Probléme avec security toolbar 7.1

Résolu
samos -  
 afideg -
Bonjour, j'ai un gros souci avec mon ordi
plein de choses sont apparu .que faire?

j'ai "avast" ad-aware"et"spybot"
ils tournent bien et ils placent bien les problémes en quarantaine
par contre j'ai
*une nouvelle barre qui est apparu "security toolbar" en haut de ma page internet;

*j'ai 2 raccourcis nouveaux qui sont apparu sur mon bureau"online security guide" et "live safety center"

comment les supprimer et surtout ou les retrouver pour les supprimer définitivement
ils n'apparaissent pas dans"modifier ou suprimer".

*en bas a droite dans ma barre j'ai un triangle jaune avec un "!" dedans il est ecrit:

"your computer is infected with a black door trojan that allows the remote attackerto perform various malcious actions .
click this ballon to dowload malware removal software."

un autre mesage apparait ensuite:

"type:virus/network,worm.
damage level:hight
description:virus that infects executable files
recommedation immediately:delete:quarantine
protection:click this ballon to dowload certified antivirus software
system performance monitor: warning summary"

mais encore..

"summary:system performance sowed down by:47 pour cent
internet connection speed dereased by:39 pour cent
probable reason: spyware applications/adware popup windows.
click this ballon to dowload spywre scan tool to remove spyware/adware applications"

et aussi..

"security alert:spyware found
computer is infected whith last versions of psw .x-vir trojan
psw trojan seals your privat informaton such as:passwords,ip-adresses,credit card information,registration,detais,documents ,etc
click the baloon to remove psw.x-vir spware"

et enfin...

"system alert:trojan-spy.win 32 @mx
type:spyware/trojan
vulnerable:windows 95/98/me/nt/2003/windows.xp
description/spyware program that sends confidential information to a remote attacker
protection/click the baloon to download official security"


et en même temps des pages internet s'ouvre toujours

voici les sites:

"http://www.savetheinformation.com/v6/?gai=hamm_h5_pop&gli=pop_1&gff=hamm_15005_90b5ee3f%202604973B67134AF2BC342D5EB471B60E&eai=hamm_h5_pop&eli=pop_1&eaf=hamm_15005_90b5ee3f%202604973B67134AF2BC342D5EB471B60E&air=hamm_h5_pop&lir=pop_1&afr=hamm_15005_90b5ee3f%202604973B67134AF2BC342D5EB471B60E"

et...

http://www.savetheinformation.com/v5/?gai=hamm_h5_pop&gli=pop_1&gff=hamm_15005_90b5ee3f%202604973B67134AF2BC342D5EB471B60E&eai=hamm_h5_pop&eli=pop_1&eaf=hamm_15005_90b5ee3f%202604973B67134AF2BC342D5EB471B60E&air=hamm_h5_pop&lir=pop_1&afr=hamm_15005_90b5ee3f%202604973B67134AF2BC342D5EB471B60E

et....
http://www.savetheinformation.com/v1/?gai=hamm_h5_pop&gli=pop_1&gff=hamm_15005_90b5ee3f%202604973B67134AF2BC342D5EB471B60E&eai=hamm_h5_pop&eli=pop_1&eaf=hamm_15005_90b5ee3f%202604973B67134AF2BC342D5EB471B60E&air=hamm_h5_pop&lir=pop_1&afr=hamm_15005_90b5ee3f%202604973B67134AF2BC342D5EB471B60E


alors pouvez vous me dire si tout ça est lié
et surtout ce que je peut faire pour rétablir les erreurs qui arrivent ?

merci encore j'attend une réponse avec impatience
aurevoir
A voir également:

123 réponses

samos
 
desolé ça vient
j'avais oublié de le nommer oups!!!
0
samos
 
voici le rapport:

ComboFix 07-11-08.1 - HP_Propriétaire 2007-11-16 22:02:50.2 - NTFSx86
Running from: C:\Documents and Settings\HP_Propriétaire\Bureau\ComboFix.exe
Command switches used :: C:\Documents and Settings\HP_Propriétaire\Bureau\CFScript.txt.txt
* Created a new restore point

FILE
C:\aklr.exe
C:\mfcu.exe
C:\prkc.exe
C:\vont.exe
C:\WINDOWS\system32\ciyjbwsi.dll
C:\WINDOWS\system32\fkqrylfo.dll
C:\WINDOWS\system32\hggfedd.dll
C:\WINDOWS\system32\ljjjgfe.dll
C:\WINDOWS\system32\rmxoiplx.dll
C:\WINDOWS\system32\VCCLSID.exe
C:\WINDOWS\system32\WS2Fix.exe
C:\WINDOWS\system32\xgrvbnan.dll
.

Incapable d'obtenir les privilèges Système

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\aklr.exe
C:\Documents and Settings\All Users\Menu Démarrer\Live Safety Center.lnk
C:\Documents and Settings\All Users\Menu Démarrer\Online Security Guide.lnk
C:\Documents and Settings\HP_Propriétaire\Bureau\Live Safety Center.lnk
C:\Documents and Settings\HP_Propriétaire\Bureau\Online Security Guide.lnk
C:\Documents and Settings\HP_Propriétaire\Favoris\Online Security Guide.lnk
C:\mfcu.exe
C:\prkc.exe
C:\vont.exe
C:\WINDOWS\cookies.ini
C:\WINDOWS\system32\ciyjbwsi.dll
C:\WINDOWS\system32\ciyjbwsi.dllbox
C:\WINDOWS\system32\fkqrylfo.dll
C:\WINDOWS\system32\hggfedd.dll
C:\WINDOWS\system32\ljjjgfe.dll
C:\WINDOWS\system32\rmxoiplx.dll
C:\WINDOWS\system32\VCCLSID.exe
C:\WINDOWS\system32\WS2Fix.exe
C:\WINDOWS\system32\xgrvbnan.dll

.
((((((((((((((((((((((((((((( Fichiers cr‚‚s 2007-10-16 to 2007-11-16 ))))))))))))))))))))))))))))))))))))
.

2007-11-16 19:52 51,200 --a------ C:\WINDOWS\NirCmd.exe
2007-11-16 19:08 <REP> d-------- C:\Program Files\Trend Micro
2007-11-15 23:53 5,304 --a------ C:\WINDOWS\system32\tmp.reg
2007-11-15 22:57 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
2007-11-15 22:57 53,248 --a------ C:\WINDOWS\system32\Process.exe
2007-11-15 22:57 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
2007-11-15 15:14 24,064 --a------ C:\WINDOWS\system32\msxml3a.dll
2007-11-02 21:15 <REP> d-------- C:\Program Files\PokerStars
2007-11-02 19:02 <REP> d----c--- C:\Documents and Settings\All Users\Application Data\Messenger Plus!
2007-11-02 13:39 <REP> d-a--c--- C:\Documents and Settings\All Users\Application Data\TEMP
2007-11-02 13:38 626,688 --a------ C:\WINDOWS\system32\msvcr80.dll
2007-11-02 09:42 <REP> d----c--- C:\Documents and Settings\All Users\Application Data\Logishrd
2007-10-28 18:49 <REP> d-------- C:\Program Files\Windows Live
2007-10-28 18:49 <REP> d-------- C:\Program Files\Messenger Plus! Live
2007-10-24 20:16 <REP> d-------- C:\WINDOWS\sdrive
2007-10-19 13:16 2,109,976 --a------ C:\WINDOWS\system32\drivers\Lvckap.sys
2007-10-17 13:55 <REP> d-------- C:\Program Files\Shareaza

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-11-16 21:12 --------- d-----w C:\Program Files\Wanadoo
2007-11-15 14:24 --------- d-----w C:\Program Files\eMule
2007-11-05 22:22 --------- d-----w C:\Program Files\Easy Internet signup
2007-11-02 08:51 --------- d-----w C:\Program Files\Fichiers communs\Logitech
2007-11-02 08:48 --------- d-----w C:\Program Files\Fichiers communs\LogiShrd
2007-11-02 08:40 --------- d-----w C:\Program Files\Logitech
2007-10-28 17:49 --------- d-----w C:\Program Files\MSN Messenger
2007-10-26 15:50 --------- d-----w C:\Program Files\Picasa2
2007-10-11 19:44 --------- d-----w C:\Program Files\LimeWire
2007-10-11 17:59 25,624 ----a-w C:\WINDOWS\system32\drivers\LVPr2Mon.sys
2007-10-11 17:59 2,142,488 ----a-w C:\WINDOWS\system32\drivers\LVMVdrv.sys
2007-10-04 17:17 --------- dc----w C:\Documents and Settings\All Users\Application Data\MGS
2007-09-28 21:32 --------- d-----w C:\Program Files\InterActual
2005-05-11 21:36 12,288 ----a-w C:\WINDOWS\Fonts\RandFont.dll
1995-09-20 14:16 456,976 -c--a-w C:\Program Files\Fichiers communs\dao3032.dll
2005-07-05 11:32:42 8,192 --sha-w C:\WINDOWS\o2cLicStore.bin
.

((((((((((((((((((((((((((((( snapshot@2007-11-16_20.10.49.96 )))))))))))))))))))))))))))))))))))))))))
.
+ 2007-11-16 21:11:39 16,384 ----atw C:\WINDOWS\TEMP\Perflib_Perfdata_524.dat
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{a9cb26fb-3eb0-4cdb-8c85-82360be1dd34}]
C:\WINDOWS\system32\jbmmritv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" [2007-07-12 03:00]
"hpsysdrv"="c:\windows\system\hpsysdrv.exe" [1998-05-07 16:04]
"IgfxTray"="C:\WINDOWS\system32\igfxtray.exe" [2004-08-20 22:55]
"HPHUPD06"="c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe" [2004-06-07 18:53]
"HPHmon06"="C:\WINDOWS\system32\hphmon06.exe" [2004-06-07 18:43]
"ISUSPM Startup"="C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-06-16 13:03]
"ISUSScheduler"="C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" [2004-06-16 13:03]
"Recguard"="C:\WINDOWS\SMINST\RECGUARD.EXE" [2004-04-14 20:43]
"VTTimer"="VTTimer.exe" []
"SiSPower"="SiSPower.dll" [2004-09-24 09:49 C:\WINDOWS\system32\SiSPower.dll]
"AGRSMMSG"="AGRSMMSG.exe" [2004-06-29 17:06 C:\WINDOWS\AGRSMMSG.exe]
"SoundMan"="SOUNDMAN.EXE" [2004-07-29 00:40 C:\WINDOWS\SOUNDMAN.EXE]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-09-09 20:10]
"AlcWzrd"="ALCWZRD.EXE" [2004-07-29 01:34 C:\WINDOWS\ALCWZRD.EXE]
"LSBWatcher"="c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe" [2004-10-14 21:54]
"Reminder"="C:\Windows\Creator\Remind_XP.exe" [2003-12-18 00:31]
"EPSON Stylus CX3600 Series"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9BE.exe" [2004-03-04 04:00]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2006-06-14 16:24]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2006-10-29 10:08]
"EPSON Stylus CX3600 Series (Copie 2)"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9BE.exe" [2004-03-04 04:00]
"WOOWATCH"="C:\PROGRA~1\Wanadoo\Watch.exe" [2004-08-23 14:49]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-09-06 11:06]
"HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2005-05-11 22:12]
"AutoTBar"="c:\Program Files\HP\Digital Imaging\bin\AUTOTBAR.EXE" []
"KBD"="C:\HP\KBD\KBD.EXE" [2005-02-02 15:44]
"Volume Shadow Configuration"="vbmsvc.exe" []
"LogitechCommunicationsManager"="C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe" [2007-10-25 16:33]
"LogitechQuickCamRibbon"="C:\Program Files\Logitech\QuickCam\Quickcam.exe" [2007-10-25 16:37]
"90b5ee90"="C:\WINDOWS\system32\rmxoiplx.dll" []

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WOOKIT"="C:\Program Files\Wanadoo\Shell.exe" [2004-08-23 14:50]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 11:00]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-19 18:27]
"Skype"="C:\Program Files\Skype\Phone\Skype.exe" []
"Picasa Media Detector"="C:\Program Files\Picasa2\PicasaMediaDetector.exe" [2007-09-28 02:17]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"Picasa Media Detector"=C:\Program Files\Picasa2\PicasaMediaDetector.exe
"DWQueuedReporting"="C:\PROGRA~1\FICHIE~1\MICROS~1\DW\dwtrig20.exe" -t

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ciyjbwsi]
ciyjbwsi.dll

R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
S2 LicCtrlService;LicCtrl Service;rundll32.exe C:\WINDOWS\mmfs.dll,Service
S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys
S3 v800bus;Sony Ericsson V800-Vodafone 802SE driver (WDM);C:\WINDOWS\system32\DRIVERS\v800bus.sys
S3 v800mdfl;Sony Ericsson V800-Vodafone 802SE USB WMC Modem Filter;C:\WINDOWS\system32\DRIVERS\v800mdfl.sys
S3 v800mdm;Sony Ericsson V800-Vodafone 802SE USB WMC Modem Driver;C:\WINDOWS\system32\DRIVERS\v800mdm.sys

.
Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'
"2007-11-16 15:00:10 C:\WINDOWS\Tasks\HPpromotions journeysoftware.job"
- C:\Program Files\hp\digital imaging\bin\hp promotions\journeysoftware\HPpromo.exe
"2007-11-16 17:27:51 C:\WINDOWS\Tasks\Symantec NetDetect.job"
- C:\Program Files\Symantec\LiveUpdate\NDETECT.EXE
.
**************************************************************************

catchme 0.3.1250 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-11-16 22:12:16
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-11-16 22:15:48 - machine was rebooted
C:\ComboFix2.txt ... 2007-11-16 20:13
.
--- E O F ---




par contre j'ai eu ce message


"erreur de chargement de (c:/WINDOWS/SYSTEM 32/rmwoiplx.dll) le module spécifié est introuvable

en revanche les 2 îcones malvaillant sur mon bureau on disparu par magie!
0
samos
 
je sais pas si c'est lié mais il me parait plus rapide?
0
samos
 
je suis désolé mais maintenant en ouvrant ma messagerie "msn" j'ai ce message là:

la communication que vous allez utiliser n'est pas securisée.D'autres utilisateurs du web pourront dorénavant accéder aux informations que vous envoyer."

alors savez vous pourquoi j'ai ce message maintenant.
merci d'avance
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
green day Messages postés 26374 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   2 163
 
C'est pas encore fini ! poste un nouveau hijack stp

++
0
samos
 
c'est quoi?
et je fait comment
0
green day Messages postés 26374 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   2 163
 
un rapport hijackthis : ce que tu as posté au poste 12 ;-)

++
0
samos
 
ok je rigole toute seul
0
samos
 
violà:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:46:13, on 16/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\hphmon06.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\SOUNDMAN.EXE
c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\ALCWZRD.EXE
C:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9BE.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\PROGRA~1\Wanadoo\Watch.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://qumaron.com/?bj_programs?bj_programs
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
R3 - URLSearchHook: &Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: {43dd1eb0-6328-58c8-bdc4-0be3bf62bc9a} - {a9cb26fb-3eb0-4cdb-8c85-82360be1dd34} - C:\WINDOWS\system32\jbmmritv.dll (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
O4 - HKLM\..\Run: [EPSON Stylus CX3600 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9BE.EXE /P26 "EPSON Stylus CX3600 Series" /O5 "LPT1:" /M "Stylus CX3600"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [EPSON Stylus CX3600 Series (Copie 2)] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9BE.EXE /P36 "EPSON Stylus CX3600 Series (Copie 2)" /O5 "LPT1:" /M "Stylus CX3600"
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [AutoTBar] c:\Program Files\HP\Digital Imaging\bin\AUTOTBAR.EXE
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Volume Shadow Configuration] vbmsvc.exe
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [90b5ee90] rundll32.exe "C:\WINDOWS\system32\rmxoiplx.dll",b
O4 - HKCU\..\Run: [WOOKIT] C:\Program Files\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')
O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab
O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://www.catalog.update.microsoft.com/ClientControl/en/x86/MuCatalogWebControl.cab?1194016384468
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://a532.g.akamai.net/...
O20 - Winlogon Notify: ciyjbwsi - ciyjbwsi.dll (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LicCtrl Service (LicCtrlService) - Unknown owner - rundll32.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Unknown owner - c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
0
green day Messages postés 26374 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   2 163
 
Non ! il est pas beau ! :)

Télécharge SDFix sur ton bureau

http://downloads.andymanchesta.com/RemovalTools/SDFix.exe

Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau.
Redémarre ton ordinateur en mode sans échec
Ouvre le dossier SDFix qui vient d'être créé sur le Bureau et double clique sur RunThis.bat pour lancer le script.
Appuie sur Y pour commencer le processus de nettoyage.
Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
Appuie sur une touche pour redémarrer le PC.
Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum, avec un nouveau log Hijackthis !

++
0
samos
 
je sui désolé je te prend bcp de temps ,mais quand je clic sur SDFix 2 fois je tombe sur "exécuter" et ensuite intal est ecrit en bas mais la destination folder est indiqué "c:/ c'est tout . puis quand je fais intall ,il s'installe bien mais a quel moment je le glisse sur le bureau?
0
samos
 
je lui donne un nom aprés c:/ de dossier qu'l y a sur mon bureau ? c'est ça?
0
green day Messages postés 26374 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   2 163
 
je ne comprends pas la question :/

si tu n'y arrive pas


fais ce qui est indiqué ici :

http://www.commentcamarche.net/faq/sujet 3174 virus methode preliminaire de desinfection version fr

@bientôt ;-)
0
samos
 
voici le rapport ouf!!:

SDFix: Version 1.114

Run by HP_Propriétaire on 16/11/2007 at 23:23

Microsoft Windows XP [version 5.1.2600]

Running From: C:\DOCUME~1\HP_PRO~1\Bureau\salut\SDFix

Safe Mode:
Checking Services:


Restoring Windows Registry Values
Restoring Windows Default Hosts File

Rebooting...


Normal Mode:
Checking Files:

Trojan Files Found:

C:\WINDOWS\sdrive\helper.exe - Deleted
C:\WINDOWS\sdrive\kler.exe - Deleted


Folder C:\WINDOWS\sdrive - Removed

Removing Temp Files...

ADS Check:

C:\WINDOWS
No streams found.

C:\WINDOWS\system32
No streams found.

C:\WINDOWS\system32\svchost.exe
No streams found.

C:\WINDOWS\system32\ntoskrnl.exe
No streams found.



Final Check:

catchme 0.3.1262.1 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-11-16 23:29:03
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s1"=dword:d117bec3
"s2"=dword:ca40b9fd
"h0"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"h0"=dword:00000000
"khjeh"=hex:9a,a9,ae,3d,a8,c9,0a,af,a8,4b,fa,3d,22,1b,65,ea,3a,d9,e3,95,51,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control]
"WaitToKillServiceTimeout"="2000"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Lsa]
"LsaPid"=dword:000002ac

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Video\{9114240E-83FE-41AD-B74B-06ADEFB4598A}\0000]
"SiS.3D.Func"=dword:f8b4e4f0
"SiS.3D.AGPWC"=dword:f8b4ec1d

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Watchdog\Display]
"ShutdownCount"=dword:00000227
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\SharedAccess\Epoch]
"Epoch"=dword:00002cdf
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"h0"=dword:00000000
"khjeh"=hex:9a,a9,ae,3d,a8,c9,0a,af,a8,4b,fa,3d,22,1b,65,ea,3a,d9,e3,95,51,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{08AE23FA-8024-4D5B-B104-6FB52E087154}]
"LeaseObtainedTime"=dword:473e13d6
"T1"=dword:4742b116
"T2"=dword:47462706
"LeaseTerminatesTime"=dword:47474e56
"DhcpRetryTime"=dword:00049d3e
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\{08AE23FA-8024-4D5B-B104-6FB52E087154}\Parameters\Tcpip]
"LeaseObtainedTime"=dword:473e13d6
"T1"=dword:4742b116
"T2"=dword:47462706
"LeaseTerminatesTime"=dword:47474e56

scanning hidden registry entries ...

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B89CA5498CD3EB54AB0E22ECEE731A30\Usage]
"QuickCam"=dword:3770cde6
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19]
"RefCount"=dword:00000001

scanning hidden files ...

C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bed17@hotmail.fr\SharingMetadata\patlensois@hotmail.fr\DFSR\Staging\CS{DDA11BFA-771B-D303-B909-197C2071DCF6}\01\10-{DDA11BFA-771B-D303-B909-197C2071DCF6}-v1-{C5B81957-8473-4F99-A391-0E6205F6B01B}-v10-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bed17@hotmail.fr\SharingMetadata\patlensois@hotmail.fr\DFSR\Staging\CS{DDA11BFA-771B-D303-B909-197C2071DCF6}\11\11-{66F6F275-499E-4B9F-AF70-8B3B06BB7495}-v11-{C5B81957-8473-4F99-A391-0E6205F6B01B}-v11-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10542 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bed17@hotmail.fr\SharingMetadata\patlensois@hotmail.fr\DFSR\Staging\CS{DDA11BFA-771B-D303-B909-197C2071DCF6}\11\11-{66F6F275-499E-4B9F-AF70-8B3B06BB7495}-v11-{C5B81957-8473-4F99-A391-0E6205F6B01B}-v11-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1168 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\01\228-{66CA9052-3993-0607-E108-26B36AAFA999}-v1-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v228-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\29\231-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v229-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v231-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 4800 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\29\231-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v229-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v231-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 504 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\32\233-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v232-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v233-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8184 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\32\233-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v232-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v233-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 872 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\47\250-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v247-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v250-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 4044 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\47\250-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v247-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v250-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 448 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\48\251-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v248-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v251-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 4530 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\48\251-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v248-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v251-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 504 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\52\264-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v252-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v264-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3432 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\52\264-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v252-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v264-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 392 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\53\265-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v253-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v265-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3900 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\53\265-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v253-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v265-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 440 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\54\266-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v254-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v266-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 4062 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\54\266-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v254-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v266-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 464 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\56\267-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v256-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v267-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3990 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\56\267-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v256-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v267-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 440 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\57\268-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v257-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v268-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 4026 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\57\268-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v257-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v268-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 448 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\59\269-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v259-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v269-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3360 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\59\269-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v259-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v269-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 376 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\60\270-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v260-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v270-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3558 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\60\270-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v260-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v270-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 384 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\61\271-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v261-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v271-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3360 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\61\271-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v261-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v271-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 376 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\63\272-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v263-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v272-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3378 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\63\272-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v263-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v272-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 368 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\73\281-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v273-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v281-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 5880 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\73\281-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v273-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v281-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 648 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\74\282-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v274-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v282-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7320 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\74\282-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v274-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v282-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 800 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\75\283-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v275-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v283-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7878 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\75\283-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v275-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v283-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 872 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\76\284-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v276-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v284-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 6348 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\76\284-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v276-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v284-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 696 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\79\288-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v279-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v288-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 6132 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\79\288-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v279-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v288-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 704 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\85\289-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v285-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v289-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 6798 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\85\289-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v285-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v289-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 768 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\86\290-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v286-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v290-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 6888 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\86\290-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v286-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v290-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 784 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\91\301-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v291-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v301-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 14070 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\91\301-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v291-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v301-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1568 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\96\300-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v296-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v300-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9678 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\96\300-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v296-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v300-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1072 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\97\299-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v297-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v299-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 11316 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\doud-doud@hotmail.fr\DFSR\Staging\CS{66CA9052-3993-0607-E108-26B36AAFA999}\97\299-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v297-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v299-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1264 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\44\145-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v144-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v145-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10362 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\44\145-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v144-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v145-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1144 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\44\150-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v144-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v150-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10362 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\44\150-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v144-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v150-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1144 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\01\19-{905D59C9-4308-9C7D-679D-098D7481CF1F}-v1-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v19-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\02\105-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v102-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v105-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 53238 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\02\105-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v102-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v105-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 3774 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\02\105-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v102-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v105-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 5928 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\04\106-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v104-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v106-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 16896 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\04\106-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v104-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v106-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 1308 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\04\106-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v104-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v106-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1888 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\04\206-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v204-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v206-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 15366 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\04\206-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v204-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v206-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1696 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\05\208-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v205-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v208-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 15924 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\05\208-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v205-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v208-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1800 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\07\112-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v107-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v112-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 12810 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\07\112-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v107-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v112-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1416 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\07\211-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v207-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v211-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 17454 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\07\211-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v207-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v211-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 1290 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\07\211-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v207-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v211-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1944 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\09\111-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v109-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v111-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 27678 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\09\111-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v109-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v111-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 2100 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\09\111-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v109-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v111-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 3056 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\09\219-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v209-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v219-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 7626 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\09\219-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v209-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v219-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 848 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\13\114-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v113-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v114-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 4818 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\13\114-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v113-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v114-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 536 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\13\20-{EE296437-95C1-4D27-B78C-5CCF747BACFF}-v13-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v20-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 23268 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\13\20-{EE296437-95C1-4D27-B78C-5CCF747BACFF}-v13-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v20-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 2608 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\14\41-{EE296437-95C1-4D27-B78C-5CCF747BACFF}-v14-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v41-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 21360 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\14\41-{EE296437-95C1-4D27-B78C-5CCF747BACFF}-v14-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v41-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 2352 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\15\117-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v115-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v117-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 17328 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\15\117-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v115-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v117-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 1236 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\15\117-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v115-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v117-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1872 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\15\119-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v115-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v119-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 17328 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\15\119-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v115-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v119-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1872 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\15\121-{EE296437-95C1-4D27-B78C-5CCF747BACFF}-v15-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v121-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 1451802 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\15\121-{EE296437-95C1-4D27-B78C-5CCF747BACFF}-v15-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v121-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 162464 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\20\223-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v220-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v223-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 13044 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\20\223-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v220-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v223-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1472 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\21\22-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v21-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v22-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 480 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\21\22-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v21-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v22-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 80 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\22\125-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v122-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v125-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 11964 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\22\125-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v122-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v125-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1360 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\22\126-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v122-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v126-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 11964 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\22\126-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v122-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v126-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1360 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\22\224-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v222-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v224-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 14286 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\22\224-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v222-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v224-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1592 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\23\25-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v23-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v25-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 804 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\23\25-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v23-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v25-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 80 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\25\227-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v225-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v227-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 53382 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\25\227-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v225-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v227-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 3810 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\25\227-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v225-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v227-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 5936 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\27\129-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v127-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v129-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 6906 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\27\129-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v127-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v129-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 760 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\27\130-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v127-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v130-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 6906 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\27\130-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v127-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v130-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 760 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\29\31-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v29-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v31-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3936 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\29\31-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v29-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v31-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 456 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\31\134-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v131-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v134-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 15528 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\31\134-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v131-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v134-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1712 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\31\137-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v131-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v137-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 15528 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\31\137-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v131-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v137-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1712 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\32\34-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v32-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v34-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3288 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\32\34-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v32-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v34-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 360 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\34\237-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v234-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v237-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 16932 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\34\237-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v234-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v237-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 1254 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\34\237-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v234-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v237-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1864 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\36\138-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v136-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v138-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 14268 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\36\138-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v136-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v138-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1560 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\36\242-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v236-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v242-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8202 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\36\242-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v236-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v242-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 928 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\39\141-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v139-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v141-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 14412 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\39\141-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v139-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v141-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1616 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\39\40-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v39-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v40-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 63408 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\39\40-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v39-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v40-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 4530 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\39\40-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v39-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v40-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 7080 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\40\143-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v140-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v143-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 13818 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\40\143-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v140-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v143-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1552 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\42\46-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v42-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v46-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 14250 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\42\46-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v42-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v46-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1568 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\43\246-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v243-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v246-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 8598 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\43\246-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v243-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v246-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 960 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\47\151-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v147-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v151-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9930 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\47\151-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v147-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v151-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1096 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\47\50-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v47-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v50-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 13314 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\47\50-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v47-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v50-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1496 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\47\52-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v47-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v52-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 13314 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\47\52-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v47-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v52-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1496 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\48\154-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v148-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v154-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 11244 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\48\154-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v148-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v154-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1256 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\49\155-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v149-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v155-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 6204 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\49\155-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v149-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v155-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 712 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\53\56-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v53-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v56-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 13890 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\53\56-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v53-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v56-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1520 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\53\59-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v53-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v59-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 13890 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\53\59-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v53-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v59-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1520 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\56\157-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v156-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v157-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 13332 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\56\157-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v156-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v157-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1528 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\56\158-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v156-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v158-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 13332 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\56\158-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v156-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v158-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1528 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\59\161-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v159-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v161-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 17148 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\59\161-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v159-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v161-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 1326 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\59\161-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v159-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v161-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1880 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\60\61-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v60-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v61-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 1686 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\60\61-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v60-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v61-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 200 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\62\165-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v162-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v165-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 15474 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\62\165-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v162-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v165-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1728 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@hotmail.fr\SharingMetadata\elidu17@hotmail.fr\DFSR\Staging\CS{905D59C9-4308-9C7D-679D-098D7481CF1F}\62\67-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v62-{2E1BF973-1319-49AF-95B9-4B8675F4B53B}-v67-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 2874 bytes hidden from API
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\bedsam@
0
samos
 
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:36:44, on 16/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\FTRTSVC.exe
c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\hphmon06.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\ALCWZRD.EXE
C:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9BE.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
C:\PROGRA~1\Wanadoo\Watch.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://qumaron.com/?bj_programs?bj_programs
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
R3 - URLSearchHook: &Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: {43dd1eb0-6328-58c8-bdc4-0be3bf62bc9a} - {a9cb26fb-3eb0-4cdb-8c85-82360be1dd34} - C:\WINDOWS\system32\jbmmritv.dll (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
O4 - HKLM\..\Run: [EPSON Stylus CX3600 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9BE.EXE /P26 "EPSON Stylus CX3600 Series" /O5 "LPT1:" /M "Stylus CX3600"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [EPSON Stylus CX3600 Series (Copie 2)] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9BE.EXE /P36 "EPSON Stylus CX3600 Series (Copie 2)" /O5 "LPT1:" /M "Stylus CX3600"
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [AutoTBar] c:\Program Files\HP\Digital Imaging\bin\AUTOTBAR.EXE
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [90b5ee90] rundll32.exe "C:\WINDOWS\system32\rmxoiplx.dll",b
O4 - HKCU\..\Run: [WOOKIT] C:\Program Files\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')
O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab
O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://www.catalog.update.microsoft.com/ClientControl/en/x86/MuCatalogWebControl.cab?1194016384468
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://a532.g.akamai.net/...
O20 - Winlogon Notify: ciyjbwsi - ciyjbwsi.dll (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LicCtrl Service (LicCtrlService) - Unknown owner - rundll32.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Unknown owner - c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
0
samos
 
bon je fais une pause pour faire dodo je vous ai compris pour les rapports ,les voici.
j'espere vous voir demain pour la suite.......
bonne nuit et merci encore
(vous êtes douée:-)
0
samos
 
coucou me revoilà,êtes vous toujours prête à m'aider jusqu'au bout?
lorsque j'allume l'ordi j'ai ce message:

"c;/windows/system32/rmxoiplx.dll"" fichier introuvable?

en tout cas ma barre "security toolbar est partie .super!!!
0
green day Messages postés 26374 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   2 163
 
Salut ;-)

pour le message d'erreur au démarrage, c'est normal, on fera le ménage à la fin !

fais ce qui est indiqué ici stp :

http://www.commentcamarche.net/faq/sujet 3174 virus methode preliminaire de desinfection version fr

@+

0
samos
 
salut
voici les rapports:

c cleaner:

pour le premier rapport je sais pas ou il est il a bien etait enregistré dans mes documents mais il ne veut pas de copier /coller
ils sont inscrit sous le nom de " cc_200071117..."
0
green day Messages postés 26374 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   2 163
 
CCleaner c'est inutile ;-)

++
0