[code] OTScanIt logfile created on: 2008/8/23 上午 12:24:28 OTScanIt by OldTimer - Version 1.0.16.2 Folder = C:\Downloads\OTScanIt Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 7.0.5730.13) Locale: 00000404 | Country: Taiwan | Language: CHT | Date Format: yyyy/M/d 446.41 Mb Total Physical Memory | 109.69 Mb Available Physical Memory | 24.57% Memory free 1.03 Gb Paging File | 0.69 Gb Available in Paging File | 66.81% Paging File free Paging file location(s): C:\pagefile.sys 672 1344; %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 74.52 Gb Total Space | 48.91 Gb Free Space | 65.64% Space Free | Partition Type: NTFS D: Drive not present or media not loaded E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: JIE Current User Name: Jie Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user [Processes - Non-Microsoft Only] ekrn.exe -> %ProgramFiles%\ESET\ESET Smart Security\ekrn.exe -> ESET [Ver = 3.0.650 | Size = 472320 bytes | Modified Date = 2008/3/13 下午 04:49:56 | Attr = ] nsvclog.exe -> %ProgramFiles%\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe -> NVIDIA Corporation [Ver = 2, 2, 0, 464 | Size = 65599 bytes | Modified Date = 2006/7/13 下午 04:59:32 | Attr = ] nvsvc32.exe -> %SystemRoot%\system32\nvsvc32.exe -> NVIDIA Corporation [Ver = 6.14.11.6375 | Size = 155716 bytes | Modified Date = 2007/10/4 下午 05:14:00 | Attr = ] nsvcip.exe -> %ProgramFiles%\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe -> NVIDIA Corporation [Ver = 2, 2, 0, 464 | Size = 131131 bytes | Modified Date = 2006/7/13 下午 04:59:48 | Attr = ] rthdcpl.exe -> %SystemRoot%\RTHDCPL.exe -> Realtek Semiconductor Corp. [Ver = 2.1.8.2 | Size = 16860672 bytes | Modified Date = 2007/12/20 下午 04:47:36 | Attr = ] hpwuschd2.exe -> %ProgramFiles%\HP\HP Software Update\hpwuSchd2.exe -> Hewlett-Packard Co. [Ver = 53.0.13.000 | Size = 49152 bytes | Modified Date = 2005/5/11 下午 11:12:54 | Attr = ] egui.exe -> %ProgramFiles%\ESET\ESET Smart Security\egui.exe -> ESET [Ver = 3.0.650 | Size = 1443072 bytes | Modified Date = 2008/3/13 下午 04:48:30 | Attr = ] qttask.exe -> %ProgramFiles%\QuickTime\qttask.exe -> Apple Computer, Inc. [Ver = 7.0.3 | Size = 155648 bytes | Modified Date = 2008/5/28 下午 05:57:06 | Attr = ] emule.exe -> %ProgramFiles%\eMule\emule.exe -> http://www.emule-project.net [Ver = 0.48.0.80627 Unicode | Size = 5256752 bytes | Modified Date = 2008/6/27 下午 03:28:24 | Attr = ] hpqtra08.exe -> %ProgramFiles%\HP\Digital Imaging\bin\hpqtra08.exe -> Hewlett-Packard Co. [Ver = 53.0.13.000 | Size = 282624 bytes | Modified Date = 2005/5/11 下午 11:23:26 | Attr = ] hpqste08.exe -> %ProgramFiles%\HP\Digital Imaging\bin\hpqste08.exe -> Hewlett-Packard Co. [Ver = 53.0.13.000 | Size = 204800 bytes | Modified Date = 2005/5/12 上午 12:40:38 | Attr = ] hprblog.exe -> %ProgramFiles%\HP\Digital Imaging\Product Assistant\bin\hprblog.exe -> Hewlett-Packard Co. [Ver = 53.0.13.000 | Size = 77824 bytes | Modified Date = 2005/5/11 下午 11:16:22 | Attr = ] teamviewer.exe -> %ProgramFiles%\TeamViewer3\TeamViewer.exe -> TeamViewer GmbH [Ver = 3.5.4140.0 | Size = 2731304 bytes | Modified Date = 2008/3/12 下午 05:02:12 | Attr = ] otscanit.exe -> %SystemDrive%\Downloads\OTScanIt\OTScanIt.exe -> OldTimer Tools [Ver = 1.0.16.2 | Size = 397312 bytes | Modified Date = 2008/7/12 上午 09:29:54 | Attr = ] [Win32 Services - Non-Microsoft Only] (dmadmin) Logical Disk Manager Administrative Service [Win32_Shared | On_Demand | Stopped] -> %SystemRoot%\system32\dmadmin.exe -> Microsoft Corp., Veritas Software [Ver = 2600.2180.503.0 | Size = 224768 bytes | Modified Date = 2004/8/4 上午 06:56:50 | Attr = ] (EhttpSrv) Eset HTTP Server [Win32_Own | On_Demand | Stopped] -> %ProgramFiles%\ESET\ESET Smart Security\EHttpSrv.exe -> ESET [Ver = 3.0.650 | Size = 19200 bytes | Modified Date = 2008/3/13 下午 04:55:26 | Attr = ] (ekrn) Eset Service [Win32_Own | Auto | Running] -> %ProgramFiles%\ESET\ESET Smart Security\ekrn.exe -> ESET [Ver = 3.0.650 | Size = 472320 bytes | Modified Date = 2008/3/13 下午 04:49:56 | Attr = ] (ForcewareWebInterface) Forceware Web Interface [Win32_Own | Auto | Stopped] -> %ProgramFiles%\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe -> Apache Software Foundation [Ver = 2.0.52 | Size = 20543 bytes | Modified Date = 2006/4/3 下午 06:04:02 | Attr = ] (IDriverT) InstallDriver Table Manager [Win32_Own | On_Demand | Stopped] -> %CommonProgramFiles%\InstallShield\Driver\11\Intel 32\IDriverT.exe -> Macrovision Corporation [Ver = 11.00.28844 | Size = 69632 bytes | Modified Date = 2005/4/4 上午 12:41:10 | Attr = ] (nSvcIp) ForceWare IP service [Win32_Own | Auto | Running] -> %ProgramFiles%\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe -> NVIDIA Corporation [Ver = 2, 2, 0, 464 | Size = 131131 bytes | Modified Date = 2006/7/13 下午 04:59:48 | Attr = ] (nSvcLog) ForceWare user log service [Win32_Own | Auto | Running] -> %ProgramFiles%\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe -> NVIDIA Corporation [Ver = 2, 2, 0, 464 | Size = 65599 bytes | Modified Date = 2006/7/13 下午 04:59:32 | Attr = ] (NVSvc) NVIDIA Display Driver Service [Win32_Own | Auto | Running] -> %SystemRoot%\system32\nvsvc32.exe -> NVIDIA Corporation [Ver = 6.14.11.6375 | Size = 155716 bytes | Modified Date = 2007/10/4 下午 05:14:00 | Attr = ] (Pml Driver HPZ12) Pml Driver HPZ12 [Win32_Own | Auto | Stopped] -> %SystemRoot%\system32\HPZipm12.exe -> HP [Ver = 9, 0, 0, 0 | Size = 69632 bytes | Modified Date = 2004/9/29 下午 12:14:36 | Attr = ] [Driver Services - Non-Microsoft Only] (dmboot) dmboot [Kernel | Disabled | Stopped] -> %SystemRoot%\system32\drivers\dmboot.sys -> Microsoft Corp., Veritas Software [Ver = 2600.2180.503.0 | Size = 799744 bytes | Modified Date = 2004/8/4 上午 05:07:18 | Attr = ] (dmio) Logical Disk Manager Driver [Kernel | Boot | Running] -> %SystemRoot%\system32\drivers\dmio.sys -> Microsoft Corp., Veritas Software [Ver = 2600.2180.503.0 | Size = 153344 bytes | Modified Date = 2004/8/4 上午 05:07:18 | Attr = ] (dmload) dmload [Kernel | Boot | Running] -> %SystemRoot%\system32\drivers\dmload.sys -> Microsoft Corp., Veritas Software. [Ver = 2600.0.503.0 | Size = 5888 bytes | Modified Date = 2001/8/23 下午 07:00:00 | Attr = ] (EagleNT) EagleNT [Kernel | On_Demand | Stopped] -> %SystemRoot%\system32\drivers\EagleNT.sys -> File not found (eamon) eamon [Kernel | Auto | Running] -> %SystemRoot%\system32\drivers\eamon.sys -> ESET [Ver = 3.0.650 | Size = 40456 bytes | Modified Date = 2008/3/13 下午 04:43:42 | Attr = ] (easdrv) easdrv [Kernel | System | Running] -> %SystemRoot%\system32\drivers\easdrv.sys -> ESET [Ver = 3.0.650 | Size = 29704 bytes | Modified Date = 2008/3/13 下午 04:44:36 | Attr = ] (epfw) epfw [Kernel | Auto | Running] -> %SystemRoot%\system32\drivers\epfw.sys -> ESET [Ver = 3.0.650 | Size = 71176 bytes | Modified Date = 2008/3/13 下午 04:52:12 | Attr = ] (Epfwndis) Eset Personal Firewall [Kernel | On_Demand | Running] -> %SystemRoot%\system32\drivers\epfwndis.sys -> ESET [Ver = 3.0.650 | Size = 30728 bytes | Modified Date = 2008/3/13 下午 04:52:16 | Attr = ] (epfwtdi) epfwtdi [Kernel | System | Running] -> %SystemRoot%\system32\drivers\epfwtdi.sys -> ESET [Ver = 3.0.650 | Size = 54280 bytes | Modified Date = 2008/3/13 下午 04:52:16 | Attr = ] (HDAudBus) Microsoft UAA Bus Driver for High Definition Audio [Kernel | On_Demand | Running] -> %SystemRoot%\system32\drivers\Hdaudbus.sys -> Windows (R) Server 2003 DDK provider [Ver = 5.10.01.5013 built by: WinDDK | Size = 138752 bytes | Modified Date = 2005/1/7 下午 05:07:18 | Attr = ] (HPZid412) IEEE-1284.4 Driver HPZid412 [Kernel | On_Demand | Stopped] -> %SystemRoot%\system32\drivers\HPZid412.sys -> HP [Ver = 9, 0, 0, 0 | Size = 51120 bytes | Modified Date = 2005/3/8 下午 12:43:25 | Attr = R ] (HPZipr12) Print Class Driver for IEEE-1284.4 HPZipr12 [Kernel | On_Demand | Stopped] -> %SystemRoot%\system32\drivers\HPZipr12.sys -> HP [Ver = 9, 0, 0, 0 | Size = 16496 bytes | Modified Date = 2005/3/8 下午 12:43:26 | Attr = R ] (HPZius12) USB to IEEE-1284.4 Translation Driver HPZius12 [Kernel | On_Demand | Stopped] -> %SystemRoot%\system32\drivers\HPZius12.sys -> HP [Ver = 9, 0, 0, 0 | Size = 21744 bytes | Modified Date = 2005/3/8 下午 12:43:27 | Attr = R ] (IntcAzAudAddService) Service for Realtek HD Audio (WDM) [Kernel | On_Demand | Running] -> %SystemRoot%\system32\drivers\RtkHDAud.sys -> Realtek Semiconductor Corp. [Ver = 5.10.0.5532 built by: WinDDK | Size = 4637696 bytes | Modified Date = 2007/12/20 下午 06:00:06 | Attr = ] (nv) nv [Kernel | On_Demand | Running] -> %SystemRoot%\system32\drivers\nv4_mini.sys -> NVIDIA Corporation [Ver = 6.14.11.6375 | Size = 6854464 bytes | Modified Date = 2007/10/4 下午 05:14:00 | Attr = ] (nvata) nvata [Kernel | Boot | Running] -> %SystemRoot%\system32\drivers\nvata.sys -> NVIDIA Corporation [Ver = 5.10.2600.0686 built by: WinDDK | Size = 105344 bytes | Modified Date = 2006/8/14 下午 01:51:28 | Attr = ] (NVENETFD) NVIDIA nForce Networking Controller Driver [Kernel | On_Demand | Running] -> %SystemRoot%\system32\drivers\NVENETFD.sys -> NVIDIA Corporation [Ver = 1.00.03.06521 | Size = 57856 bytes | Modified Date = 2006/7/11 下午 08:38:28 | Attr = ] (nvnetbus) NVIDIA Network Bus Enumerator [Kernel | On_Demand | Running] -> %SystemRoot%\system32\drivers\nvnetbus.sys -> NVIDIA Corporation [Ver = 1.00.03.06521 | Size = 20480 bytes | Modified Date = 2006/7/11 下午 08:38:30 | Attr = ] (Ptilink) Direct Parallel Link Driver [Kernel | On_Demand | Running] -> %SystemRoot%\system32\drivers\ptilink.sys -> Parallel Technologies, Inc. [Ver = 1.10 (XPClient.010817-1148) | Size = 17792 bytes | Modified Date = 2001/8/23 下午 07:00:00 | Attr = ] (RMSPPPOE) WAN Miniport (PPP over Ethernet Protocol) [Kernel | On_Demand | Running] -> %SystemRoot%\system32\drivers\RMSPPPOE.SYS -> Robert Schlabbach [Ver = 0.98.0720.0 | Size = 31504 bytes | Modified Date = 2002/10/3 上午 12:09:08 | Attr = ] (Secdrv) Secdrv [Kernel | On_Demand | Stopped] -> %SystemRoot%\system32\drivers\secdrv.sys -> Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K. [Ver = 4.03.086 | Size = 20480 bytes | Modified Date = 2007/11/13 下午 06:25:53 | Attr = ] [Registry - Non-Microsoft Only] < Run [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> Adobe Reader Speed Launcher -> %ProgramFiles%\Adobe\Reader 8.0\Reader\reader_sl.exe ["C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"] -> Adobe Systems Incorporated [Ver = 8.0.0.0 | Size = 39792 bytes | Modified Date = 2008/1/11 下午 10:16:38 | Attr = ] Alcmtr -> %SystemRoot%\Alcmtr.exe [ALCMTR.EXE] -> Realtek Semiconductor Corp. [Ver = 1.6.0.2 | Size = 69632 bytes | Modified Date = 2005/5/3 下午 06:43:28 | Attr = ] egui -> %ProgramFiles%\ESET\ESET Smart Security\egui.exe ["C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice] -> ESET [Ver = 3.0.650 | Size = 1443072 bytes | Modified Date = 2008/3/13 下午 04:48:30 | Attr = ] HP Software Update -> %ProgramFiles%\HP\HP Software Update\hpwuSchd2.exe [C:\Program Files\HP\HP Software Update\HPWuSchd2.exe] -> Hewlett-Packard Co. [Ver = 53.0.13.000 | Size = 49152 bytes | Modified Date = 2005/5/11 下午 11:12:54 | Attr = ] NvCplDaemon -> %SystemRoot%\system32\nvcpl.dll [RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup] -> NVIDIA Corporation [Ver = 6.14.11.6375 | Size = 8491008 bytes | Modified Date = 2007/10/4 下午 05:14:00 | Attr = ] NvMediaCenter -> %SystemRoot%\system32\nvmctray.dll [RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit] -> NVIDIA Corporation [Ver = 6.14.11.6375 | Size = 81920 bytes | Modified Date = 2007/10/4 下午 05:14:00 | Attr = ] nwiz -> %SystemRoot%\system32\nwiz.exe [nwiz.exe /install] -> [Ver = | Size = 1626112 bytes | Modified Date = 2007/10/4 下午 05:14:00 | Attr = ] QuickTime Task -> %ProgramFiles%\QuickTime\qttask.exe ["C:\Program Files\QuickTime\qttask.exe" -atboottime] -> Apple Computer, Inc. [Ver = 7.0.3 | Size = 155648 bytes | Modified Date = 2008/5/28 下午 05:57:06 | Attr = ] RTHDCPL -> %SystemRoot%\RTHDCPL.exe [RTHDCPL.EXE] -> Realtek Semiconductor Corp. [Ver = 2.1.8.2 | Size = 16860672 bytes | Modified Date = 2007/12/20 下午 04:47:36 | Attr = ] < OptionalComponents [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\ -> IMAIL-> Installed = 1 -> MAPI-> Installed = 1 -> MSFS-> Installed = 1 -> < Run [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> AdobeUpdater -> %CommonProgramFiles%\Adobe\Updater5\AdobeUpdater.exe [C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe] -> Adobe Systems Incorporated [Ver = 5, 1, 0, 1082 | Size = 2321600 bytes | Modified Date = 2007/3/1 上午 10:37:52 | Attr = R ] eMuleAutoStart -> %ProgramFiles%\eMule\emule.exe [C:\Program Files\eMule\emule.exe -AutoStart] -> http://www.emule-project.net [Ver = 0.48.0.80627 Unicode | Size = 5256752 bytes | Modified Date = 2008/6/27 下午 03:28:24 | Attr = ] kamsoft -> %SystemRoot%\system32\ckvo.exe [C:\WINDOWS\system32\ckvo.exe] -> [Ver = | Size = 87215 bytes | Modified Date = 2008/8/2 下午 01:13:00 | Attr = RHS] < All Users Startup Folder > -> C:\Documents and Settings\All Users\Start Menu\Programs\Startup -> %AllUsersProfile%\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk -> %ProgramFiles%\HP\Digital Imaging\bin\hpqtra08.exe -> Hewlett-Packard Co. [Ver = 53.0.13.000 | Size = 282624 bytes | Modified Date = 2005/5/11 下午 11:23:26 | Attr = ] < Jie Startup Folder > -> C:\Documents and Settings\Jie\Start Menu\Programs\Startup -> < SecurityProviders [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\\SecurityProviders -> < Winlogon settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -> *Shell* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell -> Explorer.exe -> %SystemRoot%\explorer.exe -> Microsoft Corporation [Ver = 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234) | Size = 1033216 bytes | Modified Date = 2007/6/13 下午 06:23:07 | Attr = ] *MultiFile Done* -> -> *UserInit* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\UserInit -> C:\WINDOWS\system32\userinit.exe -> %SystemRoot%\system32\userinit.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 24576 bytes | Modified Date = 2004/8/4 上午 06:56:58 | Attr = ] *MultiFile Done* -> -> *UIHost* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\UIHost -> logonui.exe -> %SystemRoot%\system32\logonui.exe -> Microsoft Corporation [Ver = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158) | Size = 514560 bytes | Modified Date = 2004/8/4 上午 06:56:52 | Attr = ] *MultiFile Done* -> -> *VMApplet* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet -> rundll32 shell32 -> %SystemRoot%\system32\shell32.dll -> Microsoft Corporation [Ver = 6.00.2900.3241 (xpsp_sp2_qfe.071025-1245) | Size = 8460288 bytes | Modified Date = 2007/10/26 上午 11:34:01 | Attr = ] Control_RunDLL "sysdm.cpl" -> %SystemRoot%\system32\sysdm.cpl -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 298496 bytes | Modified Date = 2004/8/4 上午 06:56:58 | Attr = ] *MultiFile Done* -> -> < Winlogon settings [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -> < CurrentVersion Policy Settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\\{BDEADF00-C265-11D0-BCED-00A0C90AB50F} -> 1 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\\{6DFD7C5C-2451-11d3-A299-00C04F8EF6AF} -> 1073741857 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\\{0DF44EAA-FF21-4412-828E-260A8728E7F1} -> 32 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\dontdisplaylastusername -> 0 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\legalnoticecaption -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\legalnoticetext -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\shutdownwithoutlogon -> 1 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\undockwithoutlogon -> 1 -> < CurrentVersion Policy Settings [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\ -> -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun -> 145 -> < CDROM Autorun Settings > [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom] -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\ -> -> *DependOnGroup* -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\DependOnGroup -> SCSI miniport -> -> File not found *MultiFile Done* -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\ErrorControl -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\Group -> SCSI CDROM Class -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\Start -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\Tag -> 2 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\Type -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\DisplayName -> CD-ROM Driver -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\ImagePath -> %SystemRoot%\system32\drivers\cdrom.sys [system32\DRIVERS\cdrom.sys] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 49536 bytes | Modified Date = 2004/8/4 上午 04:59:54 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun -> 1 -> *AutoRunAlwaysDisable* -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRunAlwaysDisable -> NEC MBR-7 -> -> File not found NEC MBR-7.4 -> -> File not found PIONEER CHANGR DRM-1804X -> -> File not found PIONEER CD-ROM DRM-6324X -> -> File not found PIONEER CD-ROM DRM-624X -> -> File not found TORiSAN CD-ROM CDR_C36 -> -> File not found *MultiFile Done* -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\Enum\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\Enum\\0 -> IDE\CdRomASUS_DVD-E616A3T________________________CP09\4&ac26b09&0&1.0.0 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\Enum\\Count -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\Enum\\NextInstance -> 1 -> < Drives - Autoruns > -> -> AUTOEXEC.BAT [] -> %SystemDrive%\AUTOEXEC.BAT [ NTFS ] -> [Ver = | Size = 0 bytes | Modified Date = 2008/3/22 下午 11:56:41 | Attr = ] autorun.inf [;k3e0ZAaJs252wjrrwa4408rIOssk | [AutoRun] | ;3aww551ejArKwi3wDASia1ld4o2aq92qLKALiKiK28ppkddZk4sJawdda94loSq7icilaJA4fokew00erqIeF4jjj3 | open=e.com | ;65LsaKDd4Ikii2lSe0KApkwi50odosrlo4dai2raDKAlOs3lLirawp7qpsfAZw4l7sq1a8r | shell\open\Command=e.com | ;eaak3s6o48kkiri3KS5sqefkjodo4dfKsea2wijKifZ34lLkipwawlrSwwA2ldK4DqjA2es5oj | shell\open\Default=1 | ;oaJSiaJoia46pwisd3KAlDqLkfa3mfD3K345f3Dsr32d2q2OJilq2wSokrkS4aqc94De04jKjo04j2KsqqL9H5Askk44LqdLa04ino | shell\explore\Command=e.com | ;woJsw7jail247Daw272q0L | ] -> %SystemDrive%\autorun.inf [ NTFS ] -> [Ver = | Size = 505 bytes | Modified Date = 2008/8/23 上午 12:24:09 | Attr = RHS] < HOSTS File > (734 bytes) -> C:\WINDOWS\System32\drivers\etc\Hosts -> < Internet Explorer Settings [HKEY_LOCAL_MACHINE\] > -> -> HKEY_LOCAL_MACHINE\: Main\\Default_Page_URL -> http://go.microsoft.com/fwlink/?LinkId=69157 -> HKEY_LOCAL_MACHINE\: Main\\Default_Search_URL -> http://go.microsoft.com/fwlink/?LinkId=54896 -> HKEY_LOCAL_MACHINE\: Main\\Local Page -> %SystemRoot%\system32\blank.htm -> HKEY_LOCAL_MACHINE\: Main\\Search Page -> http://go.microsoft.com/fwlink/?LinkId=54896 -> HKEY_LOCAL_MACHINE\: Main\\Start Page -> http://go.microsoft.com/fwlink/?LinkId=69157 -> HKEY_LOCAL_MACHINE\: Search\\CustomizeSearch -> http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm -> HKEY_LOCAL_MACHINE\: Search\\SearchAssistant -> http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm -> < Internet Explorer Settings [HKEY_CURRENT_USER\] > -> -> HKEY_CURRENT_USER\: Main\\Local Page -> C:\WINDOWS\system32\blank.htm -> HKEY_CURRENT_USER\: Main\\Search Page -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> HKEY_CURRENT_USER\: Main\\Start Page -> http://www.msn.com/?wl=true -> HKEY_CURRENT_USER\: URLSearchHooks\\{E312764E-7706-43F1-8DAB-FCDD2B1E416D} [HKEY_LOCAL_MACHINE] -> %ProgramFiles%\Search Settings\kb127\SearchSettings.dll [SearchSettings Class] -> Vendio Services, Inc. [Ver = 1, 2, 0, 6 | Size = 1107296 bytes | Modified Date = 2008/4/16 下午 05:56:22 | Attr = ] HKEY_CURRENT_USER\: ProxyEnable -> 0 -> < Trusted Sites Domains [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 1 domain(s) found. -> 1 domain(s) and sub-domain(s) not assigned to a zone. < Trusted Sites Ranges [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> < Trusted Sites Domains [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. -> < Trusted Sites Ranges [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> < BHO's [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ -> {000123B4-9B42-4900-B3F7-F4B073EFC214} [HKEY_LOCAL_MACHINE] -> %ProgramFiles%\Orbitdownloader\orbitcth.dll [Octh Class] -> Orbitdownloader.com [Ver = 2, 4, 0, 1 | Size = 187512 bytes | Modified Date = 2008/3/20 下午 03:13:02 | Attr = ] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [HKEY_LOCAL_MACHINE] -> %CommonProgramFiles%\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [Adobe PDF Reader Link Helper] -> Adobe Systems Incorporated [Ver = 8.0.0.2006102200 | Size = 62080 bytes | Modified Date = 2006/10/22 下午 11:08:42 | Attr = ] {7E853D72-626A-48EC-A868-BA8D5E23E045} [HKEY_LOCAL_MACHINE] -> Reg Error: Key does not exist or could not be opened. [Reg Error: Key does not exist or could not be opened.] -> File not found {E312764E-7706-43F1-8DAB-FCDD2B1E416D} [HKEY_LOCAL_MACHINE] -> %ProgramFiles%\Search Settings\kb127\SearchSettings.dll [SearchSettings Class] -> Vendio Services, Inc. [Ver = 1, 2, 0, 6 | Size = 1107296 bytes | Modified Date = 2008/4/16 下午 05:56:22 | Attr = ] < Internet Explorer Menu Extensions [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\ -> &Download by Orbit -> %ProgramFiles%\Orbitdownloader\orbitmxt.dll -> Orbitdownloader.com [Ver = 2, 1, 0, 1 | Size = 53248 bytes | Modified Date = 2007/7/13 下午 05:23:42 | Attr = ] &Grab video by Orbit -> %ProgramFiles%\Orbitdownloader\orbitmxt.dll -> Orbitdownloader.com [Ver = 2, 1, 0, 1 | Size = 53248 bytes | Modified Date = 2007/7/13 下午 05:23:42 | Attr = ] Do&wnload selected by Orbit -> %ProgramFiles%\Orbitdownloader\orbitmxt.dll -> Orbitdownloader.com [Ver = 2, 1, 0, 1 | Size = 53248 bytes | Modified Date = 2007/7/13 下午 05:23:42 | Attr = ] Down&load all by Orbit -> %ProgramFiles%\Orbitdownloader\orbitmxt.dll -> Orbitdownloader.com [Ver = 2, 1, 0, 1 | Size = 53248 bytes | Modified Date = 2007/7/13 下午 05:23:42 | Attr = ] 設為 Messenger Live 頭像 -> -> File not found < Internet Explorer Plugins [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Plugins\ -> PluginsPageFriendlyName -> Microsoft ActiveX Gallery -> PluginsPage -> http://activex.microsoft.com/controls/find.asp?ext=%s&mime=%s -> < DNS Name Servers [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\ -> {E7F42CE4-658E-4249-9C62-4AB598D68B3D} -> (NVIDIA nForce Networking Controller) -> < Protocol Handlers [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ -> ipp: [HKEY_LOCAL_MACHINE] -> No CLSID value msdaipp: [HKEY_LOCAL_MACHINE] -> No CLSID value < Downloaded Program Files > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\ -> {6414512B-B978-451D-A0D8-FCFDF33E833C}[HKEY_LOCAL_MACHINE] -> http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1206207024207[WUWebControl Class] -> {D27CDB6E-AE6D-11CF-96B8-444553540000}[HKEY_LOCAL_MACHINE] -> http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab[Shockwave Flash Object] -> < Module Usage Keys [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\ -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/Downloaded Program Files/FP_AX_CAB_INSTALLER.exe\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/Downloaded Program Files/FP_AX_CAB_INSTALLER.exe\\.Owner -> {D27CDB6E-AE6D-11CF-96B8-444553540000} -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/Downloaded Program Files/FP_AX_CAB_INSTALLER.exe\\{D27CDB6E-AE6D-11CF-96B8-444553540000} -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/system32/wuweb.dll\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/system32/wuweb.dll\\.Owner -> Unknown Owner -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/system32/wuweb.dll\\{6414512B-B978-451D-A0D8-FCFDF33E833C} -> -> [Registry - Additional Scans - Non-Microsoft Only] < BotCheck > -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\\DefaultLaunchPermission -> [Binary data over 100 bytes] -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\\MachineLaunchRestriction -> [Binary data over 100 bytes] -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\\MachineAccessRestriction -> [Binary data over 100 bytes] -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\\EnableDCOM -> Y -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat\ActivationSecurityCheckExemptionList\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat\ActivationSecurityCheckExemptionList\\{A50398B8-9075-4FBF-A7A1-456BF21937AD} -> 1 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat\ActivationSecurityCheckExemptionList\\{AD65A69D-3831-40D7-9629-9B0B50A93843} -> 1 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat\ActivationSecurityCheckExemptionList\\{0040D221-54A1-11D1-9DE0-006097042D69} -> 1 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat\ActivationSecurityCheckExemptionList\\{2A6D72F1-6E7E-4702-B99C-E40D3DED33C3} -> 1 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\FirstRunDisabled -> 1 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\AntiVirusDisableNotify -> 0 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\FirewallDisableNotify -> 0 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\UpdatesDisableNotify -> 0 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\AntiVirusOverride -> 0 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\FirewallOverride -> 0 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall\ -> -> Reg Error: Key HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\ not found. -> -> Reg Error: Key HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\ not found. -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\ -> -> *Authentication Packages* -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\Authentication Packages -> msv1_0 -> %SystemRoot%\system32\msv1_0.dll -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 129536 bytes | Modified Date = 2004/8/4 上午 06:56:44 | Attr = ] *MultiFile Done* -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\Bounds -> 0 [binary data] -> *Security Packages* -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\Security Packages -> kerberos -> %SystemRoot%\system32\kerberos.dll -> Microsoft Corporation [Ver = 5.1.2600.2698 (xpsp_sp2_gdr.050614-1522) | Size = 295936 bytes | Modified Date = 2005/6/16 上午 01:49:30 | Attr = ] msv1_0 -> %SystemRoot%\system32\msv1_0.dll -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 129536 bytes | Modified Date = 2004/8/4 上午 06:56:44 | Attr = ] schannel -> %SystemRoot%\system32\schannel.dll -> Microsoft Corporation [Ver = 5.1.2600.3126 (xpsp_sp2_gdr.070425-0226) | Size = 144896 bytes | Modified Date = 2007/4/25 下午 10:21:15 | Attr = ] wdigest -> %SystemRoot%\system32\wdigest.dll -> Microsoft Corporation [Ver = 5.1.2600.2874 (xpsp_sp2_gdr.060323-1516) | Size = 49152 bytes | Modified Date = 2006/3/24 下午 12:37:50 | Attr = ] *MultiFile Done* -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\ImpersonatePrivilegeUpgradeToolHasRun -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\LsaPid -> 1112 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\SecureBoot -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\auditbaseobjects -> 0 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\crashonauditfail -> 0 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\disabledomaincreds -> 0 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\everyoneincludesanonymous -> 0 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\fipsalgorithmpolicy -> 0 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\forceguest -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\fullprivilegeauditing -> [binary data] -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\limitblankpassworduse -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\lmcompatibilitylevel -> 0 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\nodefaultadminowner -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\nolmhash -> 0 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\restrictanonymous -> 0 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\restrictanonymoussam -> 1 -> *Notification Packages* -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\Notification Packages -> scecli -> %SystemRoot%\system32\scecli.dll -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 180224 bytes | Modified Date = 2004/8/4 上午 06:56:46 | Attr = ] *MultiFile Done* -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\AccessProviders\ -> -> *ProviderOrder* -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\AccessProviders\\ProviderOrder -> Windows NT Access Provider -> -> File not found *MultiFile Done* -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\AccessProviders\Windows NT Access Provider\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\AccessProviders\Windows NT Access Provider\\ProviderPath -> %SystemRoot%\system32\ntmarta.dll [%SystemRoot%\system32\ntmarta.dll] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 118784 bytes | Modified Date = 2004/8/4 上午 06:56:46 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Audit\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Audit\PerUserAuditing\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Audit\PerUserAuditing\System\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Data\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Data\\Pattern -> 61 86 C5 D4 00 37 30 77 FB 76 32 CC 7B 80 02 F2 66 33 37 61 66 61 64 39 00 FD 07 00 18 40 00 00 34 FA 07 00 56 82 7C 75 20 FA 07 00 40 FD 07 00 4C FD 07 00 1C 80 B9 71 F2 0F 7A 96 72 5B 4B F3 [binary data] -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\GBG\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\GBG\\GrafBlumGroup -> 69 DF 7A 00 FF 2D B5 6F 80 [binary data] -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\JD\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\JD\\Lookup -> DD 92 F6 37 C2 9C [binary data] -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Domains\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\SidCache\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0\\Auth132 -> %SystemRoot%\system32\iissuba.dll [IISSUBA] -> Microsoft Corporation [Ver = 6.0.2600.0 (xpclient.010817-1148) | Size = 9216 bytes | Modified Date = 2001/8/23 下午 07:00:00 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0\\ntlmminclientsec -> 0 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0\\ntlmminserversec -> 0 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Skew1\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Skew1\\SkewMatrix -> E1 B5 A1 EB 14 7D 32 DD 8E 74 F5 8B D8 78 27 BB [binary data] -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SSO\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SSO\Passport1.4\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SSO\Passport1.4\\SSOURL -> http://www.passport.com -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\\Time -> 66 50 6F 5B 41 8C C8 01 [binary data] -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\digest.dll\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\digest.dll\\Name -> Digest -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\digest.dll\\Comment -> Digest SSPI Authentication Package -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\digest.dll\\Capabilities -> 16464 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\digest.dll\\RpcId -> 65535 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\digest.dll\\Version -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\digest.dll\\TokenSize -> 65535 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\digest.dll\\Time -> 00 5E 94 25 AD 79 C4 01 [binary data] -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\digest.dll\\Type -> 49 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\msapsspc.dll\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\msapsspc.dll\\Name -> DPA -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\msapsspc.dll\\Comment -> DPA Security Package -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\msapsspc.dll\\Capabilities -> 55 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\msapsspc.dll\\RpcId -> 17 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\msapsspc.dll\\Version -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\msapsspc.dll\\TokenSize -> 768 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\msapsspc.dll\\Time -> 00 5E 94 25 AD 79 C4 01 [binary data] -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\msapsspc.dll\\Type -> 49 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\msnsspc.dll\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\msnsspc.dll\\Name -> MSN -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\msnsspc.dll\\Comment -> MSN Security Package -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\msnsspc.dll\\Capabilities -> 55 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\msnsspc.dll\\RpcId -> 18 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\msnsspc.dll\\Version -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\msnsspc.dll\\TokenSize -> 768 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\msnsspc.dll\\Time -> 00 5E 94 25 AD 79 C4 01 [binary data] -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\msnsspc.dll\\Type -> 49 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\DependOnGroup -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\DependOnService -> Netman;WinMgmt; -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\Description -> Provides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network. -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\DisplayName -> Windows Firewall/Internet Connection Sharing (ICS) -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\ErrorControl -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\ImagePath -> %SystemRoot%\system32\svchost.exe [%SystemRoot%\system32\svchost.exe -k netsvcs] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 2004/8/4 上午 06:56:58 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\ObjectName -> LocalSystem -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\Start -> 2 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\Type -> 32 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch\\Epoch -> 4380 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\\ServiceDll -> %SystemRoot%\system32\ipnathlp.dll [%SystemRoot%\System32\ipnathlp.dll] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 331264 bytes | Modified Date = 2004/8/4 上午 06:56:44 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\\EnableFirewall -> 0 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\%windir%\system32\sessmgr.exe -> %SystemRoot%\system32\sessmgr.exe [%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 140800 bytes | Modified Date = 2004/8/4 上午 06:56:58 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\%windir%\Network Diagnostic\xpnetdiag.exe -> %SystemRoot%\network diagnostic\xpnetdiag.exe [%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000] -> Microsoft Corporation [Ver = 5.1.2600.3012 (xpsp.061010-0355) | Size = 557568 bytes | Modified Date = 2006/10/10 下午 08:44:50 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\C:\Program Files\Windows Live\Messenger\msnmsgr.exe -> %ProgramFiles%\Windows Live\Messenger\msnmsgr.exe [C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger] -> Microsoft Corporation [Ver = 8.5.1302.1018 | Size = 5724184 bytes | Modified Date = 2007/10/18 上午 11:34:02 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\C:\Program Files\Windows Live\Messenger\livecall.exe -> %ProgramFiles%\Windows Live\Messenger\livecall.exe [C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)] -> Microsoft Corporation [Ver = 1.5.204.0 | Size = 304488 bytes | Modified Date = 2007/10/2 下午 05:18:24 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\\EnableFirewall -> 0 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\%windir%\system32\sessmgr.exe -> %SystemRoot%\system32\sessmgr.exe [%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 140800 bytes | Modified Date = 2004/8/4 上午 06:56:58 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe -> %ProgramFiles%\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe:*:Enabled:Apache HTTP Server] -> Apache Software Foundation [Ver = 2.0.52 | Size = 20543 bytes | Modified Date = 2006/4/3 下午 06:04:02 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE -> %ProgramFiles%\Microsoft Office\Office12\OUTLOOK.EXE [C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook] -> Microsoft Corporation [Ver = 12.0.6316.5000 | Size = 12844576 bytes | Modified Date = 2008/5/21 上午 04:37:24 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Microsoft Office\Office12\GROOVE.EXE -> %ProgramFiles%\Microsoft Office\Office12\GROOVE.EXE [C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove] -> Microsoft Corporation [Ver = 12.0.6211.1000 | Size = 340856 bytes | Modified Date = 2007/8/29 上午 12:23:36 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE -> %ProgramFiles%\Microsoft Office\Office12\ONENOTE.EXE [C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote] -> Microsoft Corporation [Ver = 12.0.6211.1000 | Size = 1022840 bytes | Modified Date = 2007/8/28 下午 11:43:30 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\%windir%\Network Diagnostic\xpnetdiag.exe -> %SystemRoot%\network diagnostic\xpnetdiag.exe [%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000] -> Microsoft Corporation [Ver = 5.1.2600.3012 (xpsp.061010-0355) | Size = 557568 bytes | Modified Date = 2006/10/10 下午 08:44:50 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Orbitdownloader\orbitdm.exe -> %ProgramFiles%\Orbitdownloader\orbitdm.exe [C:\Program Files\Orbitdownloader\orbitdm.exe:*:Enabled:Orbit] -> Orbitdownloader.com [Ver = 2, 6, 0, 4 | Size = 1678536 bytes | Modified Date = 2008/3/20 下午 03:13:04 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Orbitdownloader\orbitnet.exe -> %ProgramFiles%\Orbitdownloader\orbitnet.exe [C:\Program Files\Orbitdownloader\orbitnet.exe:*:Enabled:Orbit] -> Orbitdownloader.com [Ver = 2, 6, 0, 4 | Size = 356352 bytes | Modified Date = 2008/3/18 下午 03:34:14 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Windows Live\Messenger\msnmsgr.exe -> %ProgramFiles%\Windows Live\Messenger\msnmsgr.exe [C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger] -> Microsoft Corporation [Ver = 8.5.1302.1018 | Size = 5724184 bytes | Modified Date = 2007/10/18 上午 11:34:02 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Windows Live\Messenger\livecall.exe -> %ProgramFiles%\Windows Live\Messenger\livecall.exe [C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)] -> Microsoft Corporation [Ver = 1.5.204.0 | Size = 304488 bytes | Modified Date = 2007/10/2 下午 05:18:24 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Messenger\msmsgs.exe -> %ProgramFiles%\Messenger\msmsgs.exe [C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger] -> Microsoft Corporation [Ver = 4.7.3001 | Size = 1694208 bytes | Modified Date = 2004/10/14 上午 12:24:37 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe -> %ProgramFiles%\HP\Digital Imaging\bin\hpqtra08.exe [C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe] -> Hewlett-Packard Co. [Ver = 53.0.13.000 | Size = 282624 bytes | Modified Date = 2005/5/11 下午 11:23:26 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe -> %ProgramFiles%\HP\Digital Imaging\bin\hpqste08.exe [C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe] -> Hewlett-Packard Co. [Ver = 53.0.13.000 | Size = 204800 bytes | Modified Date = 2005/5/12 上午 12:40:38 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe -> %ProgramFiles%\HP\Digital Imaging\bin\hpofxm08.exe [C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe] -> Hewlett-Packard Co. [Ver = 50.0.206.000 | Size = 225280 bytes | Modified Date = 2005/5/24 上午 02:17:46 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe -> %ProgramFiles%\HP\Digital Imaging\bin\hposfx08.exe [C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe] -> Hewlett-Packard Co. [Ver = 50.0.206.000 | Size = 40960 bytes | Modified Date = 2005/5/24 上午 02:18:00 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hposid01.exe -> %ProgramFiles%\HP\Digital Imaging\bin\hposid01.exe [C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe] -> Hewlett-Packard Co. [Ver = 50.0.206.000 | Size = 81920 bytes | Modified Date = 2005/5/24 上午 02:13:32 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe -> %ProgramFiles%\HP\Digital Imaging\bin\hpqscnvw.exe [C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe] -> [Ver = 3, 2, 0,941 | Size = 200704 bytes | Modified Date = 2005/5/12 上午 10:06:08 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe -> %ProgramFiles%\HP\Digital Imaging\bin\hpqkygrp.exe [C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe] -> Hewlett-Packard [Ver = 5.1.0.941 | Size = 1081344 bytes | Modified Date = 2005/5/12 上午 07:28:02 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe -> %ProgramFiles%\HP\Digital Imaging\bin\hpqCopy.exe [C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe] -> Hewlett-Packard Co. [Ver = 50.0.206.000 | Size = 172032 bytes | Modified Date = 2005/5/24 上午 02:42:00 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe -> %ProgramFiles%\HP\Digital Imaging\bin\hpfccopy.exe [C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe] -> Hewlett-Packard [Ver = 2.4 | Size = 151635 bytes | Modified Date = 2005/5/12 上午 08:34:58 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe -> %ProgramFiles%\HP\Digital Imaging\bin\hpzwiz01.exe [C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe] -> Hewlett-Packard Co. [Ver = 50.0.206.000 | Size = 458752 bytes | Modified Date = 2005/5/24 上午 02:18:52 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe -> %ProgramFiles%\HP\Digital Imaging\Unload\HpqPhUnl.exe [C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe] -> [Ver = 5.0.0.247 | Size = 417792 bytes | Modified Date = 2005/3/15 下午 03:12:10 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe -> %ProgramFiles%\HP\Digital Imaging\Unload\HpqDIA.exe [C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe] -> [Ver = 5.0.0.247 | Size = 704512 bytes | Modified Date = 2005/3/15 下午 03:17:50 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe -> %ProgramFiles%\HP\Digital Imaging\bin\hpoews01.exe [C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe] -> Hewlett-Packard Co. [Ver = 50.0.206.000 | Size = 57344 bytes | Modified Date = 2005/5/24 上午 02:34:36 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\FlashGet\FlashGet.exe -> %ProgramFiles%\FlashGet\FlashGet.exe [C:\Program Files\FlashGet\FlashGet.exe:*:Enabled:Flashget] -> File not found HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\WINDOWS\pchealth\helpctr\binaries\HelpCtr.exe -> %SystemRoot%\pchealth\helpctr\binaries\HelpCtr.exe [C:\WINDOWS\pchealth\helpctr\binaries\HelpCtr.exe:*:Enabled:Remote Assistance - Windows Messenger and Voice] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 768512 bytes | Modified Date = 2004/8/4 上午 06:56:50 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\MSNShell\Bin\engie.exe -> %ProgramFiles%\MSNShell\BIN\engie.exe [C:\Program Files\MSNShell\Bin\engie.exe:*:Enabled:MSNShell] -> MSNShell Team [Ver = 2.0.125.0 | Size = 925288 bytes | Modified Date = 2008/7/7 下午 03:14:32 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Setup\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Setup\\ServiceUpgrade -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Setup\InterfacesUnfirewalledAtUpdate\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Setup\InterfacesUnfirewalledAtUpdate\\All -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Enum\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Enum\\0 -> Root\LEGACY_SHAREDACCESS\0000 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Enum\\Count -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Enum\\NextInstance -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\Type -> 32 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\Start -> 2 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\ErrorControl -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\ImagePath -> %SystemRoot%\system32\svchost.exe [%systemroot%\system32\svchost.exe -k netsvcs] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 2004/8/4 上午 06:56:58 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\DisplayName -> Automatic Updates -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\ObjectName -> LocalSystem -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\Description -> Enables the download and installation of Windows updates. If this service is disabled, this computer will not be able to use the Automatic Updates feature or the Windows Update Web site. -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Parameters\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Parameters\\ServiceDll -> %SystemRoot%\system32\wuauserv.dll [C:\WINDOWS\system32\wuauserv.dll] -> Microsoft Corporation [Ver = 5.4.3790.2180 (xpsp_sp2_rtm.040803-2158) | Size = 6656 bytes | Modified Date = 2004/8/4 上午 06:56:48 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Security\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Security\\Security -> [Binary data over 100 bytes] -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Enum\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Enum\\0 -> Root\LEGACY_WUAUSERV\0000 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Enum\\Count -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Enum\\NextInstance -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\\Description -> Enables remote users to modify registry settings on this computer. If this service is stopped, the registry can be modified only by users on this computer. If this service is disabled, any services that explicitly depend on it will fail to start. -> *DependOnService* -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\\DependOnService -> RPCSS -> %SystemRoot%\system32\rpcss.dll -> Microsoft Corporation [Ver = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528) | Size = 397824 bytes | Modified Date = 2005/7/26 下午 12:39:49 | Attr = ] *MultiFile Done* -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\\DisplayName -> Remote Registry -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\\ErrorControl -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\\ImagePath -> %SystemRoot%\system32\svchost.exe [%SystemRoot%\system32\svchost.exe -k LocalService] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 2004/8/4 上午 06:56:58 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\\ObjectName -> NT AUTHORITY\LocalService -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\\Group -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\\Start -> 2 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\\Type -> 32 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\\FailureActions -> 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 E0 AD 08 00 01 00 00 00 E8 03 00 00 [binary data] -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Parameters\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Parameters\\ServiceDll -> %SystemRoot%\system32\regsvc.dll [%SystemRoot%\system32\regsvc.dll] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 59904 bytes | Modified Date = 2004/8/4 上午 06:56:46 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security\\Security -> [Binary data over 100 bytes] -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Enum\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Enum\\0 -> Root\LEGACY_REMOTEREGISTRY\0000 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Enum\\Count -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Enum\\NextInstance -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TlntSvr\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TlntSvr\\Type -> 16 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TlntSvr\\Start -> 4 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TlntSvr\\ErrorControl -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TlntSvr\\ImagePath -> %SystemRoot%\system32\tlntsvr.exe [C:\WINDOWS\system32\tlntsvr.exe] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 73216 bytes | Modified Date = 2004/8/4 上午 06:56:58 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TlntSvr\\DisplayName -> Telnet -> *DependOnService* -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TlntSvr\\DependOnService -> RPCSS -> %SystemRoot%\system32\rpcss.dll -> Microsoft Corporation [Ver = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528) | Size = 397824 bytes | Modified Date = 2005/7/26 下午 12:39:49 | Attr = ] TCPIP -> -> File not found NTLMSSP -> -> File not found *MultiFile Done* -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TlntSvr\\DependOnGroup -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TlntSvr\\ObjectName -> LocalSystem -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TlntSvr\\Description -> Enables a remote user to log on to this computer and run programs, and supports various TCP/IP Telnet clients, including UNIX-based and Windows-based computers. If this service is stopped, remote user access to programs might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TlntSvr\Security\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TlntSvr\Security\\Security -> [Binary data over 100 bytes] -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Hardware Profiles\Current\Software\Microsoft\windows\CurrentVersion\Internet Settings\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Hardware Profiles\Current\Software\Microsoft\windows\CurrentVersion\Internet Settings\\ProxyEnable -> 0 -> [Files/Folders - Created Within 30 days] autorun.inf -> %SystemDrive%\autorun.inf -> [Ver = | Size = 505 bytes | Created Date = 2008/8/23 上午 12:22:29 | Attr = RHS] e.com -> %SystemDrive%\e.com -> [Ver = | Size = 87215 bytes | Created Date = 2008/8/6 下午 07:22:51 | Attr = RHS] Music -> %SystemDrive%\Music -> [Folder | Created Date = 2008/8/12 下午 04:37:11 | Attr = ] ckvo.exe -> %SystemRoot%\System32\ckvo.exe -> [Ver = | Size = 87215 bytes | Created Date = 2008/8/2 下午 11:39:07 | Attr = RHS] ckvo0.dll -> %SystemRoot%\System32\ckvo0.dll -> [Ver = | Size = 83456 bytes | Created Date = 2008/8/6 下午 07:04:05 | Attr = RHS] ckvo1.dll -> %SystemRoot%\System32\ckvo1.dll -> [Ver = | Size = 83456 bytes | Created Date = 2008/8/6 下午 06:56:33 | Attr = RHS] contmenu.dll -> %SystemRoot%\System32\contmenu.dll -> [Ver = | Size = 166216 bytes | Created Date = 2008/8/19 下午 06:47:17 | Attr = ] Msdsn.ocx -> %SystemRoot%\System32\Msdsn.ocx -> VBSmart [Ver = 1.08.0005 | Size = 233472 bytes | Created Date = 2008/8/12 下午 04:14:28 | Attr = ] Msdxm11.ocx -> %SystemRoot%\System32\Msdxm11.ocx -> Evova Technology [Ver = 1.01 | Size = 98304 bytes | Created Date = 2008/8/12 下午 04:14:28 | Attr = ] MSSTTFTTM.ocx -> %SystemRoot%\System32\MSSTTFTTM.ocx -> Virusface Industries [Ver = 1.00 | Size = 618496 bytes | Created Date = 2008/8/12 下午 04:14:28 | Attr = ] sql.dll -> %SystemRoot%\System32\sql.dll -> WeOnlyDo! COM [Ver = 1, 0, 6, 11 | Size = 212992 bytes | Created Date = 2008/8/12 下午 04:14:27 | Attr = ] win32.dll -> %SystemRoot%\System32\win32.dll -> web site: vbCorner - http://www.vbcorner.net [Ver = 0.08 | Size = 1069056 bytes | Created Date = 2008/8/12 下午 04:14:27 | Attr = ] QTFont.for -> %SystemRoot%\QTFont.for -> [Ver = | Size = 1409 bytes | Created Date = 2008/7/25 下午 05:37:50 | Attr = ] QTFont.qfn -> %SystemRoot%\QTFont.qfn -> [Ver = | Size = 54156 bytes | Created Date = 2008/7/25 下午 05:37:50 | Attr = H ] [Files Created - Additional Folder Scans - Non-Microsoft Only] MSNShell -> %AppData%\MSNShell -> [Folder | Created Date = 2008/8/19 下午 06:47:27 | Attr = ] MAS logo.doc -> %UserProfile%\My Documents\MAS logo.doc -> [Ver = | Size = 119808 bytes | Created Date = 2008/7/26 下午 06:33:34 | Attr = ] Question 1-econs.doc -> %UserProfile%\My Documents\Question 1-econs.doc -> [Ver = | Size = 27136 bytes | Created Date = 2008/7/26 下午 06:31:06 | Attr = ] Question 1-econs.docx -> %UserProfile%\My Documents\Question 1-econs.docx -> [Ver = | Size = 11278 bytes | Created Date = 2008/7/26 下午 06:30:56 | Attr = ] strategies of AIRASIA.doc -> %UserProfile%\My Documents\strategies of AIRASIA.doc -> [Ver = | Size = 56320 bytes | Created Date = 2008/7/26 下午 06:32:41 | Attr = ] strategies of MAS.doc -> %UserProfile%\My Documents\strategies of MAS.doc -> [Ver = | Size = 48128 bytes | Created Date = 2008/7/26 下午 06:29:01 | Attr = ] SDO-X.lnk -> %AllUsersProfile%\Desktop\SDO-X.lnk -> [Ver = | Size = 1680 bytes | Created Date = 2008/7/27 上午 08:46:07 | Attr = ] HijackThis.lnk -> %UserProfile%\Desktop\HijackThis.lnk -> [Ver = | Size = 1734 bytes | Created Date = 2008/8/22 下午 11:15:44 | Attr = ] OTScanIt -> %UserProfile%\Desktop\OTScanIt -> [Folder | Created Date = 2008/8/23 上午 12:19:10 | Attr = ] perfect 35.JPG -> %UserProfile%\Desktop\perfect 35.JPG -> [Ver = | Size = 180520 bytes | Created Date = 2008/7/24 下午 08:58:35 | Attr = ] Power MP3 Cutter Joiner.lnk -> %UserProfile%\Desktop\Power MP3 Cutter Joiner.lnk -> [Ver = | Size = 931 bytes | Created Date = 2008/8/12 下午 04:32:46 | Attr = ] CiB Net Station -> %ProgramFiles%\CiB Net Station -> [Folder | Created Date = 2008/7/27 上午 08:41:07 | Attr = ] eMule -> %ProgramFiles%\eMule -> [Folder | Created Date = 2008/8/16 下午 05:05:05 | Attr = ] Free WMA to MP3 Converter -> %ProgramFiles%\Free WMA to MP3 Converter -> [Folder | Created Date = 2008/8/12 下午 04:25:00 | Attr = ] HighStreet 5 -> %ProgramFiles%\HighStreet 5 -> [Folder | Created Date = 2008/7/27 下午 09:29:20 | Attr = ] MSNShell -> %ProgramFiles%\MSNShell -> [Folder | Created Date = 2008/8/19 下午 06:47:12 | Attr = ] Sagasoft -> %ProgramFiles%\Sagasoft -> [Folder | Created Date = 2008/8/12 下午 04:32:44 | Attr = ] Trend Micro -> %ProgramFiles%\Trend Micro -> [Folder | Created Date = 2008/8/22 下午 11:15:41 | Attr = ] WinAce -> %ProgramFiles%\WinAce -> [Folder | Created Date = 2008/8/16 下午 08:03:50 | Attr = ] [Files/Folders - Modified Within 30 days] autorun.inf -> %SystemDrive%\autorun.inf -> [Ver = | Size = 505 bytes | Modified Date = 2008/8/23 上午 12:24:34 | Attr = RHS] Config.Msi -> %SystemDrive%\Config.Msi -> [Folder | Modified Date = 2008/8/15 上午 12:10:30 | Attr = H ] Downloads -> %SystemDrive%\Downloads -> [Folder | Modified Date = 2008/8/23 上午 12:22:12 | Attr = R ] e.com -> %SystemDrive%\e.com -> [Ver = | Size = 87215 bytes | Modified Date = 2008/8/2 下午 01:13:00 | Attr = RHS] Music -> %SystemDrive%\Music -> [Folder | Modified Date = 2008/8/12 下午 04:43:14 | Attr = ] Program Files -> %ProgramFiles% -> [Folder | Modified Date = 2008/8/22 下午 11:15:41 | Attr = R ] WINDOWS -> %SystemRoot% -> [Folder | Modified Date = 2008/8/21 下午 04:35:47 | Attr = ] amcompat.tlb -> %SystemRoot%\System32\amcompat.tlb -> [Ver = | Size = 16832 bytes | Modified Date = 2008/8/12 下午 04:14:38 | Attr = ] CatRoot -> %SystemRoot%\System32\CatRoot -> [Folder | Modified Date = 2008/7/27 上午 07:33:06 | Attr = ] 5 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> CatRoot2 -> %SystemRoot%\System32\CatRoot2 -> [Folder | Modified Date = 2008/8/20 下午 03:18:41 | Attr = ] ckvo.exe -> %SystemRoot%\System32\ckvo.exe -> [Ver = | Size = 87215 bytes | Modified Date = 2008/8/2 下午 01:13:00 | Attr = RHS] ckvo0.dll -> %SystemRoot%\System32\ckvo0.dll -> [Ver = | Size = 83456 bytes | Modified Date = 2008/8/22 下午 11:41:49 | Attr = RHS] ckvo1.dll -> %SystemRoot%\System32\ckvo1.dll -> [Ver = | Size = 83456 bytes | Modified Date = 2008/8/6 下午 06:56:33 | Attr = RHS] config -> %SystemRoot%\System32\config -> [Folder | Modified Date = 2008/8/6 下午 06:58:33 | Attr = ] dllcache -> %SystemRoot%\System32\dllcache -> [Folder | Modified Date = 2008/8/20 下午 03:15:34 | Attr = RHS] drivers -> %SystemRoot%\System32\drivers -> [Folder | Modified Date = 2008/8/22 下午 11:41:48 | Attr = ] FNTCACHE.DAT -> %SystemRoot%\System32\FNTCACHE.DAT -> [Ver = | Size = 268600 bytes | Modified Date = 2008/7/26 下午 10:40:46 | Attr = ] mui -> %SystemRoot%\System32\mui -> [Folder | Modified Date = 2008/7/27 上午 07:26:08 | Attr = ] nscompat.tlb -> %SystemRoot%\System32\nscompat.tlb -> [Ver = | Size = 23392 bytes | Modified Date = 2008/8/12 下午 04:14:38 | Attr = ] URTTemp -> %SystemRoot%\System32\URTTemp -> [Folder | Modified Date = 2008/7/27 上午 07:26:09 | Attr = ] wbem -> %SystemRoot%\System32\wbem -> [Folder | Modified Date = 2008/8/6 下午 06:58:18 | Attr = ] wpa.dbl -> %SystemRoot%\System32\wpa.dbl -> [Ver = | Size = 2262 bytes | Modified Date = 2008/8/22 下午 11:42:05 | Attr = ] $hf_mig$ -> %SystemRoot%\$hf_mig$ -> [Folder | Modified Date = 2008/8/15 上午 12:10:37 | Attr = H ] 4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> bootstat.dat -> %SystemRoot%\bootstat.dat -> [Ver = | Size = 2048 bytes | Modified Date = 2008/8/22 下午 11:41:16 | Attr = S] Fonts -> %SystemRoot%\Fonts -> [Folder | Modified Date = 2008/7/24 下午 11:05:55 | Attr = R S] Help -> %SystemRoot%\Help -> [Folder | Modified Date = 2008/8/19 上午 09:02:18 | Attr = ] imsins.BAK -> %SystemRoot%\imsins.BAK -> [Ver = | Size = 1374 bytes | Modified Date = 2008/8/15 上午 12:10:41 | Attr = ] inf -> %SystemRoot%\inf -> [Folder | Modified Date = 2008/8/20 下午 03:18:39 | Attr = H ] Installer -> %SystemRoot%\Installer -> [Folder | Modified Date = 2008/8/15 上午 12:10:27 | Attr = HS] powermp3cutterjoiner.ini -> %SystemRoot%\powermp3cutterjoiner.ini -> [Ver = | Size = 486 bytes | Modified Date = 2008/8/12 下午 04:49:15 | Attr = ] Prefetch -> %SystemRoot%\Prefetch -> [Folder | Modified Date = 2008/8/23 上午 12:22:43 | Attr = ] QTFont.for -> %SystemRoot%\QTFont.for -> [Ver = | Size = 1409 bytes | Modified Date = 2008/7/25 下午 05:37:50 | Attr = ] QTFont.qfn -> %SystemRoot%\QTFont.qfn -> [Ver = | Size = 54156 bytes | Modified Date = 2008/8/21 下午 10:29:47 | Attr = H ] Registration -> %SystemRoot%\Registration -> [Folder | Modified Date = 2008/8/6 下午 06:58:18 | Attr = ] system32 -> %SystemRoot%\system32 -> [Folder | Modified Date = 2008/8/22 下午 11:41:49 | Attr = ] Temp -> %SystemRoot%\Temp -> [Folder | Modified Date = 2008/8/23 上午 12:21:03 | Attr = ] win.ini -> %SystemRoot%\win.ini -> [Ver = | Size = 637 bytes | Modified Date = 2008/8/2 上午 01:51:38 | Attr = ] WinSxS -> %SystemRoot%\WinSxS -> [Folder | Modified Date = 2008/8/2 上午 01:49:52 | Attr = ] Norton Security Scan.job -> %SystemRoot%\tasks\Norton Security Scan.job -> [Ver = | Size = 404 bytes | Modified Date = 2008/8/22 下午 06:00:00 | Attr = ] SA.DAT -> %SystemRoot%\tasks\SA.DAT -> [Ver = | Size = 6 bytes | Modified Date = 2008/8/22 下午 11:41:21 | Attr = H ] C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\ -> C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader -> [Folder | Modified Date = 2008/3/23 上午 01:32:32 | Attr = ] qmgr0.dat -> C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat -> [Ver = | Size = 4617 bytes | Modified Date = 2008/8/19 上午 09:03:55 | Attr = ] qmgr1.dat -> C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat -> [Ver = | Size = 5909 bytes | Modified Date = 2008/8/19 上午 09:03:55 | Attr = ] C:\Documents and Settings\All Users\Application Data\Microsoft\OFFICE\DATA\ -> C:\Documents and Settings\All Users\Application Data\Microsoft\OFFICE\DATA -> [Folder | Modified Date = 2008/3/23 上午 09:34:39 | Attr = ] opa12.dat -> C:\Documents and Settings\All Users\Application Data\Microsoft\OFFICE\DATA\opa12.dat -> [Ver = | Size = 8206 bytes | Modified Date = 2008/3/23 上午 09:34:39 | Attr = ] C:\Documents and Settings\Jie\Local Settings\Temp\ -> C:\Documents and Settings\Jie\Local Settings\Temp -> [Folder | Modified Date = 2008/8/23 上午 12:20:29 | Attr = ] ose00000.exe -> C:\Documents and Settings\Jie\Local Settings\Temp\ose00000.exe -> Microsoft Corporation [Ver = 12.0.4518.1014 | Size = 145184 bytes | Modified Date = 2006/10/28 上午 05:14:30 | Attr = R ] [Files Modified - Additional Folder Scans - Non-Microsoft Only] Microsoft Help -> %AllUsersProfile%\Application Data\Microsoft Help -> [Folder | Modified Date = 2008/8/15 上午 12:10:22 | Attr = ] GetRightToGo -> %AppData%\GetRightToGo -> [Folder | Modified Date = 2008/7/27 上午 07:24:13 | Attr = ] Image Zone Express -> %AppData%\Image Zone Express -> [Folder | Modified Date = 2008/8/7 下午 09:03:21 | Attr = ] Microsoft -> %AppData%\Microsoft -> [Folder | Modified Date = 2008/7/31 下午 11:08:12 | Attr = S] MSNShell -> %AppData%\MSNShell -> [Folder | Modified Date = 2008/8/19 下午 11:05:15 | Attr = ] Orbit -> %AppData%\Orbit -> [Folder | Modified Date = 2008/8/23 上午 12:21:04 | Attr = ] GDIPFONTCACHEV1.DAT -> %UserProfile%\Local Settings\Application Data\GDIPFONTCACHEV1.DAT -> [Ver = | Size = 75032 bytes | Modified Date = 2008/7/27 上午 07:16:15 | Attr = ] IconCache.db -> %UserProfile%\Local Settings\Application Data\IconCache.db -> [Ver = | Size = 4264052 bytes | Modified Date = 2008/8/22 下午 08:41:04 | Attr = H ] My Music -> %AllUsersProfile%\Documents\My Music -> [Folder | Modified Date = 2008/7/24 下午 11:19:59 | Attr = R ] My Videos -> %AllUsersProfile%\Documents\My Videos -> [Folder | Modified Date = 2008/7/27 下午 01:03:25 | Attr = R ] MAS logo.doc -> %UserProfile%\My Documents\MAS logo.doc -> [Ver = | Size = 119808 bytes | Modified Date = 2008/7/26 下午 06:33:35 | Attr = ] My Music -> %UserProfile%\My Documents\My Music -> [Folder | Modified Date = 2008/8/19 下午 05:41:17 | Attr = R ] My Pictures -> %UserProfile%\My Documents\My Pictures -> [Folder | Modified Date = 2008/8/20 上午 12:17:24 | Attr = R ] My Received Files -> %UserProfile%\My Documents\My Received Files -> [Folder | Modified Date = 2008/8/21 下午 06:54:15 | Attr = ] My Scans -> %UserProfile%\My Documents\My Scans -> [Folder | Modified Date = 2008/8/7 下午 09:09:04 | Attr = ] My Sharing Folders.lnk -> %UserProfile%\My Documents\My Sharing Folders.lnk -> [Ver = | Size = 572 bytes | Modified Date = 2008/8/22 下午 11:43:08 | Attr = ] Question 1-econs.doc -> %UserProfile%\My Documents\Question 1-econs.doc -> [Ver = | Size = 27136 bytes | Modified Date = 2008/7/26 下午 06:31:06 | Attr = ] Question 1-econs.docx -> %UserProfile%\My Documents\Question 1-econs.docx -> [Ver = | Size = 11278 bytes | Modified Date = 2008/7/26 下午 06:30:56 | Attr = ] strategies of AIRASIA.doc -> %UserProfile%\My Documents\strategies of AIRASIA.doc -> [Ver = | Size = 56320 bytes | Modified Date = 2008/7/26 下午 06:32:42 | Attr = ] strategies of MAS.doc -> %UserProfile%\My Documents\strategies of MAS.doc -> [Ver = | Size = 48128 bytes | Modified Date = 2008/7/26 下午 06:29:02 | Attr = ] SDO-X.lnk -> %AllUsersProfile%\Desktop\SDO-X.lnk -> [Ver = | Size = 1680 bytes | Modified Date = 2008/7/27 上午 08:46:07 | Attr = ] Appz -> %UserProfile%\Desktop\Appz -> [Folder | Modified Date = 2008/8/21 下午 04:59:10 | Attr = ] audi.docx -> %UserProfile%\Desktop\audi.docx -> [Ver = | Size = 3301106 bytes | Modified Date = 2008/8/19 下午 09:27:05 | Attr = ] HijackThis.lnk -> %UserProfile%\Desktop\HijackThis.lnk -> [Ver = | Size = 1734 bytes | Modified Date = 2008/8/22 下午 11:15:44 | Attr = ] OTScanIt -> %UserProfile%\Desktop\OTScanIt -> [Folder | Modified Date = 2008/8/23 上午 12:19:15 | Attr = ] perfect 35.JPG -> %UserProfile%\Desktop\perfect 35.JPG -> [Ver = | Size = 180520 bytes | Modified Date = 2008/7/24 下午 08:58:43 | Attr = ] photothumb.db -> %UserProfile%\Desktop\photothumb.db -> [Ver = | Size = 84992 bytes | Modified Date = 2008/7/24 下午 10:23:05 | Attr = H ] Power MP3 Cutter Joiner.lnk -> %UserProfile%\Desktop\Power MP3 Cutter Joiner.lnk -> [Ver = | Size = 931 bytes | Modified Date = 2008/8/12 下午 04:32:46 | Attr = ] Promsec(2) -> %UserProfile%\Desktop\Promsec(2) -> [Folder | Modified Date = 2008/7/27 上午 07:24:58 | Attr = ] Thumbs.db -> %UserProfile%\Desktop\Thumbs.db -> [Ver = | Size = 117248 bytes | Modified Date = 2008/8/22 下午 02:43:18 | Attr = HS] @Alternate Data Stream - 0 bytes -> %UserProfile%\Desktop\Thumbs.db:encryptable UTAR -> %UserProfile%\Desktop\UTAR -> [Folder | Modified Date = 2008/7/30 下午 09:24:15 | Attr = R ] Microsoft Shared -> %CommonProgramFiles%\Microsoft Shared -> [Folder | Modified Date = 2008/8/2 上午 01:49:51 | Attr = ] [CatchMe Rootkit Scan by GMER] < Windows folder & sub-folders > scanning hidden processes ... scanning hidden services & system hive ... scanning hidden registry entries ... [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Nero\(u6b\acWS] "Order"=hex:08,00,00,00,02,00,00,00,04,05,00,00,01,00,00,00,08,00,00,00,aa,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\hQ\xe15c] "??T\x80\x93de???"=dword:00000001 "???eQ???"=dword:00000001 "\20?n\x80c9:y??"=dword:00000001 "\26Y\1x\x80c9:y?"=dword:00000001 "\x6d84zz"=dword:00000001 ""=dword:00000000 "FC Input"=dword:00000000 "FC aid"=dword:00000000 "GB/GBK"=dword:00000000 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\\x59b4\xe15c] "??T\x80\x93de???"=dword:00000001 "???eQ???"=dword:00000001 "\20?n\x80c9:y??"=dword:00000001 "\26Y\1x\x80c9:y?"=dword:00000001 "\x6d84zz"=dword:00000001 ""=dword:00000000 "FC Input"=dword:00000000 "FC aid"=dword:00000000 "GB/GBK"=dword:00000000 scanning hidden files ... scan completed successfully hidden processes: 0 hidden services: 0 hidden files: 0 < Document and Settings folder & sub folders > scanning hidden files ... C:\Documents and Settings\All Users\Application Data\TEMP:B3D74A13 165 bytes C:\Documents and Settings\All Users\Documents\My Music\Sample Music\Thumbs.db:encryptable 0 bytes C:\Documents and Settings\All Users\Documents\My Pictures\Sample Pictures\Thumbs.db:encryptable 0 bytes C:\Documents and Settings\Jie\Desktop\shoes\Thumbs.db:encryptable 0 bytes C:\Documents and Settings\Jie\Desktop\Thumbs.db:encryptable 0 bytes C:\Documents and Settings\Jie\Favorites\MSN.com.url:favicon 3638 bytes C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\Sharing Folders\zhaoer3165@hotmail.com\Thumbs.db:encryptable 0 bytes C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\23\1234-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1123-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1234-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 176 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\55\1172-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1055-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1172-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 1560 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\55\1172-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1055-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1172-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 176 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\55\1253-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1155-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1253-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 152 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\00\1216-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1100-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1216-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 144 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\01\10-{786E39F8-522E-67BD-C0C9-617721A71550}-v1-{EE917807-EAD9-4232-8F6F-F2E3538FEFAD}-v10-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\01\1217-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1101-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1217-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 192 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\02\1218-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1102-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1218-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 176 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\03\1219-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1103-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1219-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 248 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\04\1220-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1104-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1220-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 168 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\05\1221-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1105-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1221-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 240 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\06\1222-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1106-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1222-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 104 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\07\1223-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1107-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1223-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 152 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\08\1224-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1108-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1224-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 104 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\09\1225-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1109-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1225-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 152 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\10\1226-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1110-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1226-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 96 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\11\1227-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1111-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1227-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 136 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\12\1302-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1112-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1302-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 96 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\13\1303-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1113-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1303-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 136 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\14\1304-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1114-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1304-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 72 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\15\1305-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1115-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1305-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 112 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\16\1306-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1116-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1306-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 88 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\17\1228-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1117-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1228-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 136 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\18\1229-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1118-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1229-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 96 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\19\1230-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1119-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1230-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 144 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\20\1231-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1120-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1231-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 96 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\21\1232-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1121-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1232-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 144 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\22\1233-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1122-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1233-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 128 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\56\1173-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1056-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1173-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 984 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\56\1173-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1056-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1173-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 120 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\56\1254-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1156-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1254-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 96 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\57\1174-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1057-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1174-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 1578 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\57\1174-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1057-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1174-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 168 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\57\1279-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1257-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1279-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1576 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\58\1175-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1058-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1175-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 1002 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\58\1175-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1058-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1175-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 112 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\58\1280-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1258-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1280-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 2112 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\59\1176-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1059-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1176-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 1452 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\59\1176-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1059-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1176-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 160 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\59\1281-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1259-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1281-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 2176 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\60\1177-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1060-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1177-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 1074 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\60\1177-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1060-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1177-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 120 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\60\1282-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1260-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1282-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1608 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\61\1178-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1061-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1178-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 1470 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\61\1178-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1061-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1178-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 168 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\61\1283-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1261-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1283-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1704 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\62\1179-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1062-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1179-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 1074 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\62\1179-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1062-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1179-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 112 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\62\1284-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1262-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1284-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 2024 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\63\1180-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1063-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1180-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 1470 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\63\1180-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1063-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1180-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 152 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\63\1285-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1263-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1285-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 2080 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\64\1181-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1064-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1181-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 1038 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\64\1181-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1064-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1181-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 112 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\64\1286-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1264-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1286-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 2280 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\65\1255-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1065-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1255-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 160 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\65\1287-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1265-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1287-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 2032 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\66\1183-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1066-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1183-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 1290 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\66\1183-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1066-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1183-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 136 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\66\1288-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1266-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1288-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 776 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\67\1184-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1067-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1184-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 1650 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\67\1184-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1067-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1184-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 184 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\67\1289-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1267-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1289-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 2216 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\68\1185-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1068-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1185-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 1218 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\68\1185-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1068-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1185-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 136 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\68\1290-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1268-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1290-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 2168 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\69\1186-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1069-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1186-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 184 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\69\1291-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1269-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1291-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 2472 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\70\1187-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1070-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1187-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 104 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\70\1292-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1270-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1292-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 2336 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\71\1188-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1071-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1188-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 184 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\71\1293-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1271-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1293-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 2568 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\72\1189-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1072-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1189-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 104 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\72\1294-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1272-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1294-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 2528 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\73\1190-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1073-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1190-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 144 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\73\1295-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1273-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1295-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 2304 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\74\1191-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1074-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1191-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 104 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\74\1296-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1274-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1296-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 2016 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\75\1192-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1075-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1192-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 144 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\75\1297-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1275-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1297-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 17544 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\75\1297-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1275-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1297-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1944 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\76\1256-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1076-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1256-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 112 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\76\1298-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1276-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1298-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1952 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\77\1299-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1277-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1299-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 39252 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\77\1299-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1277-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1299-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 4848 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\77\1301-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1077-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1301-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 160 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\78\11-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1278-{EE917807-EAD9-4232-8F6F-F2E3538FEFAD}-v11-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 25878 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\78\11-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1278-{EE917807-EAD9-4232-8F6F-F2E3538FEFAD}-v11-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 1884 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\78\11-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1278-{EE917807-EAD9-4232-8F6F-F2E3538FEFAD}-v11-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 3320 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\78\1194-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1078-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1194-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 112 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\79\1195-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1079-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1195-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 160 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\80\1196-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1080-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1196-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 112 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\81\1197-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1081-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1197-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 152 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\82\1198-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1082-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1198-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 104 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\83\1199-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1083-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1199-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 136 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\84\1200-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1084-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1200-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 96 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\85\1201-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1085-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1201-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 128 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\86\1202-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1086-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1202-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 120 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\87\1203-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1087-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1203-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 168 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\88\1204-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1088-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1204-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 120 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\89\1205-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1089-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1205-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 160 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\90\1206-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1090-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1206-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 176 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\91\1207-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1091-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1207-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 248 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\92\1208-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1092-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1208-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 168 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\93\1209-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1093-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1209-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 240 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\94\1210-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1094-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1210-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 176 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\95\1211-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1095-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1211-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 248 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\96\1212-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1096-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1212-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 168 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\97\1213-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1097-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1213-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 232 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\98\1214-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1098-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1214-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 104 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\99\1215-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1099-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1215-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 160 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\24\1235-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1124-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1235-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 120 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\25\1307-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1125-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1307-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 176 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\26\1308-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1126-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1308-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 120 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\27\1309-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1127-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1309-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 176 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\28\1310-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1128-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1310-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 112 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\29\1311-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1129-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1311-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 168 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\30\1312-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1130-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1312-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 136 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\31\1313-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1131-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1313-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 184 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\32\1238-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1132-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1238-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 96 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\33\1239-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1133-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1239-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 136 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\34\1240-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1134-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1240-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 72 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\35\1241-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1135-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1241-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 104 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\36\1314-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1136-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1314-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 120 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\37\1315-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1137-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1315-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 168 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\38\1045-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1038-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1045-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 1128 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\38\1045-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1038-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1045-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 128 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\38\1316-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1138-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1316-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 112 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\39\1157-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1039-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1157-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 840 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\39\1157-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1039-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1157-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 96 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\39\1317-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1139-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1317-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 136 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\40\1158-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1040-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1158-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 1200 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\40\1158-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1040-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1158-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 128 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\40\1318-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1140-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1318-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 104 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\41\1159-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1041-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1159-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 876 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\41\1159-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1041-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1159-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 96 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\41\1319-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1141-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1319-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 128 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\42\1160-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1042-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1160-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 1326 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\42\1160-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1042-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1160-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 144 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\42\1236-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1142-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1236-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 120 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\43\1161-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1043-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1161-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 984 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\43\1161-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1043-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1161-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 104 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\43\1237-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1143-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1237-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 184 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\44\1162-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1044-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1162-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 1128 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\44\1162-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1044-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1162-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 144 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\44\1242-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1144-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1242-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 200 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\45\1243-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1145-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1243-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 232 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\46\1163-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1046-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1163-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 930 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\46\1163-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1046-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1163-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 96 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\46\1244-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1146-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1244-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 112 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\47\1164-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1047-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1164-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 1308 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\47\1164-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1047-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1164-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 144 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\47\1245-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1147-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1245-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 160 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\48\1165-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1048-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1165-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 948 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\48\1165-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1048-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1165-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 112 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\48\1246-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1148-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1246-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 112 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\49\1166-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1049-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1166-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 1272 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\49\1166-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1049-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1166-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 152 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\49\1247-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1149-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1247-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 144 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\50\1167-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1050-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1167-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 858 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\50\1167-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1050-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1167-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 96 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\50\1248-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1150-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1248-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 112 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\51\1168-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1051-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1168-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 1290 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\51\1168-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1051-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1168-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 136 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\51\1249-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1151-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1249-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 144 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\52\1169-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1052-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1169-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 840 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\52\1169-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1052-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1169-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 88 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\52\1250-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1152-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1250-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 112 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\53\1170-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1053-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1170-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 1110 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\53\1170-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1053-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1170-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 128 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\53\1251-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1153-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1251-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 112 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\54\1171-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1054-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1171-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 1110 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\54\1171-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1054-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1171-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 128 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\chan_yen520@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{786E39F8-522E-67BD-C0C9-617721A71550}\54\1252-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1154-{0C9F2FE8-48BB-468E-93FB-22072988D80E}-v1252-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 152 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\Sharing Folders\fooeng@yahoo.com\Thumbs.db:encryptable 0 bytes C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\Sharing Folders\xfamily_achord@hotmail.com\Thumbs.db:encryptable 0 bytes C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\ahfong911@hotmail.com\DFSR\Staging\CS{4A7ED019-5A2C-51A2-41C4-3E6C40BAD1B7}\01\304-{4A7ED019-5A2C-51A2-41C4-3E6C40BAD1B7}-v1-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v304-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\chenloon90@hotmail.com\DFSR\Staging\CS{37B23F6E-6CED-C2DA-D2FA-621EC7FE9840}\01\305-{37B23F6E-6CED-C2DA-D2FA-621EC7FE9840}-v1-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v305-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\chenloon90@hotmail.com\DFSR\Staging\CS{37B23F6E-6CED-C2DA-D2FA-621EC7FE9840}\06\306-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v306-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v306-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\chenloon90@hotmail.com\DFSR\Staging\CS{37B23F6E-6CED-C2DA-D2FA-621EC7FE9840}\08\308-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v308-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v308-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3378 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\chenloon90@hotmail.com\DFSR\Staging\CS{37B23F6E-6CED-C2DA-D2FA-621EC7FE9840}\08\308-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v308-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v308-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 376 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\chenloon90@hotmail.com\DFSR\Staging\CS{37B23F6E-6CED-C2DA-D2FA-621EC7FE9840}\10\318-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v310-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v318-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 1362 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\chenloon90@hotmail.com\DFSR\Staging\CS{37B23F6E-6CED-C2DA-D2FA-621EC7FE9840}\10\318-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v310-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v318-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 160 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\chenloon90@hotmail.com\DFSR\Staging\CS{37B23F6E-6CED-C2DA-D2FA-621EC7FE9840}\12\319-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v312-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v319-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 570 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\chenloon90@hotmail.com\DFSR\Staging\CS{37B23F6E-6CED-C2DA-D2FA-621EC7FE9840}\12\319-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v312-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v319-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 72 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\chenloon90@hotmail.com\DFSR\Staging\CS{37B23F6E-6CED-C2DA-D2FA-621EC7FE9840}\32\332-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v332-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v332-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\chenloon90@hotmail.com\DFSR\Staging\CS{37B23F6E-6CED-C2DA-D2FA-621EC7FE9840}\35\343-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v335-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v343-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 570 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\chenloon90@hotmail.com\DFSR\Staging\CS{37B23F6E-6CED-C2DA-D2FA-621EC7FE9840}\35\343-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v335-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v343-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 72 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\chenloon90@hotmail.com\DFSR\Staging\CS{37B23F6E-6CED-C2DA-D2FA-621EC7FE9840}\36\345-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v336-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v345-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 1362 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\chenloon90@hotmail.com\DFSR\Staging\CS{37B23F6E-6CED-C2DA-D2FA-621EC7FE9840}\36\345-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v336-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v345-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 160 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\chenloon90@hotmail.com\DFSR\Staging\CS{37B23F6E-6CED-C2DA-D2FA-621EC7FE9840}\38\348-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v338-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v348-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3396 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\chenloon90@hotmail.com\DFSR\Staging\CS{37B23F6E-6CED-C2DA-D2FA-621EC7FE9840}\38\348-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v338-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v348-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 376 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\chenloon90@hotmail.com\DFSR\Staging\CS{37B23F6E-6CED-C2DA-D2FA-621EC7FE9840}\38\349-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v338-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v349-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3396 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\chenloon90@hotmail.com\DFSR\Staging\CS{37B23F6E-6CED-C2DA-D2FA-621EC7FE9840}\38\349-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v338-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v349-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 376 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\22\1599-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v122-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1599-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 352 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\68\1545-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v68-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1545-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 80 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\00\1577-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v100-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1577-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 112 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\01\1578-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v101-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1578-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 88 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\01\17-{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}-v1-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v17-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\02\1579-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v102-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1579-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 872 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\02\1777-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v302-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1777-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 72 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\03\1580-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v103-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1580-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 392 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\04\1581-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v104-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1581-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 448 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\05\1582-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v105-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1582-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 680 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\06\1583-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v106-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1583-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 480 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\07\1584-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v107-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1584-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 368 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\08\1585-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v108-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1585-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 344 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\09\1586-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v109-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1586-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 352 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\10\1587-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v110-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1587-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1280 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\11\1588-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v111-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1588-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 392 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\11\3109-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v11-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v3109-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\12\12-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v12-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v12-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 168 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\12\1589-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v112-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1589-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 496 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\13\1590-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v113-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1590-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 840 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\14\14-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v14-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v14-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 3488 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\14\1591-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v114-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1591-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1136 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\15\1592-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v115-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1592-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 504 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\16\1593-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v116-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1593-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 2608 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\17\1594-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v117-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1594-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 176 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\17\17-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v17-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v17-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 3352 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\18\1497-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v18-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1497-Partial.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 1799310 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\18\1497-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v18-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1497-Partial.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 479838 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\18\1497-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v18-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1497-Partial.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.3 33294 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\18\1497-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v18-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1497-Partial.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 169672 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\18\1595-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v118-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1595-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 352 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\18\18-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v18-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v18-Partial.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 124554 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\18\18-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v18-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v18-Partial.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 8346 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\18\18-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v18-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v18-Partial.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.3 660 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\18\18-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v18-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v18-Partial.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.4 84 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\18\18-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v18-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v18-Partial.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 22424 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\18\3124-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v18-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v3124-Partial.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 457014 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\18\3124-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v18-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v3124-Partial.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 31512 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\18\3124-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v18-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v3124-Partial.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.3 2280 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\18\3124-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v18-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v3124-Partial.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.4 210 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\18\3124-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v18-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v3124-Partial.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 63728 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\19\1596-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v119-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1596-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 352 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\20\1597-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v120-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1597-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 864 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\20\21-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v20-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v21-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 2478 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\20\21-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v20-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v21-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 264 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\21\1598-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v121-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1598-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 864 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\70\1547-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v70-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1547-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 360 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\71\1548-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v71-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1548-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 112 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\72\1549-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v72-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1549-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 144 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\73\1550-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v73-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1550-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 488 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\74\1551-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v74-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1551-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 520 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\75\1552-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v75-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1552-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 4880 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\76\1553-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v76-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1553-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 4808 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\77\1554-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v77-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1554-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 176 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\77\1852-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v377-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1852-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 72 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\78\1555-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v78-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1555-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 248 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\78\1853-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v378-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1853-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 72 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\80\1557-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v80-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1557-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 168 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\81\1558-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v81-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1558-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 400 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\82\1559-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v82-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1559-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 96 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\83\1560-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v83-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1560-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 120 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\84\1561-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v84-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1561-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 256 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\85\1562-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v85-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1562-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1344 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\86\1563-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v86-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1563-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1616 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\87\1564-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v87-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1564-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 616 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\88\1565-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v88-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1565-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 888 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\89\1566-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v89-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1566-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 2608 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\90\1567-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v90-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1567-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 2608 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\91\1568-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v91-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1568-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 2592 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\92\1569-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v92-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1569-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1488 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\93\1570-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v93-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1570-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 240 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\94\1571-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v94-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1571-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 2608 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\95\1572-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v95-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1572-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 176 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\96\1573-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v96-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1573-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1128 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\97\1574-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v97-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1574-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 192 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\98\1575-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v98-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1575-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 376 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\99\1576-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v99-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1576-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 240 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\23\1600-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v123-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1600-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 864 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\24\1601-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v124-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1601-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 520 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\25\1602-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v125-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1602-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 600 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\26\1603-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v126-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1603-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 600 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\27\1604-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v127-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1604-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 600 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\28\1605-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v128-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1605-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 600 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\29\1606-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v129-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1606-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 320 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\30\1607-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v130-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1607-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 192 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\31\1608-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v131-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1608-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 288 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\32\1609-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v132-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1609-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 120 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\33\1610-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v133-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1610-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 192 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\34\1611-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v134-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1611-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 248 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\35\1612-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v135-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1612-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 304 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\36\1613-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v136-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1613-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 288 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\36\1811-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v336-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1811-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 72 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\36\3107-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v36-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v3107-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\37\1614-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v137-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1614-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 152 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\38\1615-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v138-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1615-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 520 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\38\39-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v38-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v39-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 22854 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\38\39-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v38-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v39-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 2536 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\44\45-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v44-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v45-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 30234 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\44\45-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v44-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v45-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 3416 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\45\3011-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v145-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v3011-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\47\1622-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v147-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1622-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 568 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\48\1623-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v148-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1623-Partial.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 472 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\50\1527-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v50-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1527-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 696 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\50\51-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v50-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v51-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 34068 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\50\51-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v50-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v51-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 3768 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\51\1528-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v51-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1528-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 224 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\52\1529-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v52-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1529-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 312 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\52\252-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v252-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v252-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\53\1530-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v53-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1530-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 352 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\53\253-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v253-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v253-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\53\54-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v53-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v54-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 33492 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\53\54-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v53-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v54-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 3736 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\54\1531-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v54-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1531-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 352 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\55\1532-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v55-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1532-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 112 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\55\255-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v255-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v255-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 28488 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\55\255-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v255-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v255-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 3352 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\56\1533-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v56-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1533-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 288 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\56\256-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v256-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v256-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\56\57-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v56-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v57-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 34716 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\56\57-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v56-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v57-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 3856 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\57\1534-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v57-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1534-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 352 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\58\1535-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v58-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1535-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 72 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\58\258-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v258-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v258-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\59\1536-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v59-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1536-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1128 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\59\259-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v259-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v259-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\60\1537-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v60-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1537-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 488 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\60\64-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v60-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v64-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3486 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\60\64-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v60-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v64-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 392 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\61\261-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v261-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v261-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\65\65-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v65-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v65-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9804 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\65\65-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v65-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v65-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1088 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\66\67-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v66-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v67-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 31440 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\66\67-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v66-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v67-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 3440 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\fooeng@yahoo.com\DFSR\Staging\CS{E9E300C4-5108-F290-FEE8-8C4C56CFFB64}\67\1544-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v67-{4252FCA3-CE79-45B9-9E2A-63FF75B5050E}-v1544-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 208 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\jay_oouforxx@hotmail.com\DFSR\Staging\CS{9A7CF479-9727-DA2E-01FF-7608D6D9E62F}\01\276-{9A7CF479-9727-DA2E-01FF-7608D6D9E62F}-v1-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v276-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\xfamily_achord@hotmail.com\DFSR\Staging\CS{AA146F8C-94C1-A8C0-6E83-E1046659D94E}\01\10-{AA146F8C-94C1-A8C0-6E83-E1046659D94E}-v1-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v10-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\xfamily_achord@hotmail.com\DFSR\Staging\CS{AA146F8C-94C1-A8C0-6E83-E1046659D94E}\12\12-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v12-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v12-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 4926 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\xfamily_achord@hotmail.com\DFSR\Staging\CS{AA146F8C-94C1-A8C0-6E83-E1046659D94E}\12\12-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v12-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v12-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 536 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\xfamily_achord@hotmail.com\DFSR\Staging\CS{AA146F8C-94C1-A8C0-6E83-E1046659D94E}\16\16-{501E5389-2913-4F8B-925E-0DB61A02BF6E}-v16-{501E5389-2913-4F8B-925E-0DB61A02BF6E}-v16-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1744 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\xfamily_achord@hotmail.com\DFSR\Staging\CS{AA146F8C-94C1-A8C0-6E83-E1046659D94E}\17\17-{501E5389-2913-4F8B-925E-0DB61A02BF6E}-v17-{501E5389-2913-4F8B-925E-0DB61A02BF6E}-v17-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 272 bytes hidden from API C:\Documents and Settings\Jie\Local Settings\Application Data\Microsoft\Messenger\jie_jie00@hotmail.com\SharingMetadata\zhaoer3165@hotmail.com\DFSR\Staging\CS{68029A32-4D18-4C89-1762-D481D84CFC9B}\01\11-{68029A32-4D18-4C89-1762-D481D84CFC9B}-v1-{27CD3A69-501F-4ADE-BD25-124877A058D8}-v11-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API C:\Documents and Settings\Jie\My Documents\My Received Files\Thumbs.db:encryptable 0 bytes scan completed successfully hidden files: 351 < End of report > [/code]