OTL Extras logfile created on: 28/10/2013 18:55:05 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\yasmine98\Downloads
 Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16721)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy
 
2,93 Gb Total Physical Memory | 1,32 Gb Available Physical Memory | 44,89% Memory free
5,87 Gb Paging File | 4,10 Gb Available in Paging File | 69,88% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files
Drive C: | 252,89 Gb Total Space | 173,44 Gb Free Space | 68,58% Space Free | Partition Type: NTFS
Drive D: | 30,25 Gb Total Space | 25,43 Gb Free Space | 84,09% Space Free | Partition Type: NTFS
 
Computer Name: YASMINE98-PC | User Name: yasmine98 | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Extra Registry (All) ==========[/color]
 
 
[color=#E56717]========== File Associations ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.bat [@ = batfile] -- "%1" %*
.chm [@ = chm.file] -- C:\windows\hh.exe (Microsoft Corporation)
.cmd [@ = cmdfile] -- "%1" %*
.com [@ = comfile] -- "%1" %*
.cpl [@ = cplfile] -- C:\windows\System32\control.exe (Microsoft Corporation)
.exe [@ = exefile] -- "%1" %*
.hlp [@ = hlpfile] -- C:\windows\winhlp32.exe (Microsoft Corporation)
.hta [@ = htafile] -- C:\windows\System32\mshta.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.inf [@ = inffile] -- C:\windows\System32\NOTEPAD.EXE (Microsoft Corporation)
.ini [@ = inifile] -- C:\windows\System32\NOTEPAD.EXE (Microsoft Corporation)
.url [@ = InternetShortcut] -- C:\windows\System32\rundll32.exe (Microsoft Corporation)
.js [@ = JSFile] -- C:\windows\System32\WScript.exe (Microsoft Corporation)
.jse [@ = JSEFile] -- C:\windows\System32\WScript.exe (Microsoft Corporation)
.pif [@ = piffile] -- "%1" %*
.reg [@ = regfile] -- C:\windows\regedit.exe (Microsoft Corporation)
.scr [@ = scrfile] -- "%1" /S
.txt [@ = txtfile] -- C:\windows\System32\NOTEPAD.EXE (Microsoft Corporation)
.vbe [@ = VBEFile] -- C:\windows\System32\WScript.exe (Microsoft Corporation)
.vbs [@ = VBSFile] -- C:\windows\System32\WScript.exe (Microsoft Corporation)
.wsf [@ = WSFFile] -- C:\windows\System32\WScript.exe (Microsoft Corporation)
.wsh [@ = WSHFile] -- C:\windows\System32\WScript.exe (Microsoft Corporation)
 
[color=#E56717]========== Shell Spawning ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
batfile [open] -- "%1" %*
batfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
chm.file [open] -- "%SystemRoot%\hh.exe" %1 (Microsoft Corporation)
cmdfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
cmdfile [open] -- "%1" %*
cmdfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htafile [open] -- C:\windows\System32\mshta.exe "%1" %* (Microsoft Corporation)
htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation)
http [open] -- Reg Error: Key error.
https [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
inffile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
inffile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
inifile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
inifile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
InternetShortcut [open] -- "C:\windows\System32\rundll32.exe" "C:\windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\windows\System32\rundll32.exe" "C:\windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
jsfile [edit] -- C:\windows\System32\Notepad.exe %1 (Microsoft Corporation)
jsfile [open] -- C:\windows\System32\WScript.exe "%1" %* (Microsoft Corporation)
jsfile [print] -- C:\windows\System32\Notepad.exe /p %1 (Microsoft Corporation)
jsefile [edit] -- C:\windows\System32\Notepad.exe %1 (Microsoft Corporation)
jsefile [open] -- C:\windows\System32\WScript.exe "%1" %* (Microsoft Corporation)
jsefile [print] -- C:\windows\System32\Notepad.exe /p %1 (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [edit] -- %SystemRoot%\system32\notepad.exe "%1" (Microsoft Corporation)
regfile [open] -- regedit.exe "%1" (Microsoft Corporation)
regfile [merge] -- Reg Error: Key error.
regfile [print] -- %SystemRoot%\system32\notepad.exe /p "%1" (Microsoft Corporation)
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
txtfile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
txtfile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
txtfile [printto] -- %SystemRoot%\system32\notepad.exe /pt "%1" "%2" "%3" "%4" (Microsoft Corporation)
vbefile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
vbefile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
vbefile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
vbsfile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
vbsfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
vbsfile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
wsffile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
wsffile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
wsffile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
wshfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)
 
[color=#E56717]========== Security Center Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[color=#E56717]========== Firewall Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[color=#E56717]========== Authorized Applications List ==========[/color]
 
 
[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0632BB83-ADD1-4B8F-A598-EA3788D1EEB3}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | app=%systemroot%\system32\svchost.exe | 
"{0E6D572C-1E24-49F3-AB83-59C7584693CB}" = lport=135 | protocol=6 | dir=in | svc=rpcss | app=%systemroot%\system32\svchost.exe | 
"{109CC5E9-49E0-4D86-8936-9F7E1A8840FF}" = rport=5357 | protocol=6 | dir=out | app=system | 
"{12B88D96-8A49-440B-B7CA-E34669198432}" = lport=10244 | protocol=6 | dir=in | app=system | 
"{12CBFF53-B51F-4619-A7CF-12ECB8F2CAFF}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{13A20889-81E4-473B-9639-F11077D516E3}" = lport=3390 | protocol=6 | dir=in | app=system | 
"{14250146-A645-49CA-B448-ED67067A4466}" = rport=445 | protocol=6 | dir=out | app=system | 
"{14AF04CB-BE1A-4A99-95A5-AC095842E0C3}" = lport=5985 | protocol=6 | dir=in | app=system | 
"{18346DEF-EF75-40EA-AC9B-B95EE02125A4}" = lport=10245 | protocol=6 | dir=in | app=system | 
"{188734AA-E86A-4BEC-A0C7-E4BAD1EF55D5}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{1A7B97AA-0B66-468E-AFE2-48CEB6281331}" = lport=137 | protocol=17 | dir=in | app=system | 
"{1D6F00B2-1E63-4F75-8479-D1735B3EBDB9}" = lport=1701 | protocol=17 | dir=in | app=system | 
"{221745F4-0F35-44E8-AE3F-A0364C5EB7E2}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{27B94D42-9515-425D-A284-CEEF6D8042AB}" = lport=3390 | protocol=6 | dir=in | app=system | 
"{29B21376-26D3-4B6A-A160-C655F958CCCE}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{2C6EC7A9-E817-4B65-8B8E-8B864431A32B}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | 
"{2E79375D-EC34-4A08-9DB5-1E953DF995AB}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe | 
"{2F734CAB-CB93-42B9-B48E-F0E749FDC35C}" = rport=138 | protocol=17 | dir=out | app=system | 
"{3241CB69-2BD6-4F9F-89B9-E621756B91A4}" = lport=rpc | protocol=6 | dir=in | svc=ktmrm | app=%systemroot%\system32\svchost.exe | 
"{324634DE-01ED-49DB-962C-FB2430A95CBB}" = lport=554 | protocol=6 | dir=in | app=%systemroot%\ehome\ehshell.exe | 
"{333D5859-5C7F-483B-8E31-86F3356F951C}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | app=%systemroot%\system32\svchost.exe | 
"{33BD4508-34EB-4A6E-B0DE-1A8B1F150814}" = lport=10243 | protocol=6 | dir=in | app=system | 
"{37183940-A9FD-4A2B-8A71-16B3A75AF263}" = lport=139 | protocol=6 | dir=in | app=system | 
"{382B7A2A-5B3C-4A10-8373-97B912FA97B8}" = lport=rpc | protocol=6 | dir=in | svc=vds | app=%systemroot%\system32\vds.exe | 
"{3A7EA639-E865-4FA4-AF87-57747C2972B7}" = lport=1701 | protocol=17 | dir=in | app=system | 
"{3F6899E4-60DD-40CF-8FCB-DA36D1AF7942}" = rport=139 | protocol=6 | dir=out | app=system | 
"{3FAB04C6-B98A-4E78-AA78-9C8CBA23B760}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | app=%systemroot%\system32\svchost.exe | 
"{4335A857-CA7D-45A4-9ED9-D648B0AF24A1}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{43A738D2-6EAF-4FD1-9D6A-251320C09629}" = lport=445 | protocol=6 | dir=in | app=system | 
"{450B24A1-1D01-49E6-A4DD-09997D261D75}" = lport=445 | protocol=6 | dir=in | app=system | 
"{45AE4C0C-5D5A-44A3-9EA5-D46769B4C6BD}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{4658444C-AAA9-42DF-AE2E-7AFE2F0437E6}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{4A3F6F86-3E02-43CF-95BF-6606E5EF6049}" = lport=rpc | protocol=6 | dir=in | svc=eventlog | app=%systemroot%\system32\svchost.exe | 
"{4AC69063-C18E-484E-B36F-9EDAED4540E2}" = lport=5357 | protocol=6 | dir=in | app=system | 
"{4AE430BC-122A-4068-860A-25F1D582AA81}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{4B9E5799-0FBB-4AD0-B84F-12FE6491AE20}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{5038E9CB-25DF-42F0-BB6F-A53419E36DA1}" = lport=1723 | protocol=6 | dir=in | app=system | 
"{51E1F334-CF73-4994-89C3-575D5031F9FC}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{52B78A90-B622-4B11-A82E-2A29E291BD5D}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{54B0BF06-71F6-4B69-82F8-AEB89BEFE92D}" = lport=80 | protocol=6 | dir=in | app=system | 
"{59375527-9916-430C-87AF-450F9482AE98}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{5A323BE7-6770-47F8-BC61-DCE97CC09FD5}" = lport=10244 | protocol=6 | dir=in | app=system | 
"{5C62FC25-DB04-411E-AD85-C4E52345C2AC}" = lport=rpc | protocol=6 | dir=in | app=%systemroot%\system32\services.exe | 
"{5D6B597A-BB33-42AA-92A9-42E10064E237}" = lport=445 | protocol=6 | dir=in | app=system | 
"{5E4C96BF-46C4-4D5E-B12C-A235A2BEAE64}" = lport=rpc | protocol=6 | dir=in | svc=schedule | app=%systemroot%\system32\svchost.exe | 
"{63412AD9-135E-4265-B28F-7BCF83FD0BBF}" = lport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{68453BE0-DD1F-4E53-9E04-5A2F6CB8F9D3}" = rport=5358 | protocol=6 | dir=out | app=system | 
"{69E18992-285A-457B-A39B-C2ECE6B46BD3}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{6CE30913-59B5-459B-8E05-C896E262F7F7}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{6CFD7377-CAEF-4A26-A6D3-300A3B612A2A}" = lport=445 | protocol=6 | dir=in | app=system | 
"{6EE44017-1EBC-414B-8A9C-CF77A3CE4D1E}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{7081A481-77E5-420A-92F2-2B200C187EAB}" = lport=3702 | protocol=17 | dir=in | app=%systemroot%\system32\netproj.exe | 
"{721347BF-9AD5-466D-9F3F-2DB061495D4D}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{735C0FF4-9D84-480E-B416-43B6463D454E}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | app=%systemroot%\system32\svchost.exe | 
"{74296D51-B3E5-491C-B8E4-E39BD0BDD08B}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe | 
"{748FE44D-13DA-4C4E-9FB5-F6BBDF3E1632}" = lport=445 | protocol=6 | dir=in | app=system | 
"{7977A267-9354-4C94-9A43-FBF71E26D0F1}" = lport=7777 | protocol=17 | dir=in | app=%systemroot%\ehome\ehshell.exe | 
"{7A868FE4-0E46-4306-AC30-19CAD51D6BE8}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) | 
"{7B8FE968-2FC5-45EC-8D7F-67C01E69C7ED}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{7B9218BE-7A04-46C1-8509-3265A7DB97D9}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{80B73E6D-47AF-4192-8D13-6DC39FD4A6A2}" = lport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{80E39602-9737-4C68-AADF-22315B36535F}" = lport=3540 | protocol=17 | dir=in | svc=pnrpsvc | app=%systemroot%\system32\svchost.exe | 
"{84E1F065-6D92-4F10-8E66-9CE4650701C8}" = rport=3702 | protocol=17 | dir=out | app=%systemroot%\system32\p2phost.exe | 
"{89809560-FD85-40BF-8679-BCCC7351D605}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe | 
"{8E90AFBE-4F3E-4FEE-BF54-1283D01AD39B}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{907C1FAC-6EBD-42C5-A5F2-BD482AEFAD82}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{94FFDA79-2AFD-4B6D-8381-203125F4E2B8}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{96D8B208-BC1B-43C8-97E8-066DB9EADDEE}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{975FB344-2C35-4ED4-9540-6E9F3FD3357C}" = rport=137 | protocol=17 | dir=out | app=system | 
"{9969811D-E018-4E00-A30E-CF7DD723FE54}" = lport=80 | protocol=6 | dir=in | app=system | 
"{99F7E174-71DB-4AC8-B1EA-B481D9FF3CB2}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{A12EBDA7-165D-4C7A-A608-BB6D99A97A79}" = lport=138 | protocol=17 | dir=in | app=system | 
"{A163F9B8-6DCC-41FD-AFAD-F23C5B32267C}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{A93240DA-5F85-4FA1-83A5-A971FA2EDD54}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{ADD6FC5D-6225-4124-BEC7-3603726D8663}" = lport=1723 | protocol=6 | dir=in | app=system | 
"{AEA81774-CAA2-47BF-ABB7-9729B772526C}" = lport=5358 | protocol=6 | dir=in | app=system | 
"{AF96C386-690D-4C46-AACE-45E9B521C2DF}" = rport=1701 | protocol=17 | dir=out | app=system | 
"{B0E83558-77FC-4620-9E53-611D58E7AE2D}" = rport=3540 | protocol=17 | dir=out | svc=pnrpsvc | app=%systemroot%\system32\svchost.exe | 
"{B235AF77-789A-46E2-A9E3-938726D4F12F}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{B96371AC-4C21-40BC-87F7-787BFD7873F0}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{B97C6C47-C582-4066-BE6F-26F6A48595A0}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{C177CA9D-9E72-4DCC-95CA-623A778ED2B0}" = lport=162 | protocol=17 | dir=in | svc=snmptrap | app=%systemroot%\system32\snmptrap.exe | 
"{C939676B-AB3F-4787-8225-CEA2D289099D}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{C9B4B23F-8FD7-49AC-A1CC-20F525D7E693}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{CA5AC3E2-D391-4657-A138-68FB216CD74E}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{CB412399-6658-4A86-AE0A-10C6AE3236F0}" = lport=554 | protocol=6 | dir=in | app=%systemroot%\ehome\ehshell.exe | 
"{D3E48E48-623E-4C85-A580-D2F0306D0628}" = lport=rpc | protocol=6 | dir=in | app=%systemroot%\system32\vdsldr.exe | 
"{D3F21C34-FA01-4A81-B17E-61CB5833E0DB}" = lport=3702 | protocol=17 | dir=in | app=%systemroot%\system32\p2phost.exe | 
"{D56754C4-8D03-46FD-AECE-27324F423A68}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{D677B632-7A25-4A72-872D-77D98DAE4421}" = rport=1701 | protocol=17 | dir=out | app=system | 
"{D77D8E16-7CBD-42BE-94DD-0E38A340CBEC}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{D8BEDA42-73BD-4747-940A-110904F8C4BE}" = rport=1723 | protocol=6 | dir=out | app=system | 
"{D92AB512-9258-4AAA-B674-E177DB5E3260}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | app=%systemroot%\system32\svchost.exe | 
"{DB018226-2B92-43BA-998A-1BB80F72F833}" = rport=3540 | protocol=17 | dir=out | svc=pnrpsvc | app=%systemroot%\system32\svchost.exe | 
"{DC04A631-4E3C-4D72-A55B-61596810FF56}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{E12A47E4-6068-4069-83FD-5B6ABCC847A7}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{E1A39DD9-F6E8-46A6-B66E-C0D67670917F}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{E220917A-C1F2-498F-9276-4D894566EA8F}" = lport=rpc | protocol=6 | dir=in | svc=policyagent | app=%systemroot%\system32\svchost.exe | 
"{E3B9FDBC-92C2-416E-A7A9-D9FA6F81C2A6}" = rport=1723 | protocol=6 | dir=out | app=system | 
"{E5A3CA45-9358-47BE-8A78-243439F0F920}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{E677719C-D484-43C1-96B3-74E414D71063}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe | 
"{E6F069AF-D301-4ADA-BFCC-C6D9D41D6C6D}" = lport=443 | protocol=6 | dir=in | app=system | 
"{E907D84B-224C-4C9E-A3B0-E7D741D8AC3E}" = lport=443 | protocol=6 | dir=in | app=system | 
"{EE3E40C9-01BD-485C-A812-125E2CEBBA04}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{EE5E9FBC-71FA-4B15-AF63-090E61FE0C90}" = rport=3702 | protocol=17 | dir=out | app=%systemroot%\system32\netproj.exe | 
"{EFA79A6F-9E82-4382-8E6B-50ADFB939721}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | app=%systemroot%\system32\svchost.exe | 
"{F0CD1331-BDA4-411E-B830-AF7335CA9698}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{F2971EE9-D64A-4C4D-97CF-7D3A84B0E575}" = lport=135 | protocol=6 | dir=in | svc=rpcss | app=%systemroot%\system32\svchost.exe | 
"{F55CCCF1-2612-4035-83DF-5D3F11C02812}" = rport=10243 | protocol=6 | dir=out | app=system | 
"{F55F429B-6868-4ED2-B5CD-27C148237D30}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{F6AB054E-FAAC-443E-8A70-8D3DE6C74F07}" = lport=7777 | protocol=17 | dir=in | app=%systemroot%\ehome\ehshell.exe | 
"{F90071AA-BF13-4486-9E8C-66DA54B5213F}" = lport=443 | protocol=6 | dir=in | app=system | 
"{FD31C7D0-3F57-4D21-BE30-EA33A5CE9F96}" = lport=3540 | protocol=17 | dir=in | svc=pnrpsvc | app=%systemroot%\system32\svchost.exe | 
"{FD617873-AF62-434A-AFCD-6FEE24250884}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) | 
"{FE204E9C-A794-4E4D-AEC1-A295056670F9}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{FF4D8F2C-22E5-41C9-8006-46A9044F1EAB}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{FFDEEA88-3C12-4C62-BA56-0FDB2B36C162}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe | 
 
[color=#E56717]========== Vista Active Application Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0B342E31-9B16-4D4D-84AA-B593E666EFA5}" = protocol=6 | dir=out | app=%systemroot%\ehome\mcrmgr.exe | 
"{0E187306-F96E-4DFB-B75B-9FEE5DE7ED5A}" = dir=in | app=c:\program files\common files\mcafee\mna\mcnasvc.exe | 
"{129159BE-D19A-499E-8625-57F655392F71}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{1A9E0757-74F5-4A99-AE73-2C07AAA5A139}" = dir=in | app=c:\program files\hp\hp deskjet 2050 j510 series\bin\usbsetup.exe | 
"{1B9CB0F0-8BBA-441D-83BF-7746FFEC7E93}" = dir=in | app=c:\program files\lenovo\readycomm\appsvc.exe | 
"{20B05A4F-35C4-4DDF-B8EB-D7302D17D3A5}" = protocol=6 | dir=in | app=%systemroot%\system32\netproj.exe | 
"{253D9B2D-64F6-45A1-9967-3AB7A897C73B}" = protocol=17 | dir=in | app=c:\windows\system32\msra.exe | 
"{269B9A7A-A316-412D-A49D-B8F310F970C0}" = dir=in | app=c:\users\yasmine98\appdata\local\microsoft\skydrive\skydrive.exe | 
"{27A933DA-152A-443D-A3D9-BA20BAE70DF0}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{2C5F5946-B4C8-41CB-AFB4-A4048E0B1226}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{3204A391-DCFF-4266-994F-5D53489AB3EF}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{35AC5D65-1D8D-400D-97F3-98345D367DAA}" = dir=out | app=c:\program files\lenovo\readycomm\appsvc.exe | 
"{37342223-6409-484C-9D8A-7089E0EACD70}" = protocol=6 | dir=out | app=%systemroot%\ehome\mcx2prov.exe | 
"{39F7D34A-546E-4A46-B663-532676887337}" = dir=in | app=c:\windows\system32\igrssvcs.exe | 
"{3BD35DCD-2B56-4ADA-B5B3-5BF8B64CCF1B}" = protocol=17 | dir=out | app=%systemroot%\ehome\ehshell.exe | 
"{3F3DEF79-FE3C-4529-8248-7E886652A640}" = protocol=6 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe | 
"{41E00AEF-8F79-4DA0-A5AF-EA06E1230FFA}" = protocol=6 | dir=in | app=c:\programdata\esafe\egdpsvc.exe | 
"{47154D1F-98BD-423A-80EC-D567B9C3E328}" = dir=out | app=c:\program files\lenovo\readycomm\common\igrs.exe | 
"{4BD33030-78C3-49F4-877C-81AA70A705C9}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{4E0300A8-C1E9-47C6-AA4A-72994B13577F}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe | 
"{53CA2EE8-3660-4320-9C71-BC92D68A08E0}" = protocol=17 | dir=out | app=%systemroot%\ehome\ehshell.exe | 
"{54BE1B39-9A41-4081-98DB-3CF31581469B}" = protocol=6 | dir=in | app=%systemroot%\system32\msdtc.exe | 
"{588DAFF9-B97A-4F71-89FD-299472B73D16}" = protocol=6 | dir=out | app=%systemroot%\ehome\ehshell.exe | 
"{5B2E6CB1-3BD4-497A-BCA3-5225A14F807A}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{5E0D2DC9-EEA4-4774-A441-21CED9093B9E}" = protocol=6 | dir=out | svc=msiscsi | app=%systemroot%\system32\svchost.exe | 
"{5F31A45C-08A3-49E2-8270-F9695E39795E}" = protocol=17 | dir=in | app=c:\windows\system32\msra.exe | 
"{663E5C53-8A5A-408C-B386-1D544BE291FB}" = protocol=6 | dir=out | svc=winmgmt | app=%systemroot%\system32\svchost.exe | 
"{6A810A65-4DE3-4519-AA30-8BD8665D9FD5}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{6AED4482-F4C3-45E7-878F-B658AA9800A7}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe | 
"{6B35A240-721C-491A-9D5E-BB985A26DC69}" = protocol=6 | dir=out | app=%systemroot%\system32\netproj.exe | 
"{6BCD1ACE-D1DB-4348-9F30-8B1BE011AD00}" = dir=in | app=c:\program files\lenovo\readycomm\readycom.exe | 
"{6F09842A-F00A-4CDA-8546-3A1D68A1F2B6}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{718CDCCD-00E4-40DF-8E65-F2730A6A2563}" = protocol=6 | dir=out | app=%systemroot%\ehome\mcrmgr.exe | 
"{71C871D7-DA14-48BF-88BE-48F2E2875530}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{73949825-AD7F-4E13-BA99-45D6914BBE94}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{7492E7FA-DCBD-486B-9612-BE6A16AAC567}" = protocol=47 | dir=out | app=system | 
"{74BDDFFA-3CA4-4BCA-9C64-5205EEB81A8D}" = dir=in | app=c:\program files\lenovo\readycomm\common\igrs.exe | 
"{74DB576D-804D-4AA8-8617-EE7D4E15A49B}" = dir=in | app=c:\users\yasmine98\appdata\local\facebook\video\skype\facebookvideocalling.exe | 
"{78421F1B-B1B6-498A-B4A2-B7059147D6DB}" = protocol=6 | dir=in | app=%systemroot%\system32\p2phost.exe | 
"{7CCD7BFE-CC12-4DD9-B50C-0742A9EC257D}" = protocol=6 | dir=in | app=c:\windows\system32\msra.exe | 
"{7CE3CCD2-3FFC-48EA-BBFB-B68548C96A95}" = dir=in | app=c:\program files\common files\mcafee\mna\mcnasvc.exe | 
"{7DF2A4C1-913A-4C7B-BAE1-F9582C817198}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{8083554F-4F0C-46C5-99D0-CE9C19E1ECE2}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{85D44F30-D232-49B2-A1D5-04674FDE1002}" = protocol=6 | dir=in | svc=winmgmt | app=%systemroot%\system32\svchost.exe | 
"{8B336ACB-27B7-4A49-9E88-F7794384D018}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{8C92955B-42BC-4850-BC5B-44C318910DCA}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{8FE7D7CE-B245-4A13-AF9C-595A671D9AB8}" = dir=in | app=c:\program files\windows live\sync\windowslivesync.exe | 
"{92E1EF6B-7DBF-4CB8-8CEE-64F7F17BEB3D}" = protocol=6 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe | 
"{983ECF19-A51B-4EA3-B7F5-1BB433009FD4}" = dir=out | app=c:\windows\system32\igrssvcs.exe | 
"{9D36F331-C421-4FFC-90FF-733926C29CD6}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{9FA81899-349E-4D72-9F54-1726264C180C}" = dir=in | app=c:\program files\lenovo\readycomm\connsvc.exe | 
"{A9ECB4DD-607C-4653-9A89-5DAF197CD13C}" = protocol=6 | dir=out | app=%systemroot%\system32\p2phost.exe | 
"{AAADE118-157C-4AB4-94D6-0C632A3A4AB2}" = protocol=6 | dir=out | app=%systemroot%\system32\wudfhost.exe | 
"{AB69E0C4-8D0A-4509-B915-21BA8F920F39}" = protocol=47 | dir=out | app=system | 
"{ABC3DD8A-7731-4BF5-8F36-02BCE397EFD3}" = protocol=6 | dir=in | app=c:\windows\system32\msra.exe | 
"{AC2F0F73-102A-4F4F-9C14-FF3ED4307172}" = protocol=6 | dir=out | app=system | 
"{B3E4AA26-6E1D-42A5-AEBF-98AFBD2A8539}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{BB40B43B-FAB6-4CE2-9BC3-B74736AA260D}" = protocol=6 | dir=out | app=%systemroot%\ehome\ehshell.exe | 
"{BDD3542F-D394-4881-A347-CD28BE706512}" = protocol=6 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe | 
"{BEA265DD-E703-4797-9B39-F61BFB0CBDEB}" = protocol=47 | dir=in | app=system | 
"{C0417598-97AE-4E92-9EA2-96CF5BF50685}" = protocol=6 | dir=out | app=%systemroot%\ehome\mcx2prov.exe | 
"{C4B0CB7F-BD71-4C28-9FE1-290E3589D794}" = protocol=6 | dir=in | svc=msiscsi | app=%systemroot%\system32\svchost.exe | 
"{C8461C43-81D0-44DD-9CC7-26238EE03996}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{CB21C046-5F0C-4309-8A1B-534689CEBAC4}" = dir=out | app=c:\program files\lenovo\readycomm\projectionist.exe | 
"{CCF3D768-6AC2-4DB7-A5C1-38EBDCAABE01}" = protocol=6 | dir=out | app=%systemroot%\system32\msdtc.exe | 
"{CFDC238D-2D0B-4D2E-A770-AAF60F83DF2A}" = dir=in | app=c:\program files\lenovo\readycomm\common\igrs.exe | 
"{D1414FA1-C80D-4AA4-9D47-BC6A5BAC28E5}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | 
"{D399EA6F-28B2-44F1-B770-988BD998AF3A}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{D4D8F724-1153-4E2A-9FE5-24E85F2DCF91}" = dir=in | app=c:\program files\lenovo\readycomm\projectionist.exe | 
"{D64F210C-045F-40E7-8FD4-DE5C2D3BD9A7}" = protocol=6 | dir=out | svc=mcx2svc | app=%systemroot%\system32\svchost.exe | 
"{DE883FA9-3324-4B65-93C1-B2294B31D454}" = dir=out | app=c:\program files\lenovo\readycomm\readycomm.exe | 
"{E5631405-00D4-444D-926F-AE1DFBC65D26}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{E5C79C9E-9E13-4CD9-A7BA-073004B4D37A}" = dir=out | app=c:\program files\lenovo\readycomm\connsvc.exe | 
"{EAECB2D4-698D-4C65-BA23-C69DC62FDBF3}" = dir=out | app=c:\program files\lenovo\readycomm\common\igrs.exe | 
"{EDA641FA-5C86-40FA-97BB-30FC3FA11390}" = protocol=6 | dir=out | svc=mcx2svc | app=%systemroot%\system32\svchost.exe | 
"{EEDA1865-2359-407A-8F77-C545EB174F13}" = protocol=6 | dir=in | app=%systemroot%\system32\wbem\unsecapp.exe | 
"{F00E46CC-849E-44EC-8132-8CEE4DFB7CCB}" = protocol=47 | dir=in | app=system | 
"{F2C4C6A7-9397-4949-BDE1-8E5C51A6142C}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{F92DF926-860F-4CF3-AD68-120E5E832B0A}" = protocol=6 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe | 
"{FAE48536-C65F-4EAD-8A9D-2F68D2767CFC}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{FBF81658-969A-4D66-9249-897B4F98966C}" = protocol=6 | dir=in | app=%systemroot%\system32\plasrv.exe | 
"TCP Query User{C0A9A7E6-B7FB-4512-8DF3-3E2BDD56CB52}C:\program files\emule\emule.exe" = protocol=6 | dir=in | app=c:\program files\emule\emule.exe | 
"UDP Query User{F642F263-06C5-4F12-BFFA-DED67B5806C5}C:\program files\emule\emule.exe" = protocol=17 | dir=in | app=c:\program files\emule\emule.exe | 
 
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0454BB9A-2A7A-4214-BDFF-937F7A711A44}" = Windows Live Communications Platform
"{0AD576A7-EDCE-469E-ADD7-1AC9DB200C6B}" = Windows Live Mail
"{0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}" = Microsoft .NET Framework 4 Client Profile FRA Language Pack
"{17542DBF-E17C-4562-BC4D-FA3EF3076C45}" = Lenovo ReadyComm 5
"{1B947146-366B-42CD-86D5-219993CE3EE2}" = Windows Live MIME IFilter
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{2075CB0A-D26F-4DAA-B424-5079296B43BA}" = Windows Live FolderShare
"{26A24AE4-039D-4CA4-87B4-2F83217040FF}" = Java 7 Update 45
"{2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F}" = Microsoft SQL Server 2005 Express Edition (MSSMLBIZ)
"{30F99474-EBE3-4134-A02B-F6CD38CFE243}" = Photo Gallery
"{32E9C1A5-0FDA-4483-987D-DBABF9CC1DD8}" = Microsoft Antimalware Service FR-FR Language Pack
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{400C31E4-796F-4E86-8FDC-C3C4FACC6847}" = Junk Mail filter update
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"{446CC8CE-0E90-44F7-ADD0-774B243EF090}" = Galerie de photos
"{46F4D124-20E5-4D12-BE52-EC177A7A4B42}" = Lenovo OneKey Recovery
"{4926AA2D-3C66-443D-A456-53AE3FA44144}" = Windows Live Family Safety
"{49F3D04B-B849-4C89-AB31-2366A004EA28}" = Broadcom Gigabit Integrated Controller
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CCBD1F4-CEEC-452A-9CB8-46564B501315}" = Windows Live UX Platform
"{4D24F198-A2CB-46B5-BB16-41B69C644B6C}" = Microsoft Security Client
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.6
"{50120000-1105-0000-0000-0000000FF1CE}" = Microsoft Office 2007 Primary Interop Assemblies
"{50779A29-834E-4E36-BBEB-B7CABC67A825}" = Microsoft Security Client FR-FR Language Pack
"{52E225FC-FCB4-41F7-837B-6E37FB05BD7B}" = Adobe AIR
"{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}" = Microsoft SQL Server Setup Support Files (English)
"{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}" = Apple Application Support
"{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites
"{69ca8988-1c6c-4285-b8af-db780a6e42af}" = Gestionnaire de contacts professionnels pour Outlook 2007 SP2
"{6A8DB215-7BCD-4377-B015-2E4541A3E7C6}" = Windows Live PIMT Platform
"{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}" = HP Update
"{70854FE6-3BF1-4C69-94D0-BEB821102E34}" = Windows Live Mail
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7204BDEE-1A48-4D95-A964-44A9250B439E}" = Facebook Messenger 2.1.4814.0
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7670D32F-DAE6-4E49-8C8B-B3F08B5B1686}" = Microsoft SQL Server Native Client
"{76C66170-C538-4E77-B54D-48E136B5B533}" = Lenovo ReadyComm 5.0 Service
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{7A3DF2E2-CF13-44FB-A93E-F71D5381DB3F}" = HP Deskjet 2050 J510 series Aide
"{8256F87F-8554-4457-8C3D-3F3324697D9F}" = Windows Live ID Sign-in Assistant
"{846B5DED-DC8C-4E1A-B5B4-9F5B39A0CACE}" = HPDiagnosticAlert
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A642ACD-CE3A-4A23-A8B1-A0F7EB12B214}" = Windows Live SOXE Definitions
"{8AAEB5A5-A397-46B6-8AF3-B6DC790C4E48}" = Windows Live Messenger
"{8D813AFF-D91D-4EE0-821F-B901FC2E89FA}" = Windows Live
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}" = MSVCRT110
"{90120000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2007
"{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0015-040C-0000-0000000FF1CE}" = Microsoft Office Access MUI (French) 2007
"{90120000-0015-040C-0000-0000000FF1CE}_PROHYBRIDR_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-040C-0000-0000000FF1CE}" = Microsoft Office Excel MUI (French) 2007
"{90120000-0016-040C-0000-0000000FF1CE}_PROHYBRIDR_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-040C-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (French) 2007
"{90120000-0018-040C-0000-0000000FF1CE}_PROHYBRIDR_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-040C-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (French) 2007
"{90120000-0019-040C-0000-0000000FF1CE}_PROHYBRIDR_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-040C-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (French) 2007
"{90120000-001A-040C-0000-0000000FF1CE}_PROHYBRIDR_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-040C-0000-0000000FF1CE}_PROPLUS_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-040C-0000-0000000FF1CE}" = Microsoft Office Word MUI (French) 2007
"{90120000-001B-040C-0000-0000000FF1CE}_PROHYBRIDR_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0401-0000-0000000FF1CE}" = Microsoft Office Proof (Arabic) 2007
"{90120000-001F-0401-0000-0000000FF1CE}_PROHYBRIDR_{3E8EA473-ECCE-405F-A9CA-59446AEADD3A}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_PROHYBRIDR_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_PROHYBRIDR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_PROHYBRIDR_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0413-0000-0000000FF1CE}" = Microsoft Office Proof (Dutch) 2007
"{90120000-001F-0413-0000-0000000FF1CE}_PROHYBRIDR_{2C95E7EE-FEA7-4B3A-A6E5-DF90A88B816A}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_PROHYBRIDR_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-040C-0000-0000000FF1CE}" = Microsoft Office Proofing (French) 2007
"{90120000-0044-040C-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (French) 2007
"{90120000-0044-040C-0000-0000000FF1CE}_PROPLUS_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-040C-0000-0000000FF1CE}" = Microsoft Office Shared MUI (French) 2007
"{90120000-006E-040C-0000-0000000FF1CE}_PROHYBRIDR_{8283FD64-6A3B-4104-9E12-7CA25EF29A1A}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00B2-0409-0000-0000000FF1CE}" = Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office programs
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
"{90993BD9-C7D9-4C2F-B56C-2F7AFEBD4CD0}" = Windows Live UX Platform Language Pack
"{91120000-0031-0000-0000-0000000FF1CE}" = Microsoft Office Professional Hybrid 2007
"{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader
"{97C79BEC-43F7-4BD8-A6A7-85C0257E488A}" = Windows Live Writer
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}" = ALPS Touch Pad Driver
"{A17946CA-18E5-4CF0-8D55-A56D804718F8}" = Movie Maker
"{A5DC64EE-2FC4-4C35-9975-639DD8499369}" = Windows Live Family Safety
"{A939D341-5A04-4E0A-BB55-3E65B386432D}" = Microsoft Office Small Business Connectivity Components
"{AE1E24C2-E720-42D5-B8E1-48F71A97B4DB}" = Energy Management
"{B77D2795-23C0-4DBD-B7B5-CFB542D1FA3F}" = Windows Live Writer Resources
"{B92C5909-1D37-4C51-8397-A28BB28E5DC3}" = Facebook Video Calling 1.2.0.287
"{C424CD5E-EA05-4D3E-B5DA-F9F149E1D3AC}" = Windows Live Installer
"{C595F480-788A-4F8F-8277-1A91F32CA879}" = Windows Live Writer
"{C9B6EFD0-4F01-4BBA-8374-39AD99A3ED72}" = Windows Live Photo Common
"{D2C146B1-948D-47EF-8387-5D1C6B980F7C}" = Windows Live Writer
"{D5D5742C-5A3B-4440-907D-DC133684682A}" = Logiciel de base du périphérique HP Deskjet 2050 J510 series
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E7084B89-69E0-46B3-A118-8F99D06988CD}" = Microsoft SQL Server VSS Writer
"{ED6C77F9-4D7E-447C-9EC0-9A212D075535}" = Movie Maker
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F2235E5E-7881-4293-9B6F-04B2609FBFF0}" = Windows Live Messenger
"{F54030F3-14B6-432D-9361-78DCB1473920}" = Photo Common
"{F9FD80CE-0448-4D4F-8BCD-77FC514C3F99}" = Advanced Vista Codec Package
"{FE7AD27A-62B1-44F6-B69C-25D1ECA94F5D}" = Lenovo EasyCamera
"{FE7C0B3D-50B9-4951-BE78-A321CBF86552}" = Windows Live SOXE
"Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"avast" = avast! Free Antivirus
"Business Contact Manager" = Gestionnaire de contacts professionnels pour Outlook 2007 SP2
"CNXT_AUDIO_HDA" = Conexant HD Audio
"EasyCapture4.0" = EasyCapture
"eMule" = eMule
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"HP Photo Creations" = HP Photo Creations
"InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}" = Lenovo OneKey Recovery
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.75.0.1300
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile FRA Language Pack" = Module linguistique Microsoft .NET Framework 4 Client Profile FRA
"Microsoft Security Client" = Microsoft Security Essentials
"Microsoft SQL Server 2005" = Microsoft SQL Server 2005
"PC Scrabble ® Edition 99" = PC Scrabble ® Edition 99
"PC-Doctor for Windows" = PC-Doctor pour Windows
"PROHYBRIDR" = 2007 Microsoft Office system
"PROPLUS" = Microsoft Office Professional Plus 2007
"scrabbleproB_is1" = scrabbleproB 1.1.3
"TVWiz" = Intel(R) TV Wizard
"VeriFace" = VeriFace
"WinLiveSuite" = Windows Live
"WinRAR archiver" = Archiveur WinRAR
 
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
 
[HKEY_USERS\S-1-5-21-893573537-109279878-3385525445-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"SkyDriveSetup.exe" = Microsoft SkyDrive
 
[color=#E56717]========== Last 20 Event Log Errors ==========[/color]
 
[ Application Events ]
Error - 28/10/2013 09:50:26 | Computer Name = yasmine98-PC | Source = Application Hang | ID = 1002
Description = Le programme iexplore.exe version 10.0.9200.16720 a cessé d’interagir
 avec Windows et a été fermé. Pour déterminer si des informations supplémentaires
 sont disponibles, consultez l’historique du problème dans le Centre de maintenance.

ID
 de processus : 1648    Heure de début : 01ced3e41a2f1184    Heure de fin : 15    Chemin d’accès
 de l’application : C:\Program Files\Internet Explorer\iexplore.exe    ID de rapport
 :   
 
Error - 28/10/2013 10:13:59 | Computer Name = yasmine98-PC | Source = Application Hang | ID = 1002
Description = Le programme iexplore.exe version 10.0.9200.16720 a cessé d’interagir
 avec Windows et a été fermé. Pour déterminer si des informations supplémentaires
 sont disponibles, consultez l’historique du problème dans le Centre de maintenance.

ID
 de processus : 11d8    Heure de début : 01ced3e5d124825d    Heure de fin : 15    Chemin d’accès
 de l’application : C:\Program Files\Internet Explorer\iexplore.exe    ID de rapport
 :   
 
Error - 28/10/2013 10:56:19 | Computer Name = yasmine98-PC | Source = VSS | ID = 8193
Description = 
 
[ System Events ]
Error - 28/10/2013 09:43:49 | Computer Name = yasmine98-PC | Source = SNMP | ID = 16713180
Description = Le service SNMP a rencontré une erreur lors de l’accès à la clé de
 Registre SYSTEM\CurrentControlSet\Services\SNMP\Parameters\TrapConfiguration.
 
 
< End of report >