Sujet Précédent Sujet Suivant

[virus] virus espagnol par msn ... need help

b-i-b-i Messages postés 166 Statut Membre -  
 polo -
bonjour.
j'ai recu aujourd'hui via msn le message suivant:

.... dit:
hey
.... dit:
mira esta animacion de bush :p
... dit:
http://videosgratis.gratishost.com/bush.exe

sans me poser de question, vu que ça venait d'un contact fiable, j'ai cliqué.
et donc au lieu de m'ouvrir une page internet, le fichier prend en fait toute ma liste de contact en ligne et leur envoie le même message.
éviddament cela fais un peut surchauffer msn.
une fois que c'est finis rien ne se passe, puis quelques temps apres (environ 1h), il se repasse la même chose.

j'ai essayé de me renseigner mais je n'ai pus trouver des infos que sur un site espagnol car apparament le virus viens de las bas et date d'il y à quelques jours.
vous trouverez des infos sur cette page http://alerta-antivirus.red.es/virus/detalle_virus.html?cod=6838

je ne suis pas un as en informatique donc si quelqu'un peut m'aider à résoudre ce probleme sachant que mon antivirus (avast) n'à rien détecté

merci

bibi
A voir également:

134 réponses

Précédent
Réponse 61 / 134
b-i-b-i Messages postés 166 Statut Membre 14
 
voilà le rapport...
par contre je te souhaite une bonne soirée en espérant que tu sois dispo demain pour continuer à m'aider.
je verrai demain quel conseil tu m'a donné.
a demain sur ce topic
ciao et merci encore

GMER 1.0.12.12244 - http://www.gmer.net
Rootkit scan 2007-05-09 23:43:34
Windows 6.0.6000

---- User code sections - GMER 1.0.12 ----

.text C:\Program Files\MSN Messenger\msnmsgr.exe[1416] kernel32.dll!FindResourceW 760833FE 5 Bytes JMP 27001A50 C:\Program Files\Messenger Plus! Live\MsgPlusLive.dll
.text C:\Program Files\MSN Messenger\msnmsgr.exe[1416] kernel32.dll!SizeofResource 7608341C 7 Bytes JMP 27001C10 C:\Program Files\Messenger Plus! Live\MsgPlusLive.dll
.text C:\Program Files\MSN Messenger\msnmsgr.exe[1416] kernel32.dll!SetUnhandledExceptionFilter 7608D187 5 Bytes JMP 004DE392 C:\Program Files\MSN Messenger\msnmsgr.exe
.text C:\Program Files\MSN Messenger\msnmsgr.exe[1416] kernel32.dll!CreateEventA 760A7B60 5 Bytes JMP 27001830 C:\Program Files\Messenger Plus! Live\MsgPlusLive.dll
.text C:\Program Files\MSN Messenger\msnmsgr.exe[1416] kernel32.dll!LockResource 760AD5DF 5 Bytes JMP 27001CC0 C:\Program Files\Messenger Plus! Live\MsgPlusLive.dll
.text C:\Program Files\MSN Messenger\msnmsgr.exe[1416] kernel32.dll!FindResourceExW 760AD673 7 Bytes JMP 27001AD0 C:\Program Files\Messenger Plus! Live\MsgPlusLive.dll
.text C:\Program Files\MSN Messenger\msnmsgr.exe[1416] kernel32.dll!LoadResource 760AD74B 1 Byte [ E9 ]
.text C:\Program Files\MSN Messenger\msnmsgr.exe[1416] kernel32.dll!LoadResource + 2 760AD74D 5 Bytes [ 44, F5, B0, CC, CC ]
.text C:\Program Files\MSN Messenger\msnmsgr.exe[1416] ADVAPI32.dll!CryptDeriveKey 75FAD229 7 Bytes JMP 27001000 C:\Program Files\Messenger Plus! Live\MsgPlusLive.dll
.text C:\Program Files\MSN Messenger\msnmsgr.exe[1416] ADVAPI32.dll!CryptDecrypt 75FAD359 7 Bytes JMP 27001050 C:\Program Files\Messenger Plus! Live\MsgPlusLive.dll
.text C:\Program Files\MSN Messenger\msnmsgr.exe[1416] USER32.dll!SetWindowPlacement 762974E1 5 Bytes JMP 27004A10 C:\Program Files\Messenger Plus! Live\MsgPlusLive.dll
.text C:\Program Files\MSN Messenger\msnmsgr.exe[1416] USER32.dll!TrackPopupMenuEx 7629C76F 5 Bytes JMP 27003F70 C:\Program Files\Messenger Plus! Live\MsgPlusLive.dll
.text C:\Program Files\MSN Messenger\msnmsgr.exe[1416] USER32.dll!SetWindowRgn 7629E016 7 Bytes JMP 27004AF0 C:\Program Files\Messenger Plus! Live\MsgPlusLive.dll
.text C:\Program Files\MSN Messenger\msnmsgr.exe[1416] USER32.dll!CreateWindowExW 762A85F8 5 Bytes JMP 270032B0 C:\Program Files\Messenger Plus! Live\MsgPlusLive.dll
.text C:\Program Files\MSN Messenger\msnmsgr.exe[1416] USER32.dll!PeekMessageW 762B25BC 5 Bytes JMP 270037A0 C:\Program Files\Messenger Plus! Live\MsgPlusLive.dll
.text C:\Program Files\MSN Messenger\msnmsgr.exe[1416] USER32.dll!MessageBoxIndirectW 762BF1B3 5 Bytes JMP 27004CF0 C:\Program Files\Messenger Plus! Live\MsgPlusLive.dll
.text C:\Program Files\MSN Messenger\msnmsgr.exe[1416] USER32.dll!CreateDialogParamW 762CA500 5 Bytes JMP 27004B90 C:\Program Files\Messenger Plus! Live\MsgPlusLive.dll
.text C:\Program Files\MSN Messenger\msnmsgr.exe[1416] WS2_32.dll!closesocket 774D3847 5 Bytes JMP 27008F10 C:\Program Files\Messenger Plus! Live\MsgPlusLive.dll
.text C:\Program Files\MSN Messenger\msnmsgr.exe[1416] WS2_32.dll!send 774D3A8A 5 Bytes JMP 27008B80 C:\Program Files\Messenger Plus! Live\MsgPlusLive.dll
.text C:\Program Files\MSN Messenger\msnmsgr.exe[1416] WS2_32.dll!recv 774D4ABD 5 Bytes JMP 270087E0 C:\Program Files\Messenger Plus! Live\MsgPlusLive.dll
.text C:\Program Files\MSN Messenger\msnmsgr.exe[1416] WS2_32.dll!WSASend 774D4EE9 5 Bytes JMP 27008D00 C:\Program Files\Messenger Plus! Live\MsgPlusLive.dll
.text C:\Program Files\MSN Messenger\msnmsgr.exe[1416] WS2_32.dll!WSARecv 774D72B5 5 Bytes JMP 27008970 C:\Program Files\Messenger Plus! Live\MsgPlusLive.dll
.text C:\Program Files\MSN Messenger\msnmsgr.exe[1416] SHELL32.dll!Shell_NotifyIconW 763C310C 5 Bytes JMP 27002B00 C:\Program Files\Messenger Plus! Live\MsgPlusLive.dll
.text C:\Program Files\MSN Messenger\msnmsgr.exe[1416] ole32.dll!CoRegisterClassObject 761639AC 5 Bytes JMP 27001E20 C:\Program Files\Messenger Plus! Live\MsgPlusLive.dll
.text C:\Program Files\MSN Messenger\msnmsgr.exe[1416] ole32.dll!CoInitializeEx 7619885D 5 Bytes JMP 27001D20 C:\Program Files\Messenger Plus! Live\MsgPlusLive.dll
.text C:\Program Files\MSN Messenger\msnmsgr.exe[1416] WININET.dll!InternetCloseHandle 771FDA89 5 Bytes JMP 27007A40 C:\Program Files\Messenger Plus! Live\MsgPlusLive.dll
.text C:\Program Files\MSN Messenger\msnmsgr.exe[1416] WININET.dll!HttpOpenRequestA 77204351 5 Bytes JMP 27007760 C:\Program Files\Messenger Plus! Live\MsgPlusLive.dll
.text C:\Program Files\MSN Messenger\msnmsgr.exe[1416] WININET.dll!InternetReadFile 7720ABBC 1 Byte [ E9 ]
.text C:\Program Files\MSN Messenger\msnmsgr.exe[1416] WININET.dll!InternetReadFile + 2 7720ABBE 3 Bytes [ CC, DF, AF ]
.text C:\Program Files\MSN Messenger\msnmsgr.exe[1416] WININET.dll!HttpSendRequestA 7720CD48 5 Bytes JMP 27007990 C:\Program Files\Messenger Plus! Live\MsgPlusLive.dll
.text C:\Program Files\Internet Explorer\iexplore.exe[3184] USER32.dll!DialogBoxIndirectParamW 762A14EA 5 Bytes JMP 6F470087 C:\Windows\system32\IEFRAME.dll
.text C:\Program Files\Internet Explorer\iexplore.exe[3184] USER32.dll!MessageBoxExA 762B570D 5 Bytes JMP 6F46FFCE C:\Windows\system32\IEFRAME.dll
.text C:\Program Files\Internet Explorer\iexplore.exe[3184] USER32.dll!DialogBoxParamA 762B65BF 5 Bytes JMP 6F47004C C:\Windows\system32\IEFRAME.dll
.text C:\Program Files\Internet Explorer\iexplore.exe[3184] USER32.dll!MessageBoxIndirectW 762BF1B3 5 Bytes JMP 6F3015F6 C:\Windows\system32\IEFRAME.dll
.text C:\Program Files\Internet Explorer\iexplore.exe[3184] USER32.dll!DialogBoxParamW 762C129F 5 Bytes JMP 6F2DF231 C:\Windows\system32\IEFRAME.dll
.text C:\Program Files\Internet Explorer\iexplore.exe[3184] USER32.dll!DialogBoxIndirectParamA 762E29C9 5 Bytes JMP 6F4700C2 C:\Windows\system32\IEFRAME.dll
.text C:\Program Files\Internet Explorer\iexplore.exe[3184] USER32.dll!MessageBoxIndirectA 762EFACF 5 Bytes JMP 6F470008 C:\Windows\system32\IEFRAME.dll
.text C:\Program Files\Internet Explorer\iexplore.exe[3184] USER32.dll!MessageBoxExW 762EFBC9 5 Bytes JMP 6F46FF94 C:\Windows\system32\IEFRAME.dll

---- EOF - GMER 1.0.12 ----
0
Réponse 62 / 134
philae83 Messages postés 12854 Statut Contributeur sécurité 206
 
bon on peut voir ceci également

* Télécharge DiagHelp.zip
http://www.malekal.com/download/DiagHelp.zip
sur ton bureau

Ne double-clic pas dessus !!
* Fais un clic droit sur le fichier et extraire tout
* Un nouveau dossier chercher va être créé DiagHelp
* Ouvre le et double-clic sur go.cmd (le .cmd peut ne pas apparaître)
* Une fenêtre va s'ouvrir, choisis l'option 1
L'analyse va commencer, ceci peut durer quelques minutes, laisse faire et appuie sur une touche quand on te le demande.
* A la fin de l'analyse, il te sera redemandé de redémarrer l'ordinateur... Une fois l'ordinateur redémarré le rapport va apparaître sur le bloc-note..
Ce dernier se trouve sur C:\resultat.txt
* Copie/colle le contenu du bloc-note qui s'ouvre et poste le rapport ici ensuite
0
Réponse 63 / 134
b-i-b-i Messages postés 166 Statut Membre 14
 
nouveau rapport:

DiagHelp version v1.07.3 - http://www.malekal.com
excute le 10/05/2007 à 10:17:45,74

Liste des fichiers modifies/crees dans les 24 dernieres heures...
C:\$RECYCLE.BIN\S-1-5-21-2424384237-410969719-3201962500-1000
C:\$RECYCLE.BIN\S-1-5-21-2424384237-410969719-3201962500-1000\$I10PLM2.avi
C:\$RECYCLE.BIN\S-1-5-21-2424384237-410969719-3201962500-1000\$IE2WZ59.avi
C:\$RECYCLE.BIN\S-1-5-21-2424384237-410969719-3201962500-1000\$IHNWLYV.jpg
C:\$RECYCLE.BIN\S-1-5-21-2424384237-410969719-3201962500-1000\$IMWJX2J.wmv
C:\$RECYCLE.BIN\S-1-5-21-2424384237-410969719-3201962500-1000\$IWQYW4H.avi
C:\$RECYCLE.BIN\S-1-5-21-2424384237-410969719-3201962500-1000\$IZL3Z5U.AVI
C:\$RECYCLE.BIN\S-1-5-21-2424384237-410969719-3201962500-1000\$R10PLM2.avi
C:\$RECYCLE.BIN\S-1-5-21-2424384237-410969719-3201962500-1000\$RE2WZ59.avi
C:\$RECYCLE.BIN\S-1-5-21-2424384237-410969719-3201962500-1000\$RWQYW4H.avi
C:\Boot\BCD
C:\Boot\BCD.LOG
C:\hiberfil.sys
C:\pagefile.sys
C:\Program Files
C:\Program Files\Common Files\microsoft shared\OFFICE12
C:\Program Files\Hijackthis Version Française
C:\Program Files\Hijackthis Version Française\backups
C:\Program Files\Hijackthis Version Française\backups\backup-20070509-121102-148
C:\Program Files\Hijackthis Version Française\backups\backup-20070509-121102-199
C:\Program Files\Hijackthis Version Française\backups\backup-20070509-121102-231
C:\Program Files\Hijackthis Version Française\backups\backup-20070509-121102-928
C:\Program Files\Hijackthis Version Française\backups\backup-20070509-145829-763
C:\Program Files\Hijackthis Version Française\backups\backup-20070509-152924-865
C:\Program Files\Hijackthis Version Française\backups\backup-20070509-153008-300
C:\Program Files\Hijackthis Version Française\hijackthis.log
C:\Program Files\Internet Explorer
C:\Program Files\Internet Explorer\fxavx.ini
C:\Program Files\Messenger Plus! Live\Scripts\Now Playing\NPConfig.xml
C:\Program Files\Messenger Plus! Live\Scripts\WLM Preview Box\346221851\PreviewBox.xml
C:\Program Files\MSN Messenger\ErrorResponse.xml
C:\Program Files\Ultra Video Splitter\param.ini
C:\Program Files\Windows Mail
C:\Program Files\Windows Mail\OESpamFilter.dat
C:\Users\Default\NTUSER.DAT
C:\Users\Default\ntuser.dat.LOG1
C:\Users\ROMAIN\AppData\Local
C:\Users\ROMAIN\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
C:\Users\ROMAIN\AppData\Local\Temp\callingapps.xml
C:\Users\ROMAIN\AppData\Local\Temp\KAV Updater update files
C:\Users\ROMAIN\AppData\Local\Temp\KAV Updater update files\1065
C:\Users\ROMAIN\AppData\Local\Temp\LVCOMSX.LOG
C:\Users\ROMAIN\AppData\Local\Temp\Memory.Process
C:\Users\ROMAIN\AppData\Local\Temp\msohtmlclip1
C:\Users\ROMAIN\AppData\Local\Temp\msohtmlclip1\01
C:\Users\ROMAIN\AppData\Local\Temp\msohtmlclip1\01\clip_colorschememapping.xml
C:\Users\ROMAIN\AppData\Local\Temp\msohtmlclip1\01\clip_image001.gif
C:\Users\ROMAIN\AppData\Local\Temp\msohtmlclip1\01\clip_themedata.thmx
C:\Users\ROMAIN\AppData\Local\Temp\wmsetup.log
C:\Users\ROMAIN\AppData\Local\Temp\WPDNSE
C:\Users\ROMAIN\AppData\Local\Temp\~DF210F.tmp
C:\Users\ROMAIN\AppData\Local\Temp\~DF2114.tmp
C:\Users\ROMAIN\AppData\Local\Temp\~DF2E31.tmp
C:\Users\ROMAIN\AppData\Local\Temp\~DF2E38.tmp
C:\Users\ROMAIN\AppData\Local\Temp\~DF40FA.tmp
C:\Users\ROMAIN\AppData\Local\Temp\~DF41BE.tmp
C:\Users\ROMAIN\AppData\Local\Temp\~DF53D3.tmp
C:\Users\ROMAIN\AppData\Local\Temp\~DF618F.tmp
C:\Users\ROMAIN\AppData\Local\Temp\~DF84C7.tmp
C:\Users\ROMAIN\AppData\Local\Temp\~DF9A35.tmp
C:\Users\ROMAIN\AppData\Local\Temp\~DFA0AB.tmp
C:\Users\ROMAIN\AppData\Local\Temp\~DFFA02.tmp
C:\Users\ROMAIN\AppData\Roaming\Adobe\After Effects\7.0
C:\Users\ROMAIN\AppData\Roaming\Adobe\After Effects\7.0\Adobe After Effects 7.0 Préfs.txt
C:\Users\ROMAIN\AppData\Roaming\Adobe\After Effects\7.0\Espacesdetravailmodifies
C:\Users\ROMAIN\AppData\Roaming\Adobe\After Effects\7.0\Espacesdetravailmodifies\UserWorkspace1.xml
C:\Users\ROMAIN\AppData\Roaming\Adobe\Premiere Pro\2.0
C:\Users\ROMAIN\AppData\Roaming\Adobe\Premiere Pro\2.0\Adobe Premiere Pro Prefs
C:\Users\ROMAIN\AppData\Roaming\Adobe\Premiere Pro\2.0\Effect Presets and Custom Items.prfpset
C:\Users\ROMAIN\AppData\Roaming\Adobe\Premiere Pro\2.0\Plugin Loading.log
C:\Users\ROMAIN\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\79YV9VHT
C:\Users\ROMAIN\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\79YV9VHT\static.awempire.com
C:\Users\ROMAIN\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\79YV9VHT\static.awempire.com\flash
C:\Users\ROMAIN\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\79YV9VHT\static.awempire.com\flash\lsawards_revplayer.swf
C:\Users\ROMAIN\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\79YV9VHT\static.awempire.com\flash\lsawards_revplayer.swf\reviewplayer.sol
C:\Users\ROMAIN\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys
C:\Users\ROMAIN\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#static.awempire.com
C:\Users\ROMAIN\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#static.awempire.com\settings.sol
C:\Users\ROMAIN\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol
C:\Users\ROMAIN\AppData\Roaming\MSN Pictures Displayer\MSN Pictures Displayer.ini
C:\Users\ROMAIN\AppData\Roaming\nvModes.001
C:\Users\ROMAIN\AppData\Roaming\nvModes.dat
C:\Users\ROMAIN\AppData\Roaming\vlc\vlcrc
C:\Users\ROMAIN\Contacts\romchab@hotmail.com\14db1a58-8b32-424b-a97f-215a57c22313.WindowsLiveContact
C:\Users\ROMAIN\Contacts\romchab@hotmail.com\1b201983-bdb3-4b8f-8027-5db3bae1ddbb.WindowsLiveContact
C:\Users\ROMAIN\Contacts\romchab@hotmail.com\23c33252-1e0d-49d9-9f55-fca1efa5e8a5.WindowsLiveContact
C:\Users\ROMAIN\Contacts\romchab@hotmail.com\267b89c0-997b-4c63-aeb9-0ebcedd2b4c5.WindowsLiveContact
C:\Users\ROMAIN\Contacts\romchab@hotmail.com\29c6b8f6-80d2-4c07-8aaf-37efa63716d9.WindowsLiveContact
C:\Users\ROMAIN\Contacts\romchab@hotmail.com\2abcd0b3-3054-4851-8b79-4dc346f936c1.WindowsLiveContact
C:\Users\ROMAIN\Contacts\romchab@hotmail.com\2fc7d1d0-d8b4-4909-97be-62ae57798ce3.WindowsLiveContact
C:\Users\ROMAIN\Contacts\romchab@hotmail.com\3e0578b7-2553-477e-9a9a-170df70a8720.WindowsLiveContact
C:\Users\ROMAIN\Contacts\romchab@hotmail.com\4215e421-e062-42c5-9fc4-7f90287d0dd7.WindowsLiveContact
C:\Users\ROMAIN\Contacts\romchab@hotmail.com\4d2c731b-ebc5-4fcb-b776-e9234d5fac89.WindowsLiveContact
C:\Users\ROMAIN\Contacts\romchab@hotmail.com\5c0236d2-d693-48c3-b077-3902a461cf8d.WindowsLiveContact
C:\Users\ROMAIN\Contacts\romchab@hotmail.com\7cff8b25-f28a-4473-9829-58571604276b.WindowsLiveContact
C:\Users\ROMAIN\Contacts\romchab@hotmail.com\89d92737-fb73-4363-a78d-0d70d2e697dd.WindowsLiveContact
C:\Users\ROMAIN\Contacts\romchab@hotmail.com\9778f9b3-dbd7-401a-a320-cfe08eee651f.WindowsLiveContact
C:\Users\ROMAIN\Contacts\romchab@hotmail.com\a1717549-fe25-41fb-b6b4-9e9c70017d27.WindowsLiveContact
C:\Users\ROMAIN\Contacts\romchab@hotmail.com\a8d82901-dc60-4f0f-9883-3f2bbe5a989b.WindowsLiveContact
C:\Users\ROMAIN\Contacts\romchab@hotmail.com\b143ed5b-fd13-41d8-8413-f289b24bfe7f.WindowsLiveContact
C:\Users\ROMAIN\Contacts\romchab@hotmail.com\B34C26F9-75A5-4C6D-82EC-0485E9D09F5E.WindowsLiveContact
C:\Users\ROMAIN\Contacts\romchab@hotmail.com\c4bbc991-fb64-48d3-9945-74a00db1b879.WindowsLiveContact
C:\Users\ROMAIN\Contacts\romchab@hotmail.com\ce3dcd24-a79e-42d4-bc5a-97e6a86eeb71.WindowsLiveContact
C:\Users\ROMAIN\Contacts\romchab@hotmail.com\de9b0ec4-9d5d-4d2d-a672-05683c31dede.WindowsLiveContact
C:\Users\ROMAIN\Contacts\romchab@hotmail.com\ec066fcb-9e23-4497-9982-b0ef823d6740.WindowsLiveContact
C:\Users\ROMAIN\Contacts\romchab@hotmail.com\eda8d0e2-4cc6-45a9-aed1-ca2c3976b472.WindowsLiveContact
C:\Users\ROMAIN\Contacts\romchab@hotmail.com\fa475dd4-26e9-47dd-aa93-76991fc036cb.WindowsLiveContact
C:\Users\ROMAIN\Desktop
C:\Users\ROMAIN\Desktop\DiagHelp
C:\Users\ROMAIN\Desktop\DiagHelp\chercher.cmd
C:\Users\ROMAIN\Desktop\DiagHelp\go.cmd
C:\Users\ROMAIN\Desktop\DiagHelp.zip
C:\Users\ROMAIN\Desktop\gmer.zip
C:\Users\ROMAIN\Desktop\OTMoveIt.exe
C:\Users\ROMAIN\Desktop\pologne
C:\Users\ROMAIN\Desktop\pologne\journal de bord.docx
C:\Users\ROMAIN\Desktop\rapport.html
C:\Users\ROMAIN\Desktop\rapport.log
C:\Users\ROMAIN\Desktop\screen.jpg
C:\Users\ROMAIN\Desktop\sreng2.zip
C:\Users\ROMAIN\Documents
C:\Users\ROMAIN\Documents\Adobe\Premiere Pro\2.0
C:\Users\ROMAIN\Documents\Adobe\Premiere Pro\2.0\Fichiers codés
C:\Users\ROMAIN\Documents\Adobe\Premiere Pro\2.0\Fichiers codés\tests.prproj
C:\Users\ROMAIN\Documents\Adobe\Premiere Pro\2.0\Fichiers codés\TIGNES 2007.prproj
C:\Users\ROMAIN\Documents\Adobe\Premiere Pro\2.0\Fichiers de prévisualisation d'Adobe Premiere Pro
C:\Users\ROMAIN\Documents\Adobe\Premiere Pro\2.0\Fichiers de prévisualisation d'Adobe Premiere Pro\tests.PRV
C:\Users\ROMAIN\Documents\Adobe\Premiere Pro\2.0\Fichiers de prévisualisation d'Adobe Premiere Pro\TIGNES 2007.PRV
C:\Users\ROMAIN\Documents\Adobe\Premiere Pro\2.0\Layouts\Current.layout
C:\Users\ROMAIN\Documents\Adobe\Premiere Pro\2.0\Styles\workingset.prsl
C:\Users\ROMAIN\Documents\F3
C:\Users\ROMAIN\Documents\F3\Characters
C:\Users\ROMAIN\Documents\F3\Characters\moi.CRT
C:\Users\ROMAIN\Documents\F3\F3.ini
C:\Users\ROMAIN\Documents\F3\F3.log
C:\Users\ROMAIN\Documents\intro tignes.aep
C:\Users\ROMAIN\Documents\Mes dossiers de partage.lnk
C:\Users\ROMAIN\Documents\Mes fichiers reçus\romchab346221851\Historique
C:\Users\ROMAIN\Documents\Mes fichiers reçus\romchab346221851\Historique\ev3rl4st1813369718.xml
C:\Users\ROMAIN\Documents\Mes fichiers reçus\romchab346221851\Historique\mathieuktm1762473584.xml
C:\Users\ROMAIN\Documents\Mes fichiers reçus\romchab346221851\Historique\vincent_perez_7311087941.xml
C:\Users\ROMAIN\Documents\Mes fichiers reçus\romchab346221851\Historique\yaya_kayak1635926264.xml
C:\Users\ROMAIN\Documents\Mes Historiques de Conversation\mai 2007\anael_agier@hotmail.fr.html
C:\Users\ROMAIN\Documents\Mes Historiques de Conversation\mai 2007\ev3rl4st@hotmail.com.html
C:\Users\ROMAIN\Documents\Mes Historiques de Conversation\mai 2007\Images
C:\Users\ROMAIN\Documents\Mes Historiques de Conversation\mai 2007\Images\MsgPlus_Img1755.png
C:\Users\ROMAIN\Documents\Mes Historiques de Conversation\mai 2007\mathieuktm@hotmail.com.html
C:\Users\ROMAIN\Documents\Mes Historiques de Conversation\mai 2007\uva_mandarina@hotmail.com.html
C:\Users\ROMAIN\Documents\Mes Historiques de Conversation\mai 2007\vincent_perez_7@hotmail.com.html
C:\Users\ROMAIN\Documents\Mes Historiques de Conversation\mai 2007\yaya_kayak@hotmail.fr.html
C:\Users\ROMAIN\Documents\programme
C:\Users\ROMAIN\Favorites\Google.url
C:\Users\ROMAIN\Favorites\kayak\Forum eauxvives.org.url
C:\Users\ROMAIN\Favorites\moto\run.url
C:\Users\ROMAIN\Favorites\sites nettoyage et virus\Forum virus-sécurité.url
C:\Users\ROMAIN\Favorites\video\Vidéo numérique, DV, le Repaire.url
C:\Users\ROMAIN\Music\HOUSE + ELECTRO
C:\Windows
C:\Windows\AvxOnline.log
C:\Windows\avxoscan
C:\Windows\avxoscan\fxavx.ini
C:\Windows\avxoscan\Lang
C:\Windows\avxoscan\Lang\_en
C:\Windows\avxoscan\live.ini
C:\Windows\avxoscan\plginfo.htm
C:\Windows\avxoscan\Plugins
C:\Windows\avxoscan\Plugins\ace.xmd
C:\Windows\avxoscan\Plugins\arc.xmd
C:\Windows\avxoscan\Plugins\arj.xmd
C:\Windows\avxoscan\Plugins\avx4.cvd
C:\Windows\avxoscan\Plugins\avx4.dll
C:\Windows\avxoscan\Plugins\avxboot.dll
C:\Windows\avxoscan\Plugins\avxs.dll
C:\Windows\avxoscan\Plugins\avxt.dll
C:\Windows\avxoscan\Plugins\bach.xmd
C:\Windows\avxoscan\Plugins\bzip2.xmd
C:\Windows\avxoscan\Plugins\cab.xmd
C:\Windows\avxoscan\Plugins\cevakrnl.cvd
C:\Windows\avxoscan\Plugins\cevakrnl.ivd
C:\Windows\avxoscan\Plugins\cevakrnl.rvd
C:\Windows\avxoscan\Plugins\cevakrnl.xmd
C:\Windows\avxoscan\Plugins\ceva_dll.cvd
C:\Windows\avxoscan\Plugins\ceva_vfs.cvd
C:\Windows\avxoscan\Plugins\check.mem
C:\Windows\avxoscan\Plugins\chm.xmd
C:\Windows\avxoscan\Plugins\clean.dll
C:\Windows\avxoscan\Plugins\cpio.xmd
C:\Windows\avxoscan\Plugins\cran.cvd
C:\Windows\avxoscan\Plugins\cran.xmd
C:\Windows\avxoscan\Plugins\dbx.xmd
C:\Windows\avxoscan\Plugins\docfile.xmd
C:\Windows\avxoscan\Plugins\emalware.cvd
C:\Windows\avxoscan\Plugins\emalware.ivd
C:\Windows\avxoscan\Plugins\emalware.xmd
C:\Windows\avxoscan\Plugins\epoc.xmd
C:\Windows\avxoscan\Plugins\gzip.xmd
C:\Windows\avxoscan\Plugins\ha.xmd
C:\Windows\avxoscan\Plugins\hlp.xmd
C:\Windows\avxoscan\Plugins\hpe.cvd
C:\Windows\avxoscan\Plugins\hpe.xmd
C:\Windows\avxoscan\Plugins\hqx.xmd
C:\Windows\avxoscan\Plugins\html.xmd
C:\Windows\avxoscan\Plugins\imp.xmd
C:\Windows\avxoscan\Plugins\inno.xmd
C:\Windows\avxoscan\Plugins\instyler.xmd
C:\Windows\avxoscan\Plugins\iso.xmd
C:\Windows\avxoscan\Plugins\java.cvd
C:\Windows\avxoscan\Plugins\java.xmd
C:\Windows\avxoscan\Plugins\jpeg.xmd
C:\Windows\avxoscan\Plugins\lha.xmd
C:\Windows\avxoscan\Plugins\lnk.xmd
C:\Windows\avxoscan\Plugins\mbox.xmd
C:\Windows\avxoscan\Plugins\mbx.xmd
C:\Windows\avxoscan\Plugins\mdx.xmd
C:\Windows\avxoscan\Plugins\mdx_97.cvd
C:\Windows\avxoscan\Plugins\mdx_97.ivd
C:\Windows\avxoscan\Plugins\mdx_w95.cvd
C:\Windows\avxoscan\Plugins\mdx_x95.cvd
C:\Windows\avxoscan\Plugins\mdx_xf.cvd
C:\Windows\avxoscan\Plugins\mengine.dll
C:\Windows\avxoscan\Plugins\mime.xmd
C:\Windows\avxoscan\Plugins\mso.xmd
C:\Windows\avxoscan\Plugins\na.cvd
C:\Windows\avxoscan\Plugins\na.xmd
C:\Windows\avxoscan\Plugins\nelf.cvd
C:\Windows\avxoscan\Plugins\nelf.xmd
C:\Windows\avxoscan\Plugins\nsis.xmd
C:\Windows\avxoscan\Plugins\objd.xmd
C:\Windows\avxoscan\Plugins\pdf.xmd
C:\Windows\avxoscan\Plugins\port.dll
C:\Windows\avxoscan\Plugins\ports.cvd
C:\Windows\avxoscan\Plugins\pst.xmd
C:\Windows\avxoscan\Plugins\rar.xmd
C:\Windows\avxoscan\Plugins\registry.dll
C:\Windows\avxoscan\Plugins\regkeys.cvd
C:\Windows\avxoscan\Plugins\rpm.xmd
C:\Windows\avxoscan\Plugins\rtf.xmd
C:\Windows\avxoscan\Plugins\rup.cvd
C:\Windows\avxoscan\Plugins\rup.xmd
C:\Windows\avxoscan\Plugins\sdx.cvd
C:\Windows\avxoscan\Plugins\sdx.ivd
C:\Windows\avxoscan\Plugins\sdx.xmd
C:\Windows\avxoscan\Plugins\sfx.xmd
C:\Windows\avxoscan\Plugins\swf.xmd
C:\Windows\avxoscan\Plugins\tar.xmd
C:\Windows\avxoscan\Plugins\td0.xmd
C:\Windows\avxoscan\Plugins\thebat.xmd
C:\Windows\avxoscan\Plugins\tnef.xmd
C:\Windows\avxoscan\Plugins\TrapMFCWin.exe
C:\Windows\avxoscan\Plugins\unpack.cvd
C:\Windows\avxoscan\Plugins\unpack.ivd
C:\Windows\avxoscan\Plugins\unpack.xmd
C:\Windows\avxoscan\Plugins\update.txt
C:\Windows\avxoscan\Plugins\uudecode.xmd
C:\Windows\avxoscan\Plugins\ve.cvd
C:\Windows\avxoscan\Plugins\ve.ivd
C:\Windows\avxoscan\Plugins\ve.xmd
C:\Windows\avxoscan\Plugins\vedata.cvd
C:\Windows\avxoscan\Plugins\viza.xmd
C:\Windows\avxoscan\Plugins\wise.xmd
C:\Windows\avxoscan\Plugins\xishield.xmd
C:\Windows\avxoscan\Plugins\z.xmd
C:\Windows\avxoscan\Plugins\zip.xmd
C:\Windows\avxoscan\Plugins\zoo.xmd
C:\Windows\bootstat.dat
C:\Windows\Debug
C:\Windows\Debug\mrt.log
C:\Windows\Debug\mrteng.log
C:\Windows\Debug\PASSWD.LOG
C:\Windows\Debug\UserMode
C:\Windows\Debug\UserMode\ChkAcc.bak
C:\Windows\Debug\UserMode\ChkAcc.log
C:\Windows\Downloaded Program Files
C:\Windows\gmer.dll
C:\Windows\gmer.ini
C:\Windows\gmer_uninstall.cmd
C:\Windows\inf\setupapi.app.log
C:\Windows\Logs\CBS\CBS.log
C:\Windows\Logs\DPX\setupact.log
C:\Windows\Logs\DPX\setuperr.log
C:\Windows\NeroDigital.ini
C:\Windows\ntbtlog.txt
C:\Windows\QTFont.for
C:\Windows\ServiceProfiles\LocalService\AppData\Local
C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT
C:\Windows\ServiceProfiles\LocalService\ntuser.dat.LOG1
C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT
C:\Windows\ServiceProfiles\NetworkService\ntuser.dat.LOG1
C:\Windows\servicing\Packages
C:\Windows\System32
C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
C:\Windows\System32\advpack.dll
C:\Windows\System32\catroot
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}
C:\Windows\System32\catroot2
C:\Windows\System32\catroot2\dberr.txt
C:\Windows\System32\catroot2\edb.chk
C:\Windows\System32\catroot2\edb.log
C:\Windows\System32\catroot2\edb00095.log
C:\Windows\System32\catroot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb
C:\Windows\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb
C:\Windows\System32\config\COMPONENTS
C:\Windows\System32\config\COMPONENTS.LOG1
C:\Windows\System32\config\DEFAULT
C:\Windows\System32\config\DEFAULT.LOG1
C:\Windows\System32\config\RegBack
C:\Windows\System32\config\RegBack\COMPONENTS
C:\Windows\System32\config\RegBack\COMPONENTS.LOG1
C:\Windows\System32\config\RegBack\COMPONENTS.OLD
C:\Windows\System32\config\RegBack\DEFAULT
C:\Windows\System32\config\RegBack\DEFAULT.OLD
C:\Windows\System32\config\RegBack\SAM
C:\Windows\System32\config\RegBack\SAM.OLD
C:\Windows\System32\config\RegBack\SECURITY
C:\Windows\System32\config\RegBack\SECURITY.LOG1
C:\Windows\System32\config\RegBack\SECURITY.OLD
C:\Windows\System32\config\RegBack\SOFTWARE
C:\Windows\System32\config\RegBack\SOFTWARE.LOG1
C:\Windows\System32\config\RegBack\SOFTWARE.OLD
C:\Windows\System32\config\RegBack\SYSTEM
C:\Windows\System32\config\RegBack\SYSTEM.LOG1
C:\Windows\System32\config\RegBack\SYSTEM.OLD
C:\Windows\System32\config\SAM
C:\Windows\System32\config\SAM.LOG1
C:\Windows\System32\config\SECURITY
C:\Windows\System32\config\SECURITY.LOG1
C:\Windows\System32\config\TxR\{250834b7-750c-494d-bdc3-da86b6e2101a}.TxR.0.regtrans-ms
C:\Windows\System32\config\TxR\{250834b7-750c-494d-bdc3-da86b6e2101a}.TxR.blf
C:\Windows\System32\config\TxR\{250834B7-750C-494d-BDC3-DA86B6E2101B}.TMContainer00000000000000000002.regtrans-ms
C:\Windows\System32\drivers
C:\Windows\System32\drivers\gmer.sys
C:\Windows\System32\ie4uinit.exe
C:\Windows\System32\ieapfltr.dat
C:\Windows\System32\ieapfltr.dll
C:\Windows\System32\ieframe.dll
C:\Windows\System32\iernonce.dll
C:\Windows\System32\iesetup.dll
C:\Windows\System32\ieui.dll
C:\Windows\System32\jsproxy.dll
C:\Windows\System32\LogFiles\Scm
C:\Windows\System32\LogFiles\Scm\SCM.EVM
C:\Windows\System32\LogFiles\Scm\SCM.EVM.1
C:\Windows\System32\LogFiles\Scm\SCM.EVM.2
C:\Windows\System32\LogFiles\Scm\SCM.EVM.3
C:\Windows\System32\LogFiles\Scm\SCM.EVM.4
C:\Windows\System32\LogFiles\Scm\SCM.EVM.5
C:\Windows\System32\LogFiles\WMI\RtBackup
C:\Windows\System32\LogFiles\WUDF\WUDFTrace.etl
C:\Windows\System32\migration
C:\Windows\System32\migration\WininetPlugin.dll
C:\Windows\System32\mshtml.dll
C:\Windows\System32\mshtml.tlb
C:\Windows\System32\SMI\Store\Machine
C:\Windows\System32\SMI\Store\Machine\SCHEMA.DAT
C:\Windows\System32\SMI\Store\Machine\schema.dat.LOG1
C:\Windows\System32\SMI\Store\Machine\SCHEMA.DAT{3a53986d-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms
C:\Windows\System32\spool\spooler.xml
C:\Windows\System32\spool\SpoolerETW.etl
C:\Windows\System32\Tasks\User_Feed_Synchronization-{7BDCD797-FCA2-40FB-BC3F-001EAD2441A1}
C:\Windows\System32\wbem\Logs\FrameWork.log
C:\Windows\System32\wbem\Logs\wmiprov.log
C:\Windows\System32\wbem\Logs\WMITracing.log
C:\Windows\System32\wbem\Repository
C:\Windows\System32\wbem\Repository\INDEX.BTR
C:\Windows\System32\wbem\Repository\MAPPING1.MAP
C:\Windows\System32\wbem\Repository\MAPPING2.MAP
C:\Windows\System32\wbem\Repository\OBJECTS.DATA
C:\Windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
C:\Windows\System32\WDI\LogFiles\BootCKCL.etl
C:\Windows\System32\WDI\LogFiles\ShutdownCKCL.etl
C:\Windows\System32\WDI\LogFiles\WdiContextLog.etl.001
C:\Windows\System32\WDI\LogFiles\WdiContextLog.etl.002
C:\Windows\System32\WDI\LogFiles\WdiContextLog.etl.003
C:\Windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
C:\Windows\System32\WDI\SuspendPerformanceDiagnostics_SystemData_S3.bin
C:\Windows\System32\WDI\{533a67eb-9fb5-473d-b884-958cf4b9c4a3}
C:\Windows\System32\WDI\{533a67eb-9fb5-473d-b884-958cf4b9c4a3}\{ef98591f-7a9d-463d-8503-21094c1f9f20}
C:\Windows\System32\WDI\{533a67eb-9fb5-473d-b884-958cf4b9c4a3}\{ef98591f-7a9d-463d-8503-21094c1f9f20}\snapshot.etl
C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}
C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2424384237-410969719-3201962500-1000_UserData.bin
C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{129f23ab-4c95-45d0-a2c1-16816d62c65b}
C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{129f23ab-4c95-45d0-a2c1-16816d62c65b}\snapshot.etl
C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{1c9aa7af-2888-4ee1-9c1a-911c42dafd88}
C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{1c9aa7af-2888-4ee1-9c1a-911c42dafd88}\snapshot.etl
C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{3921eb32-fb6b-4c8c-927d-72a4b980b239}
C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{3921eb32-fb6b-4c8c-927d-72a4b980b239}\snapshot.etl
C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{81f1ec2e-366d-4ab5-bfdf-6e26365cfe90}
C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{81f1ec2e-366d-4ab5-bfdf-6e26365cfe90}\snapshot.etl
C:\Windows\System32\WDI\{a7a5847a-7511-4e4e-90b1-45ad2a002f51}\{d90e629b-fe8f-40fa-9c63-50ccf32da180}
C:\Windows\System32\WDI\{a7a5847a-7511-4e4e-90b1-45ad2a002f51}\{d90e629b-fe8f-40fa-9c63-50ccf32da180}\krundown.etl
C:\Windows\System32\WDI\{a7a5847a-7511-4e4e-90b1-45ad2a002f51}\{d90e629b-fe8f-40fa-9c63-50ccf32da180}\ksnapshot.etl
C:\Windows\System32\WDI\{ffc42108-4920-4acf-a4fc-8abdcc68ada4}
C:\Windows\System32\WDI\{ffc42108-4920-4acf-a4fc-8abdcc68ada4}\{e415951e-0061-4501-8609-5e73b603a1cc}
C:\Windows\System32\WDI\{ffc42108-4920-4acf-a4fc-8abdcc68ada4}\{e415951e-0061-4501-8609-5e73b603a1cc}\snapshot.etl
C:\Windows\System32\wfp\wfpdiag.etl
C:\Windows\System32\winevt\Logs\Antivirus.evtx
C:\Windows\System32\winevt\Logs\Application.evtx
C:\Windows\System32\winevt\Logs\OSession.evtx
C:\Windows\System32\winevt\Logs\Security.evtx
C:\Windows\System32\winevt\Logs\System.evtx
C:\Windows\System32\wininet.dll
C:\Windows\Tasks\SA.DAT
C:\Windows\Tasks\SCHEDLGU.TXT
C:\Windows\Tasks\User_Feed_Synchronization-{7BDCD797-FCA2-40FB-BC3F-001EAD2441A1}.job
C:\Windows\Temp\lpksetup-20070509-102757-0.log
C:\Windows\Temp\lpksetup-20070509-102807-0.log
C:\Windows\Temp\lpksetup-20070509-170023-0.log
C:\Windows\Temp\lpksetup-20070509-170035-0.log
C:\Windows\Temp\lpksetup-20070509-183933-0.log
C:\Windows\Temp\lpksetup-20070509-183938-0.log
C:\Windows\Temp\_avast4_\Webshlock.txt
C:\Windows\WindowsUpdate.log
C:\Windows\winsxs
C:\Windows\winsxs\Backup
C:\Windows\winsxs\Backup\x86_microsoft-windows-advpack_31bf3856ad364e35_6.0.6000.16448_none_a9c1e5a7f5c33d2d.manifest
C:\Windows\winsxs\Backup\x86_microsoft-windows-advpack_31bf3856ad364e35_6.0.6000.16448_none_a9c1e5a7f5c33d2d_advpack.dll_8c6ea088
C:\Windows\winsxs\Backup\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16448_none_ffdf73aba4c5c123.manifest
C:\Windows\winsxs\Backup\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16448_none_ffdf73aba4c5c123_jsproxy.dll_3cc8d651
C:\Windows\winsxs\Backup\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16448_none_ffdf73aba4c5c123_wininet.dll_790e2e3a
C:\Windows\winsxs\Backup\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16448_none_ffdf73aba4c5c123_wininetplugin.dll_f2ff35f9
C:\Windows\winsxs\Backup\x86_microsoft-windows-ie-extcompat_31bf3856ad364e35_6.0.6000.16459_none_3a9c5c8ed993ea9f.manifest
C:\Windows\winsxs\Backup\x86_microsoft-windows-ie-htmlactivexcompat_31bf3856ad364e35_6.0.6000.16453_none_15561c1712c8aee9.manifest
C:\Windows\winsxs\Backup\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6000.16448_none_113992ca251c2a59.manifest
C:\Windows\winsxs\Backup\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6000.16448_none_113992ca251c2a59_mshtml.dll_fab8f891
C:\Windows\winsxs\Backup\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6000.16448_none_113992ca251c2a59_mshtml.tlb_fab8f577
C:\Windows\winsxs\Backup\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.16448_none_6298eccdb111b886.manifest
C:\Windows\winsxs\Backup\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.16448_none_6298eccdb111b886_ieframe.dll_c6cbe33f
C:\Windows\winsxs\Backup\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.16448_none_6298eccdb111b886_ieui.dll_f0fcf806
C:\Windows\winsxs\Catalogs
C:\Windows\winsxs\Catalogs\5632e2f9cc3ac1dd96f564622bbf3b7a8f6f72492e42aef257a5acde61c9d214.cat
C:\Windows\winsxs\FileMaps
C:\Windows\winsxs\FileMaps\$$.cdf-ms
C:\Windows\winsxs\FileMaps\$$_system32_21f9a9c4a2f8b514.cdf-ms
C:\Windows\winsxs\FileMaps\$$_system32_migration_927a21df1acd7c18.cdf-ms
C:\Windows\winsxs\FileMaps\program_files_ffd0cbfc813cc4f1.cdf-ms
C:\Windows\winsxs\FileMaps\program_files_windows_mail_e07902f329fe05e9.cdf-ms
C:\Windows\winsxs\FileMaps\_0000000000000000.cdf-ms
C:\Windows\winsxs\Manifests
C:\Windows\winsxs\Manifests\x86_62d3eb49ae10d0d3491989d668a2e495_31bf3856ad364e35_6.0.6000.20576_none_1fe67accfdb8139c.manifest
C:\Windows\winsxs\Manifests\x86_ae6d745304a5262a6b2f4b6455448c59_31bf3856ad364e35_6.0.6000.16466_none_a8cd3923bd7d0d1b.manifest
C:\Windows\winsxs\Manifests\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.16466_none_f066f9e66e7f0798.manifest
C:\Windows\winsxs\Manifests\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.20576_none_f0e5c6c587a4c353.manifest
C:\Windows\winsxs\Temp
C:\Windows\winsxs\Temp\PendingRenames
C:\Windows\winsxs\x86_microsoft-windows-advpack_31bf3856ad364e35_6.0.6000.16448_none_a9c1e5a7f5c33d2d
C:\Windows\winsxs\x86_microsoft-windows-advpack_31bf3856ad364e35_6.0.6000.16448_none_a9c1e5a7f5c33d2d\advpack.dll
C:\Windows\winsxs\x86_microsoft-windows-advpack_31bf3856ad364e35_6.0.6000.20547_none_aa4a82290ee1c3a0
C:\Windows\winsxs\x86_microsoft-windows-advpack_31bf3856ad364e35_6.0.6000.20547_none_aa4a82290ee1c3a0\advpack.dll
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16448_none_ffdf73aba4c5c123
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16448_none_ffdf73aba4c5c123\jsproxy.dll
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16448_none_ffdf73aba4c5c123\wininet.dll
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16448_none_ffdf73aba4c5c123\WininetPlugin.dll
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.20547_none_0068102cbde44796
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.20547_none_0068102cbde44796\jsproxy.dll
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.20547_none_0068102cbde44796\wininet.dll
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.20547_none_0068102cbde44796\WininetPlugin.dll
C:\Windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.16463_none_f96df53b6ec5f4a5
C:\Windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.16463_none_f96df53b6ec5f4a5\ieapfltr.dat
C:\Windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.16463_none_f96df53b6ec5f4a5\ieapfltr.dll
C:\Windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.20572_none_f9ebc1d087ec9709
C:\Windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.20572_none_f9ebc1d087ec9709\ieapfltr.dat
C:\Windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.20572_none_f9ebc1d087ec9709\ieapfltr.dll
C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6000.16448_none_113992ca251c2a59
C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6000.16448_none_113992ca251c2a59\mshtml.dll
C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6000.16448_none_113992ca251c2a59\mshtml.tlb
C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6000.20547_none_11c22f4b3e3ab0cc
C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6000.20547_none_11c22f4b3e3ab0cc\mshtml.dll
C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6000.20547_none_11c22f4b3e3ab0cc\mshtml.tlb
C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.16448_none_c3c73552616bf8ab
C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.16448_none_c3c73552616bf8ab\ie4uinit.exe
C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.16448_none_c3c73552616bf8ab\iernonce.dll
C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.16448_none_c3c73552616bf8ab\iesetup.dll
C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.16448_none_c3c73552616bf8ab\ieuinit.inf
C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.20547_none_c44fd1d37a8a7f1e
C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.20547_none_c44fd1d37a8a7f1e\ie4uinit.exe
C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.20547_none_c44fd1d37a8a7f1e\iernonce.dll
C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.20547_none_c44fd1d37a8a7f1e\iesetup.dll
C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.20547_none_c44fd1d37a8a7f1e\ieuinit.inf
C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.16448_none_6298eccdb111b886
C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.16448_none_6298eccdb111b886\ieframe.dll
C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.16448_none_6298eccdb111b886\ieui.dll
C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.20547_none_6321894eca303ef9
C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.20547_none_6321894eca303ef9\ieframe.dll
C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.20547_none_6321894eca303ef9\ieui.dll
C:\Windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.16466_none_f066f9e66e7f0798
C:\Windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.16466_none_f066f9e66e7f0798\OESpamFilter.dat
C:\Windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.20576_none_f0e5c6c587a4c353
C:\Windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.20576_none_f0e5c6c587a4c353\OESpamFilter.dat
C:\_OTMoveIt
C:\_OTMoveIt\MovedFiles
C:\_OTMoveIt\MovedFiles\05092007_151924.log
C:\_OTMoveIt\MovedFiles\Windows
C:\_OTMoveIt\MovedFiles\Windows\System32

Liste des derniers fichies modifies/crees dans windir\system32
C:\Windows\System32/drivers\gmer.sys -->09/05/2007 23:29:56
C:\Windows\System32/drivers\aswRdr.sys -->30/04/2007 17:39:41
C:\Windows\System32/drivers\aswMonFlt.sys -->30/04/2007 17:39:14
C:\Windows\System32/drivers\aswTdi.sys -->30/04/2007 17:38:51
C:\Windows\System32/drivers\pxhelp20.sys -->09/04/2007 20:26:51
C:\Windows\System32/drivers\hdaudbus.sys -->03/04/2007 01:22:38
C:\Windows\System32/drivers\Acer_A568_HomePremium_X86_FR.MRK -->05/12/2006 08:29:16

C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 -->10/05/2007 10:04:59
C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 -->10/05/2007 10:04:59
C:\Windows\System32\advpack.dll -->09/05/2007 16:39:19
C:\Windows\System32\wininet.dll -->09/05/2007 16:39:18
C:\Windows\System32\jsproxy.dll -->09/05/2007 16:39:18
C:\Windows\System32\iesetup.dll -->09/05/2007 16:39:18
C:\Windows\System32\iernonce.dll -->09/05/2007 16:39:18
C:\Windows\System32\ieapfltr.dll -->09/05/2007 16:39:18
C:\Windows\System32\ieapfltr.dat -->09/05/2007 16:39:18
C:\Windows\System32\ie4uinit.exe -->09/05/2007 16:39:18
C:\Windows\System32\mshtml.dll -->09/05/2007 16:39:16
C:\Windows\System32\mshtml.tlb -->09/05/2007 16:39:15
C:\Windows\System32\ieui.dll -->09/05/2007 16:39:14
C:\Windows\System32\ieframe.dll -->09/05/2007 16:39:14
C:\Windows\System32\09052007_10133692.txt -->09/05/2007 10:13:36
C:\Windows\System32\perfh00C.dat -->08/05/2007 22:28:51
C:\Windows\System32\perfh009.dat -->08/05/2007 22:28:51
C:\Windows\System32\perfc00C.dat -->08/05/2007 22:28:51
C:\Windows\System32\perfc009.dat -->08/05/2007 22:28:51
C:\Windows\System32\PerfStringBackup.INI -->08/05/2007 22:28:50
C:\Windows\System32\config.nt -->08/05/2007 16:47:29
C:\Windows\System32\aswBoot.exe -->30/04/2007 17:46:10
C:\Windows\System32\AVASTSS.scr -->30/04/2007 17:35:28
C:\Windows\System32\mrt.exe -->27/04/2007 22:45:12
C:\Windows\System32\BitCometRes.dll -->25/04/2007 10:48:49

C:\Windows\QTFont.qfn -->10/05/2007 10:21:07
C:\Windows\WindowsUpdate.log -->10/05/2007 10:08:47
C:\Windows\ntbtlog.txt -->10/05/2007 10:06:21
C:\Windows\bootstat.dat -->10/05/2007 10:04:52
C:\Windows\AvxOnline.log -->09/05/2007 23:38:56
C:\Windows\gmer.ini -->09/05/2007 23:29:57
C:\Windows\gmer_uninstall.cmd -->09/05/2007 23:29:56
C:\Windows\gmer.dll -->09/05/2007 23:29:56
C:\Windows\NeroDigital.ini -->09/05/2007 21:51:09
C:\Windows\QTFont.for -->09/05/2007 17:31:20
C:\Windows\process.tx -->09/05/2007 10:13:36
C:\Windows\msnfix.txt -->09/05/2007 10:13:36
C:\Windows\Cfreer.exe -->08/05/2007 12:48:11
C:\Windows\win.ini -->08/05/2007 10:14:22
C:\Windows\setupact.log -->02/05/2007 22:53:01

Le volume dans le lecteur C s'appelle ACER
Le numéro de série du volume est 900D-B3E6

Répertoire de C:\Windows\system32

02/11/2006 11:45 7 680 csrss.exe
1 fichier(s) 7 680 octets
0 Rép(s) 10 711 601 152 octets libres

Contenu de Downloaded Program Files
Le volume dans le lecteur C s'appelle ACER
Le numéro de série du volume est 900D-B3E6

Répertoire de C:\Windows\Downloaded Program Files

09/05/2007 23:17 <REP> .
09/05/2007 23:17 <REP> ..
21/03/2002 15:26 815 bitdefender.inf
30/01/2003 16:52 348 160 bitdefender.ocx
18/09/2006 23:26 65 desktop.ini
25/07/2002 17:13 24 576 dwusplay.dll
25/07/2002 17:13 196 608 dwusplay.exe
12/07/2000 02:02 36 864 fxfileop.dll
11/08/2005 15:30 417 792 isusweb.dll
08/08/2006 11:45 576 kavwebscan.inf
31/10/2001 10:37 118 uninst.bat
9 fichier(s) 1 025 574 octets

Total des fichiers listés :
9 fichier(s) 1 025 574 octets
2 Rép(s) 10 711 601 152 octets libres

Recherche de rootkit! (Merci S!Ri)

Recherche d'infections connues

catchme 0.3.660 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2007-05-10 10:33:23
Windows 6.0.6000 NTFS

scanning hidden processes ...

scanning hidden services ...

scanning hidden autostart entries ...

scanning hidden files ...

C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\charlyleblay@msn.com\DFSR\Staging\CS{6128C3AC-3216-AEAD-8D7F-D1DF6C82EB86}\01\11-{6128C3AC-3216-AEAD-8D7F-D1DF6C82EB86}-v1-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v11-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\charlyleblay@msn.com\DFSR\Staging\CS{6128C3AC-3216-AEAD-8D7F-D1DF6C82EB86}\87\4992-{96D01F6E-6656-40D3-BF4C-F03BEE309368}-v4987-{96D01F6E-6656-40D3-BF4C-F03BEE309368}-v4992-Partial.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 551406 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\charlyleblay@msn.com\DFSR\Staging\CS{6128C3AC-3216-AEAD-8D7F-D1DF6C82EB86}\87\4992-{96D01F6E-6656-40D3-BF4C-F03BEE309368}-v4987-{96D01F6E-6656-40D3-BF4C-F03BEE309368}-v4992-Partial.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 38334 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\charlyleblay@msn.com\DFSR\Staging\CS{6128C3AC-3216-AEAD-8D7F-D1DF6C82EB86}\87\4992-{96D01F6E-6656-40D3-BF4C-F03BEE309368}-v4987-{96D01F6E-6656-40D3-BF4C-F03BEE309368}-v4992-Partial.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 19400 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\florence.juillard@wanadoo.fr\DFSR\Staging\CS{2436D614-F28A-9FF3-837F-B56D941D61AC}\01\13-{2436D614-F28A-9FF3-837F-B56D941D61AC}-v1-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v13-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mag_20046@hotmail.com\DFSR\Staging\CS{43EC47D4-8991-8B0E-870A-060187D06657}\01\15-{43EC47D4-8991-8B0E-870A-060187D06657}-v1-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v15-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\58\358-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v358-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v358-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 14322 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\58\358-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v358-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v358-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1592 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\00\500-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v500-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v500-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 14700 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\00\500-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v500-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v500-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1648 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\01\501-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v501-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v501-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 12126 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\01\501-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v501-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v501-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1336 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\02\502-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v502-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v502-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 13710 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\02\502-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v502-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v502-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1504 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\03\330-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v503-{EE45385D-1EE7-4C37-8C3B-7878D7811FE7}-v330-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 14448 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\03\330-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v503-{EE45385D-1EE7-4C37-8C3B-7878D7811FE7}-v330-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1576 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\04\504-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v504-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v504-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 11838 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\04\504-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v504-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v504-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1320 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\05\505-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v505-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v505-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 14358 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\05\505-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v505-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v505-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1600 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\06\506-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v506-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v506-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7878 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\06\506-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v506-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v506-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 896 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\07\507-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v507-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v507-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8040 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\07\507-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v507-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v507-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 888 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\08\508-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v508-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v508-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10254 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\08\508-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v508-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v508-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1160 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\09\509-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v509-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v509-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 6636 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\09\509-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v509-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v509-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 760 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\10\342-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v510-{EE45385D-1EE7-4C37-8C3B-7878D7811FE7}-v342-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9444 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\10\342-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v510-{EE45385D-1EE7-4C37-8C3B-7878D7811FE7}-v342-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1040 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\11\511-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v511-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v511-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7806 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\11\511-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v511-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v511-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 864 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\51\351-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v351-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v351-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 15618 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\51\351-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v351-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v351-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1784 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\52\352-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v352-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v352-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 17184 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\52\352-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v352-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v352-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1880 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\53\353-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v353-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v353-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 15366 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\53\353-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v353-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v353-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1696 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\54\354-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v354-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v354-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 16320 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\54\354-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v354-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v354-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1840 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\55\355-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v355-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v355-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 95898 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\55\355-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v355-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v355-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 10744 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\56\356-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v356-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v356-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 64686 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\56\356-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v356-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v356-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 7384 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\57\357-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v357-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v357-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 15114 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\57\357-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v357-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v357-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1656 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\59\359-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v359-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v359-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 17130 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\59\359-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v359-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v359-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1888 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\60\360-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v360-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v360-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 16878 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\60\360-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v360-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v360-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1880 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\61\361-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v361-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v361-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 16122 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\61\361-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v361-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v361-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1808 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\62\362-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v362-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v362-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 16842 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\62\362-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v362-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v362-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1904 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\63\363-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v363-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v363-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 17886 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\63\363-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v363-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v363-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1984 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\64\364-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v364-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v364-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 13980 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\64\364-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v364-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v364-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1544 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\65\365-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v365-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v365-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 14250 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\65\365-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v365-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v365-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1560 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\66\366-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v366-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v366-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 15420 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\66\366-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v366-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v366-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1680 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\67\367-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v367-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v367-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 15420 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\67\367-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v367-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v367-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1752 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\68\368-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v368-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v368-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10398 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\68\368-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v368-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v368-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1144 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\69\369-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v369-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v369-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 16932 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\69\369-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v369-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v369-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1872 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\70\370-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v370-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v370-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 14934 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\70\370-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v370-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v370-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1688 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\71\371-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v371-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v371-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7140 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\71\371-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v371-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v371-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 808 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\72\372-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v372-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v372-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 248826 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\72\372-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v372-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v372-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 27816 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\72\472-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v472-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v472-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 12108 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\72\472-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v472-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v472-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1360 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\mathieuktm@hotmail.com\DFSR\Staging\CS{E38DEABC-8978-D2B3-CD35-D94258414840}\73\285-
0
Réponse 64 / 134
Regis59 Messages postés 21143 Date d'inscription   Statut Contributeur sécurité Dernière intervention   1 322
 
Salut

Quels problemes restent ils?

A+
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 65 / 134
b-i-b-i Messages postés 166 Statut Membre 14
 
alors j'ai toujours plusieurs programment qui plantent quand j'esaye de les lancer.
j'ai l'explorateur windows qui plante quand je veux acceder à la corbeille.
je me suis apercu que j'avais des réglages de windows média player qui avaient changés.
donc il y à certainement des truc que je n'ai pas vu.
voila donc sois il reste encore des fichiers infectés, ou bien peut être qu'il faut que je répare windows.
mais ce qui m'étone c'est que la majorité de ces problemes (ex: plantage des logiciel) soient arrivés un peu apres qu'on ai essayé de supprimer le virus ...
a bientot
0
Réponse 66 / 134
b-i-b-i Messages postés 166 Statut Membre 14
 
up
0
GrenOuille
 
Salut b-i-b-i

En attendant le retour de Philae, je me permet une petite incruste.

Pour la corbeille, possible que ce soit les nombreux fichiers vidéos (avi) qu'elle contient, qui font planter l'explorateur au moment de l'ouvrir.
Ca peut paraître bête comme question, mais pour éviter de passer par l'explorateur, est-ce que tu as essayé de la vider en faisant un clic droit >> Vider ?

Ou bien, essaye de faire un clic droit sur l'icône de la poubelle >> Propriétés et déplace le curseur qui gère la taille de sa capacité, vers la droite.
Valide et réessaye de la vider.

Si ça ne marche toujours pas, rends toi directement, après avoir rendu visible les fichiers cachés et système, dans le dossier:
C:\$RECYCLE.BIN
Ouvre le dossier: S-1-5-21-2424384237-410969719-3201962500-1000
Et supprime tout ce qu'il y a, à l'intérieur avec la combinaison de touche: MAJ+SUPPR
Rééssaye ensuite d'accéder à la poubelle normalement.
Si tu as pu supprimer ce qu'elle contenait, l'explorateur ne devrait plus planter à la prochaine tentative pour l'ouvrir.

Sinon côté viral, le rapport Diaghelp (il manque la fin...), mentionne encore la présence du fichier:
C:\Windows\Cfreer.exe
Vérifie (après avoir rendu visible les fichiers cachés et système) et supprime-le s'il existe toujours.

Tu peux aussi faire analyser ce fichier s'il existe, ici:
http://www.virustotal.com/en/virustotalx.html

C:\Windows\system32\drivers\musm3gld.sys (aucunes références sur le net...)

Sur le site, clic sur "parcourir", selectionne via l'explorateur de fichier, C:\Windows\system32\drivers\musm3gld.sys, valide et clic sur "Send".
Copie et colle le rapport ici.

a++ et bon courage :-)
0
Réponse 67 / 134
b-i-b-i Messages postés 166 Statut Membre 14
 
voila la fin du rapport diagjelp. j'avais pas vu qu'apres l'avoir collé il manquait la fin.
effectivement pour la corbeille sa paraissait bête mais la premiere solution à marchée et sa ne plante plus.
je vais maintenant m'interesser au fichier que tum'a dit

C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\46\246-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v246-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v246-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 2856 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\46\246-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v246-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v246-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 320 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\00\300-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v300-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v300-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3432 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\00\300-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v300-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v300-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 384 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\01\12-{41AFDA17-7C48-337C-C8EF-C080DE08E44A}-v1-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v12-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\01\301-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v301-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v301-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3288 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\01\301-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v301-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v301-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 376 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\02\302-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v302-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v302-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3468 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\02\302-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v302-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v302-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 384 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\03\303-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v303-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v303-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 2964 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\03\303-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v303-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v303-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 320 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\04\304-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v304-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v304-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 2856 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\04\304-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v304-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v304-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 320 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\05\305-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v305-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v305-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3000 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\05\305-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v305-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v305-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 320 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\06\306-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v306-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v306-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 2946 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\06\306-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v306-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v306-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 344 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\07\307-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v307-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v307-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3342 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\07\307-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v307-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v307-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 360 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\08\308-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v308-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v308-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3378 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\08\308-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v308-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v308-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 376 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\09\309-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v309-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v309-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3324 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\09\309-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v309-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v309-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 384 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\10\310-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v310-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v310-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3666 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\10\310-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v310-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v310-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 384 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\11\311-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v311-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v311-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3612 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\11\311-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v311-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v311-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 384 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\12\312-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v312-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v312-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3450 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\12\312-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v312-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v312-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 384 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\18\518-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v518-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v518-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 19848 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\18\518-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v518-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v518-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 1452 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\18\518-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v518-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v518-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 2184 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\19\519-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v519-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v519-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 48504 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\19\519-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v519-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v519-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 3612 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\19\519-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v519-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v519-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 5472 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\20\520-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v520-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v520-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8040 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\20\520-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v520-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v520-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 912 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\21\521-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v521-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v521-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 93900 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\21\521-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v521-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v521-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 6582 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\21\521-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v521-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v521-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 10752 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\22\522-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v522-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v522-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 64758 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\22\522-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v522-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v522-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 4440 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\22\522-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v522-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v522-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 7112 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\24\224-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v224-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v224-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 45930 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\24\224-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v224-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v224-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 3288 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\24\224-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v224-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v224-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 5320 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\26\226-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v226-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v226-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 2856 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\26\226-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v226-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v226-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 304 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\27\227-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v227-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v227-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 2730 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\27\227-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v227-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v227-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 312 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\28\228-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v228-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v228-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3126 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\28\228-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v228-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v228-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 336 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\28\474-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v528-{E2875F94-B978-4C7D-BA46-6853FB36B31A}-v474-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9318 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\28\474-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v528-{E2875F94-B978-4C7D-BA46-6853FB36B31A}-v474-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1056 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\29\229-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v229-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v229-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3270 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\29\229-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v229-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v229-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 368 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\30\230-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v230-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v230-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3630 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\30\230-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v230-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v230-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 384 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\31\231-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v231-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v231-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3450 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\31\231-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v231-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v231-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 384 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\32\232-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v232-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v232-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3468 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\32\232-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v232-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v232-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 392 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\33\233-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v233-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v233-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3648 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\33\233-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v233-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v233-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 392 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\34\234-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v234-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v234-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3540 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\34\234-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v234-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v234-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 392 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\35\235-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v235-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v235-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 2766 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\35\235-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v235-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v235-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 304 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\35\435-{E2875F94-B978-4C7D-BA46-6853FB36B31A}-v435-{E2875F94-B978-4C7D-BA46-6853FB36B31A}-v435-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 113832 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\36\236-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v236-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v236-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 2496 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\36\236-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v236-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v236-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 296 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\37\237-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v237-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v237-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 2820 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\37\237-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v237-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v237-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 344 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\38\238-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v238-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v238-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3198 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\38\238-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v238-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v238-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 360 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\39\239-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v239-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v239-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3342 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\39\239-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v239-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v239-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 376 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\40\240-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v240-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v240-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3270 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\40\240-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v240-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v240-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 368 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\41\241-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v241-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v241-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3414 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\41\241-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v241-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v241-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 376 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\42\242-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v242-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v242-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3432 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\42\242-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v242-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v242-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 384 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\43\243-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v243-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v243-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3288 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\43\243-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v243-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v243-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 376 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\44\244-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v244-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v244-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3468 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\44\244-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v244-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v244-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 384 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\45\245-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v245-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v245-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 2964 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\45\245-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v245-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v245-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 320 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\47\247-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v247-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v247-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3000 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\47\247-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v247-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v247-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 320 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\48\248-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v248-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v248-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 2946 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\48\248-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v248-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v248-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 344 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\49\249-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v249-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v249-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3342 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\49\249-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v249-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v249-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 360 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\50\250-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v250-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v250-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3378 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\50\250-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v250-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v250-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 376 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\51\251-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v251-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v251-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3324 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\51\251-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v251-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v251-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 384 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\52\252-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v252-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v252-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3666 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\52\252-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v252-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v252-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 384 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\53\253-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v253-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v253-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3612 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\53\253-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v253-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v253-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 384 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\54\254-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v254-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v254-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3450 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\54\254-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v254-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v254-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 384 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\84\284-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v284-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v284-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 2856 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\84\284-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v284-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v284-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 304 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\85\285-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v285-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v285-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 2730 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\85\285-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v285-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v285-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 312 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\86\286-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v286-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v286-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3126 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\86\286-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v286-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v286-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 336 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\87\287-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v287-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v287-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3270 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\87\287-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v287-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v287-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 368 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\88\288-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v288-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v288-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3630 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\88\288-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v288-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v288-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 384 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\89\289-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v289-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v289-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3450 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\89\289-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v289-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v289-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 384 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\90\290-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v290-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v290-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3468 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\90\290-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v290-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v290-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 392 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\91\291-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v291-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v291-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3648 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\91\291-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v291-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v291-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 392 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\92\292-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v292-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v292-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3540 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\92\292-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v292-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v292-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 392 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\93\293-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v293-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v293-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 2766 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\93\293-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v293-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v293-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 304 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\94\294-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v294-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v294-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 2496 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\94\294-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v294-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v294-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 296 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\95\295-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v295-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v295-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 2820 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\95\295-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v295-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v295-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 344 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\96\296-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v296-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v296-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3198 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\96\296-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v296-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v296-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 360 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\97\297-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v297-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v297-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3342 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\97\297-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v297-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v297-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 376 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\98\298-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v298-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v298-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3270 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\98\298-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v298-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v298-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 368 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\99\299-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v299-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v299-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3414 bytes hidden from API
C:\Users\ROMAIN\AppData\Local\Microsoft\Messenger\romchab@hotmail.com\SharingMetadata\yaya_kayak@hotmail.fr\DFSR\Staging\CS{41AFDA17-7C48-337C-C8EF-C080DE08E44A}\99\299-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v299-{A8A32D34-5092-4B04-AF0B-ABBF954D56ED}-v299-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 376 bytes hidden from API

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 321

Le volume dans le lecteur C s'appelle ACER
Le numéro de série du volume est 900D-B3E6

Répertoire de C:\Program Files

09/05/2007 16:40 <REP> .
09/05/2007 16:40 <REP> ..
02/04/2007 17:01 <REP> Acer
02/04/2007 16:07 <REP> Acer Arcade Deluxe
02/04/2007 17:13 <REP> Acer Inc
13/04/2007 23:57 <REP> Adobe
02/04/2007 20:54 <REP> Ahead
02/04/2007 20:01 <REP> Alwil Software
02/04/2007 17:00 <REP> Atheros
02/04/2007 20:00 <REP> AV Music Morpher Gold
02/04/2007 19:41 <REP> Bethesda Softworks
04/05/2007 22:01 <REP> BitComet
16/04/2007 20:55 <REP> CamStudio
03/04/2007 21:43 <REP> Common Files
05/12/2006 01:34 <REP> CONEXANT
05/12/2006 01:41 <REP> CyberLink
23/04/2007 16:39 <REP> Dictionnaire
05/05/2007 13:09 <REP> Fake Webcam
14/04/2007 11:36 <REP> Google
09/05/2007 18:15 <REP> Hijackthis Version Française
05/12/2006 01:23 <REP> Intel
09/05/2007 23:20 <REP> Internet Explorer
02/04/2007 16:18 <REP> Launch Manager
02/04/2007 19:57 <REP> Messenger
24/04/2007 12:31 <REP> Messenger Plus! Live
09/05/2007 16:40 <REP> Microsoft CAPICOM 2.1.0.2
02/11/2006 14:37 <REP> Microsoft Games
02/04/2007 20:37 <REP> Microsoft Office
02/04/2007 20:37 <REP> Microsoft Visual Studio
02/04/2007 20:33 <REP> Microsoft Visual Studio 8
02/04/2007 20:37 <REP> Microsoft Works
02/04/2007 20:36 <REP> Microsoft.NET
02/11/2006 14:42 <REP> Movie Maker
02/04/2007 20:37 <REP> MSBuild
02/11/2006 14:37 <REP> MSN
03/04/2007 11:42 <REP> MSN Messenger
02/04/2007 19:57 <REP> MSN Pictures Displayer
03/04/2007 01:21 <REP> MSXML 4.0
05/12/2006 01:39 <REP> NewTech Infosystems
11/04/2007 11:44 <REP> QuickTime
02/04/2007 16:33 <REP> Realtek
02/11/2006 14:37 <REP> Reference Assemblies
05/12/2006 01:37 <REP> SMSC
22/04/2007 17:47 <REP> Spybot - Search & Destroy
05/12/2006 01:31 <REP> Synaptics
05/05/2007 13:07 <REP> TechSmith
23/04/2007 11:07 <REP> TimeLeft3
05/05/2007 16:22 <REP> Ultra Video Splitter
11/04/2007 11:41 <REP> VideoLAN
02/11/2006 14:42 <REP> Windows Calendar
02/11/2006 14:42 <REP> Windows Collaboration
13/04/2007 03:36 <REP> Windows Defender
02/11/2006 14:42 <REP> Windows Journal
07/05/2007 19:41 <REP> Windows Live Safety Center
09/05/2007 16:44 <REP> Windows Mail
05/05/2007 13:07 <REP> Windows Media Components
03/04/2007 20:57 <REP> Windows Media Player
02/04/2007 16:13 <REP> Windows NT
02/11/2006 14:42 <REP> Windows Photo Gallery
02/11/2006 14:42 <REP> Windows Sidebar
23/04/2007 19:51 <REP> WinRAR
02/04/2007 16:17 <REP> Yahoo!
0 fichier(s) 0 octets
62 Rép(s) 10 607 775 744 octets libres
Le volume dans le lecteur C s'appelle ACER
Le numéro de série du volume est 900D-B3E6

Répertoire de C:\Program Files\fichiers communs

Le volume dans le lecteur C s'appelle ACER
Le numéro de série du volume est 900D-B3E6

Répertoire de C:\Program Files\fichiers communs\Microsoft Shared\Web Folders

02/04/2007 20:37 <REP> .
02/04/2007 20:37 <REP> ..
02/04/2007 20:32 <REP> 1036
26/10/2006 20:12 40 256 MSOSV.DLL
1 fichier(s) 40 256 octets
3 Rép(s) 10 607 775 744 octets libres
Le volume dans le lecteur C s'appelle ACER
Le numéro de série du volume est 900D-B3E6

Répertoire de C:\Program Files\common files

03/04/2007 21:43 <REP> .
03/04/2007 21:43 <REP> ..
03/04/2007 21:43 <REP> Adobe
03/04/2007 21:43 <REP> Adobe Systems Shared
02/04/2007 20:47 <REP> Ahead
02/04/2007 20:37 <REP> DESIGNER
02/04/2007 16:16 <REP> InstallShield
05/12/2006 01:39 <REP> LightScribe
02/04/2007 17:01 <REP> Logitech
02/04/2007 20:37 <REP> microsoft shared
05/12/2006 01:39 <REP> muvee Technologies
02/04/2007 20:49 <REP> Nero
05/12/2006 01:39 <REP> NewTech Infosystems
02/11/2006 13:18 <REP> Services
02/11/2006 13:18 <REP> SpeechEngines
02/04/2007 19:57 <REP> Symantec Shared
02/04/2007 20:33 <REP> System
0 fichier(s) 0 octets
17 Rép(s) 10 607 771 648 octets libres
Le volume dans le lecteur C s'appelle ACER
Le numéro de série du volume est 900D-B3E6

Répertoire de C:\

08/05/2007 11:48 68 096 diff.exe
08/05/2007 11:48 103 424 grep.exe
2 fichier(s) 171 520 octets
0 Rép(s) 10 607 771 648 octets libres
c:\Users\ROMAIN\Documents\documents romain\coucher\coucher.exe
c:\Users\ROMAIN\Documents\programme\ActiveScreenLock.exe
c:\Users\ROMAIN\Documents\programme\Atmn-Anywhere-setup200.exe
c:\Users\ROMAIN\Documents\programme\Atmn-Anywhere-setup300.exe
c:\Users\ROMAIN\Documents\programme\audacity-win-1.2.6.exe
c:\Users\ROMAIN\Documents\programme\BitComet_0.77_setup.exe
c:\Users\ROMAIN\Documents\programme\Camtasia_3.0.exe
c:\Users\ROMAIN\Documents\programme\GLF69.tmp.exe
c:\Users\ROMAIN\Documents\programme\gm_setup.exe
c:\Users\ROMAIN\Documents\programme\install_emp.exe
c:\Users\ROMAIN\Documents\programme\LimeWireWin.exe
c:\Users\ROMAIN\Documents\programme\QuickTimeInstaller.exe
c:\Users\ROMAIN\Documents\programme\UpdWPInstall.exe
c:\Users\ROMAIN\Documents\programme\vcsdemo.exe
c:\Users\ROMAIN\Documents\programme\vlc-0.8.5-win32.exe
c:\Users\ROMAIN\Documents\programme\adobe after effect\ae7keygen.exe
c:\Users\ROMAIN\Documents\programme\adobe after effect\Setup.exe
c:\Users\ROMAIN\Documents\programme\adobe after effect\Program Files\Adobe\Adobe After Effects 7.0\Support Files\AELinkServer.exe
c:\Users\ROMAIN\Documents\programme\adobe after effect\Program Files\Adobe\Adobe After Effects 7.0\Support Files\aerender.exe
c:\Users\ROMAIN\Documents\programme\adobe after effect\Program Files\Adobe\Adobe After Effects 7.0\Support Files\AfterFX.exe
c:\Users\ROMAIN\Documents\programme\VNC_3.3.7\Setup_x86_w32.exe
c:\Users\ROMAIN\Documents\programme\VNC_3.3.7\patch_fr\vncviewer.exe
c:\Users\ROMAIN\Documents\programme\VNC_3.3.7\patch_fr\winvnc.exe

Liste des drivers...

< Microsoft (R) Windows (R) Version 6.0 (Build 6000)
< 5 10 2007 10:44:09.375
< Loaded driver \SystemRoot\system32\ntkrnlpa.exe
< Loaded driver \SystemRoot\system32\hal.dll
< Loaded driver \SystemRoot\system32\kdcom.dll
< Loaded driver \SystemRoot\system32\mcupdate_GenuineIntel.dll
< Loaded driver \SystemRoot\system32\PSHED.dll
< Loaded driver \SystemRoot\system32\BOOTVID.dll
< Loaded driver \SystemRoot\system32\CLFS.SYS
< Loaded driver \SystemRoot\system32\CI.dll
< Loaded driver \SystemRoot\system32\drivers\Wdf01000.sys
< Loaded driver \SystemRoot\system32\drivers\WDFLDR.SYS
< Loaded driver \SystemRoot\system32\drivers\acpi.sys
< Loaded driver \SystemRoot\system32\drivers\WMILIB.SYS
< Loaded driver \SystemRoot\system32\drivers\msisadrv.sys
< Loaded driver \SystemRoot\system32\drivers\pci.sys
< Loaded driver \SystemRoot\system32\drivers\volmgr.sys
< Loaded driver \SystemRoot\system32\DRIVERS\compbatt.sys
< Loaded driver \SystemRoot\system32\DRIVERS\BATTC.SYS
< Loaded driver \SystemRoot\System32\drivers\mountmgr.sys
< Loaded driver \SystemRoot\system32\DRIVERS\pcmcia.sys
< Loaded driver \SystemRoot\system32\DRIVERS\pciide.sys
< Loaded driver \SystemRoot\system32\DRIVERS\PCIIDEX.SYS
< Loaded driver \SystemRoot\System32\Drivers\UBHelper.sys
< Loaded driver \SystemRoot\System32\drivers\volmgrx.sys
< Loaded driver \SystemRoot\system32\drivers\atapi.sys
< Loaded driver \SystemRoot\system32\drivers\ataport.SYS
< Loaded driver \SystemRoot\system32\drivers\fltmgr.sys
< Loaded driver \SystemRoot\system32\drivers\fileinfo.sys
< Loaded driver \SystemRoot\system32\DRIVERS\PxHelp20.sys
< Loaded driver \SystemRoot\system32\drivers\ndis.sys
< Loaded driver \SystemRoot\system32\drivers\msrpc.sys
< Loaded driver \SystemRoot\system32\drivers\NETIO.SYS
< Loaded driver \SystemRoot\System32\Drivers\Ntfs.sys
< Loaded driver \SystemRoot\System32\Drivers\ksecdd.sys
< Loaded driver \SystemRoot\system32\drivers\volsnap.sys
< Loaded driver \SystemRoot\System32\Drivers\spldr.sys
< Loaded driver \SystemRoot\System32\drivers\partmgr.sys
< Loaded driver \SystemRoot\System32\Drivers\mup.sys
< Loaded driver \SystemRoot\System32\drivers\ecache.sys
< Loaded driver \SystemRoot\system32\drivers\disk.sys
< Loaded driver \SystemRoot\system32\drivers\CLASSPNP.SYS
< Loaded driver \SystemRoot\system32\drivers\crcdisk.sys
< Loaded driver \SystemRoot\system32\DRIVERS\tunnel.sys
< Loaded driver \SystemRoot\system32\DRIVERS\tunmp.sys
< Loaded driver \SystemRoot\system32\DRIVERS\intelppm.sys
< Loaded driver \SystemRoot\system32\DRIVERS\wmiacpi.sys
< Loaded driver \SystemRoot\System32\drivers\dxgkrnl.sys
< Loaded driver \SystemRoot\system32\DRIVERS\nvlddmkm.sys
< Loaded driver \SystemRoot\system32\DRIVERS\HDAudBus.sys
< Loaded driver \SystemRoot\system32\DRIVERS\NETw3v32.sys
< Loaded driver \SystemRoot\system32\DRIVERS\usbuhci.sys
< Loaded driver \SystemRoot\system32\DRIVERS\usbehci.sys
< Loaded driver \SystemRoot\system32\DRIVERS\bcm4sbxp.sys
< Loaded driver \SystemRoot\system32\DRIVERS\EMS7SK.sys
< Loaded driver \SystemRoot\system32\DRIVERS\sdbus.sys
< Loaded driver \SystemRoot\system32\DRIVERS\ESM7SK.sys
< Loaded driver \SystemRoot\system32\DRIVERS\ESD7SK.sys
< Loaded driver \SystemRoot\system32\DRIVERS\CmBatt.sys
< Loaded driver \SystemRoot\system32\DRIVERS\DKbFltr.sys
< Loaded driver \SystemRoot\system32\DRIVERS\SynTP.sys
< Loaded driver \SystemRoot\system32\DRIVERS\NTIDrvr.sys
< Loaded driver \SystemRoot\system32\DRIVERS\msiscsi.sys
< Loaded driver \SystemRoot\system32\DRIVERS\umbus.sys
< Loaded driver \SystemRoot\System32\drivers\vga.sys
< Loaded driver \SystemRoot\system32\DRIVERS\monitor.sys
< Loaded driver \SystemRoot\system32\DRIVERS\usbhub.sys
< Loaded driver \SystemRoot\system32\drivers\RTKVHDA.sys
< Loaded driver \SystemRoot\system32\DRIVERS\HSXHWAZL.sys
< Loaded driver \SystemRoot\system32\DRIVERS\HSX_DPV.sys
< Loaded driver \SystemRoot\system32\DRIVERS\HSX_CNXT.sys
< Loaded driver \SystemRoot\system32\drivers\modem.sys
< Loaded driver \SystemRoot\system32\DRIVERS\lv321av.sys
< Did not load driver \SystemRoot\system32\DRIVERS\kbdhid.sys
< Loaded driver \SystemRoot\system32\drivers\rdpencdd.sys
< Loaded driver \SystemRoot\System32\DRIVERS\rasacd.sys
< Loaded driver \SystemRoot\System32\drivers\tcpip.sys
< Loaded driver \SystemRoot\system32\DRIVERS\tdx.sys
< Loaded driver \SystemRoot\system32\DRIVERS\smb.sys
< Loaded driver \SystemRoot\System32\Drivers\aswTdi.SYS
< Loaded driver \SystemRoot\system32\drivers\afd.sys
< Loaded driver \SystemRoot\System32\Drivers\aswRdr.SYS
< Loaded driver \SystemRoot\System32\DRIVERS\netbt.sys
< Loaded driver \SystemRoot\system32\DRIVERS\pacer.sys
< Loaded driver \SystemRoot\system32\DRIVERS\wanarp.sys
< Loaded driver \??\C:\PROGRA~1\LAUNCH~1\DPortIO.sys
< Loaded driver \SystemRoot\system32\drivers\nsiproxy.sys
< Loaded driver \SystemRoot\System32\Drivers\dfsc.sys
< Loaded driver \SystemRoot\system32\drivers\luafv.sys
< Loaded driver \SystemRoot\system32\DRIVERS\aswMonFlt.sys
< Loaded driver \SystemRoot\system32\drivers\drmkaud.sys
< Loaded driver \SystemRoot\system32\DRIVERS\irda.sys
< Loaded driver \SystemRoot\system32\DRIVERS\lltdio.sys
< Loaded driver \SystemRoot\system32\DRIVERS\nwifi.sys
< Loaded driver \SystemRoot\system32\DRIVERS\ndisuio.sys
< Loaded driver \SystemRoot\system32\DRIVERS\rspndr.sys
< Loaded driver \SystemRoot\system32\drivers\HTTP.sys
< Loaded driver \SystemRoot\System32\DRIVERS\srvnet.sys
< Loaded driver \SystemRoot\system32\DRIVERS\bowser.sys
< Loaded driver \SystemRoot\System32\drivers\mpsdrv.sys
< Loaded driver \SystemRoot\system32\drivers\mrxdav.sys
< Loaded driver \SystemRoot\system32\DRIVERS\mrxsmb10.sys
< Loaded driver \SystemRoot\system32\DRIVERS\mrxsmb20.sys
< Loaded driver \SystemRoot\System32\DRIVERS\srv2.sys
< Loaded driver \SystemRoot\System32\DRIVERS\srv.sys
< Did not load driver \SystemRoot\System32\DRIVERS\srv.sys
< Loaded driver \??\C:\Acer\Empowering Technology\eRecovery\int15.sys
< Loaded driver \SystemRoot\system32\DRIVERS\mdmxsdk.sys
< Loaded driver \??\C:\Windows\system32\drivers\musm3gld.sys
< Loaded driver \SystemRoot\system32\drivers\peauth.sys
< Loaded driver \SystemRoot\System32\Drivers\secdrv.SYS
< Loaded driver \SystemRoot\System32\drivers\tcpipreg.sys
< Loaded driver \SystemRoot\system32\DRIVERS\xaudio.sys
0
Réponse 68 / 134
b-i-b-i Messages postés 166 Statut Membre 14
 
voila le dernier rapport sur le fichier.
apparament de ce coté là c'est clean, par contre même si la corbeille remarche, j'ai toujours des programmes qui refusent de marcher !!!

Complete scanning result of "musm3gld.sys", received in VirusTotal at 05.10.2007, 22:46:30 (CET).

AhnLab-V3 2007.5.10.0 05.10.2007 no virus found
AntiVir 7.4.0.15 05.10.2007 no virus found
Authentium 4.93.8 05.10.2007 no virus found
Avast 4.7.997.0 05.10.2007 no virus found
AVG 7.5.0.467 05.10.2007 no virus found
BitDefender 7.2 05.10.2007 no virus found
CAT-QuickHeal 9.00 05.10.2007 no virus found
ClamAV devel-20070416 05.10.2007 no virus found
DrWeb 4.33 05.10.2007 no virus found
eSafe 7.0.15.0 05.10.2007 no virus found
eTrust-Vet 30.7.3624 05.10.2007 no virus found
Ewido 4.0 05.10.2007 no virus found
FileAdvisor 1 05.10.2007 no virus found
Fortinet 2.85.0.0 05.10.2007 no virus found
F-Prot 4.3.2.48 05.10.2007 no virus found
F-Secure 6.70.13030.0 05.10.2007 no virus found
Ikarus T3.1.1.7 05.10.2007 no virus found
Kaspersky 4.0.2.24 05.10.2007 no virus found
McAfee 5028 05.10.2007 no virus found
Microsoft 1.2503 05.10.2007 no virus found
NOD32v2 2256 05.10.2007 no virus found
Norman 5.80.02 05.10.2007 no virus found
Panda 9.0.0.4 05.10.2007 no virus found
Prevx1 V2 05.10.2007 no virus found
Sophos 4.17.0 05.08.2007 no virus found
Sunbelt 2.2.907.0 05.05.2007 no virus found
Symantec 10 05.10.2007 no virus found
TheHacker 6.1.6.112 05.10.2007 no virus found
0
Réponse 69 / 134
philae83 Messages postés 12854 Statut Contributeur sécurité 206
 
bonsoir TLM

bibi j'avais demandé de l'aide concernant ton topic car j'avoue que c'est étrange ton infection par MSN. Le fix ayant été mis à jour, les exe on les retrouve encore.....

merci à grenouille d'être passé.
ce fichier Cfreer.exe était dans le fix de MSNFix, d'où le fait que je sois paumée. Il est infectieux et à virer bien sûr.
Je n'ai pas encore eu le temps de regarder tout ton rapport.

bibi as tu fait ce que te demandais grenouille ?

0
Réponse 70 / 134
b-i-b-i Messages postés 166 Statut Membre 14
 
oui j'ai fais tout ce que m'a dit grenouille...
mais concernant la mise à jour msnfix je ne suis pas tout à fait convaincu car des potes ont étés infectés je leur ai filé la mise à jour et le virus fais toujours effet... je recois régulierement lemême message en espagnol !!!
pour le fichier cferr.exe je viens de le virer car msnfix ne l'avait pas viré
0
Réponse 71 / 134
Lyonnais92 Messages postés 25708 Statut Contributeur sécurité 1 537
 
Bonsoir,

b-i-b-i, tu ne détruits pas le fichier que tu viens de soumettre à Virustotal. Je vais te le faire envoyer à 2 adresses, et cela ne m'étonnerait pas que GrenOuille te le demande aussi.

Mais il me faut un peu de temps pour trouver les liens.
@+
0
Réponse 72 / 134
b-i-b-i Messages postés 166 Statut Membre 14
 
oki sa marche
0
Réponse 73 / 134
Lyonnais92 Messages postés 25708 Statut Contributeur sécurité 1 537
 
Re,

La première est la même qu'au post 18 (liée à MSNFix)

http://upload.changelog.fr/

tu reprends les infos (pseudo, adresse, ..) du post 18.
et tu envoies
C:\Windows\system32\drivers\musm3gld.sys

Pour l'autre, tu cliques sur ce lien :
http://secubox.aldria.com/index.html
en bas de la page, a droite de "nous envoyer un fichier", clique sur "cliquer ici".

Dans la fenêtre qui s'ouvre, clique sur explorer et cherche
C:\Windows\system32\drivers\musm3gld.sys

Dans les commentaires, tu écris : Lyonnais92 a demandé que j'envoie ce fichier qui vient de ce post 'http://www.commentcamarche.net/forum/affich-2961953-virus-virus-espagnol-par-msn-need-help' . Le fichier a été soumis à Virustotal. Aucun scanner n'a rien décelé.

Et tu cliques sur envoyer.

Merci.

@+
0
Réponse 74 / 134
b-i-b-i Messages postés 166 Statut Membre 14
 
pour le premier fichier il m'envoie ce message

"Ce type de fichier n'est pas autorisé."
0
Réponse 75 / 134
b-i-b-i Messages postés 166 Statut Membre 14
 
j'ai envoyé le fichier sur le deuxieme lien, j'espere que sa a marché
0
Réponse 76 / 134
b-i-b-i Messages postés 166 Statut Membre 14
 
désolé les gars je vais dormir. si demain vous avez un moment pour continuer à m'aider sa serais vraiment cool.
et si je vois que vous m'avez laissé une manip à faire, je la ferais demain matin.
a bientot et merci
0
Réponse 77 / 134
GrenOuille
 
Salut à toutes, tous

Pour le fichier Cfreer.exe, il bien du être supprimé une première fois, le problème de sa réapparition vient peut-être en fait de la résistance de celui-ci juste après:

/!\ ... C:\Windows\system32\Negdo.exe

Possible que sa tentative de suppression échoué, ait régénéré ensuite Cfreer.exe, mais bon ce n'est qu'une pure supposition.

Sinon Philae, c'était bien vu d'utiliser OTMoveIt, bah... Manquait juste Cfreer.exe dans la liste :), lol :-p

Effectivement comme le pressentait lyonnais, b-i-b-i, si tu peux m'envoyer une copie de C:\Windows\system32\drivers\musm3gld.sys ici:
grenouille@trashmail.net
Ce serait sympa :-)

b-i-b-i, si tu as toujours un soucis avec les touche Windows+ALT, jettes un oeil ici:
http://www.hotline-pc.org/registre/vista-aero.html

Pour Adobe effect ou première je sais plus, c'est une version compatible Vista ?
Tu avais vérifié avant de le télécharger ?
Heum... ? Version crackée ?

a++

PS pour MSNfix:
echo Xeyu.exe >>%windir%\process.tx
0
philae83 Messages postés 12854 Statut Contributeur sécurité 206
 
bonsoir grenouille 
Sinon Philae, c'était bien vu d'utiliser OTMoveIt, bah... Manquait juste Cfreer.exe dans la liste :), lol :-p


heu je crois que j'en avais effectivement oublié un morceau en route
0
GrenOuille > philae83 Messages postés 12854 Statut Contributeur sécurité
 
Bonsoir Philae

Bah... ça arrive et vu le volume des rapports à interpréter, c'est très compréhensible !
Mais si j'en crois la qualité de tes interventions depuis le début de ce post, tu ne lâche pas l'affaire facilement :-) et c'est je pense le principal.
b-i-b-i je suis sur, doit apprécier. :-)

Bonne continuation !
0
philae83 Messages postés 12854 Statut Contributeur sécurité 206 > GrenOuille
 
merci Grenouille et bonne soirée

je ne plante pas les personnes ennuyée avec une infection, si je sèche, je demande de l'aide, comme ici par exemple. ça m'arrive.
bonne fin de soirée
0
!aur3n7
 
Bonjour à tous,

[quote]PS pour MSNfix:
echo Xeyu.exe >>%windir%\process.tx[/quote]

Corrigé, merci
0
Réponse 78 / 134
Lyonnais92 Messages postés 25708 Statut Contributeur sécurité 1 537
 
Bonsoir,

le message est arrivé.

Par contre, je préfererai que tu recommences la maneuvre avec virustotal. Si tu attends un peu, après le dernier scanner, des informations vont s'afficher. Il serait utile de les avoir.

Tu dois avoir la taille et le "MD5".

Merci.
@+
0
Réponse 79 / 134
b-i-b-i Messages postés 166 Statut Membre 14
 
ok je refais le scan avec virus total.
sinon pour windows+tab c'est bon sa remarche depuis hier.
ensuite pour adobe premiere pro... effectivement c'est un logiciel craqué mais qui fonctionnait très bien depuis 2 mois que je l'avais installé.
voilà j'attend la suite des instructions et dès que c'est finis je poste le rapport virus total.
et effectivement comme le soulignai grenouille, j'aprécie votre aide!!!
0
Réponse 80 / 134
b-i-b-i Messages postés 166 Statut Membre 14
 
oui c'est juste que j'avais oublié la fin du scan virus total, donc je le reposte

AhnLab-V3 2007.5.10.0 05.11.2007 no virus found
AntiVir 7.4.0.15 05.11.2007 no virus found
Authentium 4.93.8 05.10.2007 no virus found
Avast 4.7.997.0 05.11.2007 no virus found
AVG 7.5.0.467 05.10.2007 no virus found
BitDefender 7.2 05.11.2007 no virus found
CAT-QuickHeal 9.00 05.10.2007 no virus found
ClamAV devel-20070416 05.11.2007 no virus found
DrWeb 4.33 05.11.2007 no virus found
eSafe 7.0.15.0 05.10.2007 no virus found
eTrust-Vet 30.7.3627 05.11.2007 no virus found
Ewido 4.0 05.10.2007 no virus found
FileAdvisor 1 05.11.2007 no virus found
Fortinet 2.85.0.0 05.11.2007 no virus found
F-Prot 4.3.2.48 05.10.2007 no virus found
F-Secure 6.70.13030.0 05.11.2007 no virus found
Ikarus T3.1.1.7 05.11.2007 no virus found
Kaspersky 4.0.2.24 05.11.2007 no virus found
McAfee 5028 05.10.2007 no virus found
Microsoft 1.2503 05.11.2007 no virus found
NOD32v2 2257 05.11.2007 no virus found
Norman 5.80.02 05.10.2007 no virus found
Panda 9.0.0.4 05.10.2007 no virus found
Prevx1 V2 05.11.2007 no virus found
Sophos 4.17.0 05.08.2007 no virus found
Sunbelt 2.2.907.0 05.05.2007 no virus found
Symantec 10 05.11.2007 no virus found
TheHacker 6.1.6.112 05.10.2007 no virus found
VBA32 3.12.0 05.10.2007 no virus found
VirusBuster 4.3.7:9 05.10.2007 no virus found
Webwasher-Gateway 6.0.1 05.11.2007 no virus found

File size: 5513 bytes
MD5: 98d4411a2b4af0cc17e937a671cfafe4
SHA1: 57fce78d4588a37bd93d19360d44111a0a4d3c61
0

Discussions similaires

Softonic,est-ce un virus ?
techmel1 -
techmel1 -

6 réponses
Désinstaller Softonic
Diguimette -
lilidurhone -

5 réponses
Message Apple virus !!
Souclik67 -
MPMP10 -

3 réponses
Virus Altruistic
Mael03250 -
MisteryBean -

11 réponses