OTL Extras logfile created on: 28/09/2013 11:34:04 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Alice&Maurice\Downloads Windows Vista Business Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy 2,97 Gb Total Physical Memory | 1,74 Gb Available Physical Memory | 58,64% Memory free 6,16 Gb Paging File | 4,75 Gb Available in Paging File | 77,11% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 147,58 Gb Total Space | 37,27 Gb Free Space | 25,25% Space Free | Partition Type: NTFS Drive J: | 232,88 Gb Total Space | 200,14 Gb Free Space | 85,94% Space Free | Partition Type: NTFS Drive S: | 1,46 Gb Total Space | 0,67 Gb Free Space | 45,99% Space Free | Partition Type: NTFS Computer Name: PC-ALICEMAURICE | User Name: Alice&Maurice | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation) .hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation) [HKEY_CURRENT_USER\SOFTWARE\Classes\] .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation) http [open] -- Reg Error: Value error. https [open] -- Reg Error: Value error. inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Directory [Browse with FastStone] -- "C:\Program Files\FastStone Image Viewer\FSViewer.exe" "%1" () Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.) Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.) Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft, Inc.) Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 "VistaSp1" = Reg Error: Unknown registry data type -- File not found "VistaSp2" = Reg Error: Unknown registry data type -- File not found [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [color=#E56717]========== Authorized Applications List ==========[/color] [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{00AA0388-8CC3-48A1-8188-8CDD4A0F63C8}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{08E8467B-CC3E-4855-B056-4594F5E4EDF4}" = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{0B7B5C7F-ED36-47F3-B1E6-56DDA8D03BEF}" = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{0E244018-A265-4D21-88CD-6A1C1D93C7B7}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | "{115B8D5A-96D1-4C3F-8AC8-40F4CEA28A4A}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{1201875C-90FB-4852-8EAD-7CD1526456A3}" = lport=5678 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe | "{13DF6371-84EE-4D68-BBF9-7FC88E71D4AD}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{14DFAEF9-7F9B-426A-A8C1-415E33442445}" = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{199397EA-B75A-4AB3-89E2-EFCE9C702185}" = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{1A352199-4151-4505-9918-95D63170BEBC}" = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{1AF97478-7F39-4FE3-AC74-6C385CABC764}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{1D4FEBBA-564A-45B6-B38B-C182F4488C32}" = lport=5678 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe | "{20D9F1DB-5263-4E15-B64A-2A4E031E3A94}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{22BB14D2-D4CA-4485-8CB8-1D89F9246A2A}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{246C9A18-5548-40C5-A1AC-ED7040DF2FE9}" = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{2555FF21-66EE-4065-BFFB-AC012DCE710D}" = lport=26675 | protocol=6 | dir=in | name=@%systemroot%\windowsmobile\wmdcbase.exe,-4006 | "{271AEB13-7F53-4B91-8E25-2D3724C50892}" = rport=139 | protocol=6 | dir=out | app=system | "{28C02F33-05A0-45D0-86DE-3439CFA21692}" = lport=5678 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe | "{2A9C29B9-0A71-4AF1-A249-D4DBD38B3E51}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{2BB886E7-AB2A-46FC-AC1B-F6D36E1DF763}" = lport=999 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe | "{2C706454-FBC4-4947-A641-7F57DEF296D8}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{2CB1329A-9729-4FE5-900F-D5E91CCA68A3}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{2F07DE15-A848-4516-A81E-F04E5F4C8B8F}" = lport=137 | protocol=17 | dir=in | app=system | "{300535B4-B61E-4DB2-BBFF-47171BC5B269}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{3808188A-FDFD-4931-8CA5-812ABD92687E}" = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{3D2B2202-13C7-44D8-9D8E-BC983F9654E3}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{3EB94BED-6FE8-442D-9B6A-7475015F50F5}" = lport=26675 | protocol=6 | dir=in | name=@%systemroot%\windowsmobile\wmdcbase.exe,-4006 | "{3F34A6CF-CF73-4A76-A013-98EDB5451915}" = lport=26675 | protocol=6 | dir=in | name=@%systemroot%\windowsmobile\wmdcbase.exe,-4006 | "{41C4605C-6E34-44D7-95A7-39037A7FE17B}" = lport=999 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe | "{424DBD20-68C1-4EF3-B29C-403093A89AAE}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{4406A519-521A-42D7-8B61-7C16A3CB2EE4}" = lport=26675 | protocol=6 | dir=in | name=@%systemroot%\windowsmobile\wmdcbase.exe,-4006 | "{4453D974-FA2A-4787-9B3A-B656F35BE1A4}" = lport=26675 | protocol=6 | dir=in | name=@%systemroot%\windowsmobile\wmdcbase.exe,-4006 | "{45315F17-FC2D-472C-B6D5-F2B20505B649}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{457EAA1E-BBAA-42CC-B538-777859BCFE8F}" = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{48044BAE-8903-44BA-B8CA-EA3A83A8C5CC}" = lport=26675 | protocol=6 | dir=in | name=@%systemroot%\windowsmobile\wmdcbase.exe,-4006 | "{4948D8C1-A7AE-47DF-92EE-BEE4ACEBAD04}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{4AF72F7A-ADBC-4677-9883-825D906B3B84}" = lport=138 | protocol=17 | dir=in | app=system | "{4E4C45FA-F1F3-4808-9773-FF298674088E}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{4FCF215F-2E74-46E4-AF56-D718B327E66B}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{52CED858-73F0-4F48-A5F6-A772997E9D73}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{57782A3D-FEB9-49C6-8401-92799C01C2C6}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{58A623D7-9E83-406A-A4FC-0E1B6779527F}" = lport=5678 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe | "{58D0CDC2-F8B9-4FF1-8567-657353B6137F}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{593F1081-2759-4C88-9AFC-C889A4B966E3}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{5D33D48D-AE43-4993-B056-C715E1E17C08}" = lport=26675 | protocol=6 | dir=in | name=@%systemroot%\windowsmobile\wmdcbase.exe,-4006 | "{600222AC-3897-4589-9EAF-CD26D7A546AB}" = lport=26675 | protocol=6 | dir=in | name=@%systemroot%\windowsmobile\wmdcbase.exe,-4006 | "{668EC76C-3435-463B-AB97-EB800B4624B5}" = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{67D4B1B4-2B4C-4142-B65A-F9BB1A56C424}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{6BBFC827-9FC0-4A9D-B7C8-DD7C66DF2ACE}" = rport=137 | protocol=17 | dir=out | app=system | "{7A080C16-2205-4682-B0D6-F9FE3FFBB1BC}" = lport=999 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe | "{7E6C79FA-F960-4D48-94C7-AEE5F3BFF84B}" = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{84655C41-D1B7-4E60-8531-A1CD02144784}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{87841805-5992-4CF2-BEA4-038AA3AF87E4}" = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{88B06CE3-B1E9-477D-B65B-652A978699DF}" = lport=26675 | protocol=6 | dir=in | name=@%systemroot%\windowsmobile\wmdcbase.exe,-4006 | "{96057A32-F9DC-4D54-AAFA-676C371AEAB6}" = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{9644FBDB-C95A-483C-B9E5-ACF323353A05}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{99BFA1D7-94F6-4523-954F-83E471B71234}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{9C5C8739-B1DA-4B3D-92ED-4E43B175F105}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{9CAD3E6D-22B0-49BB-ADE9-140E729F6466}" = lport=26675 | protocol=6 | dir=in | name=@%systemroot%\windowsmobile\wmdcbase.exe,-4006 | "{9DAFB6DC-29DF-4B03-A642-52B12AF2EAD8}" = lport=26675 | protocol=6 | dir=in | name=@%systemroot%\windowsmobile\wmdcbase.exe,-4006 | "{9E5AC3D9-81D2-42C6-A56F-71BF6066D0AC}" = lport=445 | protocol=6 | dir=in | app=system | "{A02DDF4A-2034-4CF8-8DC6-E5CB3D4E22B0}" = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{A0F4FDCB-802B-4487-959E-85B09BF7D48A}" = lport=21 | protocol=6 | dir=in | name=ftp | "{A50B2F1C-5185-432A-A276-41FC0F94E722}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{A7CF9DEA-185F-42A5-9C27-3FB61A7E148E}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | "{A80D01E0-ED75-4823-ADFB-37ACFECB2CCD}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{A8354C3E-7B6F-46C3-849C-4EF2CEA8EF98}" = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{A9E5CA00-96AA-437D-A235-1677B336C651}" = lport=5678 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe | "{AD326165-6881-4BA1-A665-58BF655107CC}" = lport=139 | protocol=6 | dir=in | app=system | "{B06C205C-87C2-4D76-9E98-35C4FC5A8D45}" = lport=999 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe | "{B087CA51-08C1-4C10-A181-359944D71DCF}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{B31E69ED-190F-412B-B830-3D0BE468A90A}" = lport=26675 | protocol=6 | dir=in | name=@%systemroot%\windowsmobile\wmdcbase.exe,-4006 | "{B5462360-24F8-4FFE-8241-498FFF1EB4DF}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{BCD27E0D-C9B1-42EA-BEAD-24B06ADB1966}" = lport=5678 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe | "{BD18F3BC-9731-4B42-9DC0-134BBBDAD0FB}" = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{C7689626-2455-4F88-B51D-575EB61247D8}" = lport=26675 | protocol=6 | dir=in | name=@%systemroot%\windowsmobile\wmdcbase.exe,-4006 | "{CC51E5E2-FE5F-452D-9BF3-A20F9E3C1C17}" = lport=26675 | protocol=6 | dir=in | name=@%systemroot%\windowsmobile\wmdcbase.exe,-4006 | "{CF7F8165-0BEC-4B6D-A58C-4E5A6228E82B}" = lport=26675 | protocol=6 | dir=in | name=@%systemroot%\windowsmobile\wmdcbase.exe,-4006 | "{D08DE98C-CB4F-4E1B-95C9-D80513E0B4F3}" = lport=26675 | protocol=6 | dir=in | name=@%systemroot%\windowsmobile\wmdcbase.exe,-4006 | "{D4F70724-BFB5-4B7A-ACF7-C677C15F0516}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{E0F92788-7174-4667-B734-4DFC064E3CB7}" = rport=445 | protocol=6 | dir=out | app=system | "{ED80E1BB-E6F9-450C-B0D0-8F3BEE24E4F1}" = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{F0D2D6F0-2C38-4834-AD56-5B4A9527D0A7}" = lport=999 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe | "{F861AEEE-BBF9-4842-9369-16F723548276}" = lport=999 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe | "{F8C8918B-945E-4729-A3B2-9755EC43F427}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{FC26BB16-320D-46A2-B9CB-82A50DDD6176}" = rport=138 | protocol=17 | dir=out | app=system | "{FE79E191-3E36-44E3-BF22-8AB22F82CA8A}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{008CADE3-1E93-4EE8-BE2A-7C19EF8620CC}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{012940D1-E413-4C1E-86FB-D182D2232590}" = protocol=17 | dir=in | app=c:\program files\soluto\solutocleanup.exe | "{04A69206-0238-4D63-B3B1-F1DCF5DCFEDD}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{04C1F484-B314-4A82-BE79-C62A78583C13}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{04DA7531-175E-4DA0-9782-D4B43CC9C2D6}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | "{062B7D0C-A372-43EE-9A72-4AAC0BC4C3AE}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{06D9A0EF-CF18-419D-BB4D-1F26D36EAF8F}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{0BD1BE9B-2210-48B6-A8D6-1032B9F7D290}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{0CCC004C-3F5D-4A68-A242-F366486796C0}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{101C6D72-6340-49BB-B3E7-9ED8EE9C1B9D}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{11CC9B00-7C60-4E24-BC70-096601CC2AF9}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{157D2E6D-2084-4DDD-ABFA-076BCDF533C9}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{15ADE467-28B3-4542-824F-7E09BA97A090}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{15CEF12A-852B-4E90-9C37-BB058CACD57B}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{18537BCA-C546-4F10-B6C8-B9750A7DB8D4}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{1AA7C162-4727-458A-B3D9-7B84246ACA58}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{1CC86A7C-0604-4420-ACAB-29AB07C0D2DE}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{1DF2B945-C424-4C56-ADAB-F274AF473EF7}" = protocol=6 | dir=in | app=c:\program files\voipbuster.com\voipbuster\voipbuster.exe | "{222272BA-1BBC-426A-9430-22881AE3766F}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{22DA117A-E360-4312-8D08-6C9C29218763}" = protocol=17 | dir=in | app=c:\program files\soluto\solutoupdateservice.exe | "{22F36606-AD3E-4DA4-91E6-A80FF34C4A89}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{232AB06A-F501-4FD9-903E-8AF54BFF9647}" = protocol=17 | dir=in | app=c:\program files\voipcheapcom.com\voipcheapcom\voipcheapcom.exe | "{26F0E1C3-E262-4206-8E43-40057D436B5C}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{271E53AA-885D-4E8C-8847-F74E94E630AF}" = protocol=6 | dir=in | app=c:\program files\soluto\solutoservice.exe | "{287C9388-543E-420E-ABF4-334431413551}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{28ECC19D-3538-4B0F-A894-067ADFFF65FB}" = protocol=6 | dir=in | app=c:\windows\system32\msiexec.exe | "{290A2209-2800-4EA7-A219-EFD80D9C464B}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{2A6BFE59-E9F7-419D-8435-73D3079FD02D}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{2E69833B-24F2-4F56-9A53-CCC25C0B3192}" = protocol=6 | dir=in | app=c:\program files\soluto\solutoupdateservice.exe | "{2ECF056A-2A87-4014-80E6-5335CEBF9201}" = protocol=17 | dir=in | app=c:\windows\system32\msiexec.exe | "{2FF3DFAC-93FA-419F-8670-74E909A01F80}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{327B6422-5E2A-4D79-A275-82DE4C6D13B2}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{339EA50B-5FA1-4E5A-A133-B7C17E11CD85}" = protocol=17 | dir=in | app=c:\program files\soluto\solutoconsole.exe | "{33F288B0-2704-4189-B7E9-9065FFB7C604}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{35B699F7-D161-4301-A96E-A1514BDD1ED3}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{3B77DBF1-F627-4162-AC32-F2D91E1C88B4}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{3FA005A1-8C6A-47FC-A7D7-0EB632945000}" = protocol=6 | dir=in | app=c:\program files\soluto\solutoservice.exe | "{42CAA36A-FC1D-4981-8A41-D2A2A151E4B3}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{430AD354-72C9-46FD-B33A-46AE2B053F26}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{494A65C5-3690-4A1F-8BC6-448574C9164F}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{4B0AA06E-DC3A-492A-B5EC-73497841463B}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{4BFEF4DB-FAFF-44BB-8491-2A8040DF1D56}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{527D72BD-1D72-4655-B721-CB475C82C861}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{528A1AA4-999C-4C77-BE94-708F3826A9A8}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{53AA75EB-1581-4058-B094-0AF3D84BC53C}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{5B3C47E2-4631-4291-948F-27BADF0D53E2}" = protocol=17 | dir=in | app=c:\program files\soluto\solutoservice.exe | "{5B8BF5F5-F9EF-4ABB-BBE2-7876CAA24EE8}" = protocol=17 | dir=in | app=c:\program files\soluto\solutoservice.exe | "{5CC640D5-7C58-4B2B-8387-80B303289A0E}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{5CE206AC-E9BD-46E2-8AB2-EA0C3D54BE0E}" = protocol=17 | dir=in | app=c:\program files\soluto\solutoconsole.exe | "{5DEECBA3-7B81-43B6-9D0A-8503483D58FA}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{5EC9822F-6E3D-4B2F-B62A-042E27559CC7}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{5F07BF89-C2F7-426A-82CA-CED46EEA8A0E}" = protocol=17 | dir=in | app=c:\program files\soluto\solutoupdateservice.exe | "{61946806-6AFF-40F8-A68F-39BB17C45536}" = protocol=6 | dir=in | app=c:\program files\soluto\soluto.exe | "{626E2CCD-5DEC-44A2-9E0F-17835CF97091}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{6396B185-27FE-4A52-B002-2C4E9FC14B73}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{664437C9-19AF-4BBF-9CBC-5ED195871AC7}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{68546C80-4380-4461-B97F-438F984C6412}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{6D4294FF-DFCB-490D-A414-82E13EB85E0E}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{6D8299DF-66EA-488C-8A30-2AD8AD468D41}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{6EBD9B2C-F0A8-4F84-AD12-03256F42D7F9}" = protocol=6 | dir=in | app=c:\programdata\esafe\egdpsvc.exe | "{70B98D95-BC8D-4A66-AE2A-2636F38202D5}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{7488ACC5-BAAB-4F87-A621-B8DB0439E548}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{762FD05C-DED5-44E3-A974-9E5EE76E5400}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{7A77F15F-199C-4127-B64D-7E18E708AD56}" = protocol=6 | dir=in | app=c:\program files\voipcheapcom.com\voipcheapcom\voipcheapcom.exe | "{7AABBFED-D26E-4EA8-9524-B7215A883559}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{7AB8B596-C21C-4682-A102-24B1AD23DA67}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{7B8E15F6-2ECA-4CD2-9F50-27B057F02A89}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{7D56E077-7F0D-47D4-9E95-ABC8CBF68DC5}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{7FC6EFF4-690C-4DA0-9BE9-EF9277295978}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{8192CA89-77DA-48B1-847F-FFA22BC38251}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{86DF9312-7A5F-424C-B7BA-050C59557E7D}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{87863B3E-FEA9-496D-B504-50E9F2A64ADC}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{8B98FABD-0F53-44FC-8CD7-5C25E7DE3768}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{8CA574A9-3435-4344-B990-89277A199363}" = protocol=6 | dir=in | app=c:\program files\soluto\solutoconsole.exe | "{8EB01657-1702-4E4C-8A72-60D9BD253D3C}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{8FBA049F-F6F2-4069-AA1D-60E0DCAD55B0}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{9608E103-0FA8-4720-AEA8-17835C310DD1}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{987AEBF8-1C3F-406F-B5DE-7BCB5ADE27D2}" = protocol=17 | dir=in | app=c:\program files\voipbuster.com\voipbuster\voipbuster.exe | "{9C484FF8-BCD0-41CC-B2BA-67D2D9FE847D}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | "{9CDE2373-3E0F-4DC1-8226-85F1D8C18C60}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{9F3E80D5-3D13-4E25-9C84-65E7CFDBD327}" = protocol=6 | dir=in | app=c:\program files\filezilla ftp client\filezilla.exe | "{9F68524D-8EFF-48D6-BE1F-C2CE1588DC98}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{A064242A-C65A-4B4E-9CC8-1D38FB9F28F7}" = protocol=17 | dir=in | app=c:\program files\soluto\soluto.exe | "{A1D67FF8-2137-4C05-BCC7-ADAE3F8B9737}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{A280AB55-DAFD-43BF-BCA2-5DE2FCD8E1AD}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{A3EB3516-D084-4FA0-8E1D-71654E27DA04}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{A4CE63DC-CB09-41D7-9190-396A24CB1EBF}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{A6EEF5C9-1AA9-4F30-88A4-B8A29AF9E33A}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{A710FDA5-006E-4412-A814-504E4F932F10}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{A80699DF-1D6D-48DF-94B8-011E55BEDE08}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{A8F7864C-AA16-4D00-ACC7-504284B8A697}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{AAD80315-E2D9-466F-90FE-7088301C8B16}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{ABB316F1-930A-4E5F-B60F-C159886FDB4C}" = protocol=6 | dir=in | app=c:\program files\soluto\solutoupdateservice.exe | "{AC988325-BC80-44A1-8E15-6E1379C42945}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{ACD92534-D397-4D58-A4D4-48288FCF6DD7}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{AF651021-2304-4AC1-8A38-6F6B3AA25FD0}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{B0AB1DBE-A6D2-4CBA-BBAE-779DA6A4E834}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{B1E365DD-7A0D-47B9-846F-7E26C4E5A7B1}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{B200A9B0-EF03-4FEF-B997-C0DB00431482}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{B260526A-3391-41DF-9A80-C5E0593D96DE}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{B2A32BB6-ECAA-4596-8429-568346D9F155}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{B2C3DA18-EFC7-448E-88E2-92021E1453B1}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{B2E21F33-12EA-49B1-B001-531DA6FF2980}" = protocol=6 | dir=in | app=c:\program files\soluto\soluto.exe | "{B6F6B63B-F9C8-4D8D-A1BA-EEBFAC772DDB}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{B7B32639-322D-46BD-A4B2-D3B65DB08D56}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{B95F58EF-15C5-408C-AEBB-E872B016F032}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{BAAA2E34-562E-4EDD-88EA-0D617CAD16AB}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | "{BB6562AB-8161-4E28-A6BB-84D64A99F3A6}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{BC6E3941-E958-4E2D-A671-2F5D02E83527}" = protocol=6 | dir=in | app=c:\program files\soluto\solutocleanup.exe | "{BC85B00A-49CC-4871-AB00-BFFE84A5BD7A}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{BD177481-D619-427F-96C9-9068FD4ECEBA}" = protocol=6 | dir=in | app=c:\program files\soluto\solutoconsole.exe | "{BE1083E1-2056-46E8-A780-66DD76EBB22C}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{BEB0429C-5EFB-4066-B6A1-A121A367848C}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{C10C60F8-1144-49AB-AB24-DCCE379D743B}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{C1F097FF-199E-4BE2-AE6C-FF87999BA3AB}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{C3BE0B2F-EDDF-4347-B5F7-C941D9AFABB2}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{C5054FA7-AAD3-43CC-8DD4-E0C68E83E340}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{C54DFCF0-A60D-44DE-B0F0-6C52679AE61F}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{C839D2B3-220C-403B-B940-2DDA2A0B1B76}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{C8A0AE1C-B5C0-4709-86D2-17FDD002A80F}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{CD01D9DC-DBE1-4CE5-812A-E4332F915235}" = protocol=17 | dir=in | app=c:\program files\soluto\soluto.exe | "{CEB4B987-B304-42B1-9336-025F906AD7CA}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{D1FD9D97-CD73-46D4-8E9E-71DEFE0A202D}" = protocol=6 | dir=in | app=c:\program files\sweetim\communicator\sweetpacksupdatemanager.exe | "{D34D12D0-5FA0-48C1-AFDD-9F415818218A}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{D4081720-D322-4E41-B681-A2F4EF0516B3}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | "{D4DC15C3-195B-48CF-8AC7-C63125BCBC03}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{DF3B9553-BC4A-4A20-B629-4EB394FA2EF6}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe | "{DF761300-1D10-43D0-B98E-4D0C2F4E7069}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{DF96E080-7F8C-4633-A6B6-133A9A9F68E1}" = protocol=17 | dir=in | app=c:\program files\sweetim\communicator\sweetpacksupdatemanager.exe | "{E1971B4C-AB75-4769-84CD-D160BAE71BF6}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{E1D0E5C6-D84D-46AE-91C4-58A52C07F4E3}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{E5F7950F-2E98-4A7A-B637-0672ED7ECBD5}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{E7384E81-99F9-46EF-83E1-7E78F1342732}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{E7BF8729-1ED9-410D-AD34-6130CCC6F591}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{E9825871-53E8-4ABA-AFB8-1C2570F70CB9}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{E9D0E266-A93B-4814-8075-94986232D98E}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{EC4F8EAE-5705-4CEB-B05C-FA0E97B68E33}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{ECFA0686-D3AA-4214-8790-83F7C88D62BD}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{ED2CFEA6-58CB-4CBE-A28C-4702A72A5082}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{EEEBBB48-1F57-40D4-9D4F-8519A092F858}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{EF9CFDD7-95CE-4E90-BD17-06153635D2E1}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{EF9DCEB5-B4D0-4A11-94F6-5F2B0C7894F5}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{F0952029-0830-4294-8FC0-2F0A95B5D65D}" = dir=in | app=c:\program files\itunes\itunes.exe | "{F3772E0F-1258-4A4E-B8D9-360E4FB60FE0}" = protocol=17 | dir=in | app=c:\program files\filezilla ftp client\filezilla.exe | "{F404A555-D554-4D5E-9129-E126F3EAE8AF}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{F416B615-20BB-4C89-A7E4-762FE843C79B}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{FAFF5B62-F9E0-4B10-9DC8-AE3968BB35DC}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{FC1616B6-1D16-426E-83A1-BBC98C0C9252}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "TCP Query User{0B96AABA-7025-4A69-AA67-9A973F57C6DC}C:\program files\myphoneexplorer\myphoneexplorer.exe" = protocol=6 | dir=in | app=c:\program files\myphoneexplorer\myphoneexplorer.exe | "TCP Query User{39EEBF9B-0A45-4785-BB30-7E5E5A81336D}C:\program files\voipcheapcom.com\voipcheapcom\voipcheapcom.exe" = protocol=6 | dir=in | app=c:\program files\voipcheapcom.com\voipcheapcom\voipcheapcom.exe | "TCP Query User{76020421-E6D7-4133-A47A-9274EAF3CB72}C:\windows\system32\wfs.exe" = protocol=6 | dir=in | app=c:\windows\system32\wfs.exe | "TCP Query User{84A184EF-CE62-4F64-B156-69B072A1695F}C:\program files\google\google earth\client\googleearth.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe | "TCP Query User{90AD81D6-D286-4DF0-87BE-B5ED9581E01B}C:\program files\voipbuster.com\voipbuster\voipbuster.exe" = protocol=6 | dir=in | app=c:\program files\voipbuster.com\voipbuster\voipbuster.exe | "TCP Query User{A70BA307-4CFE-4240-B510-744F750565D8}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe | "TCP Query User{B9073CFD-DBC3-496E-B4BA-3FE78408DCFB}C:\windows\system32\wfs.exe" = protocol=6 | dir=in | app=c:\windows\system32\wfs.exe | "UDP Query User{26CF5592-5D76-44C0-A469-5BF771E2E380}C:\program files\voipcheapcom.com\voipcheapcom\voipcheapcom.exe" = protocol=17 | dir=in | app=c:\program files\voipcheapcom.com\voipcheapcom\voipcheapcom.exe | "UDP Query User{467336B0-B269-4084-BB95-AE096002230A}C:\program files\google\google earth\client\googleearth.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe | "UDP Query User{59055ACB-7333-4A49-BC4C-99AEDE7BD5E0}C:\program files\myphoneexplorer\myphoneexplorer.exe" = protocol=17 | dir=in | app=c:\program files\myphoneexplorer\myphoneexplorer.exe | "UDP Query User{5C13F180-7CA9-4A04-9BCC-61833402BC04}C:\windows\system32\wfs.exe" = protocol=17 | dir=in | app=c:\windows\system32\wfs.exe | "UDP Query User{60690FA4-4C5B-4BE5-B546-6569A8F94D44}C:\windows\system32\wfs.exe" = protocol=17 | dir=in | app=c:\windows\system32\wfs.exe | "UDP Query User{C9F2CDA0-BC85-4999-9488-129696C64BCD}C:\program files\voipbuster.com\voipbuster\voipbuster.exe" = protocol=17 | dir=in | app=c:\program files\voipbuster.com\voipbuster\voipbuster.exe | "UDP Query User{FB3C7330-2227-447A-BC25-118F4DAE3F0C}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{0592EF96-69D8-4E4B-9CC9-88F58EA86F01}" = Apple Mobile Device Support "{0711500B-9912-4D60-9A49-C577B4503D42}" = Nero Recode Help "{07CE148E-1523-46E8-A22E-120954477135}" = SCRABBLE® 2005 DEMO FR "{07EEE598-5F21-4B57-B40B-46592625B3D9}" = Zune Language Pack (PTB) "{07FF7593-9DEA-40B5-9F87-F557E65BBF60}" = Nero Recode "{098122AB-C605-4853-B441-C0A4EB359B75}" = DirectXInstallService "{0B7DDCD3-D6D8-4366-A6D8-9B6495A2925E}" = ScanSoft OmniPage 15.0 "{0C826C5B-B131-423A-A229-C71B3CACCD6A}" = CDDRV_Installer "{1007F41F-7D69-468E-8017-3849A5A973C2}" = ThinkVantage Technologies Welcome Message "{1122AAC4-AAAA-43BF-B2D4-3C8C12378952}" = Nero InfoTool "{11A84FCA-C3C7-4AFD-A797-111DB8569DBC}" = Nero BurningROM "{12345674-DE9A-677A-CCEE-666356D89777}" = Nero BurnRights "{1B040683-C390-4711-ABC7-DA8D85E470E7}" = NeroBurningROM "{1D7029B7-B42B-3012-B74A-904C81A3662D}" = Microsoft .NET Framework 4.5 FRA Language Pack "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{26A24AE4-039D-4CA4-87B4-2F83217025FF}" = Java 7 Update 25 "{2A9DFFD8-4E09-4B91-B957-454805B0D7C4}" = Zune Language Pack (CHS) "{2BD2FA21-B51D-4F01-94A7-AC16737B2163}" = Adobe Flash Player 10 ActiveX "{2D3455A8-3B15-41A8-99F8-0D4215746463}" = Nero StartSmart "{2F4C24E6-CBD4-4AAC-B56F-C9FD44DE5668}" = Drag-to-Disc "{3097B151-1F61-4211-A4CC-D70127B226AE}" = SoundTrax "{3101CB58-3482-4D21-AF1A-7057FC935355}" = KhalInstallWrapper "{3589A659-F732-4E65-A89A-5438C332E59D}" = Zune Language Pack (ELL) "{3E31821C-7917-367E-938E-E65FC413EA31}" = Microsoft .NET Framework 3.5 Language Pack SP1 - fra "{3F30CC51-0788-487B-AA83-7214A239C0C0}" = Nero Disc Copy Gadget Help "{46F044A5-CE8B-4196-984E-5BD6525E361D}" = Apple Application Support "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4AB5764A-3894-49A2-BAA8-C4665F74CD4C}" = Registry patch to improve USB device detection on resume from sleep for Windows Vista "{4D42353B-533F-4306-AD0B-7FEF292ADE04}" = Nero CoverDesigner Help "{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.6 "{4E8C27C2-D727-4C00-A90E-C3F6376EEE70}" = Nero ControlCenter "{51C839E1-2BE4-4E77-A1BA-CCEA5DAFA741}" = Zune Language Pack (KOR) "{537575D6-3B96-474C-BD8F-DFF667363DBD}" = Naviextras Toolbox Prerequesities "{548F99E0-14CC-4D53-A7D6-4A62A5F2C748}" = Nero PhotoSnap "{5523092E-13AA-4EED-8E18-255860F6D9DC}" = ThinkVantage Status Gadget "{56BE5CC9-95E6-4128-ABEA-968414CA9C80}" = DolbyFiles "{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml "{57C51D56-B287-4C11-9192-EC3C46EF76A4}" = Zune Language Pack (RUS) "{5A62A775-A29A-4CE1-BBC2-4A9CD0B211EF}" = Nero Live Help "{5AE12194-3EAA-40DF-B2BF-FE1D6B78BBF4}" = Nero Vision "{5C2E8A0F-80E2-4C68-8CC0-D8D16E7196BF}" = Nero RescueAgent Help "{5C42EAB8-54F9-423A-948C-1CBEF25F8DB4}" = Nero PhotoSnap Help "{5C93E291-A1CC-4E51-85C6-E194209FCDB4}" = Zune Language Pack (PTG) "{5C9BB0B3-E830-4814-BBA4-D93535E1C7B9}" = Nero Live "{5DEFD397-4012-46C3-B6DA-E8013E660772}" = Zune Language Pack (NOR) "{627673ff-f4ea-43fd-893d-28fc6176fb2d}" = Gigaset QuickSync "{6740BCB0-5863-47F4-80F4-44F394DE4FE2}" = Zune Language Pack (NLD) "{69333A04-5134-40A5-A055-9166A7AA1EC8}" = "{6B33492E-FBBC-4EC3-8738-09E16E395A10}" = Zune Language Pack (ESP) "{6EB931CD-A7DA-4A44-B74A-89C8EB50086F}" = Zune Language Pack (SVE) "{6F3D2F66-F050-45E3-BEB1-6523FE6D6690}" = MotoHelper MergeModules "{70014586-7BBA-4A92-A610-CDC896C48F8F}" = NETGEAR WG311v3 PCI Adapter "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{75321954-2589-11DC-DDCC-E98356D81493}" = Nero DriveSpeed "{753973C4-B961-43BF-B2D4-3C8C92F7216E}" = Nero DriveSpeed "{76BA306B-2AA0-47C0-AB6B-F313AB56C136}" = Zune Language Pack (MSL) "{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 "{78523651-D8B1-11DC-CCEE-741589645873}" = Nero DiscSpeed "{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update "{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour "{7E4C16B8-8F76-4940-8505-98E93C00BF19}" = Rescue and Recovery "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{8675339C-128C-44DD-83BF-0A5D6ABD8297}" = System Update "{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 "{887EF08A-011E-477C-B6CB-01E540538ADB}" = Rep-Listing "{8960A0A1-BB5A-479E-92CF-65AB9D684B43}" = Zune Language Pack (PLK) "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8B112338-2B08-4851-AF84-E7CAD74CEB32}" = Zune Language Pack (DAN) "{8C654BD0-1949-43DE-84F2-EC2A1ABB0CB4}" = Nero ShowTime "{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}" = TomTom HOME Visual Studio Merge Modules "{9011040C-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003 "{90120000-0020-040C-0000-0000000FF1CE}" = Module de compatibilité pour Microsoft Office System 2007 "{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}" = InterVideo WinDVD "{92ECE3F9-591E-4C12-8A62-B9FCE38BF646}" = Zune Language Pack (IND) "{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5 "{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1036" = Module linguistique de Microsoft .NET Framework 4.5 - FRA "{943CC0C0-2253-4FE0-9493-DD386F7857FD}" = Nero Express "{948FFAAE-C57F-447B-9B07-3721E950BFDC}" = Nero ShowTime "{94CAC2F1-C856-47F4-AF24-65A1E75AEDB9}" = MotoHelper MergeModules "{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting "{959282E3-55A9-49D8-B885-D27CF8A2FD82}" = PHOTOfunSTUDIO 5.1 HD Edition "{961D53EA-40DC-4156-AD74-25684CE05F81}" = Nero Installer "{96AD3B61-EAE2-11E2-9E72-B8AC6F98CCE3}" = Google Earth "{986F64DC-FF15-449D-998F-EE3BCEC6666A}" = Help Center "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9A3EABC0-CA06-11D4-BF77-00104B130C19}" = EPSON TWAIN 5 "{9A875B56-A35C-46BA-A3AA-DF8D03EE9F2F}" = Nero ControlCenter "{9B75648B-6C30-4A0D-9DE6-0D09D20AF5A5}" = Zune "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{9D48F834-97D9-4046-8664-FAB2C1A5091A}" = Soluto "{9F3523F8-DAD7-AE52-6DA7-45CDDDF33726}" = Advertising Center "{9F612429-4A00-3D44-88CF-146DA2EE1F92}" = Microsoft .NET Framework 4.5 "{A498D9EB-927B-459B-85D6-DD6EF8C2C564}" = erLT "{A5A53EA8-A11E-49F0-BDF5-AE536426A31A}" = Zune Language Pack (CHT) "{A73BEC3C-40A0-480E-87EF-EFCD33629088}" = NeroExpress "{A8399F58-234A-48C6-BA55-30C15738BF3C}" = Nero CoverDesigner "{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress "{A8F2E50B-86E2-4D96-9BD2-9758BCC6F9B3}" = Zune Language Pack (CSY) "{AAA12554-2589-11DC-92EF-E98356D81493}" = Nero InfoTool "{AABBCC54-D8B1-11DC-92EF-E98356D81493}" = Nero DiscSpeed "{AC76BA86-1033-F400-7760-000000000005}" = Adobe Acrobat X Pro - English, Français, Deutsch "{B148E192-F289-4297-85BF-70E2A422EB25}_is1" = Android-Sync v1.012 "{B2C12C8D-65DC-40BD-B309-5ADB0C6C8D8F}" = Nero WaveEditor "{B334D9AE-1393-423E-97C0-3BDC3360E692}" = Sonic Icons for Lenovo "{B4870774-5F3A-46D9-9DFE-06FB5599E26B}" = Zune Language Pack (FIN) "{B67BAFBA-4C9F-48FA-9496-933E3B255044}" = QuickTime "{B96C2601-52F5-4D5D-816A-63469EA311EF}" = "Nero SoundTrax Help "{BB42C935-456E-4A6C-B357-FDEE7A59FE21}" = exPressit SE "{BCD82AB5-670D-4242-90FA-1F97103C16CD}" = Movie Templates - Starter Kit "{BE236D9A-52EC-4A17-82DA-84B5EAD31E3E}" = Zune Language Pack (DEU) "{C5D37FFA-7483-410B-982B-91E93FD3B7DA}" = Zune Language Pack (ITA) "{C68D33B1-0204-4EBE-BC45-A6E432B1D13A}" = Zune Language Pack (FRA) "{C6BE19C6-B102-4038-B2A6-1C313872DBB4}" = Zune Language Pack (HUN) "{C6FA39A7-26B1-480A-BC74-6D17531AC222}" = Access - Aide "{C779648B-410E-4BBA-B75B-5815BCEFE71D}" = Safari "{C99C89A3-119A-45E6-B26E-DD5643CAA0C5}" = Menu Templates - Starter Kit "{CD1826A5-CFCC-4C6E-9F9D-E181876162EA}" = Nero Rescue Agent "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{CF5737AF-8550-4546-A69B-0EA9EF5A9B55}" = ThinkVantage Productivity Center "{D728E945-256D-4477-B377-6BBA693714AC}" = Supplément à Productivity Center pour ThinkCentre "{D7C206B6-1A63-4389-A8B1-8F607D0BFF1F}" = Nero StartSmart Help "{D8A781C9-3892-4E2E-9320-480CF896CFBB}" = Zune Language Pack (JPN) "{DAC01CEE-5BAE-42D5-81FC-B687E84E8405}" = ThinkVantage Power Manager "{DB71210F-8314-4AE3-B7A7-EBAF85BD30E9}" = Wallpapers "{DF9C119C-7F26-45B9-93D4-7C372CBBBA11}" = iTunes "{E4A8DD87-A746-4443-BF25-CAF99CED6767}" = Nero Disc Copy Gadget "{E59113EB-0285-4BFD-A37A-B79EAC6B8F4B}" = Microsoft SQL Server Compact 3.5 SP1 English "{E7394983-3869-46F4-A117-EB148F104D79}" = World Community Grid - BOINC for Windows "{E7E836B8-4BDD-454F-82E6-5FEA17C83AD4}" = Message Center "{E86156E5-9859-440D-8876-26CED1349802}" = Nero WaveEditor Help "{EA9FFE54-D8B1-11DC-92EF-E98356D81493}" = Nero BurnRights "{eb993eaf-4fc6-4d0a-b48d-f8575c3c1cf5}" = Nero 9 "{EC5F4C1B-F838-4CB7-8561-8F809296428B}" = TomTom HOME "{ED3DE33F-B1C5-47BE-97B5-159F8C344092}" = ArcSoft ShowBiz DVD 2 "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F18DB86D-BC16-4E01-BCCE-63F62B931D82}" = InterVideo Register Manager "{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}" = Logitech SetPoint "{F2CB8C3C-9C9E-4FAB-9067-655601C5F748}" = Windows Mobile Device Updater Component "{F53F6769-AC46-49E3-ABE3-2C8AFD39D0DD}" = Nero Vision "{FA62B4C2-6CFD-462F-9B59-68A730001AB3}" = Product Recovery Disc Burning Utility "{FB29B583-945C-4094-BB4B-3A405574C560}" = Motorola Mobile Drivers Installation 5.0.0 "03A5D259B3018EB0DA1A61DC077382FEDF551A43" = Windows Driver Package - Intel hdc (11/15/2006 8.2.0.1011) "123 Free Solitaire_is1" = 123 Free Solitaire 2009 v7.2 "4E07B68AA37039FF90755505DA52CB16200774EF" = Windows Driver Package - Intel System (05/27/2008 9.0.0.1009) "73501D040246FD1119FF9BD02EAA9CA1541A9E01" = Windows Driver Package - Intel USB (09/13/2006 8.2.0.1008) "7BE0C2739D20748EA44AC0D0EFEEBC437581417D" = Windows Driver Package - Intel hdc (11/15/2006 8.2.0.1011) "9D225118DA6B3EA8C88FA7BB442313F7FD89B425" = Windows Driver Package - Marvell (yukonwlh) Net (06/27/2008 10.62.1.3) "A003CDE29F5C82D1E5B5D9AFB5CA8E8A5E4E531A" = Windows Driver Package - Realtek Semiconductor Corp. HD Audio Driver (06/27/2008 6.0.1.5653) "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin "Adobe Photoshop 7.0" = Adobe Photoshop 7.0 "Adobe Photoshop Interface Improver_is1" = Adobe Photoshop Interface Improver 2.2 "AEF66A57B92F021B67183F9231C20544D63B66FB" = Windows Driver Package - Realtek Semiconductor Corp. HD Audio Driver (06/27/2008 6.0.1.5653) "Amazon MP3 Downloader" = Amazon MP3 Downloader 1.0.9 "avast" = avast! Free Antivirus "CCleaner" = CCleaner "D381429E69A7DBABC2AC7689378284C320C35557" = Windows Driver Package - Intel Corporation (igfx) Display (09/02/2008 7.15.10.1554) "Defraggler" = Defraggler "E6A0A35465212C6B75907FDDA904D2BBA7080DB2" = Windows Driver Package - Intel System (02/20/2008 8.6.1.1002) "E6CEFD9A59425A2A27E92572AB367B28C371D3D8" = Windows Driver Package - Intel System (09/15/2006 7.0.0.1011) "EVEREST Ultimate Edition_is1" = EVEREST Ultimate Edition v5.50 "FastStone Image Viewer" = FastStone Image Viewer 3.4 "FileZilla Client" = FileZilla Client 3.5.3 "GIMP-2_is1" = GIMP 2.8.6 "GoldWave v5.67" = GoldWave v5.67 "HandBrake" = HandBrake 0.9.6 "HDMI" = Intel(R) Graphics Media Accelerator Driver "HijackThis" = HijackThis 2.0.2 "InstallShield_{70014586-7BBA-4A92-A610-CDC896C48F8F}" = NETGEAR WG311v3 PCI Adapter "Kyodai Mahjongg_is1" = Kyodai Mahjongg "Lenovo Registration" = Lenovo Registration "Lenovo Welcome_is1" = Lenovo Welcome v1.0.24.3 "Logitech Unifying" = Logiciel Logitech Unifying 2.10 "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware "Memochinois - dico_is1" = Memochinois - dico 2.0.0 "Microsoft .NET Framework 3.5 Language Pack SP1 - fra" = Module linguistique Microsoft .NET Framework 3.5 SP1- fra "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "MotoHelper" = MotoHelper 2.0.46 Driver 5.0.0 "Mozilla Firefox 23.0.1 (x86 fr)" = Mozilla Firefox 23.0.1 (x86 fr) "MozillaMaintenanceService" = Mozilla Maintenance Service "MPE" = MyPhoneExplorer "Naviextras Toolbox" = Naviextras Toolbox "okitspace" = okitspace "PC-Doctor for Windows" = Lenovo System Toolbox "Pixillion" = Pixillion Image Converter "PoiEdit" = PoiEdit "RADVideo" = RAD Video Tools "TCPMP" = TCPMP "Total Video Converter 3.12_is1" = Total Video Converter 3.12 080330 "Totalcmd" = Total Commander (Remove or Repair) "Uninstall_is1" = Uninstall 1.0.0.0 "Unlocker" = Unlocker 1.9.2 "VideoPad" = VideoPad Video Editor "VoipBuster_is1" = VoipBuster "VoipCheapCom_is1" = VoipCheapCom "VSO DivxToDVD_is1" = DivxToDVD 0.5.2 "Winamp" = Winamp "WinHTTrack Website Copier_is1" = WinHTTrack Website Copier 3.44-1 "WinRAR archiver" = WinRAR archiver "WMV9_VCM" = Microsoft Windows Media Video 9 VCM "XviD_is1" = XviD MPEG-4 Video Codec "Zune" = Zune [color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Winamp Detect" = Détection de l'application Winamp [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 27/09/2013 05:36:00 | Computer Name = PC-AliceMaurice | Source = Bonjour Service | ID = 100 Description = Task Scheduling Error: m->NextScheduledEvent 2231 Error - 27/09/2013 05:36:00 | Computer Name = PC-AliceMaurice | Source = Bonjour Service | ID = 100 Description = Task Scheduling Error: m->NextScheduledSPRetry 2231 Error - 27/09/2013 12:26:05 | Computer Name = PC-AliceMaurice | Source = EventSystem | ID = 4621 Description = Error - 27/09/2013 12:28:17 | Computer Name = PC-AliceMaurice | Source = EventSystem | ID = 4609 Description = Error - 27/09/2013 12:29:16 | Computer Name = PC-AliceMaurice | Source = WinMgmt | ID = 10 Description = Error - 27/09/2013 12:59:34 | Computer Name = PC-AliceMaurice | Source = WinMgmt | ID = 10 Description = Error - 28/09/2013 03:08:15 | Computer Name = PC-AliceMaurice | Source = WinMgmt | ID = 10 Description = Error - 28/09/2013 03:19:53 | Computer Name = PC-AliceMaurice | Source = WinMgmt | ID = 10 Description = Error - 28/09/2013 03:34:11 | Computer Name = PC-AliceMaurice | Source = EventSystem | ID = 4621 Description = Error - 28/09/2013 05:06:28 | Computer Name = PC-AliceMaurice | Source = WinMgmt | ID = 10 Description = [ System Events ] Error - 28/09/2013 03:08:16 | Computer Name = PC-AliceMaurice | Source = Service Control Manager | ID = 7026 Description = Error - 28/09/2013 03:12:00 | Computer Name = PC-AliceMaurice | Source = Microsoft-Windows-LanguagePackSetup | ID = 1001 Description = Error - 28/09/2013 03:19:53 | Computer Name = PC-AliceMaurice | Source = Service Control Manager | ID = 7000 Description = Error - 28/09/2013 03:19:53 | Computer Name = PC-AliceMaurice | Source = Service Control Manager | ID = 7026 Description = Error - 28/09/2013 03:21:34 | Computer Name = PC-AliceMaurice | Source = Microsoft-Windows-LanguagePackSetup | ID = 1001 Description = Error - 28/09/2013 05:06:29 | Computer Name = PC-AliceMaurice | Source = Service Control Manager | ID = 7000 Description = Error - 28/09/2013 05:06:29 | Computer Name = PC-AliceMaurice | Source = Service Control Manager | ID = 7009 Description = Error - 28/09/2013 05:06:29 | Computer Name = PC-AliceMaurice | Source = Service Control Manager | ID = 7000 Description = Error - 28/09/2013 05:06:29 | Computer Name = PC-AliceMaurice | Source = Service Control Manager | ID = 7026 Description = Error - 28/09/2013 05:09:06 | Computer Name = PC-AliceMaurice | Source = Microsoft-Windows-LanguagePackSetup | ID = 1001 Description = < End of report >