OTL Extras logfile created on: 14.09.2014 21:57:38 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\KymzZ\Downloads 64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation Internet Explorer (Version = 9.11.9600.17239) Locale: 0000100C | Country: Suisse | Language: FRS | Date Format: dd.MM.yyyy 15,92 Gb Total Physical Memory | 12,77 Gb Available Physical Memory | 80,24% Memory free 18,30 Gb Paging File | 14,58 Gb Available in Paging File | 79,67% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 118,63 Gb Total Space | 19,93 Gb Free Space | 16,80% Space Free | Partition Type: NTFS Drive E: | 912,51 Gb Total Space | 839,46 Gb Free Space | 91,99% Space Free | Partition Type: NTFS Computer Name: KYMZZ-PC | User Name: KymzZ | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) .url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) .html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) [HKEY_CURRENT_USER\SOFTWARE\Classes\] .html [@ = ChromeHTML] -- Reg Error: Key error. File not found [color=#E56717]========== Shell Spawning ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1" http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation) Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1" http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation) Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error. [color=#E56717]========== Security Center Settings ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = AC 1C AE C5 46 9F CE 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade] "UpgradeTime" = [binary data] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade] "UpgradeTime" = Reg Error: Unknown registry data type -- File not found [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [color=#E56717]========== Authorized Applications List ==========[/color] [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{049E3603-D04D-46B5-BBFD-7078BDEAC5E1}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{091BDB5A-FABA-457A-8612-4400C44BA998}" = lport=2869 | protocol=6 | dir=in | app=system | "{12111B48-7655-4752-97F9-A035AE7D1C67}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{15B531D1-497C-4CAE-B037-F0D67F15FE53}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{1CE5FEBB-7819-4A6F-B213-46D635426EC8}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{372F791B-54AE-4290-B810-4441B66D9335}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{40743A42-F951-4FF0-9BD1-56377BB79298}" = lport=10243 | protocol=6 | dir=in | app=system | "{41221C28-BDC3-4782-B766-2ADFCFE0601C}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | "{4A771F08-5741-4703-A88E-9EC35FA745D1}" = lport=139 | protocol=6 | dir=in | app=system | "{4B22B20A-33DD-4621-BE89-BFB0FE751A5C}" = lport=137 | protocol=17 | dir=in | app=system | "{4EF69ECE-E8AE-4134-B8E0-342D4AC3CA3E}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | "{5BCBD2F7-1970-4D6B-A77C-5E68ADB96683}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{6DE5D1A4-8894-47BC-9CCD-B27627678BFD}" = lport=138 | protocol=17 | dir=in | app=system | "{73505E49-AE6A-42DC-8075-1F0AC088EC66}" = rport=10243 | protocol=6 | dir=out | app=system | "{7502AC86-9D11-440A-8099-950A00E45890}" = lport=80 | protocol=6 | dir=in | app=c:\program files (x86)\nvidia corporation\netservice\nvnetworkservice.exe | "{7965D9F3-A4DC-4BD8-B088-5FE1AC00040E}" = lport=445 | protocol=6 | dir=in | app=system | "{812F2EE2-7141-4901-B11A-7613413A1B1C}" = lport=5353 | protocol=17 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe | "{85BD4D81-DD68-41F5-942F-C48D94B93500}" = rport=138 | protocol=17 | dir=out | app=system | "{879A6E62-3D06-4573-9A7E-DF575B55231A}" = rport=137 | protocol=17 | dir=out | app=system | "{8AF2C2C9-981D-42B7-82AC-81A89499C056}" = lport=443 | protocol=6 | dir=in | app=c:\program files (x86)\nvidia corporation\netservice\nvnetworkservice.exe | "{8BC1F1B5-433C-4B18-BD79-F98F8DC757F8}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe | "{8D9C1BBB-1750-4253-BCAD-FF7B7FFCDD9B}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{947AF43E-2238-4177-971C-C3ADCBB389C0}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{A7231CA7-EF81-48DC-A491-E63C7D602C67}" = lport=47991 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe | "{B9F14FAD-7AB6-42C0-B8D9-F682B7B435F1}" = rport=445 | protocol=6 | dir=out | app=system | "{BE55F64E-5E24-4CAB-9C9D-E88AA21C79DD}" = lport=47984 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe | "{D1D337D1-29EC-4CF9-96F9-E41EDD6BE5E1}" = lport=48000 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe | "{E27A24F6-8D07-472D-BBC9-225FA0D57221}" = rport=139 | protocol=6 | dir=out | app=system | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{00624A59-2881-4185-9D44-41742D80C0F2}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\acer portal\virtualdrive.exe | "{018E2D94-AD93-420D-B61A-D344ADE4A552}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\acer media_\windowsupnpmv.exe | "{026A954F-E18C-4341-84B8-E39FC9502E76}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\acer media\windowsupnpmv.exe | "{03F40F8A-FF70-46E6-B9C9-B3C3ABCA35CD}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\acer photo\dmcdaemon.exe | "{0A261CE0-95A8-4D6E-BA0C-0C9ACD9CF541}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\abmedia\dmcdaemon.exe | "{0AE197E9-61E5-4C1C-9B6C-74C0A11B2A98}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{0C3A48E7-3B2E-4D8C-93FB-68C123EA7F36}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{0D1CB28A-1878-41C7-B0C9-A22F21D80413}" = dir=out | name=ebay | "{0DD8B024-B9D9-40D4-BB99-0D6299D50CDB}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\acer portal\ccd.exe | "{0E66842B-828B-477F-888B-E7A26FE71CA3}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe | "{113D096A-0BE4-48B8-8873-D92F60612B5B}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\abphoto\dmcdaemon.exe | "{12CFA604-AC1B-43A7-B410-27363513540F}" = dir=out | name=evernote touch | "{17BC3DF0-76C2-4463-8428-68AEFAA40EF6}" = dir=out | name=wordament | "{18C1CCBD-993D-4866-B13D-9D27C097DBB5}" = dir=out | name=pinball fx2 | "{1904ED03-0A7D-43EB-A1AB-4DF3D6259419}" = dir=out | name=@{magix.musicmakerjam_2.1.1027.0_x64__a2t3txkz9j1jw?ms-resource://magix.musicmakerjam/resources/app_name} | "{19252A6C-03EF-4F24-B3CF-59CD5329AA18}" = dir=out | name=zinio | "{1B63DC7F-7D9B-4033-9363-F522C01C6A14}" = dir=in | name=pinball fx2 | "{1C2CC87A-086B-40C6-BED7-65AD71669EB8}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\acer photo_\dmcdaemon.exe | "{1D3D8834-3AD2-4E29-BFCB-F7BD994F7A59}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\acer photo_\windowsupnp.exe | "{1E596D42-EAB0-4EDD-A4FB-884E6E1975EF}" = dir=out | name=@{microsoft.bingfinance_3.0.2.258_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/brandedapptitle} | "{1F1885A0-7AB6-4CA3-9B96-D55F29FF7C58}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{1F87C1F3-32EE-4D05-9034-56D55848FA1E}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\acer portal\sdd.exe | "{202E3FB6-26C0-4BF5-869E-9A844E29A49C}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3182\agent.exe | "{20A023A4-8350-471A-96B0-2CF43462B8DE}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | "{2177B216-347B-43B7-927E-D6ECA36E3EFB}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{22F02562-EDB9-4D25-BA2D-9E8CCA3F7B72}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\abmedia\dmcdaemon.exe | "{2332C62A-DEFB-47DB-8664-82D6A9A8D198}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\acer media\dmcdaemon.exe | "{236A5567-0213-4D49-9BE5-DE50AB060226}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\acer photo\windowsupnp.exe | "{23776E2A-D855-4F7B-A97E-9806943618DA}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{24649529-404A-4E6E-A731-074CF3A13906}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3286\agent.exe | "{2482949C-24F3-464B-83FA-C4895BF04A42}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\acer portal\ccd.exe | "{2493E859-88F8-424B-B569-5B7EA72F85E2}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\acer portal\ccd.exe | "{277F46A9-120A-4973-BC7D-75008F297747}" = dir=out | name=@{microsoft.bingnews_3.0.2.309_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/brandedapptitle} | "{2B74922C-2A8E-447C-A86A-CF88259CDFC2}" = dir=out | name=@{microsoft.bingfoodanddrink_3.0.2.313_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfoodanddrink/resources/apptitlewithbranding} | "{2E78FE5F-071A-4BC0-8E5E-51287918947B}" = protocol=58 | dir=out | name=@iphlpsvc.dll,-503 | "{2EBE5FCF-ABA9-4C73-BF1E-9AAFF11FA7C5}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{30627A9C-224C-4141-AA94-E978EFE0DB44}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3235\agent.exe | "{33CE5258-F66D-42D9-B821-479748CBFA60}" = protocol=6 | dir=in | app=c:\program files (x86)\spotify\data\spotifywebhelper.exe | "{39826C6F-2E90-4B18-8E08-639391AD2623}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\acer photo\dmcdaemon.exe | "{39DC8F71-5544-42C2-817A-4AB4AAD1B293}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3235\agent.exe | "{3C51E66B-3A67-498E-AFF9-5D5825F9D493}" = dir=out | name=doodle god free plus | "{3D49EC26-BC7D-4622-A8FD-D556F3027094}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd12\powerdvd12agent.exe | "{3F631053-50A5-40D5-A3A7-0EF867AA1498}" = dir=out | name=7digital music store | "{4071E710-B14E-471F-AC7F-EF36F9474759}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\acer photo_\windowsupnp.exe | "{41F8ED07-4FA6-4BC5-B6A3-CAEA61D2E2E8}" = protocol=17 | dir=in | app=c:\program files (x86)\nero\nero 12\nero backitup\backitup.exe | "{4282FE99-8560-4BC7-9576-5F3ED84E263F}" = dir=in | name=checkpoint.vpn | "{43659A2B-42E1-47B5-AC45-836670C1092B}" = protocol=6 | dir=in | app=c:\program files\common files\mcafee\platform\mcsvchost\mcsvhost.exe | "{43953329-4D75-47A7-848D-579BE0ED7DFE}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{4453C926-64D0-43E6-AC29-354972EED0BE}" = dir=in | name=@{browserchoice_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://browserchoice/resources/displayname} | "{456F0716-097B-4F6A-A214-DB8FDD678AF5}" = protocol=58 | dir=in | app=system | "{4620E49B-9927-4A8A-BCBA-B37839B434F4}" = dir=out | name=skitch touch | "{46A9A73A-58D5-4D5C-914B-186D2AE97AC6}" = protocol=6 | dir=in | app=e:\games\hearthstone\battle.net\battle.net.exe | "{46BADC85-0C73-4DC2-AEF5-A669AAD4061D}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd12\powerdvd12ml.exe | "{48B0D041-67AC-46DF-B418-40DD1C7CE04D}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\acer portal\ccd.exe | "{498FE664-C171-4DC0-AF9A-A307E0F102F1}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\acer photo\dmcdaemon.exe | "{4ACA69E3-EC9F-4A04-B5FC-36DB4DF19B94}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\abmedia_\dmcdaemon.exe | "{4F87F33F-C371-4D4E-9667-A236008D7153}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe | "{50FA3388-C5AE-489B-98C0-A1C6DE795ACE}" = dir=out | name=@{microsoft.bingmaps_2.1.3230.2048_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingmaps/resources/appdisplayname} | "{521BB305-238F-4458-A40C-4553B7B5ABA2}" = protocol=6 | dir=in | app=c:\users\kymzz\appdata\roaming\utorrent\utorrent.exe | "{53A0775C-0462-4E64-BCA4-7110ED0B3C2D}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\acer portal\ccd.exe | "{547A002A-1646-4A27-AC1C-26484E215174}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe | "{548DCF8C-BFF2-4BA4-AA88-FBAF9AC8BCC6}" = dir=in | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} | "{560448D6-095C-4907-B046-AC7F710701A7}" = dir=in | name=sonicwall.mobileconnect | "{56B0B4FA-AD06-4EFB-ADFB-01AD2A35CF69}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\acer portal\ccd.exe | "{57D97E45-21DA-4AB2-ADE0-CE2413B6DFCC}" = dir=in | name=@{microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} | "{57FBABCE-7AD9-48C8-8880-C526A97D4AC2}" = protocol=6 | dir=in | app=c:\program files (x86)\nero\nero 12\nero backitup\backitup.exe | "{5A52C4C3-BDE7-4B3D-9371-C7226BC0F28E}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\acer photo\dmcdaemon.exe | "{5AD3287D-B3B0-4AC9-B898-1076BB9582E6}" = dir=out | name=tunein radio | "{5DB33E60-3F5A-46B0-94AD-03E6CE84ADEC}" = protocol=17 | dir=in | app=c:\program files\common files\mcafee\platform\mcsvchost\mcsvhost.exe | "{5E1E03DD-9F40-4D22-AE95-9825DC0F6C2B}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\acer portal\virtualdrive.exe | "{5E51E443-6CC3-4B85-8157-A3982B61B41D}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3147\agent.exe | "{5F4632C0-D5B1-40C3-B0D9-E3A759C81B9E}" = dir=out | name=sonicwall.mobileconnect | "{5F5C384B-1DCC-402E-8321-1E4084CBC949}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | "{600C2122-E105-4605-97FC-4ED0CE270348}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\acer media_\dmcdaemon.exe | "{61CC72D9-6C14-402A-A833-A938FEE0ABBC}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\acer media\dmcdaemon.exe | "{655BE364-CDDF-4F39-BF7A-7551BF85EB04}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\abphoto_\windowsupnp.exe | "{67679972-99CF-4210-972F-6913D654899B}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\acer media\windowsupnpmv.exe | "{68590CA4-2B49-47D4-A77F-13B23D75799A}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\acer portal\ccd.exe | "{6B4B4930-13E9-4F2C-BF26-240E59C65266}" = protocol=6 | dir=in | app=c:\program files (x86)\spotify\spotify.exe | "{6BAC28D0-CD71-4D8D-B7B3-EE7A2F21BD79}" = dir=out | name=newsxpresso | "{6BB73D32-01EB-4AB6-92E0-F482E1E68465}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\acer media\windowsupnpmv.exe | "{6BC6E2AA-B972-47A0-95C8-AAF592662407}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\acer media\windowsupnpmv.exe | "{6E31D59D-AEA4-4D87-9F5B-0C63D42B2D2B}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\acer media\dmcdaemon.exe | "{6E49AFBC-1988-452C-AF90-0AEE78527337}" = dir=out | name=taptiles | "{6F48D0AD-1436-4E5A-9F49-C543D1BE4A71}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\acer media\dmcdaemon.exe | "{703DB78D-A297-4B46-ACAF-90353214959C}" = dir=out | name=skype | "{71451906-F4ED-4AD0-BD4D-1735DA0B30DE}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\abphoto_\dmcdaemon.exe | "{74172AC7-46CC-4B5E-86EA-896512263301}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\acer photo_\dmcdaemon.exe | "{76125D2C-2665-44CE-BC32-86D721471306}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{7654E88D-3DEE-4917-A2ED-26E008C9402D}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\acer media_\dmcdaemon.exe | "{7A18CA69-C662-4997-9D78-CE8207FC2355}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{7B54FF04-A151-4931-9A9B-6A4B312BD860}" = dir=out | name=@{microsoft.bingsports_3.0.2.317_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/brandedapptitle} | "{7CC0D2DB-1FBC-4EFB-95EE-3C296D35441F}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\acer photo_\dmcdaemon.exe | "{7D93A718-E5F6-4F13-9A5D-BC812F5B5F1C}" = protocol=6 | dir=in | app=c:\program files\common files\mcafee\platform\mcsvchost\mcsvhost.exe | "{7DC79167-93ED-4870-91EF-BF7C79CFF4DE}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3182\agent.exe | "{7DCE0036-799A-4517-8DCC-E8F5DE426ACF}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\abphoto_\dmcdaemon.exe | "{7F996282-E1DC-40EE-919A-E8A7B9F6225E}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd12\kernel\dmr\powerdvd12dmrengine.exe | "{7FDED165-BCBF-491A-9BD1-358C7B40CB4E}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | "{80D7DBE6-1E8E-4ACE-B113-4823BB857E3E}" = dir=out | name=@{browserchoice_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://browserchoice/resources/displayname} | "{82968691-870E-4AC7-9D26-EB661CD37584}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3109\agent.exe | "{82DC064B-1C3B-40C6-99B3-2BF5974756ED}" = dir=out | name=@{microsoft.zunevideo_2.6.256.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} | "{83574AB8-4C43-490A-A31C-88CBB1577D5A}" = protocol=17 | dir=in | app=c:\program files (x86)\hearthstone\hearthstone.exe | "{8408816D-38AF-446E-B5E1-AC60E60F31D1}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\abphoto_\windowsupnp.exe | "{859800A6-A29B-4E7B-81C4-EA5ECD3F2F73}" = protocol=17 | dir=in | app=c:\program files\common files\mcafee\platform\mcsvchost\mcsvhost.exe | "{862617EC-B3DA-4F08-8E7E-288CA0640F77}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd12\kernel\dms\clmsserverpdvd12.exe | "{86355857-0E3D-47E3-94FA-1C75C4838E7D}" = dir=out | name=accuweather for windows 8 | "{8653D174-DC5C-49F6-BE09-32F12E24DB5F}" = dir=out | name=@{microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} | "{86CD34CB-3A13-43DE-AE6D-A6A3B0066DAF}" = dir=out | name=booking.com partner edition | "{8718897D-907E-4613-A24E-F4D1CF4F7E3A}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\acer media_\windowsupnpmv.exe | "{87E49341-479B-43AD-A3EE-367017CCAB4D}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{8813E8D7-C898-4D0B-BE60-7C07BA2D2F87}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe | "{8818EBAC-C898-49EA-AC58-B4A3F26E5BDA}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3109\agent.exe | "{8A000DD3-0387-4838-A21F-C3B4B128B130}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\acer media_\windowsupnpmv.exe | "{8B086341-3DBF-46CA-8421-BC23699ACCC6}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\acer media_\dmcdaemon.exe | "{8DA90D7A-A1A8-4CAE-8D7C-F8688DC060F5}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\acer photo\windowsupnp.exe | "{8DB157EC-B20D-4B8C-9764-B0446DB658A4}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\acer photo\windowsupnp.exe | "{90CC5F26-DA7A-4DF0-AD4F-83A5F0EEAE57}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\acer media_\windowsupnpmv.exe | "{9235C9E6-E3C6-4640-9536-A2978CAAB605}" = dir=out | name=@{microsoft.bingweather_3.0.2.309_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/brandedapptitle} | "{9345A62A-764E-4699-8267-50CDC10F6EA1}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{93C5C3E2-D2DA-4143-B56D-3D39A523885E}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\abphoto\windowsupnp.exe | "{93D177B1-F349-43C1-80DA-20A4C1AFE711}" = dir=out | name=- games app - | "{954F6D51-C271-48CF-A84F-B1DC4A424BC7}" = dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe | "{9604ACBA-6D80-440A-8531-F1CA970B8D42}" = dir=out | name=@{microsoft.zunemusic_2.2.931.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} | "{98FEC3C1-E6FE-415E-A0E1-96041783A197}" = dir=in | name=@{magix.musicmakerjam_2.1.1027.0_x64__a2t3txkz9j1jw?ms-resource://magix.musicmakerjam/resources/app_name} | "{9B716B59-B94E-4869-BF07-A33F9689E069}" = dir=in | name=taptiles | "{9BDD16E0-2CC9-4BB7-A002-2BB448798169}" = dir=out | name=@{microsoft.bingtravel_3.0.2.309_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingtravel/resources/brandedapptitle} | "{9E3D57FC-7C37-4424-9352-4831E97D029D}" = dir=out | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} | "{9FA28EEE-BEE8-4070-AB32-38731B34270B}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\acer photo_\dmcdaemon.exe | "{9FF2455A-0C4E-429E-9258-13780EE58F1B}" = protocol=6 | dir=in | app=c:\program files (x86)\hearthstone\hearthstone.exe | "{A1EF2649-D909-4D93-9E09-9358A1F47FC0}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | "{A31131F5-C5CF-47CC-977A-30EE893A3646}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\abmedia\windowsupnpmv.exe | "{A34C6C1C-7D1A-4FE4-A0DE-C57C6068CE52}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\acer portal\sdd.exe | "{AA4D2786-81CE-4CB6-98A4-F4F9E3A1E2F2}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe | "{AAF403B8-6D7F-4E70-91CF-293AE2790794}" = dir=in | name=acer explorer | "{AB3966F6-285F-4C1E-861F-C661B0E045F3}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\acer media_\dmcdaemon.exe | "{ABD31E59-72C3-4565-AEC0-1122601E1FC5}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3023\agent.exe | "{AD963DBB-4539-4E94-A55C-94C246C234E3}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\acer media\windowsupnpmv.exe | "{AF522F7A-95B3-47E8-ACF8-D733E5EAD3C5}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3147\agent.exe | "{B04A9478-5AB7-4D73-942E-22A729027DA3}" = dir=out | name=shark dash | "{B27B91EE-DA02-402F-AEC0-BB40A496066D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{B280514B-9F2F-49A1-8508-EC597ED3C9B9}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd12\powerdvd12.exe | "{B2897595-23C9-49A9-AFB1-EA4C7E26BC37}" = dir=out | name=windows_ie_ac_001 | "{B3E62812-AFCA-404C-AA83-8470F22153CD}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\abmedia_\dmcdaemon.exe | "{B59F1499-F439-4972-8ED6-9730EC869F23}" = dir=out | name=@{microsoft.windowsreadinglist_6.3.9654.20540_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsreadinglist/resources/apppackagename} | "{B76B4E05-5506-43B2-B6A3-A693FC5A4830}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\acer portal\ccd.exe | "{BA48563B-E746-4095-91F0-2282C3F55029}" = dir=in | name=@{microsoft.windowsreadinglist_6.3.9654.20540_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsreadinglist/resources/apppackagename} | "{BA89F40B-E4DA-4A31-8E41-3D02173BE910}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\acer photo_\windowsupnp.exe | "{BAB4C86D-022E-4603-9A93-58186865A701}" = protocol=17 | dir=in | app=c:\program files (x86)\spotify\spotify.exe | "{BB562500-6E26-479E-B36F-59EBD3CB81FD}" = dir=in | name=newsxpresso | "{BCF0EAAB-BF15-4BC9-9544-EA59C398B5C0}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd12\movie\powerdvd.exe | "{BD94565A-9F3D-4683-9B16-4DBB4A504DF0}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\abphoto\windowsupnp.exe | "{C20051F8-D25D-45B1-A3FF-0782EE9EBF39}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\acer media\dmcdaemon.exe | "{C544C070-0B14-46F2-ABB0-E4D6A38B42FE}" = protocol=17 | dir=in | app=e:\games\hearthstone\battle.net\battle.net.exe | "{C6A89194-9098-436D-98BF-B03A0C4B232E}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\abmedia_\windowsupnpmv.exe | "{CD19CD07-B811-4970-8261-B9E710563B2E}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\acer photo\windowsupnp.exe | "{CD8B4720-28B5-413A-AB91-BE317526463A}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\abmedia\windowsupnpmv.exe | "{CE9D2B97-97A6-4F19-ACFF-3F26162110E8}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\acer photo\dmcdaemon.exe | "{D61BF43D-3D98-4437-9662-765352E1E5E7}" = dir=out | name=@{microsoft.xboxlivegames_2.0.139.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxlivegames/resources/34150} | "{D61D8A90-53ED-4DA2-8EAE-FD786AC156B8}" = protocol=6 | dir=out | app=system | "{D6980480-941A-4DF6-AB81-3734ECD3D779}" = dir=out | name=junipernetworks.junospulsevpn | "{D7D5B542-0E3D-4F6E-95DE-A6B1FA631D39}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{D8B99F26-1FA5-4072-82FF-51014A436F7B}" = dir=out | name=@{microsoft.binghealthandfitness_3.0.2.315_x64__8wekyb3d8bbwe?ms-resource://microsoft.binghealthandfitness/resources/apptitle} | "{DB59588E-ED90-4C47-A7B5-7929DD0C0BD2}" = dir=out | name=checkpoint.vpn | "{DC291287-975A-488B-87D2-98E1C263302C}" = dir=out | name=acer explorer | "{DE76F17E-E397-438B-9ABA-004D7901EC58}" = protocol=17 | dir=in | app=c:\program files (x86)\spotify\data\spotifywebhelper.exe | "{E051DD5E-2F3F-47CB-AB3F-68783E8C3CCF}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\acer photo\dmcdaemon.exe | "{E2124B34-4CCC-4169-A057-92BD74262C77}" = dir=in | name=zinio | "{E2391299-B9CC-4EC6-8428-28E322FC7639}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3023\agent.exe | "{E3700975-2F7C-4EBE-8D3E-B9A59AABA01C}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\abphoto\dmcdaemon.exe | "{E444E484-CB95-425D-A8C0-DEA717BD3A2B}" = dir=in | name=skype | "{E4F4BCAC-DBEE-48B1-AB3B-469701B9C7C0}" = dir=in | name=evernote touch | "{EC4E8EBB-0B99-4ABD-9EB5-799E2AC899E0}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\acer media\dmcdaemon.exe | "{EC799E33-72BA-42D7-9127-DEFE68F9799D}" = dir=in | name=junipernetworks.junospulsevpn | "{EDAA4671-3F6B-4F83-A6C9-D7BCD406810C}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\abmedia_\windowsupnpmv.exe | "{F1EF2ECD-D5CE-4988-B64D-BE9CADF0DACA}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\acer photo_\windowsupnp.exe | "{F4D48C9C-368E-4927-9E18-BC62B0704489}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\acer media\windowsupnpmv.exe | "{F64300AD-D559-4000-BD45-0997BCC8E70A}" = dir=out | name=f5.vpn.client | "{F77E5446-4378-4E99-8B7A-7061AAAEA193}" = dir=in | name=f5.vpn.client | "{F831CF47-1F59-4BBB-ADD6-8B3BD0D3FDBC}" = protocol=17 | dir=in | app=c:\users\kymzz\appdata\roaming\utorrent\utorrent.exe | "{F9FECA1E-3773-4A8B-A418-D571F5C35276}" = protocol=6 | dir=in | app=c:\program files (x86)\acer\acer photo\windowsupnp.exe | "{FC7663F4-11CD-4C6F-A4C4-F316295C828F}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3286\agent.exe | "{FC8912AF-3BF2-4ADB-96A0-373C5A35CDC8}" = dir=out | name=kindle | "{FD143B2B-CD8E-44C9-9DA1-115D05B9604F}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{FE00927A-0507-473A-95C2-44611A0B2795}" = protocol=17 | dir=in | app=c:\program files (x86)\acer\acer photo\windowsupnp.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}" = Acer Recovery Management "{13885028-098C-4799-9B71-27DAC96502D5}" = Acer Remote Files "{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 "{4B5B6BB3-DA04-4B56-AE17-DDBF3F446888}" = Intel(R) Network Connections 18.5.54.0 "{54F2237F-018C-483B-8884-9FC0D88840C3}" = VC_CRT_x64 "{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64) "{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 "{89AFB053-A343-46EF-97E4-D593AD7184E6}" = Intel® Trusted Connect Service Client "{A84A4FB1-D703-48DB-89E0-68B6499D2801}" = Qualcomm Atheros Bluetooth Suite (64) "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA Pilote 3D Vision 337.88 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Panneau de configuration NVIDIA 337.88 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Pilote graphique 337.88 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience" = NVIDIA GeForce Experience 2.1 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA Pilote du contrôleur 3D Vision 337.88 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Logiciel système PhysX 9.13.1220 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Mises à jour NVIDIA 14.6.22 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.LEDVisualizer" = NVIDIA LED Visualizer 1.0 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv" = SHIELD Streaming "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA Pilote audio HD : 1.3.30.1 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Network.Service" = NVIDIA Network Service "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShadowPlay" = NVIDIA ShadowPlay 14.6.22 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Update.Core" = NVIDIA Update Core "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver" = NVIDIA Virtual Audio 1.2.23 "MyPC Backup" = MyPC Backup "PROSetDX" = Intel(R) Network Connections 18.5.54.0 "sizlsearch" = sizlsearch [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{0B311221-05A5-4766-8D03-7A6446794156}" = Nero RescueAgent Help (CHM) "{0E4630AF-0AB7-440E-A978-1A78FC4F43B9}" = Nero Launcher "{111EE7DF-FC45-40C7-98A7-753AC46B12FB}" = QuickTime 7 "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{26A24AE4-039D-4CA4-87B4-2F83217055FF}" = Java 7 Update 55 "{28006915-2739-4EBE-B5E8-49B25D32EB33}" = Qualcomm Atheros WLAN and Bluetooth Client Installation Program "{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App" = Update Installer for WildTangent Games App "{388E4B09-3E71-4649-8921-F44A3A2954A7}" = Microsoft Visual Studio 2005 Tools for Office Runtime "{3AAB08A3-F129-4BD5-B409-AE674F93759D}" = Prerequisite installer "{3D9CB654-99AD-4301-89C6-0D12A790767C}" = Identity Card "{3E75652D-99B1-417E-B163-BEF33CAD3F16}" = League of Legends "{46F044A5-CE8B-4196-984E-5BD6525E361D}" = Apple Application Support "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4A37A114-702F-4055-A4B6-16571D4A5353}" = AOP Framework "{551AC8F2-FEA2-4B45-ACF7-C98681233CC9}" = Nero BackItUp 12 Essentials OEM.a01 "{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}" = Realtek Card Reader "{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components "{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}" = Nero Update "{6D2BBE1D-E600-4695-BA37-0B0E605542CC}" = Office Addin "{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-acer" = WildTangent Games App "{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update "{80407BA7-7763-4395-AB98-5233F1B34E65}" = NVIDIA PhysX "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{8FB53850-246A-3507-8ADE-0060093FFEA6}" = Visual Studio Tools for the Office system 3.0 Runtime "{90150000-0138-0409-0000-0000000FF1CE}" = Microsoft Office "{91589413-6675-4C27-8AFC-EFB9103B90A5}" = eBay Worldwide "{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{A2D43081-CF7B-4637-A9F3-E2651AA5C4A8}" = Nero RescueAgent "{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}" = Acer Portal "{A6DC88AD-501A-44BC-884D-57435F972E2C}" = Hotkey Utility "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{ABC88553-8770-4B97-B43E-5A90647A5B63}" = Nero ControlCenter "{AF2E323C-1E8A-4CE6-BE9E-B29296BF7FAE}" = Sound Blaster Cinema "{B46BEA36-0B71-4A4E-AE41-87241643FA0A}" = CyberLink PowerDVD 12 "{B5AD89F2-03D3-4206-8487-018298007DD0}" = abPhoto "{BDA0EB29-8B31-4BF4-8B05-04AA52340AC4}" = LogMeIn Hamachi "{BEBEE34D-84A2-4EDD-8BEA-96CC54371263}" = Nero Core Components "{C994C746-C6D0-4EBA-B09E-DF7B18381B69}" = Nero ControlCenter Help (CHM) "{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}" = abDocs "{DA2D3078-A58C-45E8-8EE0-18B8BE6B34F7}" = Nero BackItUp "{DCBF3379-246B-47E1-8173-639B63940838}" = abDocs Office AddIn "{E625FCA0-E43E-4D3B-92FF-4851308A0366}" = Norton Online Backup "{E9AF1707-3F3A-49E2-8345-4F2D629D0876}" = abMedia "{EE26E302-876A-48D9-9058-3129E5B99999}" = Live Updater "{EF0D1292-8FC1-41BE-9740-DBC134F66415}" = Nero BackItUp Help (CHM) "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "Avast" = avast! Free Antivirus "Battle.net" = Battle.net "Google Chrome" = Google Chrome "Hearthstone" = Hearthstone "InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}" = CyberLink PowerDVD 12 "League of Legends 3.0.1" = League of Legends "LogMeIn Hamachi" = LogMeIn Hamachi "Microsoft Visual Studio 2005 Tools for Office Runtime" = Visual Studio 2005 Tools for Office Second Edition Runtime "MSC" = McAfee LiveSafe – Internet Security "NARA" = Norton Online Backup "NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver "Spotify" = Spotify "Visual Studio Tools for the Office system 3.0 Runtime" = Visual Studio Tools for the Office system 3.0 Runtime "WildStar" = WildStar "WildTangent wildgames Master Uninstall" = WildTangent Games "WTA-0c280337-a955-4e7c-bc2b-99c3ccc53df8" = Trinklit Supreme "WTA-272d8b31-b7af-4b02-87cb-a2eb8b79717b" = Cradle Of Egypt Collector's Edition "WTA-4aa3ac3d-fc97-42bc-b6f8-bc0bbe46002c" = Peggle Nights "WTA-51c32f14-b577-480f-99ff-8a9b49f55ada" = Luxor Evolved "WTA-632c25ff-b143-4d62-bf7c-a93d669b7726" = Aloha TriPeaks "WTA-6a101af8-2184-436a-a9da-e23ebbaddfb2" = The Chronicles of Emerland Solitaire "WTA-a62c7208-623d-47fa-a234-4f99a0c203e1" = Magic Academy "WTA-c404e0ff-15d7-48b8-9ee0-c5373fde8db8" = Governor of Poker 2 Premium Edition "WTA-ea99fa18-b4d9-4e5e-b937-a200c65c7d77" = Plants vs. Zombies - Game of the Year [color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Dropbox" = Dropbox "Pokki" = Host App Service "Pokki_03d432a7e610c3e908213e7689d4342ce2111caf" = Acer Games "Pokki_Start_Menu" = Pokki Start Menu "TeamSpeak 3 Client" = TeamSpeak 3 Client "uTorrent" = µTorrent [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 02.08.2014 20:39:19 | Computer Name = KymzZ-PC | Source = Application Error | ID = 1000 Description = Nom de l’application défaillante BackgroundAgent.exe, version : 1.0.1.3, horodatage : 0x53ce1fc8 Nom du module défaillant : MSVCR90.dll, version : 9.0.30729.8387, horodatage : 0x51ea24a5 Code d’exception : 0xc0000005 Décalage d’erreur : 0x00056b1d ID du processus défaillant : 0x630 Heure de début de l’application défaillante : 0x01cfae69dea91818 Chemin d’accès de l’application défaillante : C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe Chemin d’accès du module défaillant: C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll ID de rapport : 9a4fed31-1aa6-11e4-8272-28e347a16fe3 Nom complet du package défaillant : ID de l’application relative au package défaillant : Error - 09.08.2014 08:57:08 | Computer Name = KymzZ-PC | Source = Application Error | ID = 1000 Description = Nom de l’application défaillante BackgroundAgent.exe, version : 1.0.1.3, horodatage : 0x53ce1fc8 Nom du module défaillant : MSVCR90.dll, version : 9.0.30729.8387, horodatage : 0x51ea24a5 Code d’exception : 0xc0000005 Décalage d’erreur : 0x00056b1d ID du processus défaillant : 0x2150 Heure de début de l’application défaillante : 0x01cfb3c9003032cd Chemin d’accès de l’application défaillante : C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe Chemin d’accès du module défaillant: C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll ID de rapport : ab59be29-1fc4-11e4-8272-28e347a16fe3 Nom complet du package défaillant : ID de l’application relative au package défaillant : Error - 10.08.2014 13:46:25 | Computer Name = KymzZ-PC | Source = Customer Experience Improvement Program | ID = 1008 Description = Error - 10.08.2014 13:47:15 | Computer Name = KymzZ-PC | Source = Application Error | ID = 1000 Description = Nom de l’application défaillante BackgroundAgent.exe, version : 1.0.1.3, horodatage : 0x53ce1fc8 Nom du module défaillant : MSVCR90.dll, version : 9.0.30729.8387, horodatage : 0x51ea24a5 Code d’exception : 0xc0000005 Décalage d’erreur : 0x00056b1d ID du processus défaillant : 0x1cb0 Heure de début de l’application défaillante : 0x01cfb4c31e4e7ce2 Chemin d’accès de l’application défaillante : C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe Chemin d’accès du module défaillant: C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll ID de rapport : 5cd30c33-20b6-11e4-8273-28e347a16fe3 Nom complet du package défaillant : ID de l’application relative au package défaillant : Error - 11.08.2014 06:42:46 | Computer Name = KymzZ-PC | Source = Application Error | ID = 1000 Description = Nom de l’application défaillante BackgroundAgent.exe, version : 1.0.1.3, horodatage : 0x53ce1fc8 Nom du module défaillant : MSVCR90.dll, version : 9.0.30729.8387, horodatage : 0x51ea24a5 Code d’exception : 0xc0000005 Décalage d’erreur : 0x00056b1d ID du processus défaillant : 0x1bdc Heure de début de l’application défaillante : 0x01cfb544885f41cb Chemin d’accès de l’application défaillante : C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe Chemin d’accès du module défaillant: C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll ID de rapport : 3a88d3da-2144-11e4-8274-28e347a158d7 Nom complet du package défaillant : ID de l’application relative au package défaillant : Error - 12.08.2014 16:59:30 | Computer Name = KymzZ-PC | Source = Application Error | ID = 1000 Description = Nom de l’application défaillante BackgroundAgent.exe, version : 1.0.1.3, horodatage : 0x53ce1fc8 Nom du module défaillant : MSVCR90.dll, version : 9.0.30729.8387, horodatage : 0x51ea24a5 Code d’exception : 0xc0000005 Décalage d’erreur : 0x00056b1d ID du processus défaillant : 0x1f90 Heure de début de l’application défaillante : 0x01cfb6680c7ab96d Chemin d’accès de l’application défaillante : C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe Chemin d’accès du module défaillant: C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll ID de rapport : 8d3ac6af-2263-11e4-8275-28e347a16fe3 Nom complet du package défaillant : ID de l’application relative au package défaillant : Error - 13.08.2014 06:33:20 | Computer Name = KymzZ-PC | Source = Application Error | ID = 1000 Description = Nom de l’application défaillante BackgroundAgent.exe, version : 1.0.1.5, horodatage : 0x53e1eb8b Nom du module défaillant : MSVCR90.dll, version : 9.0.30729.8387, horodatage : 0x51ea24a5 Code d’exception : 0xc0000005 Décalage d’erreur : 0x00056b1d ID du processus défaillant : 0xf68 Heure de début de l’application défaillante : 0x01cfb6cbfea4bf49 Chemin d’accès de l’application défaillante : C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe Chemin d’accès du module défaillant: C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll ID de rapport : 3e4d0e36-22d5-11e4-8275-28e347a16fe3 Nom complet du package défaillant : ID de l’application relative au package défaillant : Error - 18.08.2014 07:03:16 | Computer Name = KymzZ-PC | Source = Application Error | ID = 1000 Description = Nom de l’application défaillante BackgroundAgent.exe, version : 1.0.1.5, horodatage : 0x53e1eb8b Nom du module défaillant : MSVCR90.dll, version : 9.0.30729.8387, horodatage : 0x51ea24a5 Code d’exception : 0xc0000005 Décalage d’erreur : 0x00056b1d ID du processus défaillant : 0x1928 Heure de début de l’application défaillante : 0x01cfbad3f52668ee Chemin d’accès de l’application défaillante : C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe Chemin d’accès du module défaillant: C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll ID de rapport : 40920062-26c7-11e4-8276-28e347a16fe3 Nom complet du package défaillant : ID de l’application relative au package défaillant : Error - 18.08.2014 07:31:56 | Computer Name = KymzZ-PC | Source = Microsoft-Windows-Defrag | ID = 257 Description = Error - 02.09.2014 11:34:28 | Computer Name = KymzZ-PC | Source = Application Error | ID = 1000 Description = Nom de l’application défaillante AcerPortal.exe, version : 3.0.1.2011, horodatage : 0x53e20cf2 Nom du module défaillant : MSVCR90.dll, version : 9.0.30729.8387, horodatage : 0x51ea24a5 Code d’exception : 0xc0000005 Décalage d’erreur : 0x00056b1d ID du processus défaillant : 0x239c Heure de début de l’application défaillante : 0x01cfbad436351b5e Chemin d’accès de l’application défaillante : C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe Chemin d’accès du module défaillant: C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll ID de rapport : 9fd48c06-32b6-11e4-8276-28e347a16fe3 Nom complet du package défaillant : ID de l’application relative au package défaillant : [ System Events ] Error - 31.07.2014 20:04:35 | Computer Name = KymzZ-PC | Source = Service Control Manager | ID = 7031 Description = Le service McAfee Platform Services s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 60000 millisecondes : Redémarrer le service. Error - 31.07.2014 20:04:35 | Computer Name = KymzZ-PC | Source = Service Control Manager | ID = 7031 Description = Le service McAfee Proxy Service s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 60000 millisecondes : Redémarrer le service. Error - 31.07.2014 20:04:35 | Computer Name = KymzZ-PC | Source = Service Control Manager | ID = 7031 Description = Le service McAfee Anti-Spam Service s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 60000 millisecondes : Redémarrer le service. Error - 09.08.2014 23:27:03 | Computer Name = KymzZ-PC | Source = BTHUSB | ID = 327697 Description = La carte locale Bluetooth a échoué d'une manière indéterminée et ne sera pas utilisée. Le pilote a été déchargée. Error - 10.08.2014 12:54:27 | Computer Name = KymzZ-PC | Source = EventLog | ID = 6008 Description = L’arrêt système précédant à 18:20:07 le ?10.?08.?2014 n’était pas prévu. Error - 10.08.2014 12:54:58 | Computer Name = KymzZ-PC | Source = Service Control Manager | ID = 7009 Description = Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la connexion du service LogMeIn Hamachi Tunneling Engine. Error - 10.08.2014 12:55:21 | Computer Name = KymzZ-PC | Source = Service Control Manager | ID = 7000 Description = Le service LogMeIn Hamachi Tunneling Engine n’a pas pu démarrer en raison de l’erreur : %%1053 Error - 11.08.2014 05:12:17 | Computer Name = KymzZ-PC | Source = Microsoft-Windows-Kernel-Boot | ID = 29 Description = Error - 11.08.2014 05:12:22 | Computer Name = KymzZ-PC | Source = EventLog | ID = 6008 Description = L’arrêt système précédant à 21:55:58 le ?10.?08.?2014 n’était pas prévu. Error - 13.08.2014 12:12:19 | Computer Name = KymzZ-PC | Source = bowser | ID = 8003 Description = < End of report >