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v101-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 6768 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\01\30-{FC89350B-72BA-3F32-6FBE-D8264E23B878}-v1-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v30-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\02\102-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v102-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v102-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 49710 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\02\102-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v102-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v102-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 5536 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\03\103-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v103-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v103-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 41538 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\03\103-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v103-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v103-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 4672 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\04\104-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v104-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v104-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 49008 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\04\104-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v104-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v104-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 5424 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\05\105-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v105-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v105-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 48666 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\05\105-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v105-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v105-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 5688 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\06\106-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v106-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v106-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 54318 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\06\106-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v106-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v106-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 6120 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\07\107-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v107-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v107-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 13998 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\07\107-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v107-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v107-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1552 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\08\108-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v108-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v108-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 47460 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\08\108-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v108-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v108-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 5312 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\09\109-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v109-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v109-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 47802 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\09\109-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v109-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v109-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 5672 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\10\110-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v110-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v110-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 53436 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\10\110-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v110-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v110-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 6008 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\11\125-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v111-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v125-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 60690 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\11\125-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v111-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v125-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 6784 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\23\123-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v123-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v123-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 59880 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\23\123-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v123-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v123-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 6640 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\24\124-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v124-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v124-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 35076 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\24\124-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v124-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v124-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 3904 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\26\126-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v126-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v126-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 22134 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\26\126-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v126-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v126-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 2416 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\27\127-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v127-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v127-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 47064 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\27\127-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v127-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v127-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 5256 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\28\128-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v128-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v128-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 44472 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\28\128-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v128-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v128-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 5368 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\29\129-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v129-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v129-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 101046 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\29\129-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v129-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v129-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 11208 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\30\130-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v130-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v130-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 24870 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\30\130-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v130-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v130-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 2792 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\31\31-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v31-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v31-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 44472 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\31\31-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v31-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v31-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 3198 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\31\31-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v31-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v31-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 5368 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\32\132-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v132-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v132-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 46398 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\32\132-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v132-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v132-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 5168 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\32\32-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v32-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v32-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 30720 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\32\32-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v32-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v32-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 2244 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\32\32-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v32-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v32-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 3400 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\33\133-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v133-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v133-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 31026 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\33\133-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v133-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v133-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 3400 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\35\135-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v135-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v135-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 31170 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\35\135-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v135-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v135-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 3456 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\36\136-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v136-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v136-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 48612 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\36\136-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v136-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v136-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 5360 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\37\137-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v137-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v137-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 34932 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\37\137-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v137-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v137-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 3864 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\38\138-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v138-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v138-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 45498 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\38\138-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v138-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v138-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 5088 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\39\139-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v139-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v139-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 39612 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\39\139-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v139-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v139-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 4416 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\40\140-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v140-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v140-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 73398 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\40\140-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v140-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v140-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8224 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\46\146-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v146-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v146-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 21324 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\46\146-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v146-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v146-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 2384 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\47\147-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v147-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v147-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 19092 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\47\147-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v147-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v147-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 2120 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\48\148-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v148-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v148-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 22620 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\48\148-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v148-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v148-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 2552 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\49\149-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v149-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v149-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 21630 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\49\149-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v149-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v149-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 2400 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\50\150-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v150-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v150-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 21594 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\50\150-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v150-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v150-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 2400 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\51\151-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v151-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v151-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 25716 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\51\151-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v151-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v151-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 2800 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\52\152-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v152-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v152-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 21468 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\52\152-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v152-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v152-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 2344 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\53\153-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v153-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v153-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 25302 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\53\153-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v153-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v153-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 2744 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\54\154-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v154-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v154-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 15168 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\54\154-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v154-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v154-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1704 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\55\155-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v155-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v155-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 19380 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\55\155-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v155-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v155-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 2136 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\56\156-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v156-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v156-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 21810 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\56\156-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v156-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v156-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 2416 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\57\157-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v157-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v157-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 16860 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\57\157-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v157-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v157-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1888 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\58\158-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v158-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v158-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 20928 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\58\158-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v158-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v158-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 2320 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\59\159-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v159-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v159-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 22440 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouassihermes@hotmail.com\SharingMetadata\anienjoy@hotmail.fr\DFSR\Staging\CS{FC89350B-72BA-3F32-6FBE-D8264E23B878}\59\159-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v159-{7CD20495-A67A-4E83-9D1D-7D3ED9075EEC}-v159-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 2464 bytes hidden from API
    C:\Documents and Settings\Hermes\Local Settings\Application Data\Microsoft\Messenger\kouas
    10 Novembre 2007 11:46:31

    Re
    et le nouveau rapport d'Hijackthis

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 10:44:45, on 10/11/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16544)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    C:\WINDOWS\Explorer.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Spyware Doctor\svcntaux.exe
    C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
    C:\Program Files\Spyware Doctor\swdsvc.exe
    C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
    C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\Fichiers communs\Teleca Shared\CapabilityManager.exe
    C:\Program Files\Spyware Doctor\SDTrayApp.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\X'nBeep 1.1\XnBeep.exe
    C:\Program Files\Pando Networks\Pando\Pando.exe
    C:\WINDOWS\system32\sistray.exe
    C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
    C:\WINDOWS\BricoPacks\Crystal Clear\RocketDock\RocketDock.exe
    C:\WINDOWS\BricoPacks\Crystal Clear\UberIcon\UberIcon Manager.exe
    C:\WINDOWS\BricoPacks\Crystal Clear\YzToolbar\YzToolBar.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\WINDOWS\System32\alg.exe
    C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
    C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
    C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
    C:\Documents and Settings\Hermes\Bureau\Utilitaires\HijackThis.exe
    C:\WINDOWS\System32\wbem\wmiprvse.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ci/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Config\lsass.exe
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {7411F8BA-29A3-3216-9DE7-024AC0AAB9F6} - C:\WINDOWS\System32\viyjhai.dll (file missing)
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O2 - BHO: IEHlprObj Class - {CE7C3CF0-4B15-11D1-ABED-709549C10111} - C:\Program Files\TrueDownloader\truedownloaderie.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: Adssite Toolbar - {41C29B07-6F91-4966-91BE-2E2841643C83} - C:\Program Files\Adssite Advanced Toolbar\toolbar.dll (file missing)
    O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
    O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
    O4 - HKLM\..\Run: [antihost] C:\WINDOWS\system32\ahr.exe
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [X'nBeep] C:\Program Files\X'nBeep 1.1\XnBeep.exe
    O4 - HKCU\..\Run: [Pando] "C:\Program Files\Pando Networks\Pando\Pando.exe" /Minimized
    O4 - HKCU\..\Run: [Magentic] C:\PROGRA~1\Magentic\bin\Magentic.exe /c
    O4 - HKCU\..\Run: [TrueDownloaderAutoStart] C:\Program Files\TrueDownloader\TrueDownloader.exe /silent
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O4 - Startup: Outil de détection de support de Cyber-shot Viewer.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
    O4 - Startup: Reboot.exe
    O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Crystal Clear\RocketDock\RocketDock.exe
    O4 - Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Crystal Clear\UberIcon\UberIcon Manager.exe
    O4 - Startup: Y'z Toolbar.lnk = C:\WINDOWS\BricoPacks\Crystal Clear\YzToolbar\YzToolBar.exe
    O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?611557c71b9f4b36b7268c86543e5259
    O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?611557c71b9f4b36b7268c86543e5259
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O16 - DPF: {0835BC90-6ABC-4F52-A103-4FC3A61F2C33} (A18X Control) - http://www.albatross18.com/season2/cabs/A18X.ocx
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts...
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.mail.live.com/mail/w1/resources/MSNPUpld.ca...
    O16 - DPF: {5F5F9FB8-878E-4455-95E0-F64B2314288A} (ijjiPlugin2 Class) - http://gamedownload.ijjimax.com/gamedownload/dist/hgsta...
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Contro...
    O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://incredimailintl.oberon-media.com/online/online2/...
    O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://agbouuuuuu.spaces.live.com/PhotoUpload/MsnPUpld....
    O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst....
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
    O16 - DPF: {D1D98C0F-A339-42AB-BD5F-EA0FF5D0E65F} (RockYou Image Uploader Control) - http://www.rockyou.com/RockYouImageUploader.cab
    O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://3dlifeplayer.dl.3dvia.com/player/install/install...
    O17 - HKLM\System\CCS\Services\Tcpip\..\{0FE88AD7-F786-4FF7-BD3C-D7525390D43B}: NameServer = 213.150.193.1,213.150.201.25
    O17 - HKLM\System\CS1\Services\Tcpip\..\{0FE88AD7-F786-4FF7-BD3C-D7525390D43B}: NameServer = 213.150.193.1,213.150.201.25
    O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
    O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
    O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe

    --
    End of file - 11793 bytes
    10 Novembre 2007 14:01:08

    bonjour

    tu as mal utilisé SDFix, il faut que tu recommences en suivant exactement la procédure, de plus, tu devras poster le rapport en entier .
    le début ressemblera à ça:
    Citation :
    SDFix: Version 1.113

    Run by Administrateur on 07/11/2007 at 09:24

    Microsoft Windows XP [version 5.1.2600]

    Running From: C:\DOCUME~1\ADMINI~1\Bureau\NOUVEA~1\SDFix

    Safe Mode:
    10 Novembre 2007 17:07:24

    Daccord

    Voila le rapport de SDFix:




    SDFix: Version 1.113

    Run by Hermes on 10/11/2007 at 15:45

    Microsoft Windows XP [version 5.1.2600]

    Running From: C:\SDFix

    Safe Mode:
    Checking Services:


    Restoring Windows Registry Values
    Restoring Windows Default Hosts File

    Rebooting...


    Normal Mode:
    Checking Files:

    Trojan Files Found:

    C:\Program Files\Fichiers communs\Yazzle1162OinUninstaller.exe - Deleted



    Removing Temp Files...

    ADS Check:

    C:\WINDOWS
    No streams found.

    C:\WINDOWS\system32
    No streams found.

    C:\WINDOWS\system32\svchost.exe
    No streams found.

    C:\WINDOWS\system32\ntoskrnl.exe
    No streams found.



    Final Check:

    catchme 0.3.1253 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2007-11-10 15:59:03
    Windows 5.1.2600 Service Pack 2 NTFS

    detected NTDLL code modification:
    ZwClose

    scanning hidden processes ...

    IPC error: 2 Le fichier spécifié est introuvable.
    scanning hidden services & system hive ...

    scanning hidden registry entries ...

    scanning hidden files ...

    scan completed successfully
    hidden processes: 0
    hidden services: 0
    hidden files: 0


    Remaining Services:
    ------------------



    Authorized Application Key Export:

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"="C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe:*:D isabled:Yahoo! Messenger"
    "C:\\Program Files\\Internet Explorer\\IEXPLORE.EXE"="C:\\Program Files\\Internet Explorer\\IEXPLORE.EXE:*:Enabled:Internet Explorer"
    "C:\\Program Files\\Microsoft Games\\Motocross Madness 2 Trial\\mcm2.exe"="C:\\Program Files\\Microsoft Games\\Motocross Madness 2 Trial\\mcm2.exe:*:D isabled:Microsoft© Motocross Madness 2"
    "C:\\Program Files\\Morpheus\\Morpheus.exe"="C:\\Program Files\\Morpheus\\Morpheus.exe:*:Enabled:M5Shell"
    "C:\\Program Files\\devolo\\informer\\devinf.exe"="C:\\Program Files\\devolo\\informer\\devinf.exe:*:Enabled:MicroLink Informer"
    "C:\\Program Files\\Pando Networks\\Pando\\pando.exe"="C:\\Program Files\\Pando Networks\\Pando\\pando.exe:*:Enabled:p ando"
    "C:\\Program Files\\BitComet\\BitComet.exe"="C:\\Program Files\\BitComet\\BitComet.exe:*:Enabled:BitComet - a BitTorrent Client"
    "C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Messenger"
    "C:\\Program Files\\Eidos Interactive\\Pyro Studios\\Praetorians\\Praetorians.exe"="C:\\Program Files\\Eidos Interactive\\Pyro Studios\\Praetorians\\Praetorians.exe:*:D isabled:p raetorians"
    "C:\\WINDOWS\\system32\\dplaysvr.exe"="C:\\WINDOWS\\system32\\dplaysvr.exe:*:D isabled:Microsoft DirectPlay Helper"
    "C:\\Documents and Settings\\Hermes\\Bureau\\Fichiers inutilis‚s\\New Emule\\emule.exe"="C:\\Documents and Settings\\Hermes\\Bureau\\Fichiers inutilis‚s\\New Emule\\emule.exe:*:D isabled:eMule"
    "C:\\Program Files\\LimeWire\\LimeWire.exe"="C:\\Program Files\\LimeWire\\LimeWire.exe:*:Enabled:LimeWire"
    "C:\\Documents and Settings\\Hermes\\Bureau\\Utilitaires\\Emule Extreme\\emule.exe"="C:\\Documents and Settings\\Hermes\\Bureau\\Utilitaires\\Emule Extreme\\emule.exe:*:D isabled:eMule"
    "C:\\Documents and Settings\\Hermes\\Bureau\\racer053b4\\racer.exe"="C:\\Documents and Settings\\Hermes\\Bureau\\racer053b4\\racer.exe:*:Enabled:racer"
    "D:\\racer053b4\\racer.exe"="D:\\racer053b4\\racer.exe:*:Enabled:racer"
    "D:\\Spring\\spring.exe"="D:\\Spring\\spring.exe:*:Enabled:spring"
    "D:\\Nouveau dossier\\tremulous.exe"="D:\\Nouveau dossier\\tremulous.exe:*:Enabled:tremulous"
    "C:\\Program Files\\Motorola\\Software Update\\msu.exe"="C:\\Program Files\\Motorola\\Software Update\\msu.exe:*:Enabled:msu"
    "C:\\Program Files\\Magentic\\bin\\MgImp.exe"="C:\\Program Files\\Magentic\\bin\\MgImp.exe:*:Enabled:Magentic"
    "C:\\Program Files\\Magentic\\bin\\Magentic.exe"="C:\\Program Files\\Magentic\\bin\\Magentic.exe:*:Enabled:Magentic"
    "C:\\Program Files\\Magentic\\bin\\MgApp.exe"="C:\\Program Files\\Magentic\\bin\\MgApp.exe:*:Enabled:Magentic"
    "C:\\Program Files\\Internet Download Manager\\IDMan.exe"="C:\\Program Files\\Internet Download Manager\\IDMan.exe:*:Enabled:Internet Download Manager (IDM)"
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
    "C:\\Documents and Settings\\Hermes\\Bureau\\Packmatronic 1.0 CrystalXP.exe"="C:\\Documents and Settings\\Hermes\\Bureau\\Packmatronic 1.0 CrystalXP.exe:*:Enabled:Messenger Content Installer"
    "C:\\Program Files\\eMule\\emule.exe"="C:\\Program Files\\eMule\\emule.exe:*:D isabled:eMule"
    "C:\\Documents and Settings\\Hermes\\Bureau\\Fichiers inutilis‚s\\Emule Extreme\\emule.exe"="C:\\Documents and Settings\\Hermes\\Bureau\\Fichiers inutilis‚s\\Emule Extreme\\emule.exe:*:D isabled:eMule"
    "D:\\GOA\\Gunbound\\GunBound.gme"="D:\\GOA\\Gunbound\\GunBound.gme:*:D isabled:GunBound"
    "C:\\Documents and Settings\\Hermes\\Bureau\\GOA\\Gunbound\\GunBound.gme"="C:\\Documents and Settings\\Hermes\\Bureau\\GOA\\Gunbound\\GunBound.gme:*:D isabled:GunBound"
    "C:\\Program Files\\iMesh Applications\\iMesh\\iMesh.exe"="C:\\Program Files\\iMesh Applications\\iMesh\\iMesh.exe:*:D isabled:iMesh"
    "C:\\Program Files\\IncrediMail\\bin\\IncMail.exe"="C:\\Program Files\\IncrediMail\\bin\\IncMail.exe:*:D isabled:IncrediMail"
    "C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe"="C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe:*:D isabled:IncrediMail"
    "C:\\Program Files\\IncrediMail\\bin\\ImApp.exe"="C:\\Program Files\\IncrediMail\\bin\\ImApp.exe:*:D isabled:IncrediMail"
    "C:\\Documents and Settings\\Hermes\\Bureau\\incredimail_install.exe"="C:\\Documents and Settings\\Hermes\\Bureau\\incredimail_install.exe:*:D isabled:IncrediMail Installer"
    "C:\\Program Files\\Xfire\\xfire.exe"="C:\\Program Files\\Xfire\\xfire.exe:*:D isabled:Xfire"
    "C:\\Documents and Settings\\Hermes\\Bureau\\Nouveau dossier\\RocketRacer\\RocketRacer.exe"="C:\\Documents and Settings\\Hermes\\Bureau\\Nouveau dossier\\RocketRacer\\RocketRacer.exe:*:Enabled:RocketRacer"
    "C:\\WINDOWS\\system32\\rtcshare.exe"="C:\\WINDOWS\\system32\\rtcshare.exe:*:Enabled:p artage de l'application RTC"
    "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
    "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
    "C:\\WINDOWS\\system32\\dpvsetup.exe"="C:\\WINDOWS\\system32\\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
    "C:\\WINDOWS\\system32\\rundll32.exe"="C:\\WINDOWS\\system32\\rundll32.exe:*:Enabled:Ex‚cuter une DLL en tant qu'application"
    "C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
    "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
    "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
    "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

    Remaining Files:
    ---------------

    File Backups: - C:\SDFix\backups\backups.zip

    Files with Hidden Attributes:

    Fri 2 Feb 2007 4,348 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
    Tue 16 Oct 2007 24,064 ...H. --- "C:\Documents and Settings\Hermes\Bureau\~WRL0038.tmp"
    Tue 16 Oct 2007 26,624 ...H. --- "C:\Documents and Settings\Hermes\Bureau\~WRL3536.tmp"
    Tue 16 Oct 2007 26,112 ...H. --- "C:\Documents and Settings\Hermes\Bureau\~WRL3886.tmp"
    Mon 22 Jul 2002 418,816 ...HR --- "C:\WINDOWS\system32\Tools\All.exe"
    Fri 19 Jul 2002 390,144 ...HR --- "C:\WINDOWS\system32\Tools\Change.exe"
    Fri 19 Jul 2002 574,464 ...HR --- "C:\WINDOWS\system32\Tools\CheckPath.exe"
    Tue 20 Aug 2002 430,592 ...HR --- "C:\WINDOWS\system32\Tools\Counter.exe"
    Tue 23 Jul 2002 390,656 ...HR --- "C:\WINDOWS\system32\Tools\DelFolders.exe"
    Fri 22 Nov 2002 399,872 ...HR --- "C:\WINDOWS\system32\Tools\DirectSetup.exe"
    Fri 19 Jul 2002 388,096 ...HR --- "C:\WINDOWS\system32\Tools\RegClean.exe"
    Fri 19 Jul 2002 388,608 ...HR --- "C:\WINDOWS\system32\Tools\Regexe.exe"
    Mon 2 Dec 2002 431,616 ...HR --- "C:\WINDOWS\system32\Tools\Restart.exe"
    Fri 19 Jul 2002 388,096 ...HR --- "C:\WINDOWS\system32\Tools\RunRegexe.exe"
    Tue 13 Feb 2007 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"
    Wed 26 Sep 2007 128,704,971 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\778fd2fc3fe6b905e366b5ddbba384c8\BIT1.tmp"
    Wed 4 Oct 2006 3,072,000 A..H. --- "C:\Documents and Settings\Hermes\Application Data\U3\temp\Launchpad Removal.exe"
    Fri 2 Feb 2007 4,348 ...H. --- "C:\Documents and Settings\Hermes\Mes documents\Ma musique\Sauvegarde de la licence\drmv1key.bak"
    Fri 2 Feb 2007 20 A..H. --- "C:\Documents and Settings\Hermes\Mes documents\Ma musique\Sauvegarde de la licence\drmv1lic.bak"
    Fri 2 Feb 2007 9,656 A.SH. --- "C:\Documents and Settings\Hermes\Mes documents\Ma musique\Sauvegarde de la licence\drmv2key.bak"
    Fri 7 Sep 2007 3,324,919 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\e858426bd5ad6e5e6df8fd258cdb8155\download\BIT8.tmp"

    Finished!
    10 Novembre 2007 17:08:43

    Et celui de Hijackthis:

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 16:06:24, on 10/11/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16544)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Spyware Doctor\svcntaux.exe
    C:\Program Files\Spyware Doctor\swdsvc.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\System32\alg.exe
    C:\Program Files\Spyware Doctor\SDTrayApp.exe
    C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
    C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
    C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
    C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
    C:\Program Files\Fichiers communs\Teleca Shared\CapabilityManager.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\X'nBeep 1.1\XnBeep.exe
    C:\Program Files\Pando Networks\Pando\Pando.exe
    C:\WINDOWS\system32\sistray.exe
    C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
    C:\WINDOWS\BricoPacks\Crystal Clear\RocketDock\RocketDock.exe
    C:\WINDOWS\BricoPacks\Crystal Clear\UberIcon\UberIcon Manager.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
    C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
    C:\Documents and Settings\Hermes\Bureau\Utilitaires\HijackThis.exe
    C:\Program Files\Windows Live\Messenger\usnsvc.exe
    C:\WINDOWS\System32\wbem\wmiprvse.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ci/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {7411F8BA-29A3-3216-9DE7-024AC0AAB9F6} - C:\WINDOWS\System32\viyjhai.dll (file missing)
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O2 - BHO: IEHlprObj Class - {CE7C3CF0-4B15-11D1-ABED-709549C10111} - C:\Program Files\TrueDownloader\truedownloaderie.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: Adssite Toolbar - {41C29B07-6F91-4966-91BE-2E2841643C83} - C:\Program Files\Adssite Advanced Toolbar\toolbar.dll (file missing)
    O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
    O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
    O4 - HKLM\..\Run: [antihost] C:\WINDOWS\system32\ahr.exe
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [X'nBeep] C:\Program Files\X'nBeep 1.1\XnBeep.exe
    O4 - HKCU\..\Run: [Pando] "C:\Program Files\Pando Networks\Pando\Pando.exe" /Minimized
    O4 - HKCU\..\Run: [Magentic] C:\PROGRA~1\Magentic\bin\Magentic.exe /c
    O4 - HKCU\..\Run: [TrueDownloaderAutoStart] C:\Program Files\TrueDownloader\TrueDownloader.exe /silent
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O4 - Startup: Outil de détection de support de Cyber-shot Viewer.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
    O4 - Startup: Reboot.exe
    O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Crystal Clear\RocketDock\RocketDock.exe
    O4 - Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Crystal Clear\UberIcon\UberIcon Manager.exe
    O4 - Startup: Y'z Toolbar.lnk = C:\WINDOWS\BricoPacks\Crystal Clear\YzToolbar\YzToolBar.exe
    O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?611557c71b9f4b36b7268c86543e5259
    O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?611557c71b9f4b36b7268c86543e5259
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O16 - DPF: {0835BC90-6ABC-4F52-A103-4FC3A61F2C33} (A18X Control) - http://www.albatross18.com/season2/cabs/A18X.ocx
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts...
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.mail.live.com/mail/w1/resources/MSNPUpld.ca...
    O16 - DPF: {5F5F9FB8-878E-4455-95E0-F64B2314288A} (ijjiPlugin2 Class) - http://gamedownload.ijjimax.com/gamedownload/dist/hgsta...
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Contro...
    O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://incredimailintl.oberon-media.com/online/online2/...
    O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://agbouuuuuu.spaces.live.com/PhotoUpload/MsnPUpld....
    O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst....
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
    O16 - DPF: {D1D98C0F-A339-42AB-BD5F-EA0FF5D0E65F} (RockYou Image Uploader Control) - http://www.rockyou.com/RockYouImageUploader.cab
    O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://3dlifeplayer.dl.3dvia.com/player/install/install...
    O17 - HKLM\System\CCS\Services\Tcpip\..\{0FE88AD7-F786-4FF7-BD3C-D7525390D43B}: NameServer = 213.150.193.1,213.150.201.25
    O17 - HKLM\System\CS1\Services\Tcpip\..\{0FE88AD7-F786-4FF7-BD3C-D7525390D43B}: NameServer = 213.150.193.1,213.150.201.25
    O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
    O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
    O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe

    --
    End of file - 11771 bytes
    10 Novembre 2007 17:10:29

    Merci pour votre aide //même si je sais que je vous fatigue!!!
    10 Novembre 2007 21:21:39

    re
    Citation :
    Merci pour votre aide //même si je sais que je vous fatigue!!!

    pas de problème :) 

    ~ Télécharge Clean de Malekal
    http://www.malekal.com/download/clean.zip

    Enregistre-le sur ton bureau et dézippe-le
    Cela va créer un dossier clean.
    Double-clic sur ce dossier clean, tu y trouveras dedans plusieurs fichiers.
    Double-clic sur clean.cmd.
    Un menu va apparaître, choisis l'option 1 en appuyant sur la touche 1 de ton clavier.
    Clean va travailler.
    Poste le contenu du rapport généré en C:\rapport_clean.txt.

    10 Novembre 2007 22:21:21

    Re:) 
    Le rapport de CLean:

    10/11/2007 a 21:03:01,73

    *** Recherche des fichiers dans C:

    *** Recherche des fichiers dans C:\WINDOWS\

    *** Recherche des fichiers dans C:\WINDOWS\system32
    "C:\WINDOWS\Downloaded Program Files\CONFLICT.1" FOUND

    *** Recherche des fichiers dans C:\Program Files
    "C:\Program Files\Adssite Advanced Toolbar\" FOUND
    "C:\Program Files\Adssite Games Collection\" FOUND
    "C:\Program Files\Adverts\" FOUND
    "C:\Program Files\GameHouse\" FOUND
    "C:\Program Files\Viewpoint\" FOUND
    10 Novembre 2007 22:50:24

    ok

    ~Télécharge OTMoveIt (d'OldTimer). Sauvegarde-le sur ton Bureau.

    ~Lance Hijackthis “Do a system scan only”.
    Coche les lignes qui suivent si encore présentes et uniquement celles-là.

    O2 - BHO: (no name) - {7411F8BA-29A3-3216-9DE7-024AC0AAB9F6} - C:\WINDOWS\System32\viyjhai.dll (file missing)
    O3 - Toolbar: Adssite Toolbar - {41C29B07-6F91-4966-91BE-2E2841643C83} - C:\Program Files\Adssite Advanced Toolbar\toolbar.dll (file missing)
    O4 - HKLM\..\Run: [antihost] C:\WINDOWS\system32\ahr.exe
    O4 - Startup: Reboot.exe
    O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/n [...] 0.15-3.cab
    O16 - DPF: {5F5F9FB8-878E-4455-95E0-F64B2314288A} (ijjiPlugin2 Class) - http://gamedownload.ijjimax.com/ga [...] n11USA.cab
    O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://agbouuuuuu.spaces.live.com/ [...] nPUpld.cab
    O16 - DPF: {D1D98C0F-A339-42AB-BD5F-EA0FF5D0E65F} (RockYou Image Uploader Control) - http://www.rockyou.com/RockYouImageUploader.cab


    Clique sur Fix checked (en bas à gauche)


    Sélectionne TOUS les emplacements en gras ci-dessous :

    C:\Program Files\Adssite Advanced Toolbar
    C:\Program Files\Adssite Games Collection
    C:\Program Files\Adverts
    C:\Program Files\GameHouse
    C:\Program Files\Viewpoint
    C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Démarrage\Reboot.exe
    C:\WINDOWS\system32\ahr.exe


    ---> Clique-droit puis Copier (ou Ctrl+C)

    Double-clique sur OTMoveIt.exe afin de le lancer.
    Fais un Clique-droit sur le cadre de gauche puis choisis Coller (ou Ctrl+V).
    Clique maintenant sur [#ff0000]MoveIt![/#f]

    [#ff0000]Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
    Accepte en cliquant sur YES.[/#f]

    Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
    Le nom du rapport correspond au moment de sa création : date_heure.log

    ->Informations sur le logiciel<-






    12 Novembre 2007 19:53:37

    Bsr:) 

    Dsl mais ces fichiers n'exsite pas

    C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Démarrage\Reboot.exe
    C:\WINDOWS\system32\ahr.exe
    12 Novembre 2007 21:30:03

    bonsoir
    je ne te demande pas d'aller chercher les fichiers manuellement, tu fais un copier (du forum) et un coller (dans OTMoveIt)
    tu fais la manip comme je l'explique et tu postes le rapport stp. :) 
    12 Novembre 2007 21:55:31

    Re
    aaah ok:) 
    Voila le rapport de OT_MoveIt:


    C:\Program Files\Adssite Advanced Toolbar moved successfully.
    C:\Program Files\Adssite Games Collection moved successfully.
    C:\Program Files\Adverts moved successfully.
    C:\Program Files\GameHouse\Collapse moved successfully.
    C:\Program Files\GameHouse moved successfully.
    C:\Program Files\Viewpoint\Viewpoint Media Player\Resources moved successfully.
    C:\Program Files\Viewpoint\Viewpoint Media Player\NewComponents moved successfully.
    C:\Program Files\Viewpoint\Viewpoint Media Player\DownloadedComponents moved successfully.
    C:\Program Files\Viewpoint\Viewpoint Media Player\Components moved successfully.
    C:\Program Files\Viewpoint\Viewpoint Media Player moved successfully.
    C:\Program Files\Viewpoint moved successfully.
    File/Folder C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Démarrage\Reboot.exe not found.
    File/Folder C:\WINDOWS\system32\ahr.exe not found.

    Created on 11/12/2007 20:51:27
    12 Novembre 2007 22:04:27

    parfait

    reposte un log hijackthis maintenant :) 
    15 Novembre 2007 10:36:56

    Bjr
    Voila:

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 09:36:24, on 15/11/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16544)
    Boot mode: Safe mode with network support

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Spyware Doctor\svcntaux.exe
    C:\Program Files\Spyware Doctor\swdsvc.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Documents and Settings\Hermes\Bureau\Utilitaires\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ci/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: ads_optimizer - {9C8A568E-4201-478a-8536-526CF371D2E2} - C:\WINDOWS\system32\nszD.dll
    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O2 - BHO: IEHlprObj Class - {CE7C3CF0-4B15-11D1-ABED-709549C10111} - C:\Program Files\TrueDownloader\truedownloaderie.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
    O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [X'nBeep] C:\Program Files\X'nBeep 1.1\XnBeep.exe
    O4 - HKCU\..\Run: [Pando] "C:\Program Files\Pando Networks\Pando\Pando.exe" /Minimized
    O4 - HKCU\..\Run: [Magentic] C:\PROGRA~1\Magentic\bin\Magentic.exe /c
    O4 - HKCU\..\Run: [TrueDownloaderAutoStart] C:\Program Files\TrueDownloader\TrueDownloader.exe /silent
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O4 - Startup: Outil de détection de support de Cyber-shot Viewer.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
    O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Crystal Clear\RocketDock\RocketDock.exe
    O4 - Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Crystal Clear\UberIcon\UberIcon Manager.exe
    O4 - Startup: Y'z Toolbar.lnk = C:\WINDOWS\BricoPacks\Crystal Clear\YzToolbar\YzToolBar.exe
    O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?611557c71b9f4b36b7268c86543e5259
    O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?611557c71b9f4b36b7268c86543e5259
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O16 - DPF: {0835BC90-6ABC-4F52-A103-4FC3A61F2C33} (A18X Control) - http://www.albatross18.com/season2/cabs/A18X.ocx
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.mail.live.com/mail/w1/resources/MSNPUpld.ca...
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Contro...
    O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://incredimailintl.oberon-media.com/online/online2/...
    O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst....
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
    O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://3dlifeplayer.dl.3dvia.com/player/install/install...
    O17 - HKLM\System\CCS\Services\Tcpip\..\{0FE88AD7-F786-4FF7-BD3C-D7525390D43B}: NameServer = 213.150.193.1,213.150.201.25
    O17 - HKLM\System\CS1\Services\Tcpip\..\{0FE88AD7-F786-4FF7-BD3C-D7525390D43B}: NameServer = 213.150.193.1,213.150.201.25
    O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
    O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
    O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe

    --
    End of file - 9252 bytes
    15 Novembre 2007 21:51:39

    bonsoir

    ta désinfection dure depuis 11 jours...
    en 1 jours ou deux on aurait tout regler, là, plus tu attends, plus tu te prends de nouvelles infections....



    Citation :
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 09:36:24, on 15/11/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16544)
    Boot mode: Safe mode with network support


    un log en mode sans echec de hiajckthis ne me montre pas tout.

    1

    ~Lance Hijackthis “Do a system scan only”.
    Coche les lignes qui suivent si encore présentes et uniquement celles-là.

    O2 - BHO: ads_optimizer - {9C8A568E-4201-478a-8536-526CF371D2E2} - C:\WINDOWS\system32\nszD.dll


    Clique sur Fix checked (en bas à gauche)

    2

    Sélectionne TOUS les emplacements en gras ci-dessous :

    C:\WINDOWS\system32\nszD.dll

    ---> Clique-droit puis Copier (ou Ctrl+C)

    Double-clique sur OTMoveIt.exe afin de le lancer.
    Fais un Clique-droit sur le cadre de gauche puis choisis Coller (ou Ctrl+V).
    Clique maintenant sur [#ff0000]MoveIt![/#f]

    [#ff0000]Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
    Accepte en cliquant sur YES.[/#f]

    Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
    Le nom du rapport correspond au moment de sa création : date_heure.log

    ->Informations sur le logiciel<-

    3
    reposte un log hijackthis en mode normal cette fois.







    16 Novembre 2007 21:32:30

    Desolé :sweat:  :sarcastic:  :cry: 

    Voila en tout cas le rapport de OT_MoveiT:

    File/Folder C:\WINDOWS\system32\nszD.dll not found.

    Created on 11/16/2007 20:27:43


    Et celui d'Hijackthis:

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 20:32:12, on 16/11/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.5730.0013)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Spyware Doctor\svcntaux.exe
    C:\Program Files\Spyware Doctor\swdsvc.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\System32\alg.exe
    C:\Program Files\Spyware Doctor\SDTrayApp.exe
    C:\Program Files\iTunes\iTunes.exe
    C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
    C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
    C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Fichiers communs\Teleca Shared\CapabilityManager.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\X'nBeep 1.1\XnBeep.exe
    C:\Program Files\Pando Networks\Pando\Pando.exe
    C:\WINDOWS\system32\sistray.exe
    C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
    C:\WINDOWS\BricoPacks\Crystal Clear\RocketDock\RocketDock.exe
    C:\WINDOWS\BricoPacks\Crystal Clear\UberIcon\UberIcon Manager.exe
    C:\WINDOWS\BricoPacks\Crystal Clear\YzToolbar\YzToolBar.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
    C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
    C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
    C:\Program Files\Windows Live\Messenger\usnsvc.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
    C:\Documents and Settings\Hermes\Bureau\Utilitaires\HijackThis.exe
    C:\WINDOWS\System32\wbem\wmiprvse.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ci/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O2 - BHO: IEHlprObj Class - {CE7C3CF0-4B15-11D1-ABED-709549C10111} - C:\Program Files\TrueDownloader\truedownloaderie.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
    O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [X'nBeep] C:\Program Files\X'nBeep 1.1\XnBeep.exe
    O4 - HKCU\..\Run: [Pando] "C:\Program Files\Pando Networks\Pando\Pando.exe" /Minimized
    O4 - HKCU\..\Run: [Magentic] C:\PROGRA~1\Magentic\bin\Magentic.exe /c
    O4 - HKCU\..\Run: [TrueDownloaderAutoStart] C:\Program Files\TrueDownloader\TrueDownloader.exe /silent
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O4 - Startup: Outil de détection de support de Cyber-shot Viewer.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
    O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Crystal Clear\RocketDock\RocketDock.exe
    O4 - Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Crystal Clear\UberIcon\UberIcon Manager.exe
    O4 - Startup: Y'z Toolbar.lnk = C:\WINDOWS\BricoPacks\Crystal Clear\YzToolbar\YzToolBar.exe
    O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?611557c71b9f4b36b7268c86543e5259
    O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?611557c71b9f4b36b7268c86543e5259
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O16 - DPF: {0835BC90-6ABC-4F52-A103-4FC3A61F2C33} (A18X Control) - http://www.albatross18.com/season2/cabs/A18X.ocx
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.mail.live.com/mail/w1/resources/MSNPUpld.ca...
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Contro...
    O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://incredimailintl.oberon-media.com/online/online2/...
    O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst....
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
    O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://3dlifeplayer.dl.3dvia.com/player/install/install...
    O17 - HKLM\System\CCS\Services\Tcpip\..\{0FE88AD7-F786-4FF7-BD3C-D7525390D43B}: NameServer = 213.150.193.1,213.150.201.25
    O17 - HKLM\System\CS1\Services\Tcpip\..\{0FE88AD7-F786-4FF7-BD3C-D7525390D43B}: NameServer = 213.150.193.1,213.150.201.25
    O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
    O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
    O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe

    --
    End of file - 10826 bytes
    16 Novembre 2007 22:02:05

    bonsoir

    ça me semble ok

    tu as encore des soucis?
    16 Novembre 2007 22:08:14

    C'est fini alors??
    Donc Merci alors Il te sera rendu au centuple
    17 Novembre 2007 09:39:02

    bonjour

    ~Edite ton premier message (en cliquant sur la gomme) et marque [résolu] dans le titre.


    :hello: 
    Tom's guide dans le monde
    • Allemagne
    • Italie
    • Irlande
    • Royaume Uni
    • Etats Unis
    Suivre Tom's Guide
    Inscrivez-vous à la Newsletter
    • ajouter à twitter
    • ajouter à facebook
    • ajouter un flux RSS