---

Hmmm...Nu har familien IGEN været lidt for hurtig med musen...
Hvordan er det liiiiiiiiiiiiige vi kommer af med den orm?

---

Jeg kan ikke finde noget på den, ud fra "summer2008" -MSN- virus-orm-worm osv. Men kom en HijackThis log http://www.malwarecheck.dk/forum/viewtopic.php?t=9

---

Hej STL

******************************** ROOTCHK-(21-07-07)-LOG, by ejvindh
23-07-2007 0:08:50,68
The rootkits that are detected by this tool were not found.
********************************* ROOTCHK-LOG-end

catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-07-23 00:08:50
Windows 5.1.2600 Service Pack 2
scanning hidden processes ...
scanning hidden services & system hive ...
scanning hidden registry entries ...
scanning hidden files ...
C:\WINDOWS\bak sana Paris Hilton ne hale gelmis hapiste :(17.zip 121038 bytes hidden from API
C:\WINDOWS\bak sana Paris Hilton ne hale gelmis hapiste :(37.zip 121038 bytes hidden from API
C:\WINDOWS\bak sana Paris Hilton ne hale gelmis hapiste :(68.zip 121038 bytes hidden from API
C:\WINDOWS\bak sana Paris Hilton ne hale gelmis hapiste :(71.zip 121038 bytes hidden from API
C:\WINDOWS\bak sana Paris Hilton ne hale gelmis hapiste :(93.zip 121038 bytes hidden from API
hidden processes: 0
hidden files: 5

---

Jeg kan godt se den der, men gå lige ind her igen http://www.malwarecheck.dk/forum/viewtopic.php?t=9 og kom med en log fra HIJACKTHIS

---

Hun siger det er det samme der kommer igen, STL

---

HijackThis downloades her http://sptlarsenserious.googlepages.com/HJT-sfx.exe

og så følg vejledningen til at lave logfilen.

---

Tror hun er lidt træt nu......kan vi vente til i morgen?

---

Jada, jeg vil også gerne i seng nu.

---

Daws igen........Det´ mig med ormen

Jeg senderv vhermed den famøse log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:00:29, on 23-07-2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Programmer\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmer\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Programmer\MSN Messenger\MsnMsgr.Exe
C:\Programmer\Messenger\msmsgs.exe
C:\Programmer\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Programmer\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Programmer\HJTrenamed.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programmer\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programmer\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programmer\google\googletoolbar1.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Programmer\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Programmer\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programmer\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Programmer\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Programmer\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOKAL TJENESTE')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOKAL TJENESTE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETVÆRKSTJENESTE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: PowerReg Scheduler.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O20 - Winlogon Notify: !SASWinLogon - C:\Programmer\SUPERAntiSpyware\SASWINLO.DLL
O21 - SSODL: printers - {B0C57CB9-DEDB-49E3-9350-A3F9397EDC6E} - notiffy.dll (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Programmer\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Programmer\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

--
End of file - 4199 bytes

Glæder mig til resultatet

---

Ok, men glæd dig nu ikke for tidligt, for infektionen er ny, og derfor ukendt af diverse scannere. Den skjuler sig også, med et såkaldt rootkit.

Vi prøver at nappe den:

Download MSNFix (By rudy) her http://sosvirus.changelog.fr/MSNFix.zip


1. Pak zipfilen ud til sin egen mappe på skrivebordet.

2. Åben mappen og dobbeltklik MSNFix.bat.

3. Når du ser, at det sorte vindue er blevet blåt, så taster du E og trykker på <enter>

4. Så taster du R og trykker på <enter>

5. Hvis infektionen bliver fundet, får du en meddelelse om det. Tryk derefter på <enter> og lad fixet arbejde.

6. Hvis du bliver bedt om at genstarte maskinen (reboot), så gør du det, uden at lukke ned for værktøjets vindue.

7. Efter rensningen finder du en lille txt fil med dato i MSNFix mappen. Kopier den venligst her ind.

---

STL....Du er sq et geni::

Here you are:

MSN_Fix 1.339

C:\Documents and Settings\kat\Skrivebord\MSNFix
Scan done at 23-07-2007 - 18:11:19,23 By kat
normal mode

************************ Checking Files

... C:\WINDOWS\album??.zip
... C:\WINDOWS\album???.zip
... C:\WINDOWS\image???.zip
... C:\WINDOWS\images??.zip
... C:\WINDOWS\images???.zip
... C:\WINDOWS\photo??.zip
... C:\WINDOWS\photo???.zip
... C:\WINDOWS\photos??.zip
... C:\WINDOWS\photos???.zip
... C:\WINDOWS\picture??.zip
... C:\WINDOWS\picture???.zip
... C:\WINDOWS\pictures??.zip
... C:\WINDOWS\pictures???.zip
... C:\WINDOWS\system32\notiffy.dll
... C:\WINDOWS\system32\printers.exe

************************ Checking Folder

No Folder Found




************************ Deleting malware Files

.. OK ... C:\WINDOWS\album??.zip
.. OK ... C:\WINDOWS\album???.zip
.. OK ... C:\WINDOWS\image???.zip
.. OK ... C:\WINDOWS\images??.zip
.. OK ... C:\WINDOWS\images???.zip
.. OK ... C:\WINDOWS\photo??.zip
.. OK ... C:\WINDOWS\photo???.zip
.. OK ... C:\WINDOWS\photos??.zip
.. OK ... C:\WINDOWS\photos???.zip
.. OK ... C:\WINDOWS\picture??.zip
.. OK ... C:\WINDOWS\picture???.zip
.. OK ... C:\WINDOWS\pictures??.zip
.. OK ... C:\WINDOWS\pictures???.zip
.. OK ... C:\WINDOWS\system32\notiffy.dll
.. OK ... C:\WINDOWS\system32\printers.exe



************************ Registry Cleaning



************************ Suspect Files

/!\ The detected files must be controlled by a helper before any other handling



The Files and Registry deleted have been save in 23-07-2007_18124625.zip


------------------------------------------------------------------------
Autor : !aur3n7 Contact: http://246694.aceboard.fr
------------------------------------------------------------------------
ECHO er sl†et fra.
--------------------------------------------- END ---------------------------------------------

---

BTW....jeg skulle ikke genstarte:)

---

Nah, men dem der har lavet det fix, er ikke så tossede.

Men vi er ikke færdige:

Hent Gmer rootkit scanner her, og udpak den til skrivebordet http://www.gmer.net/gmer.zip

Luk ned for alle dine kørende programmer i proceslinien ved uret, på nær firewall. Luk også alle browser vinduer.

Kør Gmer.exe og klik Scan. Scanningen kan tage noget tid, og imens den scanner bør du ikke foretage dig andet på computeren.

Når scanningen er færdig, klik da på Copy knappen. Scanningen ligger nu i udklipsholder. Kopier den venligst ind i tråden i dit næste indlæg.

---

løj halløj....Det er næsten flovt at sende sådan en "bog"...men på opfordring:

------------------------------------------------------------------------------------------------

GMER 1.0.13.12551 - http://www.gmer.net
Rootkit scan 2007-07-23 18:52:36
Windows 5.1.2600 Service Pack 2


---- System - GMER 1.0.13 ----

SSDT \??\C:\Programmer\Grisoft\AVG Anti-Spyware 7.5\guard.sys ZwOpenProcess
SSDT \??\C:\Programmer\Grisoft\AVG Anti-Spyware 7.5\guard.sys ZwTerminateProcess

---- User code sections - GMER 1.0.13 ----

.text C:\Programmer\MSN Messenger\MsnMsgr.Exe[1992] kernel32.dll!SetUnhandledExceptionFilter 7C84467D 5 Bytes JMP 004DE392 C:\Programmer\MSN Messenger\MsnMsgr.Exe

AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE_NAMED_PIPE [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CLOSE [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_READ [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_WRITE [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_INFORMATION [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_INFORMATION [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_EA [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_EA [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_FLUSH_BUFFERS [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_VOLUME_INFORMATION [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_VOLUME_INFORMATION [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_DIRECTORY_CONTROL [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_FILE_SYSTEM_CONTROL [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_DEVICE_CONTROL [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_INTERNAL_DEVICE_CONTROL [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SHUTDOWN [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_LOCK_CONTROL [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CLEANUP [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE_MAILSLOT [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_SECURITY [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_SECURITY [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_POWER [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SYSTEM_CONTROL [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_DEVICE_CHANGE [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_QUOTA [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_QUOTA [F7B54404] avg7rsw.sys

Device \Driver\Tcpip \Device\Ip IRP_MJ_INTERNAL_DEVICE_CONTROL [F7B7685A] avgtdi.sys
Device \Driver\Tcpip \Device\Tcp IRP_MJ_INTERNAL_DEVICE_CONTROL [F7B7685A] avgtdi.sys
Device \Driver\Tcpip \Device\Udp IRP_MJ_INTERNAL_DEVICE_CONTROL [F7B7685A] avgtdi.sys
Device \Driver\Tcpip \Device\RawIp IRP_MJ_INTERNAL_DEVICE_CONTROL [F7B7685A] avgtdi.sys
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_INTERNAL_DEVICE_CONTROL [F7B7685A] avgtdi.sys

AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_CREATE [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_CREATE_NAMED_PIPE [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_CLOSE [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_READ [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_WRITE [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_QUERY_INFORMATION [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SET_INFORMATION [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_QUERY_EA [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SET_EA [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_FLUSH_BUFFERS [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_QUERY_VOLUME_INFORMATION [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SET_VOLUME_INFORMATION [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_DIRECTORY_CONTROL [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_FILE_SYSTEM_CONTROL [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_DEVICE_CONTROL [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_INTERNAL_DEVICE_CONTROL [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SHUTDOWN [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_LOCK_CONTROL [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_CLEANUP [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_CREATE_MAILSLOT [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_QUERY_SECURITY [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SET_SECURITY [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_POWER [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SYSTEM_CONTROL [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_DEVICE_CHANGE [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_QUERY_QUOTA [F7B54404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SET_QUOTA [F7B54404] avg7rsw.sys

---- Files - GMER 1.0.13 ----

ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\01\11-{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}-v1-{6EE2C225-F6A1-4D7D-921D-5E6F9F643469}-v11-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\06\5106-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5106-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5106-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\09\5109-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5109-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5109-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\10\5110-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5110-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5110-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\10\5310-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5310-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5310-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\12\388-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v12-{7D52FA03-3309-4003-8FD6-7D3EEB208B95}-v388-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\13\387-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v13-{7D52FA03-3309-4003-8FD6-7D3EEB208B95}-v387-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\14\386-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v14-{7D52FA03-3309-4003-8FD6-7D3EEB208B95}-v386-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\15\384-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v15-{7D52FA03-3309-4003-8FD6-7D3EEB208B95}-v384-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\15\384-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v15-{7D52FA03-3309-4003-8FD6-7D3EEB208B95}-v384-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\16\385-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v16-{7D52FA03-3309-4003-8FD6-7D3EEB208B95}-v385-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\18\406-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v18-{7D52FA03-3309-4003-8FD6-7D3EEB208B95}-v406-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\18\406-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v18-{7D52FA03-3309-4003-8FD6-7D3EEB208B95}-v406-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\19\405-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v19-{7D52FA03-3309-4003-8FD6-7D3EEB208B95}-v405-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\19\405-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v19-{7D52FA03-3309-4003-8FD6-7D3EEB208B95}-v405-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\20\404-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v20-{7D52FA03-3309-4003-8FD6-7D3EEB208B95}-v404-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\20\404-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v20-{7D52FA03-3309-4003-8FD6-7D3EEB208B95}-v404-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\21\403-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v21-{7D52FA03-3309-4003-8FD6-7D3EEB208B95}-v403-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\21\403-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v21-{7D52FA03-3309-4003-8FD6-7D3EEB208B95}-v403-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\22\402-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v22-{7D52FA03-3309-4003-8FD6-7D3EEB208B95}-v402-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\22\402-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v22-{7D52FA03-3309-4003-8FD6-7D3EEB208B95}-v402-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\23\401-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v23-{7D52FA03-3309-4003-8FD6-7D3EEB208B95}-v401-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\23\401-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v23-{7D52FA03-3309-4003-8FD6-7D3EEB208B95}-v401-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\24\400-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v24-{7D52FA03-3309-4003-8FD6-7D3EEB208B95}-v400-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\24\400-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v24-{7D52FA03-3309-4003-8FD6-7D3EEB208B95}-v400-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\25\399-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v25-{7D52FA03-3309-4003-8FD6-7D3EEB208B95}-v399-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\25\399-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v25-{7D52FA03-3309-4003-8FD6-7D3EEB208B95}-v399-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\25\5325-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5325-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5325-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\26\398-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v26-{7D52FA03-3309-4003-8FD6-7D3EEB208B95}-v398-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\26\398-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v26-{7D52FA03-3309-4003-8FD6-7D3EEB208B95}-v398-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\27\397-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v27-{7D52FA03-3309-4003-8FD6-7D3EEB208B95}-v397-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\27\397-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v27-{7D52FA03-3309-4003-8FD6-7D3EEB208B95}-v397-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\28\396-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v28-{7D52FA03-3309-4003-8FD6-7D3EEB208B95}-v396-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\28\396-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v28-{7D52FA03-3309-4003-8FD6-7D3EEB208B95}-v396-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\28\5128-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5128-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5128-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\29\395-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v29-{7D52FA03-3309-4003-8FD6-7D3EEB208B95}-v395-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\29\395-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v29-{7D52FA03-3309-4003-8FD6-7D3EEB208B95}-v395-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\30\394-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v30-{7D52FA03-3309-4003-8FD6-7D3EEB208B95}-v394-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\30\394-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v30-{7D52FA03-3309-4003-8FD6-7D3EEB208B95}-v394-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\31\393-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v31-{7D52FA03-3309-4003-8FD6-7D3EEB208B95}-v393-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\31\393-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v31-{7D52FA03-3309-4003-8FD6-7D3EEB208B95}-v393-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\32\392-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v32-{7D52FA03-3309-4003-8FD6-7D3EEB208B95}-v392-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\32\392-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v32-{7D52FA03-3309-4003-8FD6-7D3EEB208B95}-v392-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\32\5632-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5632-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5632-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\33\5047-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v33-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5047-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\33\5047-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v33-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5047-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\33\5633-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5633-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5633-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\34\407-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v34-{7D52FA03-3309-4003-8FD6-7D3EEB208B95}-v407-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\34\407-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v34-{7D52FA03-3309-4003-8FD6-7D3EEB208B95}-v407-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\34\5134-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5134-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5134-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\34\5634-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5634-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5634-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\35\5135-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5135-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5135-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\35\5335-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5335-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5335-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\44\5144-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5144-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5144-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\44\5644-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5644-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5644-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\49\5049-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5049-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5049-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\54\5054-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5054-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5054-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\55\5055-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5055-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5055-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\56\5056-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5056-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5056-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\68\5168-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5168-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5168-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\70\5170-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5170-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5170-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\72\5172-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5172-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5172-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\73\5173-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5173-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5173-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\74\5174-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5174-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5174-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\75\5175-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5175-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5175-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\76\5176-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5176-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5176-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\77\5077-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5077-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5077-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\78\5078-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5078-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5078-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\james_jaramillo@hotmail.com\DFSR\Staging\CS{6ADD096F-9103-ECC9-D87E-6B170DADB0C5}\99\5499-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5499-{90D8921D-326A-4A8F-8AC9-773B596FB3B4}-v5499-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\moise4@msn.com\DFSR\Staging\CS{F020B20C-2126-4DFE-5D39-E7C105E5A6B7}\01\15-{F020B20C-2126-4DFE-5D39-E7C105E5A6B7}-v1-{6EE2C225-F6A1-4D7D-921D-5E6F9F643469}-v15-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\moise4@msn.com\DFSR\Staging\CS{F020B20C-2126-4DFE-5D39-E7C105E5A6B7}\11\11-{7A5137D8-6B15-4473-B72B-7CBBD43A14FA}-v11-{7A5137D8-6B15-4473-B72B-7CBBD43A14FA}-v11-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\pianisten@ofir.dk\DFSR\Staging\CS{37D7D9F5-7B08-7640-F2E7-95773AA1FB18}\01\10-{37D7D9F5-7B08-7640-F2E7-95773AA1FB18}-v1-{6EE2C225-F6A1-4D7D-921D-5E6F9F643469}-v10-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\pianisten@ofir.dk\DFSR\Staging\CS{37D7D9F5-7B08-7640-F2E7-95773AA1FB18}\21\141-{D5897788-8BAB-4792-B456-9C10B506D793}-v121-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v141-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\pianisten@ofir.dk\DFSR\Staging\CS{37D7D9F5-7B08-7640-F2E7-95773AA1FB18}\21\141-{D5897788-8BAB-4792-B456-9C10B506D793}-v121-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v141-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\pianisten@ofir.dk\DFSR\Staging\CS{37D7D9F5-7B08-7640-F2E7-95773AA1FB18}\30\143-{D5897788-8BAB-4792-B456-9C10B506D793}-v30-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v143-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\pianisten@ofir.dk\DFSR\Staging\CS{37D7D9F5-7B08-7640-F2E7-95773AA1FB18}\30\143-{D5897788-8BAB-4792-B456-9C10B506D793}-v30-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v143-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\pianisten@ofir.dk\DFSR\Staging\CS{37D7D9F5-7B08-7640-F2E7-95773AA1FB18}\47\139-{D5897788-8BAB-4792-B456-9C10B506D793}-v47-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v139-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\pianisten@ofir.dk\DFSR\Staging\CS{37D7D9F5-7B08-7640-F2E7-95773AA1FB18}\48\115-{D5897788-8BAB-4792-B456-9C10B506D793}-v48-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v115-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\pianisten@ofir.dk\DFSR\Staging\CS{37D7D9F5-7B08-7640-F2E7-95773AA1FB18}\48\115-{D5897788-8BAB-4792-B456-9C10B506D793}-v48-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v115-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\pianisten@ofir.dk\DFSR\Staging\CS{37D7D9F5-7B08-7640-F2E7-95773AA1FB18}\51\118-{D5897788-8BAB-4792-B456-9C10B506D793}-v51-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v118-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\pianisten@ofir.dk\DFSR\Staging\CS{37D7D9F5-7B08-7640-F2E7-95773AA1FB18}\51\118-{D5897788-8BAB-4792-B456-9C10B506D793}-v51-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v118-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\pianisten@ofir.dk\DFSR\Staging\CS{37D7D9F5-7B08-7640-F2E7-95773AA1FB18}\52\119-{D5897788-8BAB-4792-B456-9C10B506D793}-v52-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v119-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1
ADS C:\Documents and Settings\kat\Lokale indstillinger\Application Data\Microsoft\Messenger\chaccomilo@yahoo.dk\SharingMetadata\pianisten@ofir.dk\DFSR\Staging\CS{37D7D9F5-7B08-7640-F2E7-95773AA1FB18}\52\119-{D5897788-8BAB-4792-B456-9C10B506D793}-v52-{D233EB92-B624-4A10-BB4C-F81B88A97955}-v119-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS

---- EOF - GMER 1.0.13 ----

---

Start HijackThis. Klik Config -> Misc Tools -> Open ADS spy. Sørg for, at der kun er flueben ved "Ignore safe system info streams". Klik Scan. Når den er færdig, så marker hvad den finder, og klik "Remove".

Og så er der sandelig i mellemtiden, dukket et nyt værktøj op, til infektionen

Hent MsnVirRem fra et af følgende link:
http://downloads.malwareremoval.com/MsnVirRem.exe
http://www.thespykiller.co.uk/forum/index.php?action=tpmod;dl=item9
http://www.greyknight17.com/spy/MsnVirRem.exe
Luk alle andre vinduer.

Dobbeltklik på MsnVirRem for at starte programmet.

Når det er startet, klik på "Search and Destroy"

Scanneren kører, det kan godt tage lidt tid.

Finder den noget, vil du blive bedt om at genstarte, klik på "Reboot"

Når maskinen er genstartet vil du få nogle "File not found" fejl (som regel 4), ignorer dem og fortsæt.

Der skulle gerne komme en meddelelse fra MsnVirRem, hvis der ikke gør, så dobbeltklik på programmet, så kører det færdigt.

Kopier C:\msnvirrem.log her ind (Åben loggen med Notesblok).

---

Alarm alarm:

Jeg prøvede at downloade, men min Bullgard Antivirus ser "RØDT"....Den siger det er inficeret

---

Må osse hellere lige passe mine gæster, så jeg ikke smitter:)

---

Bullguard ser nok signaturerne i værktøjet. Det er normalt at den slags sker. Filen kommer fra en 100% pålidelig kilde, så du kan roligt hente den. Luk evt for Bullguard antivirus (ikke firewall) når du henter og kører den.

---

TUSIND Tak for svaret stl_s.

Du er en "gud".....siger datteren

Hun og vennernes abstinenser er nu overståede

Eftersom du ikke er logget ind i systemet, kan du ikke skrive et indlæg til dette spørgsmål.

Hvis du ikke allerede er registreret, kan du gratis blive medlem, ved at trykke på "Bliv medlem" ude i menuen.