OTL Extras logfile created on: 26/03/2019 20:21:29 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Jean-Marie\Desktop 64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation Internet Explorer (Version = 9.10.9200.16433) Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy 3,57 Gb Total Physical Memory | 1,65 Gb Available Physical Memory | 46,28% Memory free 5,40 Gb Paging File | 2,82 Gb Available in Paging File | 52,21% Paging File free Paging file location(s): c:\pagefile.sys 400 4096 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 458,30 Gb Total Space | 151,10 Gb Free Space | 32,97% Space Free | Partition Type: NTFS Drive D: | 13,06 Gb Total Space | 0,99 Gb Free Space | 7,56% Space Free | Partition Type: NTFS Drive E: | 59,50 Gb Total Space | 53,57 Gb Free Space | 90,04% Space Free | Partition Type: exFAT Drive H: | 119,50 Gb Total Space | 119,41 Gb Free Space | 99,92% Space Free | Partition Type: NTFS Drive I: | 4657,40 Gb Total Space | 761,99 Gb Free Space | 16,36% Space Free | Partition Type: NTFS Drive J: | 14,52 Gb Total Space | 7,82 Gb Free Space | 53,87% Space Free | Partition Type: FAT32 Drive K: | 57,60 Gb Total Space | 2,73 Gb Free Space | 4,75% Space Free | Partition Type: NTFS Drive M: | 14,91 Gb Total Space | 14,81 Gb Free Space | 99,33% Space Free | Partition Type: FAT32 Drive N: | 1,86 Gb Total Space | 0,47 Gb Free Space | 25,42% Space Free | Partition Type: FAT32 Drive O: | 115,66 Gb Total Space | 115,66 Gb Free Space | 100,00% Space Free | Partition Type: FAT32 Drive Q: | 1,83 Gb Total Space | 0,00 Gb Free Space | 0,03% Space Free | Partition Type: FAT Drive U: | 7,20 Gb Total Space | 0,07 Gb Free Space | 0,98% Space Free | Partition Type: FAT32 Drive Z: | 4657,40 Gb Total Space | 761,77 Gb Free Space | 16,36% Space Free | Partition Type: NTFS Computer Name: LFS_HYPER_UEFM | User Name: Jean-Marie | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 360 Days [color=#E56717]========== Extra Registry (All) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .chm[@ = chm.file] -- C:\Windows\hh.exe (Microsoft Corporation) .cpl[@ = cplfile] -- C:\Windows\SysNative\control.exe (Microsoft Corporation) .hlp[@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation) .hta[@ = htafile] -- C:\Windows\SysWOW64\mshta.exe (Microsoft Corporation) .html[@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation) .inf[@ = inffile] -- C:\Windows\SysNative\NOTEPAD.EXE (Microsoft Corporation) .ini[@ = inifile] -- C:\Windows\SysNative\NOTEPAD.EXE (Microsoft Corporation) .url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation) .js[@ = JSFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation) .jse[@ = JSEFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation) .reg[@ = regfile] -- C:\Windows\regedit.exe (Microsoft Corporation) .txt[@ = txtfile] -- C:\Windows\SysNative\NOTEPAD.EXE (Microsoft Corporation) .vbe[@ = VBEFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation) .vbs[@ = VBSFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation) .wsf[@ = WSFFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation) .wsh[@ = WSHFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .bat [@ = batfile] -- "%1" %* .chm [@ = chm.file] -- C:\Windows\hh.exe (Microsoft Corporation) .cmd [@ = cmdfile] -- "%1" %* .com [@ = comfile] -- "%1" %* .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) .exe [@ = exefile] -- "%1" %* .hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation) .hta [@ = htafile] -- C:\Windows\SysWOW64\mshta.exe (Microsoft Corporation) .html [@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation) .inf [@ = inffile] -- C:\Windows\SysWow64\NOTEPAD.EXE (Microsoft Corporation) .ini [@ = inifile] -- C:\Windows\SysWow64\NOTEPAD.EXE (Microsoft Corporation) .url [@ = InternetShortcut] -- C:\Windows\SysWow64\rundll32.exe (Microsoft Corporation) .js [@ = JSFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation) .jse [@ = JSEFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation) .pif [@ = piffile] -- "%1" %* .reg [@ = regfile] -- C:\Windows\SysWow64\regedit.exe (Microsoft Corporation) .scr [@ = scrfile] -- "%1" /S .txt [@ = txtfile] -- C:\Windows\SysWow64\NOTEPAD.EXE (Microsoft Corporation) .vbe [@ = VBEFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation) .vbs [@ = VBSFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation) .wsf [@ = WSFFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation) .wsh [@ = WSHFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation) batfile [open] -- "%1" %* batfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation) chm.file [open] -- "%SystemRoot%\hh.exe" %1 (Microsoft Corporation) cmdfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation) cmdfile [open] -- "%1" %* cmdfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation) comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation) htafile [open] -- C:\Windows\SysWOW64\mshta.exe "%1" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}%U{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5} %* (Microsoft Corporation) htmlfile [edit] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [print] -- rundll32.exe %SystemRoot%\system32\mshtml.dll,PrintHTML "%1" (Microsoft Corporation) http [open] -- "C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe" -- "%1" (AVG Technologies) https [open] -- "C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe" -- "%1" (AVG Technologies) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) inffile [open] -- "%SystemRoot%\system32\NOTEPAD.EXE" %1 (Microsoft Corporation) inffile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation) inifile [open] -- "%SystemRoot%\system32\NOTEPAD.EXE" %1 (Microsoft Corporation) inifile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) jsfile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation) jsfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation) jsfile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation) jsefile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation) jsefile [open] -- C:\Windows\System32\WScript.exe "%1" %* (Microsoft Corporation) jsefile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation) piffile [open] -- "%1" %* regfile [edit] -- %SystemRoot%\system32\notepad.exe "%1" (Microsoft Corporation) regfile [open] -- regedit.exe "%1" (Microsoft Corporation) regfile [merge] -- Reg Error: Key error. regfile [print] -- %SystemRoot%\system32\notepad.exe /p "%1" (Microsoft Corporation) scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. txtfile [open] -- "%SystemRoot%\system32\NOTEPAD.EXE" %1 (Microsoft Corporation) txtfile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation) txtfile [printto] -- %SystemRoot%\system32\notepad.exe /pt "%1" "%2" "%3" "%4" (Microsoft Corporation) vbefile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation) vbefile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation) vbefile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation) vbsfile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation) vbsfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation) vbsfile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation) wsffile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation) wsffile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation) wsffile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation) wshfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation) Unknown [openas] -- "C:\Users\Jean-Marie\AppData\Local\CompuClever\Ultra File Opener\filextmgr.exe" %1 Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN) Directory [ByteFence Folder Scan] -- "C:\Program Files\ByteFence\ByteFenceScan.exe" /scan:"%1" (Byte Technologies LLC) Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [DAP] -- C:\Program Files (x86)\Disk Analyzer Pro\DiskAnalyzerPro.exe "%1" (Systweak) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Force Delete] -- "C:\Program Files\UVK - Ultra Virus Killer\UVK_en.exe" "%1" (Carifred.com) Directory [GOMAudio.Add] -- C:\Program Files (x86)\GRETECH\GOMAudio\GOMA.exe /add "%1" (GOM & Company) Directory [GOMAudio.AddCur] -- C:\Program Files (x86)\GRETECH\GOMAudio\GOMA.exe /addcur "%1" (GOM & Company) Directory [GOMAudio.Play] -- C:\Program Files (x86)\GRETECH\GOMAudio\GOMA.exe "%1" (GOM & Company) Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN) Folder [open] -- C:\Windows\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation) batfile [open] -- "%1" %* batfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation) chm.file [open] -- "%SystemRoot%\hh.exe" %1 (Microsoft Corporation) cmdfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation) cmdfile [open] -- "%1" %* cmdfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation) comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation) htafile [open] -- C:\Windows\SysWOW64\mshta.exe "%1" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}%U{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5} %* (Microsoft Corporation) htmlfile [edit] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [print] -- rundll32.exe %SystemRoot%\system32\mshtml.dll,PrintHTML "%1" (Microsoft Corporation) http [open] -- "C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe" -- "%1" (AVG Technologies) https [open] -- "C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe" -- "%1" (AVG Technologies) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) inffile [open] -- "%SystemRoot%\system32\NOTEPAD.EXE" %1 (Microsoft Corporation) inffile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation) inifile [open] -- "%SystemRoot%\system32\NOTEPAD.EXE" %1 (Microsoft Corporation) inifile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) jsfile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation) jsfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation) jsfile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation) jsefile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation) jsefile [open] -- C:\Windows\System32\WScript.exe "%1" %* (Microsoft Corporation) jsefile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation) piffile [open] -- "%1" %* regfile [edit] -- %SystemRoot%\system32\notepad.exe "%1" (Microsoft Corporation) regfile [open] -- regedit.exe "%1" (Microsoft Corporation) regfile [merge] -- Reg Error: Key error. regfile [print] -- %SystemRoot%\system32\notepad.exe /p "%1" (Microsoft Corporation) scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. txtfile [open] -- "%SystemRoot%\system32\NOTEPAD.EXE" %1 (Microsoft Corporation) txtfile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation) txtfile [printto] -- %SystemRoot%\system32\notepad.exe /pt "%1" "%2" "%3" "%4" (Microsoft Corporation) vbefile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation) vbefile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation) vbefile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation) vbsfile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation) vbsfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation) vbsfile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation) wsffile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation) wsffile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation) wsffile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation) wshfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation) Unknown [openas] -- "C:\Users\Jean-Marie\AppData\Local\CompuClever\Ultra File Opener\filextmgr.exe" %1 Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN) Directory [ByteFence Folder Scan] -- "C:\Program Files\ByteFence\ByteFenceScan.exe" /scan:"%1" (Byte Technologies LLC) Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [DAP] -- C:\Program Files (x86)\Disk Analyzer Pro\DiskAnalyzerPro.exe "%1" (Systweak) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Force Delete] -- "C:\Program Files\UVK - Ultra Virus Killer\UVK_en.exe" "%1" (Carifred.com) Directory [GOMAudio.Add] -- C:\Program Files (x86)\GRETECH\GOMAudio\GOMA.exe /add "%1" (GOM & Company) Directory [GOMAudio.AddCur] -- C:\Program Files (x86)\GRETECH\GOMAudio\GOMA.exe /addcur "%1" (GOM & Company) Directory [GOMAudio.Play] -- C:\Program Files (x86)\GRETECH\GOMAudio\GOMA.exe "%1" (GOM & Company) Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN) Folder [open] -- C:\Windows\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error. [color=#E56717]========== Security Center Settings ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 "UpdatesDisableNotify" = 0 "FirewallDisableNotify" = 0 "AntiVirusDisableNotify" = 0 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Feature] "DisableAvCheck" = 1 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = CE 37 E6 AF FF 6A CD 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "AutoUpdateDisableNotify" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [color=#E56717]========== System Restore Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService] "Start" = 2 [color=#E56717]========== Firewall Settings ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "EnableFirewall" = 1 [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{037EB0A1-77AE-4AC3-9476-1576A01C18E1}" = lport=137 | protocol=17 | dir=in | app=system | "{07AC4ECD-FE64-4B8E-ACA7-B5CDDAE16D6D}" = rport=443 | protocol=6 | dir=out | app=c:\program files\malwarebytes\windows firewall control\wfc.exe | "{335EE322-2BAA-41BB-9E72-207347EBF3ED}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=c:\windows\system32\svchost.exe | "{56B7736F-BBB8-469E-AF77-F2B248F1EEB1}" = rport=123 | protocol=17 | dir=out | svc=w32time | app=c:\windows\system32\svchost.exe | "{5B556F0A-7E92-4F89-BA8B-CF17AB94CA79}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=c:\windows\system32\svchost.exe | "{5C738DD4-7B21-45F0-AAB5-340984A1DFDB}" = rport=137 | protocol=17 | dir=out | app=system | "{5CD6495B-EEB1-4CA5-AC53-91EECAA052FC}" = rport=443 | protocol=6 | dir=out | app=c:\windows\system32\svchost.exe | "{6BC6CE4B-EAC8-474C-AB95-9F8F9448E841}" = rport=445 | protocol=6 | dir=out | app=system | "{74BF3BE0-173F-40D2-A305-B82EB2390755}" = lport=5353 | protocol=17 | dir=in | app=c:\program files (x86)\avg\browser\application\avgbrowser.exe | "{82B63B41-4EA2-49B8-9245-4E861AA53267}" = rport=139 | protocol=6 | dir=out | app=system | "{AABB9C4E-2CF9-44EC-BE3D-7D58B0642D27}" = lport=445 | protocol=6 | dir=in | app=system | "{F1B097C0-2208-4723-ADC9-12015FB87597}" = rport=53 | protocol=17 | dir=out | svc=dnscache | app=c:\windows\system32\svchost.exe | "{FF6E1AC9-4B50-4CE9-AC8E-ED59B1CCC355}" = rport=67 | protocol=17 | dir=out | svc=dhcp | app=c:\windows\system32\svchost.exe | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{0761C696-A627-475F-A0C6-0709480941B2}" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | "{0D2E74D9-EF29-4983-98A5-F56994E44BCA}" = protocol=6 | dir=in | app=c:\program files (x86)\easeus\easeus todo pctrans\bin\uexperice.exe | "{273815E1-482E-4B72-993C-23890F73E861}" = protocol=6 | dir=in | app=c:\program files (x86)\minitool shadowmaker\agentservice.exe | "{30032F8E-E191-4E4A-B3AE-E5C0F130E08B}" = protocol=1 | dir=out | app=system | "{38838F27-06B5-4261-AE64-16754055EE25}" = protocol=58 | dir=in | app=system | "{5D0135A6-48C9-4B2E-9293-DA4F190ED0CE}" = dir=out | app=c:\windows\system32\spoolsv.exe | "{6FEF2CF2-E836-418B-9466-8A2326FEEAAE}" = protocol=58 | dir=out | app=system | "{7435868B-C731-4BE6-8BE4-0A3EE6E1BC75}" = protocol=6 | dir=in | app=c:\program files (x86)\easeus\easeus todo pctrans\bin\pctrans.exe | "{87BB37FA-6D55-42C6-8F5B-D9A09471613B}" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | "{8F02E936-A08A-4B93-98CC-89B9C88F3C3E}" = protocol=1 | dir=in | app=system | "{C32B85EE-0E79-40EA-9FE2-C5014333582A}" = protocol=17 | dir=in | app=c:\program files (x86)\easeus\easeus todo pctrans\bin\pctrans.exe | "{C561327F-3DA1-48DF-A6C5-EFFD4138E92A}" = protocol=17 | dir=in | app=c:\program files (x86)\easeus\easeus todo pctrans\bin\uexperice.exe | "{DA9B4CDD-5394-4953-9219-9015368A3B80}" = dir=in | app=c:\users\jean-marie\appdata\local\temp\7zipsfx.001\bin\tools\aria2c.exe | "{F7820B45-438E-4096-BFF4-2A76F743CF47}" = protocol=17 | dir=in | app=c:\program files (x86)\minitool shadowmaker\agentservice.exe | "TCP Query User{6737F3C2-A8CC-4D09-8001-05D95BD939AF}C:\program files (x86)\spyware terminator\spywareterminatorupdate.exe" = protocol=6 | dir=in | app=c:\program files (x86)\spyware terminator\spywareterminatorupdate.exe | "TCP Query User{F8FA92EE-3140-4220-B884-13E8AB781260}C:\users\jean-marie\downloads\sdi_r1811\sdi_x64_r1811.exe" = protocol=6 | dir=in | app=c:\users\jean-marie\downloads\sdi_r1811\sdi_x64_r1811.exe | "UDP Query User{068AB044-1D2E-47D1-8843-59D1CBB7F5B0}C:\program files (x86)\spyware terminator\spywareterminatorupdate.exe" = protocol=17 | dir=in | app=c:\program files (x86)\spyware terminator\spywareterminatorupdate.exe | "UDP Query User{7946CF0A-F45D-4922-894A-5E994D319BF1}C:\users\jean-marie\downloads\sdi_r1811\sdi_x64_r1811.exe" = protocol=17 | dir=in | app=c:\users\jean-marie\downloads\sdi_r1811\sdi_x64_r1811.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6}_is1" = MiniTool Partition Wizard Free 10.3 "{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64) "{0CB84A7D-9697-4526-A819-60FB050E8F05}" = Apple Application Support (64 bits) "{0DA20600-6130-443B-9D4B-F30520315FA6}" = Services d’impression Bonjour "{0FA995CC-C849-4755-B14B-5404CC75DC24}" = Energy Star "{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 "{221D6DB4-46E2-333C-B09B-5F49351D0980}" = Microsoft Visual C++ 2017 x64 Minimum Runtime - 14.13.26020 "{25058321-C33E-496B-8915-6FD64D362CAF}" = Windows Live MIME IFilter "{26A24AE4-039D-4CA4-87B4-2F64180191F0}" = Java 8 Update 191 (64-bit) "{26A24AE4-039D-4CA4-87B4-2F64180201F0}" = Java 8 Update 201 (64-bit) "{29988DC6-9C4A-49B2-AC86-5C380B29ADB9}_is1" = Loaris Trojan Remover 3.0.80 "{2DFD8316-9EF1-3210-908C-4CB61961C1AC}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 "{2E58F5E0-B5EF-844C-5B18-4C21F800CAD6}" = ccc-utility64 "{37B8F9C7-03FB-3253-8781-2517C99D7C00}" = Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 "{37E567C7-EB03-4349-B068-1FD0A2CD55FE}_is1" = Isoo Backup 2.2.0 "{40F6FB81-1B50-443B-A8E0-BC70E62CFB21}" = Adblock Plus pour IE (32-bits et 64-bits) "{44DE19DF-AA86-497A-9CCA-4F52D0BFF9A8}" = AdAwareInstaller "{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 "{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime "{5C7A5F94-02E9-4C5D-A594-B1F10865965A}" = AntimalwareEngine "{5F769CF4-5263-4C7B-AEB2-C06A73AE4428}" = AMD Catalyst Install Manager "{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 "{5FFF7119-74E8-442E-970E-50BAD81D5371}" = AdAwareUpdater "{5FFF7119-74E8-442E-970E-50BAD81D5371}_AdAwareUpdater" = adaware antivirus "{6E14E6D6-3175-4E1A-B934-CAB5A86367CD}" = HP Postscript Converter "{77F8C879-88CD-4145-945A-541C35285285}" = Apple Mobile Device Support "{7E607B62-1788-40CB-BADB-DC1511627F6C}_is1" = Boris FX Continuum Plug-ins 11 for Cyberlink "{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 "{84A89263-AA96-41D0-8345-77A704A76B4C}" = DriverUpdate "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8D0A0EC6-9A3C-354F-9BFC-A61E96BE1846}" = Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - FRA "{929FBD26-9020-399B-9A7A-751D61F0B942}" = Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 "{9495AEB4-AB97-39DE-8C42-806EEF75ECA7}" = Microsoft Visual Studio 2010 Tools for Office Runtime (x64) "{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting "{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}" = Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 "{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64) "{B91110FB-33B4-468B-90C2-4D5E8AE3FAE1}" = Bonjour "{BFF61907-AA2D-3A26-8666-98D956A62ABC}" = Visual C++ 10.0 CRT (x64) "{C5ECDB9A-D9B0-3107-BA85-1269998A5B3E}" = Microsoft Visual C++ 2017 x64 Additional Runtime - 14.13.26020 "{CC48DE1C-8EC2-43BC-9201-29701CD9AE13}_is1" = Restore Point Creator version 7.1 "{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}" = Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 "{D4378A80-C713-11DF-9399-005056C00008}" = Paragon Migrate OS to SSD™ 4.0 "{E466DA1C-39B7-4FA7-98F5-3B7910976C3D}" = Google Earth Pro "{E4D6CCF2-0AAF-4B9C-9DE5-893EDC9B4BAA}" = HP Registration Service "{E9FA781F-3E80-4399-825A-AD3E11C28C77}" = MSVCRT110_amd64 "{F63A7ADE-507E-4944-9C74-8893BAE11728}" = STOPzilla AntiVirus "{FC4D0316-D3D8-4c07-9E45-7A2A4D75E069}" = CPCTuneUp "8B3D7924-ED89-486B-8322-E8594065D5CB_is1" = RogueKiller version 13.1.6.0 "Bandizip" = Bandizip "C4E7EE54-826F-41C4-BE3C-375CC70DC1D8_is1" = UCheck version 3.0.6.0 "CCleaner" = CCleaner "EPSON XP-710 Series" = EPSON XP-710 Series Printer Uninstall "Ext2Fsd_is1" = Ext2Fsd 0.69 "Ext2Ifs_for_NT602" = Ext2 IFS 1.12 for Windows 8/8.1/Server 2012/2012 R2 "Folder Marker Free_is1" = Folder Marker Free "InstallSafe" = InstallSafe "MAGIX VR-X Player_is1" = MAGIX VR-X Player "maman kabylle" = maman kabylle "Microsoft Visual Studio 2010 Tools for Office Runtime (x64)" = Microsoft Visual Studio 2010 Tools for Office Runtime (x64) "Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - FRA" = Module linguistique Microsoft Visual Studio 2010 Tools pour Office Runtime (x64) - FRA "Mozilla Firefox 65.0.2 (x64 en-US)" = Mozilla Firefox 65.0.2 (x64 en-US) "MozillaMaintenanceService" = Mozilla Maintenance Service "MultiCommander x64" = MultiCommander (x64) "Nightly 65.0a1 (x64 fr)" = Nightly 65.0a1 (x64 fr) "Notepad++" = Notepad++ (64-bit x64) "Pale Moon 28.4.0 (x64 en-US)" = Pale Moon 28.4.0 (x64 en-US) "PotPlayer64" = PotPlayer-64 bit "proDAD-Adorage-3.0" = proDAD Adorage 3.0 (64bit) "Restoro" = Restoro "Stellar OST to PST Converter_is1" = Stellar OST to PST Converter "TAP-Windows" = TAP-Windows 9.21.2 "TeraCopy_is1" = TeraCopy version 3.26 "USB Disk Storage Format Tool_is1" = USB Disk Storage Format Tool 6.0 "UVK - Ultra virus killer" = UVK - Ultra Virus Killer "VLC media player" = VLC media player "Windows Firewall Control" = Malwarebytes Windows Firewall Control "WinRAR archiver" = WinRAR 5.61 (64-bit) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{00F9DB8C-65D7-4D47-AB5F-F698EE38580D}" = Windows Live UX Platform "{020C6D65-955A-4F76-882A-EC320CAF0103}" = Windows Live Writer Resources "{04BE4035-3C8E-4B48-BFB8-1655849C0C8B}" = Windows Live Writer "{050d4fc8-5d48-4b8f-8972-47c82c46020f}" = Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 "{06A965CC-D8A3-4A33-AA9A-78292E9DBBC8}" = Video Explosion Ultimate "{07AAB66E-4718-422D-9218-4AFB3C922A71}" = Photo Gallery "{07FA4960-B038-49EB-891B-9F95930AA544}" = HP Customer Experience Enhancements "{09BE17DC-59D2-FD28-371D-DCE0AE76CE75}" = CCC Help Korean "{0A11EA01-7909-E272-BFA6-BC39E55F240A}_is1" = Ashampoo Snap 10 "{0A11EA01-D628-EEFD-B5E8-864238AE9105}_is1" = Ashampoo Snap 9 "{0B11329E-1DDE-448A-95E6-AA003C63A6A7}_is1" = MiniCopier "{0BE9E708-5DC0-4963-9CFD-0AA519090E79}" = Junk Mail filter update "{0CF7D22B-977C-43B2-9219-E03017FBAC6D}" = Nero Recode Help (CHM) "{1028AD34-EB8A-4136-9A93-27FC60FD0A40}" = Epson Software Updater "{104D7F23-A414-EE6D-315E-A07CB75ADEEE}" = CCC Help English "{10E33ABF-D7FB-4F47-900A-7973854AB45A}" = Adobe AIR "{11FC9C17-17FF-4F2B-9D5A-4DE097629F00}}_is1" = Kotobee Reader version 1.5.0 "{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}" = Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 "{196467F1-C11F-4F76-858B-5812ADC83B94}" = MSXML 4.0 SP3 Parser "{1A7CF3BE-0D4A-33DF-DFD9-824487726365}" = CCC Help German "{1B6F5E51-575E-4693-BCA2-7543570D076D}" = Nero Kwik Themes Basic "{1BC4C58D-D726-172B-DA2C-BBE6AE5DEB76}" = CCC Help Finnish "{1D6432B4-E24D-405E-A4AB-D7E6D088CBC9}" = Windows Live Photo Common "{1E6AF4B4-0910-4821-CB20-F8FD7AA09CCB}" = CCC Help Russian "{1F112313-BC47-43CF-8898-7BAD6217A074}" = BitCopy "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{1FD090C1-5C0F-4764-AE25-176AECA5DEAB}_is1" = Systools EPUB Viewer version 1.0 "{21764A96-6748-4B83-89E7-7A5063BF156C}" = Movie Maker "{2432E589-6256-4513-B0BF-EFA8E325D5F0}" = Nero SharedVideoCodecs "{2452C59D-5140-4A9A-A97F-B925390619E1}" = Silent Install Builder 5 "{29F67D84-3A70-456E-806A-52301B02070B}" = Nero Effects Basic "{2E2526C8-51A8-F6EB-8289-6787E880CE27}" = Catalyst Control Center Localization All "{2EE6622F-A2AC-4EA6-8E90-7288F1348C82}" = Serif DrawPlus X8 (32 bits) "{3064B250-EDCA-4E69-A62A-4DA32225E4BE}" = Morae Recorder "{308F2F8C-9D33-4B22-8A6C-D9C13DBEF8C6}" = Apple Application Support (32 bits) "{3361D415-BA35-4143-B301-661991BA6219}" = MyEpson Portal "{33B992ED-B59B-4E25-9F3F-CF2D79BBA914}" = Windows Live UX Platform Language Pack "{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 "{34CCB0FE-A68A-4C97-8F33-45B8BBDAC4B8}}_is1" = SysTools VHDX Viewer v5.0 "{36DA8969-4DCD-48FF-894A-6BD3936050C3}" = Nero Blu-ray Player Help (CHM) "{3751BF9B-5F23-4976-AA62-1BF4D791DCFE}" = Photo Common "{402ED4A1-8F5B-387A-8688-997ABF58B8F2}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 "{405147F7-FCC5-499B-A27E-EA6BD4A80435}_is1" = Aimersoft Helper Compact 2.5.2 "{40E51513-D917-4563-84F6-4EF6ADD46E2F}" = Nero Recode "{41C61308-6CFD-4D54-AB6A-7136ED08A18E}" = Windows Live Communications Platform "{429D6E81-8E1E-42E6-8AB9-025DD9157F9B}" = Paragon HFS+ for Windows "{439B34FF-F74E-4807-B5E2-4B758551DA6B}" = Galerie de photos "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4C7CC666-B810-4EA9-895C-7E88AA6A32BE}_is1" = Downloadcrew UpdateScanner "{4CA46F9F-174C-4766-9EA2-2325DF414B9E}" = Nero Express Help (CHM) "{527BBE2F-1FED-3D8B-91CB-4DB0F838E69E}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 "{5325F0CD-8B2C-40BA-B597-89A3FB09B83C}" = Morae Manager "{5446D3AF-B060-49B6-9535-F300E1532022}" = Nero Video Help (CHM) "{5575EADE-4685-4E15-A9CD-6036BC2A3F75}_is1" = KeyCrypt SDK version 1.8.1.199 "{55A41219-9B22-4098-BAE7-AE289B3C569A}_is1" = Panda USB Vaccine 1.0.1.16 "{56736259-613E-4A3B-B428-6235F2E76F44}_is1" = Spyware Terminator 2015 "{581DCE84-1948-4891-A4A7-A1222CC137C5}" = Nero RescueAgent "{5909A89E-C97F-407C-AE2B-47BDED86BF5D}" = Prerequisite installer "{5AD25D5C-C813-146B-4FB0-76561F7875B7}" = CCC Help Hungarian "{5B4886EE-5A95-C257-A68F-2DCADE47A273}" = CCC Help Norwegian "{5c045b7f-e561-4794-91f8-c6cda0893107}" = Microsoft Visual C++ 2017 Redistributable (x86) - 14.13.26020 "{5DB58618-7021-C650-EE8A-58CD1FAA95F9}" = CCC Help Thai "{5F5ACD0C-A454-32A7-E206-EE89B1510128}" = CCC Help Danish "{5fd4f6d8-26d6-43b6-9b95-116b69ee0a69}" = Camtasia 2018 "{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}" = Google Update Helper "{628406E1-62CD-4AF5-8D64-DA74DD47BCA9}_is1" = SysTools Gmail Backup v5.0 "{659CB81C-B54E-4DF1-B618-F35777393A54}" = Windows Live Installer "{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}" = Nero Update "{67087BB4-19B4-C169-3E52-2BED796D8AB3}" = CCC Help Swedish "{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update "{6AE04BB9-A455-16ED-5806-DCFBB14505D6}" = CCC Help Dutch "{6F340107-F9AA-47C6-B54C-C3A19F11553F}" = Hewlett-Packard ACLM.NET v1.2.0.0 "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{714E162E-CD4F-4F1B-8302-7F5179409C25}" = Windows Live Writer "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{7474548C-E456-4818-8ED0-4A1F00EF77A1}" = Catalyst Control Center - Branding "{7474cd6e-76cc-4257-837e-5b9261e526af}" = Microsoft Visual C++ 2017 Redistributable (x64) - 14.13.26020 "{75CA8AAE-5346-4312-A9A8-5CF89955930F}" = Nero MediaHome Help (CHM) "{76DFBEB9-9E55-8CC6-B99A-9CEFAC573A1F}" = CCC Help Spanish "{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}" = LiveUpdate BVRP Software "{79087BA9-C5B5-4081-A374-310AC02E2896}" = ProtectStar(TM) iShredder 7 "{7A3F3715-7953-4247-8B5C-5D03050B9EA9}" = U Webinar "{7CCFADC3-60C4-4DD2-A843-171FAFB9467A}" = Digital Video Duplicator "{7D095455-D971-4D4C-9EFD-9AF6A6584F3A}" = Bing Bureau "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{839D1577-5415-6C89-6642-515DFFE6432F}" = CCC Help Czech "{84B13BF6-F7AF-198E-0E77-DCA4027B9D19}" = CCC Help Japanese "{895D5198-C5DB-375E-86AB-133F4DAA9FE2}" = Microsoft Visual C++ 2017 x86 Additional Runtime - 14.13.26020 "{8C2CA0A8-E1AB-41EB-BCA8-0680B5D2C292}" = CyberLink PhotoDirector 10 "{8C784F8B-89D0-4A59-A000-7EEF129E1574}" = Jing "{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT "{8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}" = MSVCRT110 "{8e70e4e1-06d7-470b-9f74-a51bef21088e}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 "{8F271F6C-6E7B-3D0A-951B-6E7B694D78BD}" = Microsoft Visual C++ 2017 x86 Minimum Runtime - 14.13.26020 "{8F51500B-CC44-417B-B6A4-F294CB29A29B}" = STOPzilla AntiMalware "{90EBED93-C9D9-4868-A74A-664B4EFD61E7}" = Formation Complète à Windows 8 "{91B33C97-87C8-5585-2940-1AE1120D4DCC}_is1" = Ashampoo Privacy Protector v.1.0.2 "{91EA0E43-82A0-4DE0-A46C-C7FCC4D989E6}" = Windows Live Mail "{949BE04F-D7E8-4C19-9F89-8B304AB4308A}_is1" = AVG TuneUp "{9612F0F6-A154-49A2-9CCB-A1C1AA57D719}" = Nero MediaHome "{98029AF9-D2BD-439A-8ED7-AA60E232A49D}" = Windows Live Messenger "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{9C563B28-212C-4293-9DBC-41439D7D35D8}" = Nero Burning Core "{9F45A8A5-0487-4aa6-A67E-46E103C927AD}" = InPixio Photo Clip 8 Demo "{A2FE691E-3F8E-4E30-AA7D-FF17AC77EA87}" = Nero Blu-ray Player "{A666A6E7-3A51-E289-559B-BF3486036ABF}" = CCC Help Turkish "{A677B60C-9707-4D9C-AB9C-BF856A0832AC}" = Reasonable NoClone 2014 "{A7A0BF2E-31CC-49E3-9913-52C503EB969D}" = Nero Audio Pack 1 "{A84E754A-EA45-4A31-A4D5-57D1EA1760D5}" = Nero Disc to Device "{a87f7f92-7bf2-4986-aff2-defc98641112}" = Ad-Aware Browser "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = AVG Update Helper "{AB4C8F7A-B076-4F09-BE19-0F40D8790990}" = Serif PagePlus X9 (32 bits) "{ABA39912-380C-0EF3-C820-868115EB1DAC}" = Catalyst Control Center InstallProxy "{ABC88553-8770-4B97-B43E-5A90647A5B63}" = Nero ControlCenter "{AC7A441A-353F-75F6-6ABA-3BF98161B530}" = CCC Help Greek "{ACE49D50-19CD-44A6-B192-46F985283B26}" = Nero PiP Effects Basic "{B175520C-86A2-35A7-8619-86DC379688B9}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 "{B2611F8A-EFE7-4E88-875D-19F0EFAE87E4}" = Windows Live PIMT Platform "{B6480ED1-448E-813B-4FE0-BED811D1C01F}" = CCC Help French "{B775C26B-EAA8-4A11-ACBF-76E52DF6B805}" = Windows Live Mail "{B8C30F0F-1F23-49E1-A3ED-44DE17660EE2}_is1" = Icecream Ebook Reader version 5.19 "{B99F248C-B4B3-4D61-9FFC-AE59A1F13723}" = Windows Live "{BC1CA9D9-A487-4A75-8B4D-C9E447718F41}_is1" = SysTools PDF Watermark Remover v 1.0 "{BD0E78AC-54A5-429A-BAF3-29D1A945A20C}" = Nero Video "{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 "{BDBF9803-B57C-AB2A-8830-CBED34703840}" = Catalyst Control Center Graphics Previews Common "{BEBEE34D-84A2-4EDD-8BEA-96CC54371263}" = Nero Core Components "{BFB6DE5F-9BEA-1FBB-3584-2C78639CE59A}" = CCC Help Polish "{BFDC3B26-7DB0-43D3-BC84-7E9649C157EA}_is1" = Pegasun System Utilities "{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" = Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 "{CDC1AB00-01FF-4FC7-816A-16C67F0923C0}" = Windows Live SOXE "{CDFE8F95-F80F-4115-9C3F-0E1FD8F9F58C}" = Nero ControlCenter Help (CHM) "{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64 "{D15DF9B0-3A98-4BEF-B7D5-FC3AEA473628}" = COMODO Secure Shopping "{D1893000-EA77-493C-8DDD-E262436E959B}" = Windows Live SOXE Definitions "{D25D3E15-CABD-420c-B62C-70C1C5EE63FD}" = CyberLink Application Manager "{D5115C78-2D22-4668-A5E2-6C87DED3ED1B}" = Nero Launcher "{DD016DFA-EDD4-46F4-B847-6B09724ECA95}" = OUTDATEfighter "{DD35ECFB-5C95-398B-CAFA-B5E8881363C3}" = CCC Help Italian "{DD67BE4B-7E62-4215-AFA3-F123A800A389}" = Movie Maker "{DDD8D35B-EDEA-45FC-8930-C494B02E42FF}" = PagePlusX7ContentDeclaration "{DE24241A-7C94-4FCD-BAB6-23A18BAF331B}" = IRISmart File "{e03c7229-07fa-483d-a64f-55e545a2e21d}" = Intel® Driver & Support Assistant "{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10 "{E17BCB76-9924-4BD5-B6D6-50D3407B4E74}" = Nero Disc Menus Basic "{E21F3367-B1D2-4FFE-B8C2-6E46E0663560}" = Windows Live Writer "{E6E1AE09-1B6D-4D80-A42F-2AE0EA448DE5}" = Nero 2014 "{E703613B-BDAB-433E-A66A-DE0263E3D35D}" = Windows Live Messenger "{E8406BA9-5D47-4A62-08C3-759EA677229A}" = AMD VISION Engine Control Center "{E9C1A5FD-CDC5-49AB-A906-A31288527308}}_is1" = SysTools Google Apps Backup v3.1 "{ED7943A4-2FF0-4096-BBEA-DE3CC206E3D4}" = Nero Express "{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU] "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F193812F-83C0-3CED-1EDE-BE2525267303}" = CCC Help Chinese Traditional "{F2B9C8D6-C69C-4BA7-95D2-66F1C68D15DA}" = Nero Burning ROM "{f65db027-aff3-4070-886a-0d87064aabb1}" = Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 "{F69D4104-5394-4F7C-801C-D96DC92E7F69}" = Nero RescueAgent Help (CHM) "{F754BC24-2C04-F76E-C403-0175F0954560}" = CCC Help Chinese Standard "{F7E1CA14-B39D-452A-960B-39423DDDD933}" = DriveImage XML (Private Edition) "{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}" = Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 "{FA78CC15-9F90-443B-BA61-A66595F06432}" = Nero Burning ROM Help (CHM) "{FBD68E88-2999-43B7-B249-E1B08FA2B065}_is1" = SysTools PDF Unlocker - v3.2 "{FC62C740-2339-618C-467B-36CE6D409E5F}" = CCC Help Portuguese "{FC986EFE-0ACC-44CD-B34F-42C5DCFA7800}" = CyberLink Screen Recorder 2 "{FEAC3AD0-1026-4F63-AAAF-E5CFF422BCCD}" = CyberLink PowerDirector 17 "{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 "AC3Filter" = AC3Filter (remove only) "Adobe AIR" = Adobe AIR "Adobe Flash Player NPAPI" = Adobe Flash Player 32 NPAPI "Adobe Flash Player PPAPI" = Adobe Flash Player 31 PPAPI "Adobe Shockwave Player" = Adobe Shockwave Player 12.3 "AIMP" = AIMP "aimp-avg-cyberlink setup" = aimp-avg-cyberlink setup "anti-tfl_loaris_protectstar setup" = anti-tfl_loaris_protectstar setup "Anvi AD Blocker Ultimate" = Anvi AD Blocker Ultimate 3.2 "AVG Antivirus" = AVG Internet Security "AVG Secure Browser" = AVG Secure Browser "Babylon" = Babylon "BabylonToolbar" = Babylon toolbar "Bandicam" = Bandicam "BandiMPEG1" = Bandicam MPEG-1 Decoder "barrow & ushuaïa finalis apps nov-dec 2015 install" = barrow & ushuaïa finalis apps nov-dec 2015 install "BlazeDVD 7.0.2.0 Professional_is1" = BlazeDVD 7.0.2.0 Professional "BlazePhoto Professional2.6.0.0_is1" = BlazePhoto Professional2.6.0.0 "BlazeVideo HDTV Player Professional 6.6.0.4_is1" = BlazeVideo HDTV Player Professional 6.6.0.4 "BlazeVideo Video Editor_is1" = BlazeVideo Video Editor "ByteFence" = ByteFence Anti-Malware "Cloud System Booster" = Cloud System Booster "Comodo Dragon" = Comodo Dragon "Comodo Secure_Shopping_list_uninstall" = COMODO Secure Shopping "Compel install Adaptec WinASPI-4.6.0(1021)_is1" = Compel Adaptec WinASPI "CoreFTP" = Core FTP LE "DFX" = FxSound Enhancer "Driver Genius_is1" = Driver Genius "EaseUS Todo PCTrans_is1" = EaseUS Todo PCTrans 10.0 "EFM_Anti-TFL_B162W16_Blini_New_Logo_3rem4rem5rem_Setup2019" = EFM_Anti-TFL_B162W16_Blini_New_Logo_3rem4rem5rem_Setup2019 "efm-barrow 16,2-anti TFL-widen 16 setuyp 2019" = efm-barrow 16,2-anti TFL-widen 16 setuyp 2019 "Free Video To MP3 Converter_is1" = Free Video To MP3 Converter "FreeFileSync_is1" = FreeFileSync 9.1 [Donation Edition] "GOM Encoder (x64)" = GOM Encoder (x64) "GOM Player" = GOM Player "GOMAudio" = GOM Audio "Google Chrome" = Google Chrome "icofx 3_is1" = icofx 3.3 "IconPack" = IconPack X0 ttone "IconWorkshop" = Axialis IconWorkshop 6.91 "IM_Magic_PR" = IM-Magic Partition Resizer Free 2018 "Internet Download Accelerator_is1" = Internet Download Accelerator version 6.17.2 "IObit Software Updater_is1" = IObit Software Updater "IObit Unlocker_is1" = IObit Unlocker "K7UltimateSecurity" = K7UltimateSecurity "KC Softwares SUMo_is1" = KC Softwares SUMo "KeePassPasswordSafe2_is1" = KeePass Password Safe 2.40 "KLiteCodecPack_is1" = K-Lite Codec Pack 14.6.0 Basic "K-Meleon 75.0 (x86 en-US)" = K-Meleon 75.0 (x86 en-US) "lfsh_efm_uefm_barrow162_widen16_anaamfuw_suite_essentials&post-finalis24_fev_2019setup" = lfsh_efm_uefm_barrow162_widen16_anaamfuw_suite_essentials&post-finalis24_fev_2019setup "LogoMaker_is1" = LogoMaker 4.0 "mmswitch" = Morgan Stream Switcher "Moo0 RightClicker" = Moo0 Clic Droit Pro 1.56 "moo0clicdroitpro_restoro_powerdvd365_remo_x0ttoneiconpack_donation4keep_lfsu100%s_finalized setup" = moo0clicdroitpro_restoro_powerdvd365_remo_x0ttoneiconpack_donation4keep_lfsu100%s_finalized setup "Morae Manager Events by Web Page Plugin" = Morae Manager Events by Web Page Plugin "Morae Manager Mouse Tail Plugin" = Morae Manager Mouse Tail Plugin "Mozilla Firefox 64.0.2 (x86 fr)" = Mozilla Firefox 64.0.2 (x86 fr) "MT-75D7C412-925B-4AD0-90DC-5E4FEE22EAE1_is1" = MiniTool ShadowMaker Free Edition "muCommander" = muCommander (remove only) "MyEpson Portal" = MyEpson Portal "Netscape Navigator (9.0.0.6)" = Netscape Navigator (9.0.0.6) "NewBlue Paint Effects for Windows" = NewBlue Paint Effects for Windows "NewBlue Titler Pro for Windows" = NewBlue Titler Pro for Windows "NewBlue Video Essentials for Windows" = NewBlue Video Essentials for Windows "NewBlue Video Essentials VII for Windows" = NewBlue Video Essentials VII for Windows "NiceCopier_is1" = NiceCopier "OUTDATEfighter" = OUTDATEfighter "Password Safe" = Password Safe (64-bit) "Protected Folder_is1" = Protected Folder "RegSeeker" = RegSeeker "setup best-of lfs hyper apps, format 1 tb micro sd en autodecliv & scan combofix" = setup best-of lfs hyper apps, format 1 tb micro sd en autodecliv & scan combofix "Shopaholic Folder Icons Full_is1" = Shopaholic Folder Icons Full "Slowin Killer" = Slowin' Killer "Soft Organizer_is1" = Soft Organizer version 7.42 "Start Menu Reviver" = Start Menu Reviver "StartupBooster" = StartupBooster 1.0 "Steganos Tuning Pro_is1" = Steganos Tuning Pro "Stellar Phoenix Data Recovery pour iOS_is1" = Stellar Phoenix Data Recovery pour iOS "Stellar Phoenix Word Repair_is1" = Stellar Phoenix Word Repair "Supercopier" = Supercopier 1.2.3.5 "The Cleaner_is1" = The Cleaner version 9 "TreeSize Free_is1" = TreeSize Free V4.2.2 "TunesKit Audio Converter_is1" = TunesKit Audio Converter 3.0.0.39 "Tweaking.com - Windows Repair" = Tweaking.com - Windows Repair "Ultracopier" = Ultracopier 1.2.3.5 "Unchecky" = Unchecky v1.2 "Undelete 360_is1" = Undelete 360 "Unlocker" = Unlocker 1.9.1 "USB Safely Remove_is1" = USB Safely Remove 6.1 "UX Pack" = macOS UX Pack "Video Converter_is1" = KeepVid Video Converter(Build 2.0.0.16) "Video Magic Ultimate_is1" = Video Magic Ultimate 7.0.4.0 "ViGlance" = ViGlance "VobSub" = VobSub v2.23 (Remove Only) "Winamp" = Winamp "WinLiveSuite" = Windows Live "Wise JetSearch_is1" = Wise JetSearch 2.31 "Wise Memory Optimizer_is1" = Wise Memory Optimizer 3.32 "Wise Video Downloader_is1" = Wise Video Downloader 1.61 "Xilisoft Convertisseur Vidéo Ultimate" = Xilisoft Convertisseur Vidéo Ultimate "Xvid Video Codec 1.3.3" = Xvid Video Codec "YouTube By Click 2.2.95" = YouTube By Click [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-324915258-2866797553-3726413251-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{20573C69-4A68-4BEF-A23D-365CB66924CE}" = Avanquest Message "{EF084A47-B742-44AA-A119-B2BAA23B6D4A} NGMediaPlayer_is1" = HD Video Player "Google Chrome" = Google Chrome "Movavi Video Suite 18" = Movavi Video Suite 18 "NitroBROWSER" = UTILILAB NitroBROWSER "OneDriveSetup.exe" = Microsoft OneDrive "Opera 58.0.3135.65" = Opera Stable 58.0.3135.65 "Opera 58.0.3135.68" = Opera Stable 58.0.3135.68 "ViFind" = ViFind "ViStart" = ViStart "WallpaperHd" = WallpaperHd [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 07/03/2019 04:45:18 | Computer Name = LFS_Hyper_UEFM | Source = Application Hang | ID = 1002 Description = Le programme processclose_2_08.01.17.1.exe version 8.1.17.1 a cessé d’interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l’historique du problème dans le Centre de maintenance. ID de processus : 13ac Heure de début : 01d4d4bd5621a353 Heure de fin : 4294967295 Chemin d’accès de l’application : C:\Users\Jean-Marie\Desktop\processclose_2_08.01.17.1.exe ID de rapport : 541fc10e-40b5-11e9-bf05-4c72b9f956a2 Nom complet du package défaillant : ID de l’application relative au package défaillant : Error - 07/03/2019 13:45:18 | Computer Name = LFS_Hyper_UEFM | Source = ESENT | ID = 489 Description = taskhostex (7008) Une tentative d'ouverture du fichier "C:\Users\Jean-Marie\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat" pour accès en lecture seule a échoué en indiquant l'erreur système 32 (0x00000020) : "Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus. ". L'opération d'ouverture de fichier échouera en indiquant l'erreur -1032 (0xfffffbf8). Error - 08/03/2019 05:10:49 | Computer Name = LFS_Hyper_UEFM | Source = Application Error | ID = 1000 Description = Nom de l’application défaillante palemoon.exe, version : 4.1.8.6988, horodatage : 0x5c6aa2d5 Nom du module défaillant : ucrtbase.DLL, version : 10.0.10586.212, horodatage : 0x56fa10e8 Code d’exception : 0xc0000409 Décalage d’erreur : 0x00000000000698fe ID du processus défaillant : 0x1570 Heure de début de l’application défaillante : 0x01d4d58dee9e2fc7 Chemin d’accès de l’application défaillante : C:\Program Files\Pale Moon\palemoon.exe Chemin d’accès du module défaillant: C:\Program Files\Pale Moon\ucrtbase.DLL ID de rapport : 101abeb5-4182-11e9-bf05-4c72b9f956a2 Nom complet du package défaillant : ID de l’application relative au package défaillant : Error - 09/03/2019 11:28:02 | Computer Name = LFS_Hyper_UEFM | Source = ESENT | ID = 489 Description = taskhostex (5636) Une tentative d'ouverture du fichier "C:\Users\Jean-Marie\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat" pour accès en lecture seule a échoué en indiquant l'erreur système 32 (0x00000020) : "Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus. ". L'opération d'ouverture de fichier échouera en indiquant l'erreur -1032 (0xfffffbf8). Error - 10/03/2019 02:35:11 | Computer Name = LFS_Hyper_UEFM | Source = Application Error | ID = 1000 Description = Nom de l’application défaillante NASvc.exe, version : 11.0.41.0, horodatage : 0x51da9feb Nom du module défaillant : NASvc.exe, version : 11.0.41.0, horodatage : 0x51da9feb Code d’exception : 0xc0000005 Décalage d’erreur : 0x00033d49 ID du processus défaillant : 0x79c Heure de début de l’application défaillante : 0x01d4d70b571ec4fe Chemin d’accès de l’application défaillante : C:\Program Files (x86)\Nero\Update\NASvc.exe Chemin d’accès du module défaillant: C:\Program Files (x86)\Nero\Update\NASvc.exe ID de rapport : a7333431-42fe-11e9-bf06-4c72b9f956a2 Nom complet du package défaillant : ID de l’application relative au package défaillant : Error - 10/03/2019 02:38:44 | Computer Name = LFS_Hyper_UEFM | Source = MsiInstaller | ID = 11706 Description = Error - 10/03/2019 06:29:19 | Computer Name = LFS_Hyper_UEFM | Source = Application Error | ID = 1000 Description = Nom de l’application défaillante NASvc.exe, version : 11.0.41.0, horodatage : 0x51da9feb Nom du module défaillant : NASvc.exe, version : 11.0.41.0, horodatage : 0x51da9feb Code d’exception : 0xc0000005 Décalage d’erreur : 0x00033d49 ID du processus défaillant : 0x1820 Heure de début de l’application défaillante : 0x01d4d72c11fe9f5a Chemin d’accès de l’application défaillante : C:\Program Files (x86)\Nero\Update\NASvc.exe Chemin d’accès du module défaillant: C:\Program Files (x86)\Nero\Update\NASvc.exe ID de rapport : 5c5dbaeb-431f-11e9-bf07-4c72b9f956a2 Nom complet du package défaillant : ID de l’application relative au package défaillant : Error - 10/03/2019 06:31:08 | Computer Name = LFS_Hyper_UEFM | Source = MsiInstaller | ID = 11706 Description = Error - 10/03/2019 06:34:00 | Computer Name = LFS_Hyper_UEFM | Source = Application Error | ID = 1000 Description = Nom de l’application défaillante SoftwareUpdate.exe, version : 2.1.1.116, horodatage : 0x488a4f1f Nom du module défaillant : ScriptingObjectModel.dll, version : 2.1.1.116, horodatage : 0x488a4efe Code d’exception : 0xc0000005 Décalage d’erreur : 0x00002f91 ID du processus défaillant : 0x1684 Heure de début de l’application défaillante : 0x01d4d72ca2b41266 Chemin d’accès de l’application défaillante : C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe Chemin d’accès du module défaillant: C:\Program Files (x86)\Apple Software Update\ScriptingObjectModel.dll ID de rapport : 03e75435-4320-11e9-bf07-4c72b9f956a2 Nom complet du package défaillant : ID de l’application relative au package défaillant : Error - 10/03/2019 07:00:00 | Computer Name = LFS_Hyper_UEFM | Source = ESENT | ID = 455 Description = svchost (1868) SRUJet: L'Erreur -1811 (0xfffff8ed) s'est produite lors de l'ouverture du fichier journal C:\Windows\system32\SRU\SRU00097.log. [ Microsoft-Windows-Diagnostics-Performance/Operational Events ] Error - 11/03/2019 11:49:19 | Computer Name = LFS_Hyper_UEFM | Source = Microsoft-Windows-Diagnostics-Performance | ID = 203 Description = Error - 11/03/2019 11:49:19 | Computer Name = LFS_Hyper_UEFM | Source = Microsoft-Windows-Diagnostics-Performance | ID = 203 Description = Error - 11/03/2019 11:49:19 | Computer Name = LFS_Hyper_UEFM | Source = Microsoft-Windows-Diagnostics-Performance | ID = 203 Description = Error - 11/03/2019 11:49:19 | Computer Name = LFS_Hyper_UEFM | Source = Microsoft-Windows-Diagnostics-Performance | ID = 203 Description = Error - 11/03/2019 11:49:19 | Computer Name = LFS_Hyper_UEFM | Source = Microsoft-Windows-Diagnostics-Performance | ID = 203 Description = Error - 11/03/2019 11:49:19 | Computer Name = LFS_Hyper_UEFM | Source = Microsoft-Windows-Diagnostics-Performance | ID = 203 Description = Error - 11/03/2019 11:49:19 | Computer Name = LFS_Hyper_UEFM | Source = Microsoft-Windows-Diagnostics-Performance | ID = 203 Description = Error - 12/03/2019 12:45:14 | Computer Name = LFS_Hyper_UEFM | Source = Microsoft-Windows-Diagnostics-Performance | ID = 200 Description = Error - 12/03/2019 12:45:15 | Computer Name = LFS_Hyper_UEFM | Source = Microsoft-Windows-Diagnostics-Performance | ID = 100 Description = Error - 13/03/2019 13:24:44 | Computer Name = LFS_Hyper_UEFM | Source = Microsoft-Windows-Diagnostics-Performance | ID = 100 Description = [ System Events ] Error - 26/03/2019 03:06:44 | Computer Name = LFS_Hyper_UEFM | Source = Microsoft-Windows-DNS-Client | ID = 1012 Description = Une erreur s’est produite lors de la lecture du fichier d’hôtes local. Error - 26/03/2019 03:07:26 | Computer Name = LFS_Hyper_UEFM | Source = Microsoft-Windows-DNS-Client | ID = 1012 Description = Une erreur s’est produite lors de la lecture du fichier d’hôtes local. Error - 26/03/2019 03:37:17 | Computer Name = LFS_Hyper_UEFM | Source = Microsoft-Windows-DNS-Client | ID = 1012 Description = Une erreur s’est produite lors de la lecture du fichier d’hôtes local. Error - 26/03/2019 07:37:31 | Computer Name = LFS_Hyper_UEFM | Source = Microsoft-Windows-DNS-Client | ID = 1012 Description = Une erreur s’est produite lors de la lecture du fichier d’hôtes local. Error - 26/03/2019 11:37:44 | Computer Name = LFS_Hyper_UEFM | Source = Microsoft-Windows-DNS-Client | ID = 1012 Description = Une erreur s’est produite lors de la lecture du fichier d’hôtes local. Error - 26/03/2019 11:37:52 | Computer Name = LFS_Hyper_UEFM | Source = Microsoft-Windows-DNS-Client | ID = 1012 Description = Une erreur s’est produite lors de la lecture du fichier d’hôtes local. Error - 26/03/2019 14:10:17 | Computer Name = LFS_Hyper_UEFM | Source = Microsoft-Windows-DNS-Client | ID = 1012 Description = Une erreur s’est produite lors de la lecture du fichier d’hôtes local. Error - 26/03/2019 15:06:41 | Computer Name = LFS_Hyper_UEFM | Source = Microsoft-Windows-DNS-Client | ID = 1012 Description = Une erreur s’est produite lors de la lecture du fichier d’hôtes local. Error - 26/03/2019 15:39:41 | Computer Name = LFS_Hyper_UEFM | Source = Microsoft-Windows-DNS-Client | ID = 1012 Description = Une erreur s’est produite lors de la lecture du fichier d’hôtes local. Error - 26/03/2019 15:39:54 | Computer Name = LFS_Hyper_UEFM | Source = Microsoft-Windows-DNS-Client | ID = 1012 Description = Une erreur s’est produite lors de la lecture du fichier d’hôtes local. < End of report >