Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Trojan Viruses!


  • Please log in to reply
13 replies to this topic

#1 b3rt!

b3rt!

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:12:17 PM

Posted 10 April 2009 - 07:16 AM

Can some one help ASAP!!! I know its bank Holiday, but i need my laptop working!!

I have followed the info on http://www.bleepingcomputer.com/forums/t/176761/virus-found-win32cryptor/

and is it me or is Malware Bytes in some foriegn language when running??
I re-installed it and made sure i selected ENGLISH but still seems foriegn!

AVG says i have:

Trojan Genric in Winlogin and some .dll files
and i have win32/cryptor!

also my IE has gone wierd pictues wont appear any more!


MBAM LOGS
Database version _linenums:1961'>Malwarebytes' Anti-Malware 1.36Database version: 1961Windows 5.1.2600 Service Pack 210/04/2009 13:30:00mbam-log-2009-04-10 (13-30-00).txtScan type: Quick ScanObjects scanned: 74893Time elapsed: 5 minute(s), 28 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 20Registry Values Infected: 1Registry Data Items Infected: 4Folders Infected: 1Files Infected: 10Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{03f192de-89ca-4191-91c8-9a62caff26e4} (Trojan.Vundo.H) -> Delete on reboot.HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sznyebln (Trojan.Vundo.H) -> Delete on reboot.HKEY_CLASSES_ROOT\CLSID\{03f192de-89ca-4191-91c8-9a62caff26e4} (Trojan.Vundo.H) -> Delete on reboot.HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\zprfzkqw (Trojan.Vundo.H) -> Quarantined and deleted successfully.HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\zprfzkqw (Trojan.Vundo.H) -> Quarantined and deleted successfully.HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\zprfzkqw (Trojan.Vundo.H) -> Quarantined and deleted successfully.HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zprfzkqw (Trojan.Vundo.H) -> Quarantined and deleted successfully.HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{03f192de-89ca-4191-91c8-9a62caff26e4} (Trojan.Vundo.H) -> Quarantined and deleted successfully.HKEY_LOCAL_MACHINE\SOFTWARE\xpreapp (Malware.Trace) -> Quarantined and deleted successfully.HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\seneka (Trojan.Agent) -> Quarantined and deleted successfully.HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\seneka (Trojan.Agent) -> Quarantined and deleted successfully.HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\seneka (Trojan.Agent) -> Quarantined and deleted successfully.HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\__c00739eb (Trojan.Vundo) -> Quarantined and deleted successfully.HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> Quarantined and deleted successfully.HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\dslcnnct (Trojan.Vundo) -> Quarantined and deleted successfully.HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Track System (Trojan.Vundo) -> Quarantined and deleted successfully.HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully.HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt (Trojan.Downloader) -> Quarantined and deleted successfully.HKEY_LOCAL_MACHINE\SOFTWARE\seneka (Rootkit.Trace) -> Quarantined and deleted successfully.Registry Values Infected:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\rjahe (Trojan.Agent) -> Delete on reboot.Registry Data Items Infected:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\activedesktop\NoChangingWallpaper (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetActiveDesktop (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.Folders Infected:C:\Program Files\TotalVirusProtection (Rogue.TotalVirusProtection) -> Quarantined and deleted successfully.Files Infected:c:\WINDOWS\system32\nmkvkfz.dll (Trojan.Vundo.H) -> Delete on reboot.C:\WINDOWS\system32\lszvxfn.dll (Trojan.Vundo.H) -> Delete on reboot.C:\Program Files\TotalVirusProtection\TotalVirusProtection.xml (Rogue.TotalVirusProtection) -> Quarantined and deleted successfully.C:\Program Files\TotalVirusProtection\Uninstall.exe (Rogue.TotalVirusProtection) -> Quarantined and deleted successfully.C:\WINDOWS\ipejifigoci.dll (Trojan.Agent) -> Delete on reboot.C:\WINDOWS\system32\drivers\seneka.sys (Trojan.Agent) -> Quarantined and deleted successfully.C:\WINDOWS\system32\drivers\senekaqoivnypj.sys (Trojan.Agent) -> Quarantined and deleted successfully.C:\WINDOWS\system32\ (Trojan.Vundo) -> Delete on reboot.C:\WINDOWS\system32\ahtn.htm (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Edited by b3rt!, 10 April 2009 - 07:42 AM.


BC AdBot (Login to Remove)

 


#2 extremeboy

extremeboy

  • Malware Response Team
  • 12,975 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:17 PM

Posted 10 April 2009 - 09:51 AM

Hello.

You have a rootkit on your computer. MBAM seems to remove it, but it may be still active upon reboot.

Posted ImageRootkit Threat

Unfortunatly One or more of the identified infections is a Rootkit/backdoor trojan.

IMPORTANT NOTE: Rootkits and backdoor Trojans are very dangerous because they use advanced techniques (backdoors) as a means of accessing a computer system that bypasses security mechanisms and steal sensitive information which they send back to the hacker. Many rootkits can hook into the Windows 32-bit kernel, and patch several APIs to hide new registry keys and files they install. Remote attackers use backdoor Trojans and rootkits as part of an exploit to gain unauthorized access to a computer and take control of it without your knowledge.

If your computer was used for online banking, has credit card information or other sensitive data on it, you should immediately disconnect from the Internet until your system is cleaned. All passwords should be changed immediately to include those used for banking, email, eBay, paypal and online forums. You should consider them to be compromised. You should change each password by using a different computer and not the infected one. If not, an attacker may get the new passwords and transaction information. If using a router, you need to reset it with a strong logon/password so the malware cannot gain control before connect again. Banking and credit card institutions should be notified of the possible security breach. Because your computer was compromised please read How Do I Handle Possible Identify Theft, Internet Fraud and CC Fraud?

Although the rootkit has been identified and may be removed, your PC has likely been compromised and there is no way to be sure the computer can ever be trusted again. It is dangerous and incorrect to assume that because this malware has been removed the computer is now secure. In some instances an infection may have caused so much damage to your system that it cannot be completely cleaned or repaired. The malware may leave so many remnants behind that security tools cannot find them. Many experts in the security community believe that once infected with this type of malware, the best course of action is to wipe the drive clean, reformat and reinstall the OS. Please read:Should you decide not to follow that advice, we will do our best to help clean the computer of any infections but we cannot guarantee it to be trustworthy or that the removal will be successful. Tell me what you want to do.

With Regards,
Extremeboy
Note: Please do not PM me asking for help, instead please post it in the correct forum requesting for help. Help requests via the PM system will be ignored.

If I'm helping you and I don't reply within 48 hours please feel free to send me a PM.

The help you receive here is always free but if you wish to show your appreciation, you may wish to Posted Image.

#3 b3rt!

b3rt!
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:12:17 PM

Posted 10 April 2009 - 11:38 AM

Hay extreme boy,

can you help me clean it as, i dont have any installation CDs and im a student that is currently broke!!

#4 extremeboy

extremeboy

  • Malware Response Team
  • 12,975 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:17 PM

Posted 10 April 2009 - 01:02 PM

Hi again.

Let's make sure if the rootkit is active or not. If it's still active then we will move you to the HJT-Malware Removal forum for further assitance. We probably need stronger tools. :thumbsup:

Please run GMER for me first.

Download and Run Scan with GMER

We will use GMER to scan for rootkits.
  • Double-click on Gmer.exe to start the program.
  • Allow the gmer.sys driver to load if asked.
    If it detects rootkit activity, you will receive a prompt to run a full scan. Click Yes..
  • When it's done scanning, you may receive another notice. Click OK if prompted.
  • Click on Save ... to save the log on your desktop.
    Save the log as GMER.txt when you save it on your desktop.
  • Close Gmer and copy and paste the contents of GMER.txt in your next reply.
  • If you receive no notice, click on the Scan button near the bottom.
  • It will start scanning again like before.
  • When it is done, Click on Save ... to save the log on your desktop.
    Save the log as GMER.txt when you save it on your desktop.
  • Close Gmer and copy and paste the contents of GMER.txt in your next reply.If GMER doesn't work in Normal Mode try running it in Safe Mode
Note: Do Not run any program while GMER is running

Important!:Please do not select the Show all checkbox during the scan.

With Regards,
Extremeboy
Note: Please do not PM me asking for help, instead please post it in the correct forum requesting for help. Help requests via the PM system will be ignored.

If I'm helping you and I don't reply within 48 hours please feel free to send me a PM.

The help you receive here is always free but if you wish to show your appreciation, you may wish to Posted Image.

#5 b3rt!

b3rt!
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:12:17 PM

Posted 10 April 2009 - 06:52 PM

HI thanks again. Things didnt happen like i think they should, GMER opened up, i had to click scan and then at then end it just stopped nothing else and i had t click copy to save the text!

Text below. Let me know what you think!!

GMER 1.0.12.12011 - http://www.gmer.net
Rootkit scan 2009-04-11 00:48:29
Windows 5.1.2600 Service Pack 2


---- System - GMER 1.0.12 ----

SSDT   \??\C:\Program Files\AVG\AVG8\IdentityProtection\agent\driver\platform_XP\AVGIDSShim.sys																																																																					   ZwClose
SSDT   \??\C:\Program Files\AVG\AVG8\IdentityProtection\agent\driver\platform_XP\AVGIDSShim.sys																																																																					   ZwOpenProcess
SSDT   \??\C:\Program Files\AVG\AVG8\IdentityProtection\agent\driver\platform_XP\AVGIDSShim.sys																																																																					   ZwTerminateProcess
SSDT   \??\C:\Program Files\AVG\AVG8\IdentityProtection\agent\driver\platform_XP\AVGIDSShim.sys																																																																					   ZwTerminateThread
SSDT   \??\C:\Program Files\AVG\AVG8\IdentityProtection\agent\driver\platform_XP\AVGIDSShim.sys																																																																					   ZwWriteVirtualMemory

---- Kernel code sections - GMER 1.0.12 ----

.text  ntkrnlpa.exe!ZwCallbackReturn + 254D																																																																																		   80501D45 3 Bytes  [ 08, 91, F8 ]
.text  ntkrnlpa.exe!ZwCallbackReturn + 2768																																																																																		   80501F60 8 Bytes  [ 80, 09, 91, F8, 20, 0A, 91, ... ]
PAGE   ntkrnlpa.exe!ObReferenceObjectByHandle + 4BF																																																																																   805B0BD9 7 Bytes  JMP 8315BF50 

---- Registry - GMER 1.0.12 ----

Reg	\Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Fci@aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa								   0x9A 0x3B 0xD7 0xCA ...

---- Files - GMER 1.0.12 ----

ADS	C:\Documents and Settings\All Users\Application Data\TEMP:D1B5B4F1																																																																											 
ADS	C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2																																																																											 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\lynseypinch_6@hotmail.co.uk\SharingMetadata\hellosho@msn.com\DFSR\Staging\CS{1D69B29B-E67B-83BA-DAE1-78AA60283FBC}\01\10-{1D69B29B-E67B-83BA-DAE1-78AA60283FBC}-v1-{997FB52D-EF1A-4592-A9B2-49DF31FD8E32}-v10-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS			   
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\lynseypinch_6@hotmail.co.uk\SharingMetadata\hellosho@msn.com\DFSR\Staging\CS{1D69B29B-E67B-83BA-DAE1-78AA60283FBC}\11\11-{52B54524-626C-4769-9D35-090E384A7929}-v11-{52B54524-626C-4769-9D35-090E384A7929}-v11-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS			  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\lynseypinch_6@hotmail.co.uk\SharingMetadata\hellosho@msn.com\DFSR\Staging\CS{1D69B29B-E67B-83BA-DAE1-78AA60283FBC}\12\12-{52B54524-626C-4769-9D35-090E384A7929}-v12-{52B54524-626C-4769-9D35-090E384A7929}-v12-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1			   
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\lynseypinch_6@hotmail.co.uk\SharingMetadata\hellosho@msn.com\DFSR\Staging\CS{1D69B29B-E67B-83BA-DAE1-78AA60283FBC}\12\12-{52B54524-626C-4769-9D35-090E384A7929}-v12-{52B54524-626C-4769-9D35-090E384A7929}-v12-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS			  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\lynseypinch_6@hotmail.co.uk\SharingMetadata\hellosho@msn.com\DFSR\Staging\CS{1D69B29B-E67B-83BA-DAE1-78AA60283FBC}\13\13-{52B54524-626C-4769-9D35-090E384A7929}-v13-{52B54524-626C-4769-9D35-090E384A7929}-v13-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS			  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\lynseypinch_6@hotmail.co.uk\SharingMetadata\hellosho@msn.com\DFSR\Staging\CS{1D69B29B-E67B-83BA-DAE1-78AA60283FBC}\14\14-{52B54524-626C-4769-9D35-090E384A7929}-v14-{52B54524-626C-4769-9D35-090E384A7929}-v14-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS			  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\lynseypinch_6@hotmail.co.uk\SharingMetadata\hellosho@msn.com\DFSR\Staging\CS{1D69B29B-E67B-83BA-DAE1-78AA60283FBC}\15\15-{52B54524-626C-4769-9D35-090E384A7929}-v15-{52B54524-626C-4769-9D35-090E384A7929}-v15-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1			   
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\lynseypinch_6@hotmail.co.uk\SharingMetadata\hellosho@msn.com\DFSR\Staging\CS{1D69B29B-E67B-83BA-DAE1-78AA60283FBC}\15\15-{52B54524-626C-4769-9D35-090E384A7929}-v15-{52B54524-626C-4769-9D35-090E384A7929}-v15-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS			  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\lynseypinch_6@hotmail.co.uk\SharingMetadata\hellosho@msn.com\DFSR\Staging\CS{1D69B29B-E67B-83BA-DAE1-78AA60283FBC}\16\16-{52B54524-626C-4769-9D35-090E384A7929}-v16-{52B54524-626C-4769-9D35-090E384A7929}-v16-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS			  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\lynseypinch_6@hotmail.co.uk\SharingMetadata\hellosho@msn.com\DFSR\Staging\CS{1D69B29B-E67B-83BA-DAE1-78AA60283FBC}\17\17-{52B54524-626C-4769-9D35-090E384A7929}-v17-{52B54524-626C-4769-9D35-090E384A7929}-v17-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS			  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\lynseypinch_6@hotmail.co.uk\SharingMetadata\hellosho@msn.com\DFSR\Staging\CS{1D69B29B-E67B-83BA-DAE1-78AA60283FBC}\18\18-{52B54524-626C-4769-9D35-090E384A7929}-v18-{52B54524-626C-4769-9D35-090E384A7929}-v18-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1			   
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\lynseypinch_6@hotmail.co.uk\SharingMetadata\hellosho@msn.com\DFSR\Staging\CS{1D69B29B-E67B-83BA-DAE1-78AA60283FBC}\18\18-{52B54524-626C-4769-9D35-090E384A7929}-v18-{52B54524-626C-4769-9D35-090E384A7929}-v18-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS			  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\lynseypinch_6@hotmail.co.uk\SharingMetadata\hellosho@msn.com\DFSR\Staging\CS{1D69B29B-E67B-83BA-DAE1-78AA60283FBC}\19\19-{52B54524-626C-4769-9D35-090E384A7929}-v19-{52B54524-626C-4769-9D35-090E384A7929}-v19-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS			  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\lynseypinch_6@hotmail.co.uk\SharingMetadata\hellosho@msn.com\DFSR\Staging\CS{1D69B29B-E67B-83BA-DAE1-78AA60283FBC}\20\20-{52B54524-626C-4769-9D35-090E384A7929}-v20-{52B54524-626C-4769-9D35-090E384A7929}-v20-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS			  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\lynseypinch_6@hotmail.co.uk\SharingMetadata\hellosho@msn.com\DFSR\Staging\CS{1D69B29B-E67B-83BA-DAE1-78AA60283FBC}\21\21-{52B54524-626C-4769-9D35-090E384A7929}-v21-{52B54524-626C-4769-9D35-090E384A7929}-v21-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS			  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\lynseypinch_6@hotmail.co.uk\SharingMetadata\hellosho@msn.com\DFSR\Staging\CS{1D69B29B-E67B-83BA-DAE1-78AA60283FBC}\22\22-{52B54524-626C-4769-9D35-090E384A7929}-v22-{52B54524-626C-4769-9D35-090E384A7929}-v22-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS			  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\lynseypinch_6@hotmail.co.uk\SharingMetadata\hellosho@msn.com\DFSR\Staging\CS{1D69B29B-E67B-83BA-DAE1-78AA60283FBC}\23\23-{52B54524-626C-4769-9D35-090E384A7929}-v23-{52B54524-626C-4769-9D35-090E384A7929}-v23-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS			  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\lynseypinch_6@hotmail.co.uk\SharingMetadata\hellosho@msn.com\DFSR\Staging\CS{1D69B29B-E67B-83BA-DAE1-78AA60283FBC}\24\24-{52B54524-626C-4769-9D35-090E384A7929}-v24-{52B54524-626C-4769-9D35-090E384A7929}-v24-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS			  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\lynseypinch_6@hotmail.co.uk\SharingMetadata\hellosho@msn.com\DFSR\Staging\CS{1D69B29B-E67B-83BA-DAE1-78AA60283FBC}\25\25-{52B54524-626C-4769-9D35-090E384A7929}-v25-{52B54524-626C-4769-9D35-090E384A7929}-v25-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS			  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\lynseypinch_6@hotmail.co.uk\SharingMetadata\hellosho@msn.com\DFSR\Staging\CS{1D69B29B-E67B-83BA-DAE1-78AA60283FBC}\26\26-{52B54524-626C-4769-9D35-090E384A7929}-v26-{52B54524-626C-4769-9D35-090E384A7929}-v26-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS			  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\01\11-{7126F25F-11F0-126C-ADE5-ABD24899DA20}-v1-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v11-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\03\214-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v203-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v214-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1   
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\03\214-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v203-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v214-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2   
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\03\214-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v203-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v214-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\04\215-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v204-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v215-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1   
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\04\215-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v204-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v215-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2   
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\04\215-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v204-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v215-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\05\216-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v205-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v216-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1   
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\05\216-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v205-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v216-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2   
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\05\216-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v205-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v216-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\06\217-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v206-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v217-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1   
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\06\217-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v206-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v217-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2   
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\06\217-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v206-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v217-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\07\218-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v207-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v218-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1   
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\07\218-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v207-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v218-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2   
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\07\218-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v207-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v218-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\08\219-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v208-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v219-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1   
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\08\219-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v208-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v219-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2   
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\08\219-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v208-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v219-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\12\12-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v12-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v12-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\12\12-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v12-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v12-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\12\12-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v12-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v12-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\13\13-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v13-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v13-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\13\13-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v13-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v13-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\14\14-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v14-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v14-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\14\14-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v14-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v14-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\15\15-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v15-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v15-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\15\15-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v15-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v15-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\16\16-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v16-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v16-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\16\16-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v16-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v16-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\17\17-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v17-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v17-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\17\17-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v17-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v17-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\18\18-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v18-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v18-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\18\18-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v18-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v18-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\19\19-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v19-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v19-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\19\19-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v19-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v19-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\19\19-{8D6219E5-775D-422E-BF5A-96738F33A6B2}-v19-{8D6219E5-775D-422E-BF5A-96738F33A6B2}-v19-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\20\20-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v20-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v20-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\20\20-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v20-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v20-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\21\21-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v21-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v21-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\21\21-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v21-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v21-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\22\22-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v22-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v22-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\22\22-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v22-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v22-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\23\23-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v23-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v23-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\23\23-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v23-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v23-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\24\24-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v24-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v24-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\24\24-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v24-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v24-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\25\25-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v25-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v25-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\25\25-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v25-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v25-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\26\26-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v26-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v26-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\26\26-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v26-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v26-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\27\27-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v27-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v27-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\27\27-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v27-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v27-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\28\28-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v28-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v28-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\28\28-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v28-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v28-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\29\29-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v29-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v29-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\29\29-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v29-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v29-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\30\30-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v30-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v30-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\30\30-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v30-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v30-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\31\31-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v31-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v31-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\31\31-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v31-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v31-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\32\32-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v32-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v32-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\32\32-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v32-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v32-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\33\33-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v33-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v33-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\33\33-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v33-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v33-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\34\34-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v34-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v34-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\34\34-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v34-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v34-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\35\35-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v35-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v35-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\35\35-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v35-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v35-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\36\36-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v36-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v36-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\36\36-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v36-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v36-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\37\37-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v37-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v37-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\37\37-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v37-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v37-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\38\38-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v38-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v38-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\38\38-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v38-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v38-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\39\39-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v39-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v39-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\39\39-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v39-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v39-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\40\40-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v40-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v40-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\40\40-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v40-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v40-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\41\41-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v41-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v41-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\41\41-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v41-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v41-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\42\42-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v42-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v42-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\42\42-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v42-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v42-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\43\43-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v43-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v43-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\43\43-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v43-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v43-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\44\44-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v44-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v44-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\44\44-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v44-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v44-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\45\45-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v45-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v45-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\45\45-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v45-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v45-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\46\46-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v46-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v46-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\46\46-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v46-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v46-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\47\47-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v47-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v47-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\47\47-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v47-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v47-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\48\48-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v48-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v48-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\48\48-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v48-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v48-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\49\49-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v49-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v49-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\49\49-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v49-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v49-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\50\50-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v50-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v50-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\50\50-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v50-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v50-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\51\51-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v51-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v51-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\51\51-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v51-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v51-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\52\52-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v52-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v52-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\52\52-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v52-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v52-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\53\53-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v53-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v53-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\53\53-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v53-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v53-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\54\54-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v54-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v54-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\54\54-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v54-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v54-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\55\55-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v55-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v55-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\55\55-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v55-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v55-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\56\56-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v56-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v56-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\56\56-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v56-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v56-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\57\57-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v57-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v57-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\57\57-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v57-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v57-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\58\58-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v58-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v58-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\58\58-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v58-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v58-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\59\59-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v59-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v59-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\59\59-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v59-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v59-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\60\60-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v60-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v60-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\60\60-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v60-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v60-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\61\61-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v61-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v61-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\61\61-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v61-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v61-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\62\62-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v62-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v62-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\62\62-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v62-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v62-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\63\63-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v63-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v63-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\63\63-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v63-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v63-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\64\64-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v64-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v64-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\64\64-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v64-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v64-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\65\65-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v65-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v65-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\65\65-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v65-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v65-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\70\70-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v70-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v70-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\70\70-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v70-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v70-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\70\70-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v70-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v70-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\71\71-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v71-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v71-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\71\71-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v71-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v71-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\71\71-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v71-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v71-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.3	  
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\71\71-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v71-{6098B6D5-F45A-49CE-9094-9BB455EC7998}-v71-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS	 
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\99\210-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v199-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v210-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1   
ADS	C:\Documents and Settings\SaR RaH\Local Settings\Application Data\Microsoft\Messenger\sarah_louise_8001@hotmail.com\SharingMetadata\freakyolege@hotmail.com\DFSR\Staging\CS{7126F25F-11F0-126C-ADE5-ABD24899DA20}\99\210-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v199-{6222E7AA-B802-4C33-9452-878C8FDFA9BB}-v210-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS  

---- EOF - GMER 1.0.12 ----


#6 extremeboy

extremeboy

  • Malware Response Team
  • 12,975 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:17 PM

Posted 10 April 2009 - 07:05 PM

Hello.

The GMER log looks fine. :thumbsup:

Seems the rootkit was removed. Your computer was compromised though, but since you are a student and don't have the disk it won't help.

Please update MBAM. Then, peform a Full Scan for me. Post the log once it's done.

I'll review it once it's done and see what else needs to be done.

With Regards,
Extremeboy
Note: Please do not PM me asking for help, instead please post it in the correct forum requesting for help. Help requests via the PM system will be ignored.

If I'm helping you and I don't reply within 48 hours please feel free to send me a PM.

The help you receive here is always free but if you wish to show your appreciation, you may wish to Posted Image.

#7 b3rt!

b3rt!
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:12:17 PM

Posted 11 April 2009 - 11:22 AM

Hi did another scan this is the results


Malwarebytes' Anti-Malware 1.36
Database version: 1961
Windows 5.1.2600 Service Pack 2

11/04/2009 17:14:48
mbam-log-2009-04-11 (17-14-48).txt

Scan type: Full Scan (C:\|)
Objects scanned: 167274
Time elapsed: 1 hour(s), 48 minute(s), 34 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 3
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{03f192de-89ca-4191-91c8-9a62caff26e4} (Trojan.Vundo.H) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sznyebln (Trojan.Vundo.H) -> Delete on reboot.
HKEY_CLASSES_ROOT\CLSID\{03f192de-89ca-4191-91c8-9a62caff26e4} (Trojan.Vundo.H) -> Delete on reboot.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
c:\WINDOWS\system32\nmkvkfz.dll (Trojan.Vundo.H) -> Delete on reboot.


#8 extremeboy

extremeboy

  • Malware Response Team
  • 12,975 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:17 PM

Posted 11 April 2009 - 12:42 PM

Hello.

Did you reboot the computer after the scan? If no, do so now.

Now run SAS for me and see if they are still there.

Also, don't post the results by wrapping them around with the "code" and "/code" tag.

Download and Run ATFCleaner

Please download ATF Cleaner by Atribune. This program will clear out temporary files and settings. You will likely be logged out of the forum where you are recieving help.

This program is for XP and Windows 2000 only.
  • Double-click ATF-Cleaner.exe to run the program.
  • Under Main Select Files to Delete choose: Select All.
  • Click the Empty Selected button.
If you use Firefox browser also...
  • Click Firefox at the top and choose: Select All
  • Click the Empty Selected button.
    NOTE: If you would like to keep your saved passwords, please click No at the prompt.
If you use Opera browser also...
  • Click Opera at the top and choose: Select All
  • Click the Empty Selected button.
    NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Download and Run SUPERAntiSpyware
We will run a scan with SuperAntiSpyware.
  • Download SUPERAntiSpyware to your desktop.
  • Double-click SUPERAntiSpyware.exe and use the default settings for installation. Delete the installer after use.
  • An icon will be created on your desktop. Double-click that icon to launch the program.
  • If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates".
    If you encounter any problems while downloading the updates, manually download and unzip them from here.
  • Under "Configuration and Preferences", click the Preferences button.
  • Click the Scanning Control tab.
  • Under Scanner Options make sure the following are checked (leave all others unchecked):
    • Close browsers before scanning.
    • Scan for tracking cookies.
    • Terminate memory threats before quarantining.
  • Click the "Close" button to leave the control center screen.
  • Back on the main screen, under Scan for Harmful Software, click Scan your computer.
  • On the left, make sure you check C:\Fixed Drive (or whatever drive your system is installed on).
  • On the right, under Complete Scan, choose Perform Complete Scan.
  • Click Next to start the scan. Please be patient while it scans your computer.
  • After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click OK.
  • Make sure everything has a checkmark next to it and click Next.
  • A notification will appear saying that "Quarantine and Removal is Complete". Click OK and then click the Finish button to return to the main menu.
  • If asked if you want to reboot, click Yes.
  • To retrieve the removal information after reboot, launch SUPERAntispyware again.
    • Click Preferences, then click the Statistics/Logs tab.
    • Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
    • If there are several logs, click the current dated log and press View log. A text file will open in your default text editor.
    • Please copy and paste the Scan Log results in your next reply.
  • Click Close to exit the program.
With Regards,
Extremeboy
Note: Please do not PM me asking for help, instead please post it in the correct forum requesting for help. Help requests via the PM system will be ignored.

If I'm helping you and I don't reply within 48 hours please feel free to send me a PM.

The help you receive here is always free but if you wish to show your appreciation, you may wish to Posted Image.

#9 b3rt!

b3rt!
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:12:17 PM

Posted 11 April 2009 - 02:36 PM

Sorry i did put the code tags in there but by hand must missed sometihng. I have done the restart then and also i have done that process you asked me before i first contacted you (re first post)

Sorry i miss understood what is SAS?? Im bit confused

#10 extremeboy

extremeboy

  • Malware Response Team
  • 12,975 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:17 PM

Posted 11 April 2009 - 02:42 PM

Hello.

Sorry i miss understood what is SAS?? Im bit confused

Sorry for the confusion. I will try to avoid using abbreviations from now.

SAS is just SuperAntiSpyware. Just follow the instructions in my previous post. Run ATFCleaner and then Superanti-spyware :thumbsup:

Post the log once it's done.

With Regards,
Extremeboy
Note: Please do not PM me asking for help, instead please post it in the correct forum requesting for help. Help requests via the PM system will be ignored.

If I'm helping you and I don't reply within 48 hours please feel free to send me a PM.

The help you receive here is always free but if you wish to show your appreciation, you may wish to Posted Image.

#11 b3rt!

b3rt!
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:12:17 PM

Posted 11 April 2009 - 05:49 PM

This is the log!


SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 04/11/2009 at 11:34 PM

Application Version : 4.26.1000

Core Rules Database Version : 3838
Trace Rules Database Version: 1794

Scan type : Full Scan
Total Scan Time : 02:02:14

Memory items scanned : 234
Memory threats detected : 0
Registry items scanned : 502
Registry threats detected : 0
File items scanned : 40617
File threats detected : 0


Whats the verdict my friend!

#12 extremeboy

extremeboy

  • Malware Response Team
  • 12,975 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:17 PM

Posted 11 April 2009 - 08:06 PM

That looks good.

Let's run an online scan and see if there's anything we missed.

Run ESET Online Scan
  • Please disable your realtime protection software before proceeding. Refer to this page if you are unsure how.
  • Please go to ESET OnlineScan (NOD32)
  • You will then see the Terms of Use, tick the check-box infront of YES, I accept the Terms of Use
  • Now click Start. If you see a "Security Warning" that asks if you want to install and run a file called "OnlineScanner.cab", click Yes.
  • Click Start. The online scanner will now prepare itself for running on your pc.
  • To do a full-scan, tick: Remove found threats and Scan potentially unwanted applications.
  • Press Scan. The Onlinescan will now start and scan your computer. Please be patient as this a while.
  • When the scan has finished, it will show a screen with two tabs "overview" and "details" and the option to get information or buy software, just close the window.
  • Click Start, then Run.... The the box that appears type with the quotes:
    "C:\Program Files\EsetOnlineScanner\log.txt"
  • The scan results will now open in Notepad
  • Click into the text area, right-click and chose select all. Right-click again and chose Copy.
  • Post back with the log.txt in your next reply.
Note: For Vista Users: Eset is compatible but Internet Explorer must be run as Administrator. To do this, right-click on the IE icon in the Start Menu or Quick Launch Bar on the Taskbar and select "Run as Administrator" from the context menu.)

With Regards,
Extremeboy
Note: Please do not PM me asking for help, instead please post it in the correct forum requesting for help. Help requests via the PM system will be ignored.

If I'm helping you and I don't reply within 48 hours please feel free to send me a PM.

The help you receive here is always free but if you wish to show your appreciation, you may wish to Posted Image.

#13 b3rt!

b3rt!
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:12:17 PM

Posted 12 April 2009 - 07:13 AM

Here you go!!

I still have a problem with IE, it doesnt show pictures, and when you use Iplayer in both IE and Firefox, it doesnt play sound. However sound works in itunes?? Any ideas??

Sometimes AVG says there is a threat when u first open it everytime!


# version=4
# OnlineScanner.ocx=1.0.0.635
# OnlineScannerDLLA.dll=1, 0, 0, 79
# OnlineScannerDLLW.dll=1, 0, 0, 78
# OnlineScannerUninstaller.exe=1, 0, 0, 49
# vers_standard_module=4002 (20090411)
# vers_arch_module=1.064 (20080214)
# vers_adv_heur_module=1.066 (20070917)
# EOSSerial=9b0eb452788eee45bd75aa77ed781c92
# end=finished
# remove_checked=true
# unwanted_checked=true
# utc_time=2009-04-12 12:08:51
# local_time=2009-04-12 01:08:51 (+0000, GMT Standard Time)
# country="United Kingdom"
# osver=5.1.2600 NT Service Pack 2
# scanned=259223
# found=1
# scan_time=3381
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Yazzle.zip	Win32/Bagle.gen.zip worm (unable to clean - deleted)	00000000000000000000000000000000


#14 extremeboy

extremeboy

  • Malware Response Team
  • 12,975 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:17 PM

Posted 12 April 2009 - 04:08 PM

Hello.

I still have a problem with IE, it doesnt show pictures, and when you use Iplayer in both IE and Firefox, it doesnt play sound. However sound works in itunes?? Any ideas??

Not too sure.

You might want to start a topic over here or here:
http://www.bleepingcomputer.com/forums/f/14/web-browsingemail-and-other-internet-applications/ <- Web Browsing/Email and Other Internet Applications forum
http://www.bleepingcomputer.com/forums/f/65/audio-and-video/ <-Audio/Video forum

The ESET log looks good. You might want to purge a system restore point now.

Create a New System Restore Point<- Very Important

Now you should Create a New Restore Point to prevent possible reinfection from an old one. Some of the malware you picked up could have been saved in System Restore. Since this is a protected directory your tools cannot access to delete these files, they sometimes can reinfect your system if you accidentally use an old restore point. Setting a new restore point AFTER cleaning your system will help prevent this and enable your computer to "roll-back" to a clean working state.

The easiest and safest way to do this is:
  • Go to Start > Programs > Accessories > System Tools and click "System Restore".
  • Choose the radio button marked "Create a Restore Point" on the first screen then click "Next". Give the R.P. a name, then click "Create". The new point will be stamped with the current date and time. Keep a log of this so you can find it easily should you need to use System Restore.
  • Then use Disk Cleanup to remove all but the most recently created Restore Point.
  • Go to Start > Run and type: Cleanmgr
  • Click "Ok"
  • Disk Cleanup will scan your files for several minutes, then open.
  • Click the "More Options" Tab.
  • Click the "Clean up" button under System Restore.
  • Click Ok. You will be prompted with "Are you sure you want to delete all but the most recent restore point?"
  • Click Yes, then click Ok.
  • Click Yes again when prompted with "Are you sure you want to perform these actions?"
  • Disk Cleanup will remove the files and close automatically.
Vista Users can refer to these links: Create a New Restore Point and Disk Cleanup.

With regards,
Extremeboy
Note: Please do not PM me asking for help, instead please post it in the correct forum requesting for help. Help requests via the PM system will be ignored.

If I'm helping you and I don't reply within 48 hours please feel free to send me a PM.

The help you receive here is always free but if you wish to show your appreciation, you may wish to Posted Image.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users