OTL Extras logfile created on: 03/05/2017 15:41:07 - Run 2 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\MARIO_000\Desktop 64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation Internet Explorer (Version = 9.11.14393.0) Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy 7,95 Gb Total Physical Memory | 5,31 Gb Available Physical Memory | 66,76% Memory free 9,20 Gb Paging File | 6,54 Gb Available in Paging File | 71,07% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86) Drive C: | 904,81 Gb Total Space | 560,09 Gb Free Space | 61,90% Space Free | Partition Type: NTFS Computer Name: LENOVO-PC | User Name: MARIO_000 | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (All) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .chm[@ = chm.file] -- C:\WINDOWS\hh.exe (Microsoft Corporation) .cpl[@ = cplfile] -- C:\WINDOWS\SysNative\control.exe (Microsoft Corporation) .hlp[@ = hlpfile] -- C:\WINDOWS\winhlp32.exe (Microsoft Corporation) .hta[@ = htafile] -- C:\Windows\SysWOW64\mshta.exe (Microsoft Corporation) .html[@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation) .inf[@ = inffile] -- C:\WINDOWS\SysNative\NOTEPAD.EXE (Microsoft Corporation) .ini[@ = inifile] -- C:\WINDOWS\SysNative\NOTEPAD.EXE (Microsoft Corporation) .url[@ = InternetShortcut] -- C:\WINDOWS\SysNative\rundll32.exe (Microsoft Corporation) .js[@ = JSFile] -- C:\WINDOWS\SysNative\WScript.exe (Microsoft Corporation) .jse[@ = JSEFile] -- C:\WINDOWS\SysNative\WScript.exe (Microsoft Corporation) .reg[@ = regfile] -- C:\WINDOWS\regedit.exe (Microsoft Corporation) .txt[@ = txtfile] -- C:\WINDOWS\SysNative\NOTEPAD.EXE (Microsoft Corporation) .vbe[@ = VBEFile] -- C:\WINDOWS\SysNative\WScript.exe (Microsoft Corporation) .vbs[@ = VBSFile] -- C:\WINDOWS\SysNative\WScript.exe (Microsoft Corporation) .wsf[@ = WSFFile] -- C:\WINDOWS\SysNative\WScript.exe (Microsoft Corporation) .wsh[@ = WSHFile] -- C:\WINDOWS\SysNative\WScript.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .bat [@ = batfile] -- "%1" %* .chm [@ = chm.file] -- C:\WINDOWS\hh.exe (Microsoft Corporation) .cmd [@ = cmdfile] -- "%1" %* .com [@ = comfile] -- "%1" %* .cpl [@ = cplfile] -- C:\WINDOWS\SysWow64\control.exe (Microsoft Corporation) .exe [@ = exefile] -- "%1" %* .hlp [@ = hlpfile] -- C:\WINDOWS\winhlp32.exe (Microsoft Corporation) .hta [@ = htafile] -- C:\Windows\SysWOW64\mshta.exe (Microsoft Corporation) .html [@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation) .inf [@ = inffile] -- C:\WINDOWS\SysWow64\NOTEPAD.EXE (Microsoft Corporation) .ini [@ = inifile] -- C:\WINDOWS\SysWow64\NOTEPAD.EXE (Microsoft Corporation) .url [@ = InternetShortcut] -- C:\WINDOWS\SysWow64\rundll32.exe (Microsoft Corporation) .js [@ = JSFile] -- C:\WINDOWS\SysWow64\WScript.exe (Microsoft Corporation) .jse [@ = JSEFile] -- C:\WINDOWS\SysWow64\WScript.exe (Microsoft Corporation) .pif [@ = piffile] -- "%1" %* .reg [@ = regfile] -- C:\WINDOWS\SysWow64\regedit.exe (Microsoft Corporation) .scr [@ = scrfile] -- "%1" /S .txt [@ = txtfile] -- C:\WINDOWS\SysWow64\NOTEPAD.EXE (Microsoft Corporation) .vbe [@ = VBEFile] -- C:\WINDOWS\SysWow64\WScript.exe (Microsoft Corporation) .vbs [@ = VBSFile] -- C:\WINDOWS\SysWow64\WScript.exe (Microsoft Corporation) .wsf [@ = WSFFile] -- C:\WINDOWS\SysWow64\WScript.exe (Microsoft Corporation) .wsh [@ = WSHFile] -- C:\WINDOWS\SysWow64\WScript.exe (Microsoft Corporation) [HKEY_USERS\S-1-5-21-2688644151-3311041561-1592275616-1001\SOFTWARE\Classes\] .html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation) batfile [open] -- "%1" %* batfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation) chm.file [open] -- "%SystemRoot%\hh.exe" %1 (Microsoft Corporation) cmdfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation) cmdfile [open] -- "%1" %* cmdfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation) comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation) htafile [open] -- C:\Windows\SysWOW64\mshta.exe "%1" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}%U{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5} %* (Microsoft Corporation) htmlfile [edit] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) htmlfile [opennew] -- Reg Error: Key error. htmlfile [print] -- "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) inffile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation) inffile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation) inifile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation) inifile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation) InternetShortcut [open] -- "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) jsfile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation) jsfile [open] -- C:\Windows\System32\WScript.exe "%1" %* (Microsoft Corporation) jsfile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation) jsefile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation) jsefile [open] -- C:\Windows\System32\WScript.exe "%1" %* (Microsoft Corporation) jsefile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation) piffile [open] -- "%1" %* regfile [edit] -- %SystemRoot%\system32\notepad.exe "%1" (Microsoft Corporation) regfile [open] -- regedit.exe "%1" (Microsoft Corporation) regfile [merge] -- Reg Error: Key error. regfile [print] -- %SystemRoot%\system32\notepad.exe /p "%1" (Microsoft Corporation) scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. txtfile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation) txtfile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation) txtfile [printto] -- %SystemRoot%\system32\notepad.exe /pt "%1" "%2" "%3" "%4" (Microsoft Corporation) vbefile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation) vbefile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation) vbefile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation) vbsfile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation) vbsfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation) vbsfile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation) wsffile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation) wsffile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation) wsffile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation) wshfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation) Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation) Directory [Bridge] -- C:\Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\Bridge.exe "%L" (Adobe Systems, Inc.) Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Powershell] -- powershell.exe -noexit -command Set-Location '%V' (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation) batfile [open] -- "%1" %* batfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation) chm.file [open] -- "%SystemRoot%\hh.exe" %1 (Microsoft Corporation) cmdfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation) cmdfile [open] -- "%1" %* cmdfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation) comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation) htafile [open] -- C:\Windows\SysWOW64\mshta.exe "%1" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}%U{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5} %* (Microsoft Corporation) htmlfile [edit] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) htmlfile [opennew] -- Reg Error: Key error. htmlfile [print] -- "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) inffile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation) inffile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation) inifile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation) inifile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation) InternetShortcut [open] -- "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) jsfile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation) jsfile [open] -- C:\Windows\System32\WScript.exe "%1" %* (Microsoft Corporation) jsfile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation) jsefile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation) jsefile [open] -- C:\Windows\System32\WScript.exe "%1" %* (Microsoft Corporation) jsefile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation) piffile [open] -- "%1" %* regfile [edit] -- %SystemRoot%\system32\notepad.exe "%1" (Microsoft Corporation) regfile [open] -- regedit.exe "%1" (Microsoft Corporation) regfile [merge] -- Reg Error: Key error. regfile [print] -- %SystemRoot%\system32\notepad.exe /p "%1" (Microsoft Corporation) scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. txtfile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation) txtfile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation) txtfile [printto] -- %SystemRoot%\system32\notepad.exe /pt "%1" "%2" "%3" "%4" (Microsoft Corporation) vbefile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation) vbefile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation) vbefile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation) vbsfile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation) vbsfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation) vbsfile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation) wsffile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation) wsffile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation) wsffile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation) wshfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation) Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation) Directory [Bridge] -- C:\Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\Bridge.exe "%L" (Adobe Systems, Inc.) Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Powershell] -- powershell.exe -noexit -command Set-Location '%V' (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error. [color=#E56717]========== Security Center Settings ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = EE 9A A5 6A D3 1B D2 01 [binary data] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade] "UpgradeTime" = [binary data] "DontEnumerateCommonFilesUpgradeExe" = 1 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade] "UpgradeTime" = Reg Error: Unknown registry data type -- File not found [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] "C:\Users\MARIO_000\Downloads\AdsFix.exe" = C:\Users\MARIO_000\Downloads\AdsFix.exe:*:Enabled:AdsFix "C:\Users\MARIO_000\Desktop\AdsFix.exe" = C:\Users\MARIO_000\Desktop\AdsFix.exe:*:Enabled:AdsFix -- (SosVirus) "C:\Users\MARIO_000\Downloads\AdsFix.exe" = C:\Users\MARIO_000\Downloads\AdsFix.exe:*:Enabled:AdsFix "C:\Users\MARIO_000\Desktop\AdsFix.exe" = C:\Users\MARIO_000\Desktop\AdsFix.exe:*:Enabled:AdsFix -- (SosVirus) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Users\MARIO_000\Downloads\AdsFix.exe" = C:\Users\MARIO_000\Downloads\AdsFix.exe:*:Enabled:AdsFix "C:\Users\MARIO_000\Desktop\AdsFix.exe" = C:\Users\MARIO_000\Desktop\AdsFix.exe:*:Enabled:AdsFix -- (SosVirus) "C:\Users\MARIO_000\Downloads\AdsFix.exe" = C:\Users\MARIO_000\Downloads\AdsFix.exe:*:Enabled:AdsFix "C:\Users\MARIO_000\Desktop\AdsFix.exe" = C:\Users\MARIO_000\Desktop\AdsFix.exe:*:Enabled:AdsFix -- (SosVirus) [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{1ED48737-CFF1-4D48-8F58-3211FE87378F}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) | "{774EAF81-B9C2-4B6A-A221-128709BB4EF0}" = lport=1688 | protocol=6 | dir=in | name=0pen port kms | "{8AA2733D-C2E7-4792-B4DF-8D4FA693B95C}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\root\office16\outlook.exe | "{E7F887B5-F092-44DE-BE28-A72176E818A5}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{050A981D-B5BF-4C14-9A16-9F2AF583468C}" = protocol=6 | dir=in | app=c:\program files (x86)\maxthon\bin\maxthon.exe | "{081BE931-DB48-4806-8D93-49B3F8045987}" = dir=in | name=microsoft solitaire collection | "{09B000D0-7580-4EC2-A155-E59399F5D0AF}" = dir=out | name=@{microsoft.windows.contentdeliverymanager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.contentdeliverymanager/resources/appdisplayname} | "{0A965F64-9AEE-41F2-B7D7-5C90261E9685}" = dir=out | name=txtr ebooks lenovo edition | "{0B21DF9D-EC85-4B33-93EA-07360EABF2F2}" = dir=in | name=@{filmonlivetvfree.filmonlivetvfree_1.3.6.115_x64__zx03kxexxb716?ms-resource://filmonlivetvfree.filmonlivetvfree/whitelabel/app-name} | "{0BB463CC-4CB9-420F-895D-773B25184B9B}" = dir=in | name=@{microsoft.windows.cloudexperiencehost_10.0.14393.1066_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | "{0D95C5B9-024B-4B69-9EE8-F480A1AD0F9F}" = dir=out | name=sway | "{0F899E85-FF94-463A-B1E8-60D3CDFE3F21}" = dir=in | app=c:\program files\cyberlink\powerdirector10\pdr10.exe | "{104B68B1-5D5B-473B-84A4-D96D54094E54}" = dir=out | name=@{microsoft.windows.apprep.chxapp_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.apprep.chxapp/resources/displayname} | "{1073C91D-4444-4B55-9872-5FC55791D8B5}" = dir=in | name=@{microsoft.bingweather_4.20.1102.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/applicationtitlewithbranding} | "{11414B8E-E70B-48DC-9F85-71D87DAE2AFD}" = dir=out | name=@{microsoft.lockapp_10.0.14393.0_neutral__cw5n1h2txyewy?ms-resource://microsoft.lockapp/resources/appdisplayname} | "{121DAD19-7E37-435A-9BFE-0BBDC74A315B}" = dir=in | name=@{microsoft.microsoftofficehub_17.8107.7600.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoftofficehub/officehubintl/appmanifest_getoffice_displayname} | "{19E2A71E-EBEF-4CBA-B436-D5DAEFA86D2A}" = dir=out | name=@{microsoft.windows.cloudexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | "{1A1047D6-FEE2-477E-89BC-B1D5604C87B8}" = dir=out | name=txtr reader lenovo edition | "{1AC825B5-E3FE-43BE-A48B-7349DA79490E}" = dir=out | name=@{microsoft.windows.cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/packagedisplayname} | "{1CFBE35D-597D-4B70-9B76-938BA0A7760D}" = dir=out | name=@{microsoft.connectivitystore_1.1604.4.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.connectivitystore/mswifiresources/appstorename} | "{1D0259A7-0A92-48F6-8903-2DC9D621E689}" = dir=in | name=@{microsoft.microsoftedge_38.14393.1066.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} | "{1D8880CD-EEE7-4357-8CFA-A83810E62BAF}" = dir=in | name=accuweather - weather for life | "{1DDBFBA4-1CA5-4CB9-9D9D-F348409A665E}" = dir=out | name=onenote | "{1EA5358A-1A66-456F-A605-7381197C5572}" = dir=out | name=@{microsoft.xboxidentityprovider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.xboxidentityprovider/resources/pkgdisplayname} | "{20F058A7-A83C-4274-9641-AAFEBF11B65E}" = dir=out | name=freeride games for lenovo | "{2139C7AA-9D40-4933-9020-3DD267E7ACAB}" = dir=in | name=xbox | "{26FC50B4-CB17-44C8-93F7-8F1C6E63C5BD}" = dir=out | name=@{microsoft.xboxgamecallableui_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.xboxgamecallableui/resources/pkgdisplayname} | "{28A751A6-74BE-4E99-A25F-E2299BB793E0}" = dir=in | app=c:\program files (x86)\lenovo\powerdvd10\powerdvd cinema\powerdvdcinema10.exe | "{29A3CFC9-4209-4C3C-9132-B7A69CC69920}" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe | "{2AD955C1-04A4-4CE7-B002-B6DD384994D3}" = dir=out | name=@{microsoft.3dbuilder_14.0.1031.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.3dbuilder/resources/appstorename} | "{2DAAC85F-BA33-46C9-8243-29A7E8648A50}" = dir=out | name=@{microsoft.ppiprojection_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | "{2DB8A436-CCB2-4B63-BE4D-7A5D2C09D39E}" = dir=in | name=@{microsoft.commsphone_2.17.27003.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.commsphone/resources/appstorename} | "{2F378A50-73D2-4B6F-8C04-BE911E53998E}" = dir=out | name=@{microsoft.binghealthandfitness_3.0.4.336_x64__8wekyb3d8bbwe?ms-resource://microsoft.binghealthandfitness/resources/apptitle} | "{2FC7B98C-EAC7-4D5B-97F1-727B5565B047}" = dir=in | name=@{microsoft.ppiprojection_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | "{2FD6736F-66B9-4839-8D7D-1BDDA9C4A297}" = dir=in | name=@{microsoft.zunevideo_10.17022.10311.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} | "{31261360-34F0-41C6-98D6-30332DCF692A}" = dir=out | name=@{microsoft.windows.featureondemand.insiderhub_10.0.10586.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.featureondemand.insiderhub/resources/appstorename} | "{34297CD2-9DA5-4990-9BE2-2584CCA8A676}" = dir=out | name=ebay | "{35EF0328-479D-4815-B884-E112246B0F03}" = dir=in | name=@{microsoft.zunemusic_10.17032.10331.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} | "{37CDA70A-06BD-4FA5-97CB-C09CD5F26E71}" = dir=out | name=@{microsoft.aad.brokerplugin_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | "{3842E3DD-902D-43EA-9F9B-AFF7D1FFB182}" = dir=out | name=@{microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.appconnector/resources/connectorstubtitle} | "{39EACEBD-D45B-451C-97C6-C2EEB11CDF88}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe | "{39F42EBA-3B01-453E-BC0A-F2F38D7AAD98}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\root\office16\lync.exe | "{426B1B1A-FB18-4851-B77A-1A382FB45A40}" = dir=in | name=@{microsoft.skypeapp_11.14.675.0_x64__kzf8qxf38zg5c?ms-resource://microsoft.skypeapp/resources/skypevideo_productname} | "{4282FE99-8560-4BC7-9576-5F3ED84E263F}" = dir=in | name=checkpoint.vpn | "{450BE8AE-0C01-44D7-AD1B-861F5E647148}" = dir=out | name=@{microsoft.microsoftedge_25.10586.0.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} | "{45546FC2-4FF9-40A4-8262-96D3CD44D18B}" = dir=out | name=@{microsoft.windowsphone_10.1609.2561.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsphone/resources/appstorename} | "{46E20D0B-D4EF-44B4-9A31-515FE5491124}" = protocol=17 | dir=in | app=c:\program files (x86)\maxthon\bin\maxthon.exe | "{47AD4BB6-8D94-44A5-A4F6-3E3512109263}" = dir=out | name=yousendit for lenovo | "{4EB9BBDD-83BC-417B-B3B5-4D359A2B3C6A}" = dir=in | name=@{microsoft.windows.cloudexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | "{4FBA8FAD-4AC9-4362-A150-6E4DA76977B8}" = dir=out | name=@{microsoft.microsoftedge_38.14393.1066.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} | "{50259ECC-6BB3-4EAB-947B-3C3B1C057AF5}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | "{50603B97-072E-4A6C-BB38-379C38B3CA2D}" = dir=in | name=@{microsoft.bingfinance_4.20.1102.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/applicationtitlewithbranding} | "{518F3FEE-A377-4846-8F41-A9CC3E9E19BB}" = dir=out | name=@{microsoft.bingtravel_3.0.4.336_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingtravel/resources/brandedapptitle} | "{548DCF8C-BFF2-4BA4-AA88-FBAF9AC8BCC6}" = dir=in | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} | "{55C567D7-A3D9-4BDF-B87E-F592F11E832C}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{560448D6-095C-4907-B046-AC7F710701A7}" = dir=in | name=sonicwall.mobileconnect | "{5A07F8F0-955F-41D3-B41C-79D22E3819EE}" = dir=in | name=@{microsoft.aad.brokerplugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | "{5B806CCD-27A7-4421-A89B-F5587E20198D}" = dir=out | name=xbox | "{5D40F1BE-199E-4EC4-AD1D-EAF95E89E430}" = dir=in | name=powerdvd for lenovo idea | "{5F4632C0-D5B1-40C3-B0D9-E3A759C81B9E}" = dir=out | name=sonicwall.mobileconnect | "{5FEB9B5B-D401-4396-B800-4D25CD4F6203}" = dir=out | name=@{microsoft.people_10.2.831.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.people/resources/appstorename} | "{629348E5-CDC8-4292-A55A-DAD5C073A069}" = dir=out | name=@{microsoft.aad.brokerplugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | "{66A08F24-2AAB-46B0-BAE7-1F6D567643EC}" = dir=out | app=%programfiles%\adobe\adobe photoshop cc (64 bit)\photoshop.exe | "{69A97E02-59FD-4B31-8CE4-1F782FFD8BD1}" = dir=out | name=@{microsoft.accountscontrol_10.0.10586.0_neutral__cw5n1h2txyewy?ms-resource://microsoft.accountscontrol/resources/displayname} | "{6CDDA0C4-7416-47E0-8E23-C6B637B378BF}" = dir=out | name=windows_ie_ac_001 | "{6DF546D6-13B7-49E3-905D-4085106A6941}" = dir=out | name=@{microsoft.windows.cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/displayname} | "{6DFB4820-F8F3-4EAE-AD70-69A6CB7D03E4}" = dir=out | name=@{microsoft.windowscommunicationsapps_17.8126.42377.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/hxoutlookintl/appmanifest_outlookdesktop_displayname} | "{6E07510A-7585-44BC-9FB7-27D19D6A4546}" = dir=out | app=%programfiles% (x86)\adobe\adobe photoshop cs6\photoshop.exe | "{6EB8B80D-3B57-4F29-99B1-54A70CC63AE3}" = dir=out | name=microsoft solitaire collection | "{6F02DB39-B145-48D0-B3CD-28872B3B8F61}" = dir=out | name=@{microsoft.accountscontrol_10.0.14393.1066_neutral__cw5n1h2txyewy?ms-resource://microsoft.accountscontrol/resources/displayname} | "{7252D4F4-BA42-4BA9-B4FA-07A9495FF63A}" = dir=out | name=@{microsoft.bingweather_4.20.1102.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/applicationtitlewithbranding} | "{731CB1ED-9F8D-400A-80AB-FA5ADF8A74CF}" = dir=out | name=@{microsoft.windows.parentalcontrols_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.parentalcontrols/resources/displayname} | "{73D57A26-C970-4732-9178-CFE7D5AA6820}" = dir=out | name=@{microsoft.windows.parentalcontrols_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.parentalcontrols/resources/displayname} | "{7467B407-A187-4F65-9FB1-DEB7E293936F}" = dir=out | name=@{microsoft.bingnews_4.20.1102.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/applicationtitlewithbranding} | "{772F09E0-53A0-4717-BDA6-F53B9E0450AB}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe | "{77F9E8B1-D5BD-4BDE-93E4-79D535964E99}" = dir=out | name=@{microsoft.windowsstore_11701.1001.99.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsstore/resources/storetitle} | "{7F246ED1-8E27-47C6-86F0-F53395CFD429}" = dir=out | name=zinio | "{7F98851D-22E6-4793-B016-F6C7C5515AEF}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe | "{802BCAC9-9A2A-4E3C-BE02-CBAA0BC0DEF9}" = dir=in | name=@{microsoft.windowsfeedbackhub_1.1703.971.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsfeedbackhub/resources/appstorename} | "{84C7F831-84EC-469E-B7E5-689FA9AD0E59}" = dir=out | name=@{microsoft.oneconnect_1.1607.6.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.oneconnect/oneconnect/appstorename} | "{86BF0ED6-88D4-470E-BC70-A8B944E9A86B}" = dir=out | name=@{windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.purchasedialog/resources/displayname} | "{86EE9AE7-729C-4951-BF17-D3D606BA842D}" = dir=out | name=@{microsoft.ppiprojection_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | "{8892F4CF-E704-44E7-99EB-ED0731AD301B}" = dir=out | name=@{microsoft.xboxgamecallableui_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.xboxgamecallableui/resources/pkgdisplayname} | "{8CA78F31-F83A-430E-AF55-21D92EE34BC2}" = dir=in | name=@{windows.contactsupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.contactsupport/resources/appdisplayname} | "{8EF9359B-070B-4B01-A56F-6E6688C7B1AB}" = dir=in | app=c:\program files (x86)\lenovo\lenovoappshop\bin\ismloader.exe | "{943ECA94-9BD1-4E2C-B01C-9218551347B5}" = dir=out | name=@{microsoft.bingsports_4.20.1102.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/applicationtitlewithbranding} | "{984FB3DB-B8A7-403B-9D96-2EEA027108A4}" = dir=out | name=@{microsoft.microsoftofficehub_17.8107.7600.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoftofficehub/officehubintl/appmanifest_getoffice_displayname} | "{997FF475-BB12-4AE6-B367-D8D5F2F6ACFE}" = dir=out | name=txtr ebooks lenovo edition | "{9B289B81-C76B-4009-9BE8-CDE262E99FA2}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\root\office16\ucmapi.exe | "{9B2A1675-2260-4757-9D59-4EA36361DCC0}" = dir=out | name=@{microsoft.bingfinance_4.20.1102.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/applicationtitlewithbranding} | "{9BB50CA3-F731-47BF-8039-7907D3E20193}" = dir=out | name=@{microsoft.windowsreadinglist_6.3.9654.21234_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsreadinglist/resources/apppackagename} | "{9E3D57FC-7C37-4424-9352-4831E97D029D}" = dir=out | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} | "{A2004CA8-22FD-4040-9AEB-3950088317D3}" = dir=out | name=lenovo support | "{A269953B-88E2-4968-9B2E-C9B4DA28D2B7}" = dir=out | name=@{microsoft.windowsfeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windowsfeedback/feedbackapp.resources/appname/text} | "{A340ACC0-378F-47E4-81FB-DF18CC296884}" = dir=out | name=windows_ie_ac_001 | "{A3489A69-7C87-4AE0-82A2-3E87F70565D9}" = dir=out | name=accuweather - weather for life | "{A59A74F5-04D9-4033-B4F9-26FA9F61DA45}" = dir=out | name=@{windows.contactsupport_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.contactsupport/resources/appdisplayname} | "{A771E13C-4636-47EC-92FF-6F8D8E4B0817}" = protocol=17 | dir=in | app=c:\program files (x86)\maxthon\bin\mxup.exe | "{A8FEDF6C-52A5-4BE9-80C4-9B30C224CE27}" = dir=out | name=@{microsoft.windowsfeedbackhub_1.1703.971.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsfeedbackhub/resources/appstorename} | "{AA611CA7-FF59-418F-8C14-187CF2F4BFB3}" = dir=out | name=powerdvd for lenovo idea | "{AD101EFC-690D-4562-8FDE-690B9AEB3F91}" = dir=in | name=@{microsoft.aad.brokerplugin_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | "{B0CE6077-99BD-43AE-99E3-1457B8E83A38}" = dir=out | name=@{microsoft.skypeapp_11.14.675.0_x64__kzf8qxf38zg5c?ms-resource://microsoft.skypeapp/resources/skypevideo_productname} | "{B15B5E94-505B-4009-B7B9-902DD884231E}" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe | "{B2DF52AF-73D4-4F62-8F29-90EC88CE50DA}" = dir=in | app=c:\program files (x86)\lenovo\powerdvd10\powerdvd10.exe | "{B52AA0CB-8D14-47B2-8E4B-14FB3B7DF898}" = dir=out | name=@{microsoft.messaging_3.19.1001.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.messaging/resources/appstorename} | "{B57E5F42-312B-419F-8FAB-57D93AF81DE8}" = dir=out | name=@{microsoft.zunevideo_10.17022.10311.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} | "{B784D393-CF6D-4EF3-9D36-9FCB9B39F09A}" = dir=out | app=%programfiles%\adobe\adobe photoshop cs6 (64 bit)\photoshop.exe | "{B78805B6-8274-4700-B5F8-760BF87C96E9}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\root\office16\ucmapi.exe | "{B8E0DBED-B67B-48FA-9B6A-EF831417E300}" = dir=in | name=@{microsoft.windows.cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/displayname} | "{B8F307BD-174B-4F1B-91BF-18F43EB9D04D}" = dir=in | name=@{microsoft.bingsports_4.20.1102.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/applicationtitlewithbranding} | "{BA472D25-56E9-4792-9B9A-8E86E99C6F3A}" = dir=out | app=%programfiles% (x86)\adobe\adobe photoshop cc\photoshop.exe | "{BB8FCB82-92DC-4247-A105-170C64F1105C}" = dir=in | name=@{microsoft.windowsreadinglist_6.3.9654.21234_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsreadinglist/resources/apppackagename} | "{BBC90A9A-82E6-4C47-9304-424981ADAA04}" = dir=in | name=microsoft sticky notes | "{BC191B0B-3016-48B6-8CE5-F26904A6C287}" = dir=out | name=@{filmonlivetvfree.filmonlivetvfree_1.3.6.115_x64__zx03kxexxb716?ms-resource://filmonlivetvfree.filmonlivetvfree/whitelabel/app-name} | "{BCFC2C05-8C28-450D-B08B-ED6AA6E45BE9}" = dir=out | name=@{microsoft.windowsmaps_5.1703.762.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsmaps/resources/appstorename} | "{BFB094B5-AEB1-4B66-8784-3258E3FA5C1C}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | "{C02FA605-E904-47DC-9C45-6EDECB5A2F8A}" = dir=in | name=sway | "{C11F23A4-E612-4A92-B0CB-EF189E94F9BE}" = dir=out | name=@{microsoft.lockapp_10.0.10586.0_neutral__cw5n1h2txyewy?ms-resource://microsoft.lockapp/resources/appdisplayname} | "{C1CC2423-0110-488E-90EC-D16B3E2160EA}" = dir=in | app=c:\program files (x86)\lenovo\lenovoappshop\bin\ismagent.exe | "{C2B6A42B-7E87-4CEA-A87C-A7E731F13B90}" = dir=in | name=onenote | "{C811685C-12B6-41B6-B586-3950EE2B0B2B}" = dir=in | name=@{microsoft.bingnews_4.20.1102.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/applicationtitlewithbranding} | "{CB80BFE3-3E3B-4BDD-8722-34FC7A079D25}" = dir=out | name=store purchase app | "{CBDF479E-6ECA-4D46-A0DF-A5072BB51FFE}" = dir=out | name=@{microsoft.windows.contentdeliverymanager_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.contentdeliverymanager/resources/appdisplayname} | "{CC2B67F7-7C14-4E0C-BA4F-49781E5F619B}" = dir=out | name=candy crush soda saga | "{CE554681-E490-4059-83CF-2B6A05D5E34C}" = dir=out | name=@{microsoft.xboxlivegames_2.0.100.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxlivegames/resources/34150} | "{CF5B0749-4184-4DB6-8E28-DDC538688B78}" = protocol=6 | dir=in | app=c:\program files (x86)\maxthon\bin\mxup.exe | "{D05E6CE2-D305-48FF-8C65-5AEE3A448EAD}" = dir=out | name=@{microsoft.commsphone_2.17.27003.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.commsphone/resources/appstorename} | "{D22AAC96-D11C-481F-B5FF-FD385082B8D7}" = dir=out | name=@{microsoft.zunemusic_10.17032.10331.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} | "{D4616202-CEFB-48EA-BAF9-7E4270E0C8BE}" = dir=out | name=@{microsoft.windows.cloudexperiencehost_10.0.14393.1066_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | "{D6980480-941A-4DF6-AB81-3734ECD3D779}" = dir=out | name=junipernetworks.junospulsevpn | "{D8BE1351-722D-446D-B30B-18041C5855BA}" = dir=out | name=windows_ie_ac_001 | "{D92BF7BD-5292-4AE9-B668-C9AB13942841}" = dir=out | name=@{microsoft.xboxidentityprovider_11.19.19003.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxidentityprovider/resources/displayname} | "{D9DAC037-0342-482D-B3DD-A8BC235233E2}" = dir=in | name=@{microsoft.windowscommunicationsapps_17.8126.42377.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/hxoutlookintl/appmanifest_outlookdesktop_displayname} | "{DB1064A4-2825-4B1C-B215-7E08C38DC2F6}" = dir=in | name=@{microsoft.microsoftedge_25.10586.0.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} | "{DB59588E-ED90-4C47-A7B5-7929DD0C0BD2}" = dir=out | name=checkpoint.vpn | "{DB6FF968-A423-4B72-8200-063E22650761}" = dir=in | name=zinio | "{DCC193A6-283C-4402-9C26-603D4D8403FF}" = dir=out | name=@{microsoft.windows.photos_17.313.10010.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windows.photos/resources/appstorename} | "{DD42B476-E606-4D97-BED6-1D2F7C3AD43D}" = dir=out | name=@{windows.contactsupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.contactsupport/resources/appdisplayname} | "{DD62B343-EA64-4D57-B4E5-01A2585C4A1D}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{DD6310B9-79B2-4ABF-ACAF-D5551567B814}" = dir=out | name=twitter | "{DD82418F-E746-467F-A6C5-607F3A4F1A54}" = dir=out | app=%programfiles%\adobe\adobe photoshop lightroom 5.4\lightroom.exe | "{E0FFECB6-EF0A-4951-8CDD-3114EC62F792}" = dir=in | name=@{microsoft.windows.photos_17.313.10010.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windows.photos/resources/appstorename} | "{E4810BB2-819C-44A2-BB73-E5C7A283C936}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\root\office16\lync.exe | "{E54B7FAE-0CED-494D-87FC-692043967645}" = dir=in | name=@{microsoft.windows.cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/packagedisplayname} | "{E750CCAC-6146-4D54-BCCA-0E162E42B966}" = dir=in | name=@{microsoft.windows.featureondemand.insiderhub_10.0.10586.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.featureondemand.insiderhub/resources/appstorename} | "{E788EDC7-844A-47C9-A94D-0EF8536F9B58}" = dir=out | name=@{microsoft.windows.shellexperiencehost_10.0.14393.1066_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.shellexperiencehost/resources/pkgdisplayname} | "{EBA7428C-C4F6-40B0-8193-F7ED21ED7660}" = dir=in | name=@{microsoft.messaging_3.19.1001.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.messaging/resources/appstorename} | "{EC799E33-72BA-42D7-9127-DEFE68F9799D}" = dir=in | name=junipernetworks.junospulsevpn | "{ED5042DF-16D2-4BC0-8168-FEF123F6D1C0}" = dir=in | name=@{windows.contactsupport_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.contactsupport/resources/appdisplayname} | "{F1EA9EEC-8C14-49DA-A1A6-730BFBF77387}" = dir=out | name=@{microsoft.bingfoodanddrink_3.0.4.336_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfoodanddrink/resources/apptitlewithbranding} | "{F2AC2789-2443-416E-917A-F52C57927464}" = dir=out | name=microsoft sticky notes | "{F44D544B-853E-4088-915B-1575A9639393}" = dir=in | name=@{microsoft.windowsstore_11701.1001.99.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsstore/resources/storetitle} | "{F5DF3CCD-9680-498C-948D-580E3F145869}" = dir=out | name=@{e046963f.lenovocompanion_3.72.1.0_x86__k1h2ywk1493x8?ms-resource://e046963f.lenovocompanion/resources/appname} | "{F64300AD-D559-4000-BD45-0997BCC8E70A}" = dir=out | name=f5.vpn.client | "{F6665BC4-276A-4450-A0D3-B90170FEEF56}" = dir=in | name=@{microsoft.ppiprojection_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | "{F77E5446-4378-4E99-8B7A-7061AAAEA193}" = dir=in | name=f5.vpn.client | "{F9832E38-F4E0-4D91-9B02-7EE3BA990CC4}" = dir=out | name=@{microsoft.bingmaps_2.0.2009.2356_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingmaps/resources/appdisplayname} | "{F9A94C3A-F8AD-4E66-8E0F-6B2630A612A4}" = dir=in | app=c:\program files\itunes\itunes.exe | "{FBC60F03-2C25-4DC6-8B1E-70654736BEAE}" = dir=out | name=@{microsoft.getstarted_5.0.13.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.getstarted/resources/appstorename} | "{FF6A194E-72E8-4348-9C30-DDCB54F1ACD2}" = dir=in | name=@{microsoft.oneconnect_1.1607.6.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.oneconnect/oneconnect/appstorename} | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{063CED74-F5F0-870E-DC9C-2D78FDEDA3EE}" = Catalyst Control Center Next Localization ES "{0742432E-42D9-2240-4CA1-8595CCCBAA77}" = Catalyst Control Center Next Localization JA "{0788641D-D31A-478D-BB34-C41564AE9F93}" = Dependency Package Update "{0809FEC1-EF86-51E9-8210-DC1B1BDB6745}" = Catalyst Control Center Next Localization JA "{0989D0EA-AFF3-5F9A-3D25-20EE133E409B}" = Catalyst Control Center Next Localization DA "{0B5633F0-C415-2F08-671E-4C9E2FAACD45}" = Catalyst Control Center Next Localization TR "{0E8A3B17-D603-B1B6-C205-1685EBDD23E9}" = Catalyst Control Center Next Localization DA "{118C2119-84B6-E32C-63E2-B56DBCF41CE5}" = Catalyst Control Center Next Localization BR "{13BB60AA-88F7-4B1F-2DEC-D81EEDE8B3AA}" = Catalyst Control Center Next Localization FI "{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 "{1E7D3072-1D28-E33A-99DF-85D9F7ECD06E}" = Catalyst Control Center Next Localization DE "{238F6F6F-2544-86CF-3AB6-2CDADAB58CF0}" = Catalyst Control Center Next Localization CS "{25D1751E-7CA2-5F6D-0125-0A16E47AF9FE}" = Catalyst Control Center Next Localization TR "{26567561-DFB2-2B63-9BA8-6A490ED37016}" = Catalyst Control Center Next Localization IT "{2BDDCC26-D47D-8F12-61FE-F54D34C02646}" = AMD Settings "{2F544F46-5F6E-97BB-3550-A0242A3C5754}" = Catalyst Control Center Next Localization DA "{3450566C-4561-0EE8-B1AB-D5C79CCE8D2C}" = Catalyst Control Center Next Localization SV "{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1" = Malwarebytes version 3.0.6.1469 "{365AEAB2-4CF3-7CBB-0DAC-E9E14B688E65}" = Catalyst Control Center Next Localization CHS "{366C4FB5-CF6E-258B-418D-E6D29549A278}" = Catalyst Control Center Next Localization TH "{379D900B-A785-6DB0-012E-434356A365B3}" = Catalyst Control Center Next Localization SV "{37AA6227-FF2C-95AC-87C0-45DCC0BB87DA}" = Catalyst Control Center Next Localization FR "{37D41A97-6B02-4C30-8753-85107BE1D674}" = Intel® RealSense™ SDK 2014 Runtime (x64): Core "{3AF70346-52C7-0334-606F-118D1C1CB7A2}" = Catalyst Control Center Next Localization NL "{3E245378-BF77-6946-C6F6-096DBE5EAB82}" = Catalyst Control Center Next Localization BR "{409CB30E-E457-4008-9B1A-ED1B9EA21140}" = Intel(R) Rapid Storage Technology "{42FBD43F-DE53-6D4D-5134-E3C93B45CBEF}" = Catalyst Control Center Next Localization ES "{43F6D22B-E0E9-EE90-9B62-1C5FC5D15A55}" = Catalyst Control Center Next Localization IT "{44ED2CDA-4197-E9E9-B328-26E1FB749116}" = Catalyst Control Center Next Localization RU "{45907537-804A-514F-5280-5F4F12A6DCBC}" = Catalyst Control Center Next Localization CHS "{46EB68BE-8AAC-8C2B-7284-8DEDE6B5CD2A}" = Catalyst Control Center Next Localization SV "{46F4D124-20E5-4D12-BE52-EC177A7A4B42}" = Lenovo Rescue System "{4707CBFC-8ED4-463E-0FF9-DE86F4A743E9}" = Catalyst Control Center Next Localization RU "{482B8107-1920-077E-B133-94EAA0C32984}" = ccc-utility64 "{4853A56D-7931-A08B-5BA7-8E2D61043DF9}" = Catalyst Control Center Next Localization FR "{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 "{4D1314B5-83A7-5072-C607-E28316B12C98}" = AMD Catalyst Install Manager "{51F85784-6799-5CA3-97B2-2E5904FC3E58}" = Catalyst Control Center Next Localization BR "{5252431C-288E-409D-ADCF-24407E0E6F70}" = Dependency Package Update "{53AE8AC7-5213-67AF-0DC0-CED696B77643}" = Catalyst Control Center Next Localization NO "{558B5965-CC1B-4AF1-BA07-5D6832404050}" = Adobe Photoshop Lightroom 5.4 64-bit "{55A4D3AB-C8DF-26B2-89A8-7E16E1E40700}" = Catalyst Control Center Next Localization BR "{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}" = Bonjour "{59D2664C-949B-7FA7-9880-ECB993B6616A}" = Catalyst Control Center Next Localization NO "{5A083A57-10D6-D4E5-292C-F274870E73A4}" = Catalyst Control Center Next Localization CHS "{5B987681-3652-492B-6A11-E02AC0FE5959}" = Catalyst Control Center Next Localization HU "{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 "{5FD706FF-6AD8-E372-A35A-879409982655}" = Catalyst Control Center Next Localization KO "{5FEACE78-C338-9AED-FF05-7DE7E273C774}" = Catalyst Control Center Next Localization ES "{635BE602-BB9C-4C59-8CC5-93F9366E8A21}" = ViewNX 2 "{6C01A0A7-7440-4D48-93C6-2927A1E93FE6}" = iTunes "{6DC92550-D065-4B36-C4D3-D8D7A702A7A7}" = Catalyst Control Center Next Localization NO "{713690A5-53D0-2627-5ABE-55DA9B3E8BDE}" = AMD Settings "{741291DA-2B34-4D44-8FB6-58EDE21261D8}" = Apple Application Support (64 bits) "{76AAF56B-93D8-161D-809A-EC05F3B913DA}" = Catalyst Control Center Next Localization EL "{7A6E431B-CF43-EC3E-FD7E-0A0AAB1B25FC}" = Catalyst Control Center Next Localization TH "{7ABC6D83-816E-6D48-E65D-B0CEDD294E4E}" = Catalyst Control Center Next Localization CHT "{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 "{84C3F2C5-F7B2-2F08-CDF4-79EF7CC55D74}" = Catalyst Control Center Next Localization CS "{86BFE5B4-1FCE-3C02-6373-92B1AE6431E8}" = Catalyst Control Center Next Localization IT "{87E6EC29-AEC5-28CB-F773-93EB6C1B8A2B}" = Catalyst Control Center Next Localization IT "{89A1F076-19B8-A2B1-D5A3-E8247EFAF157}" = Catalyst Control Center Next Localization TR "{8E6F5592-ED7E-9C50-74AC-BF417B1FE291}" = Catalyst Control Center Next Localization CHS "{90160000-008F-0000-1000-0000000FF1CE}" = Office 16 Click-to-Run Licensing Component "{90160000-00DD-0000-1000-0000000FF1CE}" = Office 16 Click-to-Run Extensibility Component 64-bit Registration "{918989F1-06FC-BFAC-FC46-6C2479AC0C0E}" = AMD Start Now "{929FBD26-9020-399B-9A7A-751D61F0B942}" = Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 "{9338D693-38B7-1ED4-9B42-BFA1D5600CCB}" = Catalyst Control Center Next Localization NL "{93F692D4-0C4D-4EED-9BFE-657C1D5959FE}" = Intel(R) Rapid Storage Technology "{94C72EBE-2908-F0AC-62DA-D61951830F8F}" = Catalyst Control Center Next Localization FR "{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting "{95A52FC1-C728-841D-1BFC-CC793B77B0A4}" = Catalyst Control Center Next Localization EL "{962364E4-08BB-347D-32E7-2B789F37BF8A}" = Catalyst Control Center Next Localization CHT "{970A40CA-46AB-986C-1798-976ED0EA00FA}" = Catalyst Control Center Next Localization PL "{9AA4DD93-94BF-22EA-C9D2-7084F304A31B}" = Catalyst Control Center Next Localization RU "{A0407E39-2AA4-60B3-885F-3C5347B6909E}" = Catalyst Control Center Next Localization CS "{A22CDEBA-6DB5-12CD-F6CE-6238C2D78363}" = Catalyst Control Center Next Localization ES "{A2CB1ACB-94A2-32BA-A15E-7D80319F7589}" = Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 "{A3795528-F572-6314-C4E3-EE9DAF0FBF02}" = Catalyst Control Center Next Localization FI "{A3973655-E448-4A1B-477C-988A79D132D9}" = Catalyst Control Center Next Localization NL "{A4E7CA0C-84EB-5E29-2F04-06C4E4790C2F}" = Catalyst Control Center Next Localization NL "{A50C89BC-8D8E-8828-824A-7171F6D583D5}" = Catalyst Control Center Next Localization TH "{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}" = Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 "{A8689A0F-5928-7300-B82B-C5E85131B7BA}" = Catalyst Control Center Next Localization DE "{AC53FC8B-EE18-3F9C-9B59-60937D0B182C}" = Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 "{AC85CF50-9A55-0103-ADBF-365C37603AA4}" = Catalyst Control Center Next Localization FI "{AD28960A-6190-C991-C964-308B86EAA2E2}" = Catalyst Control Center Next Localization CHT "{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64) "{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}" = CyberLink PowerDirector 10 "{B0BFC63F-EA07-419E-960B-3FB2ED5DD0B2}" = Dolby Digital Plus Advanced Audio "{B10089DE-934F-6E0F-683A-B788F89348DF}" = Catalyst Control Center Next Localization TR "{B28CF677-E2C8-12CA-52BB-19B6F066D36A}" = Catalyst Control Center Next Localization HU "{B2A83706-3F14-1532-20CD-B4EE715A8945}" = Catalyst Control Center Next Localization PL "{B349892D-B015-033C-4CA8-3635E6B655D7}" = Catalyst Control Center Next Localization FR "{BA26B70C-3D8C-2D14-4122-211FB3E6F691}" = Catalyst Control Center Next Localization EL "{BE8D6AB1-3049-2F0C-67FA-00C0A5D321A3}" = Catalyst Control Center Next Localization HU "{C0BFC67D-E447-02C8-6046-C078DFE9EC97}" = Catalyst Control Center Next Localization FI "{C14A3A5B-8A86-C239-37D7-158211778C54}" = Catalyst Control Center Next Localization SV "{C1EFF2A2-DF4A-F6D1-B99C-1ED194AE9E78}" = Catalyst Control Center Next Localization RU "{C1FC707B-AE6B-4DC4-89A5-6628A01F8103}" = Lenovo Solution Center "{C3EE628C-7394-FE2C-0C90-C05284EB528D}" = Catalyst Control Center Next Localization CS "{C971C145-258D-6650-7088-13DDB161327A}" = Catalyst Control Center Next Localization NO "{CA55697D-BD74-3ED8-6B21-D7EDAD3B7D02}" = Catalyst Control Center Next Localization JA "{CC2F4F7E-CE9C-2EBD-69C0-86750D4C9255}" = AMD Start Now "{CFC860C8-4F51-E08C-A74C-2E444ED06160}" = Catalyst Control Center Next Localization KO "{D23766B1-0D79-E539-EA76-A5D58B85BFB2}" = AMD Accelerated Video Transcoding "{D4490E0F-8E7B-1097-B56A-7643C75F1C28}" = Catalyst Control Center Next Localization JA "{D4893C47-704F-4B84-8486-9DE4974ACA6F}" = Picture Control Utility 2 "{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}" = Microsoft SQL Server Compact 3.5 SP2 x64 ENU "{DAB44116-0266-C65B-B643-AC11217C3041}" = Catalyst Control Center Next Localization KO "{DB18F1C0-846F-46F5-A074-5B97C8AF5C8E}" = Apple Mobile Device Support "{DC9DFCBF-87DA-892C-6151-99CC9EF46E3E}" = Catalyst Control Center Next Localization PL "{DF0D7C1C-72B6-9FFB-DF66-B3720237BB80}" = Catalyst Control Center Next Localization CHT "{E27224E3-7913-DA1E-5B08-9BEEC8FEE3D1}" = Catalyst Control Center Next Localization DE "{E9FA781F-3E80-4399-825A-AD3E11C28C77}" = MSVCRT110_amd64 "{EAEAA839-44F4-22DF-D1CC-88C3B2A3D4B1}" = Catalyst Control Center Next Localization KO "{EB328356-1DF0-1CCE-3607-6361DD329219}" = Catalyst Control Center Next Localization HU "{EBA09DAF-14B4-7BE7-676E-6E2FB21EDBDD}" = Catalyst Control Center Next Localization PL "{EC688BD0-240D-AE40-55F3-234E54919AE6}" = Catalyst Control Center Next Localization DA "{ED5FEF26-DEC5-446F-AEB2-E0979D4139F9}" = Nitro Pro 8 "{F8EBE530-A4D5-BF51-F623-3787E6B8A878}" = Catalyst Control Center Next Localization EL "{FC4086D6-E345-5F43-08BB-280FB57DAF49}" = Catalyst Control Center Next Localization DE "{FCE8438C-3272-D63F-479F-670F082B294B}" = Catalyst Control Center Next Localization TH "{FFED38DF-94DC-4FF9-96C1-A6990EDA6B03}" = Dependency Package Update "CCleaner" = CCleaner "Lenovo Dependency Package_is1" = Lenovo Dependency Package "O365HomePremRetail - fr-fr" = Microsoft Office 365 - fr-fr "ProPlusRetail - en-us" = Microsoft Office Professional Plus 2016 - en-us "TrueKey" = Intel Security True Key "WUCCCApp" = AMD Settings [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{00F9DB8C-65D7-4D47-AB5F-F698EE38580D}" = Windows Live UX Platform "{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam "{050d4fc8-5d48-4b8f-8972-47c82c46020f}" = Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 "{05E07D23-91E9-4E70-A4CC-EF505088F967}" = Apple Application Support (32 bits) "{07AAB66E-4718-422D-9218-4AFB3C922A71}" = Photo Gallery "{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86 "{097ABC08-8554-6B3F-4086-5D9C594604EF}" = CCC Help Italian "{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}" = Cisco PEAP Module "{0A7D6F3C-F2AB-48ED-BE23-99791BFF87D6}" = Amazon Browser App "{0DEA342C-15CB-4F52-97B6-06A9C4B9C06F}" = SDK "{114FFFB9-4627-1BE1-65E8-A7ABB494B8C2}" = CCC Help Greek "{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}" = Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 "{15134cb0-b767-4960-a911-f2d16ae54797}" = Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 "{1D6432B4-E24D-405E-A4AB-D7E6D088CBC9}" = Windows Live Photo Common "{1D68D7AE-D7A0-20C1-5870-0094471C7E05}" = CCC Help Thai "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{1FBAE18D-4DE4-47AA-83EC-D1B046F262DC}" = PDF Settings CC "{215D40D6-808C-D8A7-7017-F6D4FF56843E}" = CCC Help Spanish "{21764A96-6748-4B83-89E7-7A5063BF156C}" = Movie Maker "{22154f09-719a-4619-bb71-5b3356999fbf}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 "{261A081E-FDBC-129D-7E15-2E2D55A317C7}" = Catalyst Control Center InstallProxy "{26A24AE4-039D-4CA4-87B4-2F83216016FF}" = Java(TM) 6 Update 16 "{2D99B50E-431D-4AA8-85C1-172A6F8BCF09}" = Adobe Photoshop CC "{2F73A7B2-E50E-39A6-9ABC-EF89E4C62E36}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 "{3117B53D-A409-4D99-A0DE-11A1A40696FA}" = Dependency Package Update "{31B9D218-FED2-4C6C-B19F-7294FFC130B0}" = Adobe AIR "{33B992ED-B59B-4E25-9F3F-CF2D79BBA914}" = Windows Live UX Platform Language Pack "{355F44C4-4492-1357-64A7-AF90D72F174A}" = AMD Catalyst Control Center "{3751BF9B-5F23-4976-AA62-1BF4D791DCFE}" = Photo Common "{37EB76FE-0C7F-CA10-8651-E71C0DCFCE3D}" = CCC Help Hungarian "{39337565-330E-4ab6-A9AE-AC81E0720B10}" = CyberLink PhotoDirector 3 "{3A9FC03D-C685-4831-94CF-4EDFD3749497}" = Microsoft SQL Server Compact 3.5 SP2 ENU "{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Lenovo Power2Go "{41C61308-6CFD-4D54-AB6A-7136ED08A18E}" = Windows Live Communications Platform "{439B34FF-F74E-4807-B5E2-4B758551DA6B}" = Galerie de photos "{4430150F-61B3-4142-BE04-EAC68C8DDA18}" = Dependency Package Update "{469CF5C2-AF52-04EA-64D7-F7776D1AE3A2}" = CCC Help Portuguese "{48947098-A67C-46D4-90C5-9F2F6F0F96FE}" = Citrix Online Launcher "{4AF6C9BC-D8DB-4286-94D9-474CE54ADAA2}" = Dependency Package Update "{503B47A9-E34A-4841-ADD7-417191D5DB5E}" = Dependency Package Update "{52D87F32-70E4-4348-8148-C0B9F35B1314}" = Apple Software Update "{546FF45D-2467-4950-AAFB-0A06ACBB6B2C}" = Dependency Package Update "{57F8326D-A2CA-4353-795F-22C3B9829E46}" = CCC Help English "{5a10856a-c545-428e-958a-456fa2de1994}" = Lenovo OneKey Overclocking "{5B2190E9-199D-450A-94B3-4D6826C770C2}" = Dependency Package Update "{5BEFE1E1-F597-4B79-913B-15FFDB25B744}" = Dependency Package Update "{5CAD3393-EEC0-44CE-9F93-BCAA365B77FB}" = Nikon Movie Editor "{63DE35C9-B080-4D03-B110-99E14FD35BCE}" = Dependency Package Update "{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}" = Cisco EAP-FAST Module "{64DF569A-BE65-8F24-F5BE-0E34B6AC5032}" = CCC Help Japanese "{65316098-0220-4D5C-B37A-6136083A0897}" = Dependency Package Update "{659CB81C-B54E-4DF1-B618-F35777393A54}" = Windows Live Installer "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}" = Adobe Photoshop CS6 "{75780EF0-BC52-1DF5-4E06-B5E7849872B5}" = CCC Help Dutch "{7D081453-3247-4076-4572-640D1308580D}" = CCC Help Danish "{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver "{88ADF0CB-851F-014C-8C5F-2316D258376C}" = Catalyst Control Center Localization All "{899B0A57-C6BA-6FAB-DF06-D095CFBC60EC}" = AMD Settings "{8C1BD6B6-D463-01E4-28CA-9C5A5E3F28F6}" = CCC Help Turkish "{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT "{8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}" = MSVCRT110 "{90160000-008C-0000-0000-0000000FF1CE}" = Office 16 Click-to-Run Extensibility Component "{90160000-008C-0409-0000-0000000FF1CE}" = Office 16 Click-to-Run Localization Component "{90160000-008C-040C-0000-0000000FF1CE}" = Office 16 Click-to-Run Localization Component "{910446F6-BA33-81D5-B821-BA6D00CC9FF6}" = AMD Settings "{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86 "{959B7F35-2819-40C5-A0CD-3C53B5FCC935}" = Genesys USB Mass Storage Device "{990864A5-E565-D8B7-A6EB-67812FB92B2F}" = CCC Help Finnish "{9A268503-5AB0-479E-9690-929BDEC55C00}" = FamilySafetyGuide "{9ACEA9CD-63B9-4784-807B-EA295E96A7C3}_is1" = X-Rite Device Manager "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{9DAABC60-A5EF-41FF-B2B9-17329590CD5}" = REALTEK Wireless LAN Driver "{9E3469A6-443A-452C-BF44-8D7CE3A9A7E2}" = LVT "{A02FD44A-3EA0-4477-B6FC-FDB4D61CF872}" = Lenovo OneKey Overclocking "{A4938E5D-5B9A-70FC-52F2-837FEC0B9426}" = CCC Help Chinese Standard "{A8FDBE30-D10C-32F7-67EB-6DCAEAA5FBC2}" = CCC Help Korean "{AF312B06-5C5C-468E-89B3-BE6DE2645722}" = Cisco LEAP Module "{B014EE44-9197-4513-9613-71E6EB1B514E}" = Nikon Message Center 2 "{B2611F8A-EFE7-4E88-875D-19F0EFAE87E4}" = Windows Live PIMT Platform "{B99F248C-B4B3-4D61-9FFC-AE59A1F13723}" = Windows Live "{BF869638-76E3-DCBA-56B4-F23C3B34B92F}" = CCC Help Swedish "{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}" = PDF Settings CS6 "{BFECCF2A-F094-4066-8BFA-29CCBB7F6602}" = Driver & Application Installation "{C40F49B4-3534-EA2A-D151-EF3EEF57D974}" = CCC Help French "{CD95F661-A5C4-44F5-A6AA-ECDD91C2410A}" = WinZip 21.0 "{CDC1AB00-01FF-4FC7-816A-16C67F0923C0}" = Windows Live SOXE "{CDC53C27-5B4D-7B5B-E79D-AFF047EA684C}" = CCC Help Russian "{CEE0EFC9-B4AB-3BE5-DCB4-52BEC5A9B221}" = CCC Help Czech "{D1893000-EA77-493C-8DDD-E262436E959B}" = Windows Live SOXE Definitions "{D5C69738-B486-402E-85AC-2456D98A64E4}" = Assistant Mise à niveau de Windows 10 "{DD67BE4B-7E62-4215-AFA3-F123A800A389}" = Movie Maker "{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}" = Lenovo PowerDVD10 "{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10 "{E5248CF3-44C6-B5CD-82C7-B7E9D8323F78}" = CCC Help German "{E565FA93-5F15-7F9C-6947-493782D6F801}" = Catalyst Control Center Profiles Desktop "{E966DBE4-5075-465E-BA81-BC9A3A3204B3}" = Dependency Package Update "{EAEFA1B2-64E3-4B8E-942F-F57A73BC1CAE}_is1" = X-Rite Device ColorMunki Service "{EC89D1A6-6E5D-2EC3-CDEE-30F7D278A28A}" = CCC Help Polish "{EDA7DF79-7971-DA93-A881-49623D4CFDF6}" = CCC Help Chinese Traditional "{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU] "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{f65db027-aff3-4070-886a-0d87064aabb1}" = Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 "{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}" = Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 "{FA15B291-0A52-0117-1C1D-0B42E0A4E2C8}" = CCC Help Norwegian "{FC8A48A3-B122-42E1-8998-EDB571878B8D}" = Catalyst Control Center - Branding "{FDB30193-FDA0-3DAA-ACCA-A75EEFE53607}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 "Adobe AIR" = Adobe AIR "Adobe Flash Player NPAPI" = Adobe Flash Player 24 NPAPI "BitComet_x64" = BitComet 1.43 "ColorMunki Photo_is1" = ColorMunki Photo 1.1.1 "DDC Driver_is1" = DDC Driver 1.5 "InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}" = CyberLink PhotoDirector 3 "InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Lenovo Power2Go "InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}" = Lenovo Rescue System "InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}" = CyberLink PowerDirector 10 "InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}" = Lenovo PowerDVD10 "Lenovo App Shop 45246" = Lenovo App Shop "Maxthon3" = Maxthon Cloud Browser "Mozilla Firefox 53.0 (x86 fr)" = Mozilla Firefox 53.0 (x86 fr) "MozillaMaintenanceService" = Mozilla Maintenance Service "UninstallDeviceDll_is1" = UninstallDeviceDll 1.1 "WinLiveSuite" = Windows Live "WinRAR archiver" = WinRAR 5.40 (32-bit) [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-2688644151-3311041561-1592275616-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "OneDriveSetup.exe" = Microsoft OneDrive "SweetLabs_AP" = Host App Service "SweetLabs_Start_Menu" = Menu Démarrer [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 03/05/2017 08:51:56 | Computer Name = Lenovo-PC | Source = Microsoft-Windows-Immersive-Shell | ID = 5973 Description = Échec de l’activation de l’application Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy!App avec l’erreur : -2144927141 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel. Error - 03/05/2017 08:51:57 | Computer Name = Lenovo-PC | Source = Application Error | ID = 1000 Description = Nom de l’application défaillante ShellExperienceHost.exe, version : 10.0.14393.447, horodatage : 0x5819bf85 Nom du module défaillant : ShellExperienceHost.exe, version : 10.0.14393.447, horodatage : 0x5819bf85 Code d’exception : 0xc000027b Décalage d’erreur : 0x0000000000022e27 ID du processus défaillant : 0x8fc Heure de début de l’application défaillante : 0x01d2c40c0ca01bb5 Chemin d’accès de l’application défaillante : C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe Chemin d’accès du module défaillant: C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe ID de rapport : 0fd3c261-37d3-48d4-97f4-23e46945b4e0 Nom complet du package défaillant : Microsoft.Windows.ShellExperienceHost_10.0.14393.1066_neutral_neutral_cw5n1h2txyewy ID de l’application relative au package défaillant : App Error - 03/05/2017 08:51:57 | Computer Name = Lenovo-PC | Source = Microsoft-Windows-Immersive-Shell | ID = 5973 Description = Échec de l’activation de l’application Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI avec l’erreur : -2144927141 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel. Error - 03/05/2017 08:51:59 | Computer Name = Lenovo-PC | Source = Application Error | ID = 1000 Description = Nom de l’application défaillante SearchUI.exe, version : 10.0.14393.953, horodatage : 0x58ba5a2f Nom du module défaillant : SearchUI.exe, version : 10.0.14393.953, horodatage : 0x58ba5a2f Code d’exception : 0xc000027b Décalage d’erreur : 0x00000000001756a7 ID du processus défaillant : 0x1688 Heure de début de l’application défaillante : 0x01d2c40c0d59fa40 Chemin d’accès de l’application défaillante : C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe Chemin d’accès du module défaillant: C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe ID de rapport : 3b12807e-18a7-4252-841c-0666a8664789 Nom complet du package défaillant : Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy ID de l’application relative au package défaillant : CortanaUI Error - 03/05/2017 08:51:58 | Computer Name = Lenovo-PC | Source = Microsoft-Windows-Immersive-Shell | ID = 5973 Description = Échec de l’activation de l’application Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy!App avec l’erreur : -2144927141 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel. Error - 03/05/2017 08:52:00 | Computer Name = Lenovo-PC | Source = Microsoft-Windows-Immersive-Shell | ID = 5973 Description = Échec de l’activation de l’application Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI avec l’erreur : -2144927141 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel. Error - 03/05/2017 09:03:04 | Computer Name = Lenovo-PC | Source = Microsoft-Windows-Immersive-Shell | ID = 5973 Description = Échec de l’activation de l’application microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 avec l’erreur : -2144927141 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel. Error - 03/05/2017 09:06:50 | Computer Name = Lenovo-PC | Source = Microsoft-Windows-Immersive-Shell | ID = 5973 Description = Échec de l’activation de l’application Microsoft.People_8wekyb3d8bbwe!x4c7a3b7dy2188y46d4ya362y19ac5a5805e5x avec l’erreur : -2144927141 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel. Error - 03/05/2017 09:06:51 | Computer Name = Lenovo-PC | Source = Microsoft-Windows-Immersive-Shell | ID = 5973 Description = Échec de l’activation de l’application microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 avec l’erreur : -2144927141 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel. Error - 03/05/2017 09:07:06 | Computer Name = Lenovo-PC | Source = Microsoft-Windows-Immersive-Shell | ID = 5973 Description = Échec de l’activation de l’application Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App avec l’erreur : -2144927141 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel. Error - 03/05/2017 09:07:17 | Computer Name = Lenovo-PC | Source = Software Protection Platform Service | ID = 8198 Description = Échec de l’activation des licences (slui.exe) avec le code d’erreur suivant : hr=0x8007232B Arguments de la ligne de commande : RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=58e97c99-f377-4ef1-81d5-4ad5522b5fd8;NotificationInterval=1440;Trigger=NetworkAvailable Error - 03/05/2017 09:07:36 | Computer Name = Lenovo-PC | Source = Microsoft-Windows-Immersive-Shell | ID = 5973 Description = Échec de l’activation de l’application Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App avec l’erreur : -2144927141 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel. Error - 03/05/2017 09:07:40 | Computer Name = Lenovo-PC | Source = Application Error | ID = 1000 Description = Nom de l’application défaillante ShellExperienceHost.exe, version : 10.0.14393.447, horodatage : 0x5819bf85 Nom du module défaillant : ShellExperienceHost.exe, version : 10.0.14393.447, horodatage : 0x5819bf85 Code d’exception : 0xc000027b Décalage d’erreur : 0x0000000000022e27 ID du processus défaillant : 0xaf4 Heure de début de l’application défaillante : 0x01d2c40e3e34fdfa Chemin d’accès de l’application défaillante : C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe Chemin d’accès du module défaillant: C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe ID de rapport : 794038fb-4384-4b01-8324-ce34e022a214 Nom complet du package défaillant : Microsoft.Windows.ShellExperienceHost_10.0.14393.1066_neutral_neutral_cw5n1h2txyewy ID de l’application relative au package défaillant : App Error - 03/05/2017 09:07:41 | Computer Name = Lenovo-PC | Source = Microsoft-Windows-Immersive-Shell | ID = 5973 Description = Échec de l’activation de l’application Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy!App avec l’erreur : -2144927141 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel. Error - 03/05/2017 09:11:14 | Computer Name = Lenovo-PC | Source = Microsoft-Windows-Immersive-Shell | ID = 5973 Description = Échec de l’activation de l’application microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 avec l’erreur : -2144927141 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel. Error - 03/05/2017 09:21:51 | Computer Name = Lenovo-PC | Source = Microsoft-Windows-Immersive-Shell | ID = 5973 Description = Échec de l’activation de l’application microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 avec l’erreur : -2144927141 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel. Error - 03/05/2017 09:23:47 | Computer Name = Lenovo-PC | Source = SideBySide | ID = 16842787 Description = La création du contexte d’activation a échoué pour « C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest ». Erreur dans le fichier de manifeste ou de stratégie « C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL » à la ligne 1. L’identité de composant trouvé dans le manifeste ne correspond pas à celle du composant demandé. La référence est UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0". La définition est UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0". Utilisez sxstrace.exe pour un diagnostic détaillé. [ System Events ] Error - 03/05/2017 10:14:31 | Computer Name = Lenovo-PC | Source = DCOM | ID = 10010 Description = Error - 03/05/2017 10:14:42 | Computer Name = Lenovo-PC | Source = DCOM | ID = 10010 Description = Error - 03/05/2017 10:14:47 | Computer Name = Lenovo-PC | Source = DCOM | ID = 10010 Description = Error - 03/05/2017 10:14:49 | Computer Name = Lenovo-PC | Source = DCOM | ID = 10010 Description = Error - 03/05/2017 10:15:09 | Computer Name = Lenovo-PC | Source = DCOM | ID = 10010 Description = Error - 03/05/2017 10:15:10 | Computer Name = Lenovo-PC | Source = DCOM | ID = 10010 Description = Error - 03/05/2017 10:15:11 | Computer Name = Lenovo-PC | Source = DCOM | ID = 10010 Description = Error - 03/05/2017 10:15:13 | Computer Name = Lenovo-PC | Source = DCOM | ID = 10010 Description = Error - 03/05/2017 10:15:25 | Computer Name = Lenovo-PC | Source = DCOM | ID = 10010 Description = Error - 03/05/2017 10:18:44 | Computer Name = Lenovo-PC | Source = DCOM | ID = 10010 Description = < End of report >