OTL Extras logfile created on: 13/03/2018 14:33:34 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Akrem\Downloads
64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.11.16299.0)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

15,92 Gb Total Physical Memory | 11,53 Gb Available Physical Memory | 72,42% Memory free
21,17 Gb Paging File | 16,37 Gb Available in Paging File | 77,35% Paging File free
Paging file location(s): c:\pagefile.sys 0 0e:\pagefile.sys 0 0 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 393,07 Gb Total Space | 255,24 Gb Free Space | 64,93% Space Free | Partition Type: NTFS
Drive E: | 526,02 Gb Total Space | 298,06 Gb Free Space | 56,66% Space Free | Partition Type: NTFS

Computer Name: AKREM | User Name: Akrem | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Extra Registry (SafeList) ==========[/color]


[color=#E56717]========== File Associations ==========[/color]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\WINDOWS\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\WINDOWS\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.jse [@ = Reg Error: Key error.] -- Reg Error: Key error. File not found
.vbe [@ = Reg Error: Key error.] -- Reg Error: Key error. File not found
.wsf [@ = Reg Error: Key error.] -- Reg Error: Key error. File not found
.wsh [@ = Reg Error: Key error.] -- Reg Error: Key error. File not found

[color=#E56717]========== Shell Spawning ==========[/color]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- Reg Error: Key error.
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
jsfile [edit] -- Reg Error: Key error.
jsfile [print] -- Reg Error: Key error.
jsefile [edit] -- Reg Error: Key error.
jsefile [open] -- Reg Error: Key error.
jsefile [print] -- Reg Error: Key error.
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
vbefile [edit] -- Reg Error: Key error.
vbefile [open] -- Reg Error: Key error.
vbefile [print] -- Reg Error: Key error.
vbsfile [edit] -- Reg Error: Key error.
vbsfile [print] -- Reg Error: Key error.
wsffile [edit] -- Reg Error: Key error.
wsffile [open] -- Reg Error: Key error.
wsffile [print] -- Reg Error: Key error.
wshfile [open] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Directory [Powershell] -- powershell.exe -noexit -command Set-Location -literalPath '%V' (Microsoft Corporation)
Directory [UpdateEncryptionSettings] -- Reg Error: Key error.
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- Reg Error: Key error.
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
jsfile [edit] -- Reg Error: Key error.
jsfile [print] -- Reg Error: Key error.
jsefile [edit] -- Reg Error: Key error.
jsefile [open] -- Reg Error: Key error.
jsefile [print] -- Reg Error: Key error.
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
vbefile [edit] -- Reg Error: Key error.
vbefile [open] -- Reg Error: Key error.
vbefile [print] -- Reg Error: Key error.
vbsfile [edit] -- Reg Error: Key error.
vbsfile [print] -- Reg Error: Key error.
wsffile [edit] -- Reg Error: Key error.
wsffile [open] -- Reg Error: Key error.
wsffile [print] -- Reg Error: Key error.
wshfile [open] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Directory [Powershell] -- powershell.exe -noexit -command Set-Location -literalPath '%V' (Microsoft Corporation)
Directory [UpdateEncryptionSettings] -- Reg Error: Key error.
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.

[color=#E56717]========== Security Center Settings ==========[/color]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = CC A4 2D A2 94 B4 D3 01 [binary data]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade]
"UpgradeTime" = [binary data]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade]
"UpgradeTime" = Reg Error: Unknown registry data type -- File not found

[color=#E56717]========== System Restore Settings ==========[/color]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore]

[color=#E56717]========== Firewall Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[color=#E56717]========== Authorized Applications List ==========[/color]


[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{00D8ACE0-72AD-419B-8E03-BF3CB2484A77}" = lport=445 | protocol=6 | dir=in | app=system |
"{03907B7B-04AB-4882-81F1-953E3D15143C}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvcontainer\nvcontainer.exe |
"{073E85FF-6A42-4814-A38F-182B09229F8E}" = lport=547 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{07F893C5-BAE5-4515-94AB-2BB64352E951}" = lport=48010 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvcontainer\nvcontainer.exe |
"{0F3A8E69-A418-4D50-8D48-4E39488CF665}" = lport=10245 | protocol=6 | dir=in | app=system |
"{1380A927-1729-4D09-8DD0-C8FB5F8080F2}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{1847E67B-3AF7-44A4-9267-5D1404F34137}" = lport=2869 | protocol=6 | dir=in | app=system |
"{1C5AB150-6BC7-4CEC-BF57-7B3497A0A1C1}" = lport=7777 | protocol=17 | dir=in | app=%systemroot%\ehome\ehshell.exe |
"{1FC7166C-FAD6-460C-9F99-B415105FAE2D}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{23C83796-6F5E-4142-A5D7-9A23A2118960}" = rport=2869 | protocol=6 | dir=out | app=system |
"{2520B1DF-C86B-455C-9BBF-57391381FD2A}" = lport=47995 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
"{2631618F-15EB-408B-BF0D-1F3C1B354D20}" = lport=47984 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvcontainer\nvcontainer.exe |
"{299DE96C-1454-4322-AEAC-2CCA58816CFC}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{3007AD71-2A93-4564-AF19-681127CE6E79}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{32367E03-07BA-4FF1-86F0-3C116C9A3182}" = lport=3389 | protocol=17 | dir=in | svc=termservice | app=%systemroot%\system32\svchost.exe |
"{3EDDC124-704F-4D96-99B2-6F23DC81253E}" = rport=2869 | protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{4B754371-680E-492D-830E-AA2BCF01C8B7}" = lport=5353 | protocol=17 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe |
"{5420186A-92A3-4929-A1FD-A8C073FE8737}" = lport=47995 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
"{5DF2D09B-6DD0-4527-8F6F-64F16D416727}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{5E1D688A-7F74-4651-8EFC-5F434201A87F}" = lport=53 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{61AB900F-905B-4FCD-AA9B-24FB936ABCAA}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{6FE2D8C0-D3B5-4866-9F4F-61D2D2092A7F}" = lport=10244 | protocol=6 | dir=in | app=system |
"{70152897-A89C-442A-B791-9AAFCEA8BAF9}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{74BA4802-F1F5-4CF4-BDBD-45A890D1F82A}" = lport=3390 | protocol=6 | dir=in | svc=termservice | app=%systemroot%\system32\svchost.exe |
"{784F324B-BBFD-41D2-A679-343DB61A2342}" = lport=2869 | protocol=6 | dir=in | app=system |
"{7F7E666A-7E71-41FD-92C8-66F815B191B1}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{83B001E4-AB7F-4C7C-9E79-F0CDD67F1DB1}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{9AAD30E4-5267-4C1D-8D89-1432171F1903}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{9AE8539F-4B8D-4534-A443-C81A535F485A}" = lport=547 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{9D2D450B-7857-4908-B385-5B311A66DDAE}" = lport=53 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{A15C095C-ACBD-4A07-A7D4-ED69E7764F01}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\root\office16\outlook.exe |
"{A4861962-3AE7-4ABE-89CF-AF1FC223CFF4}" = lport=rpc | protocol=6 | dir=in | app=%systemroot%\system32\lsass.exe |
"{ADC05DEE-0633-4F90-A71B-F8D0EDBED3C1}" = lport=47998 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvcontainer\nvcontainer.exe |
"{AF5D7338-F624-4288-A96D-277A8749E725}" = lport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{B2496E27-EA0B-4357-91DF-CD32974E9713}" = lport=2869 | protocol=6 | dir=in | app=system |
"{B7A111F8-DAC9-4156-AFF1-B316FDB5ECD9}" = lport=554 | protocol=6 | dir=in | app=%systemroot%\ehome\ehshell.exe |
"{B7B2A627-CF3A-4137-88A0-EB5AF3D6871E}" = lport=53 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{B85C25C0-9F7F-461C-AD8D-2B3803752101}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{BC734F25-EA38-42FB-A702-5E7F8F60FF8C}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{BE3E35C9-FB26-4D14-B3B3-5BD477DE0F57}" = lport=2869 | protocol=6 | dir=in | app=system |
"{CB7BD5C2-1D5D-40DA-9D37-3125C1CB5E45}" = rport=2869 | protocol=6 | dir=out | app=system |
"{D78F4F28-3023-43F1-A384-258B5AB57F88}" = lport=2869 | protocol=6 | dir=in | app=system |
"{E569C32C-1738-4284-A4ED-2FCBD0665CDA}" = lport=3389 | protocol=6 | dir=in | svc=termservice | app=%systemroot%\system32\svchost.exe |
"{E591A216-6CAC-4B5E-8051-AA6C3F1955F3}" = rport=2869 | protocol=6 | dir=out | app=system |
"{E66F31D1-08BC-4AA7-A41D-345AF388D673}" = lport=547 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{E6DC20BB-F3BA-4468-BCCC-11A5489763FE}" = lport=2869 | protocol=6 | dir=in | app=system |
"{E9A6E2BE-945C-48E5-AA6D-5BD2D06CD0D3}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{EB10F0D8-3B64-44DC-A6F2-7C62DBEFDD46}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{EC5F3D7A-F351-48A7-8ECF-930F3255DAC1}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{F02C2CCD-EA40-4B39-9EEF-E6C093C801A5}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{F1C2C420-011D-42B1-B693-3D219B92DECE}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{F72A27FB-4D8C-4CFA-B5C5-64CCC6F0CF9A}" = rport=2869 | protocol=6 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{F87DA3AB-0E2C-4930-A77D-B136D49B720C}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |

[color=#E56717]========== Vista Active Application Exception List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{030AF0F0-D615-4613-AD23-8E651A56DCD6}" = dir=out | name=@{microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.appconnector/resources/connectorstubtitle} |
"{0BA1D169-BED8-4049-9560-1D95E04ECDE9}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{0C31D957-19B6-4FC7-BC49-BA3190AED525}" = dir=in | name=@{microsoft.windowsstore_11802.1001.8.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsstore/resources/storetitle} |
"{0E42DE59-9247-4AD0-9020-211DDC8A2510}" = dir=out | name=@{microsoft.zunevideo_3.6.11821.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} |
"{0ED7ACDC-688C-478D-A655-7263AFD2D281}" = dir=out | name=microsoft solitaire collection |
"{114ECFFA-C85D-4FC4-873C-A04F5B074AFF}" = dir=out | name=@{microsoft.ppiprojection_10.0.16299.15_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} |
"{135D5889-A5FC-4C71-BB47-E88ECCE2046A}" = protocol=6 | dir=out | app=%systemroot%\ehome\mcx2prov.exe |
"{18161207-51ED-48C4-9792-9FD181A9C763}" = dir=out | name=@{microsoft.desktopappinstaller_1.0.12894.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.desktopappinstaller/resources/appdisplayname} |
"{19257487-72D5-4D47-8A66-73CD21A1BECB}" = dir=out | name=@{microsoft.windowsstore_11802.1001.8.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsstore/resources/storetitle} |
"{19385616-99AC-4C64-99D0-D8E4107DCFB5}" = dir=out | name=@{microsoft.bingnews_4.4.200.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/applicationtitlewithbranding} |
"{19478C71-0C3D-4D62-8484-DAA31377DABA}" = dir=out | name=@{microsoft.aad.brokerplugin_1000.16299.15.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} |
"{1C355BBB-3026-47E9-8918-1AF8AAD0DCA0}" = dir=out | name=@{microsoft.bingweather_4.4.183.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/applicationtitlewithbranding} |
"{1D2AD9CA-DB10-4B01-AADE-0E5922BA8B8F}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{1DE18A71-438F-41BA-8035-C1B5CF50FF5C}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{1E78C593-5C6A-4581-8BC8-13DEAFCFC6AC}" = protocol=58 | dir=in | name=@ipnathlp.dll,-148 |
"{1F441B05-94A6-4161-B5A7-51F1D88EBB0B}" = dir=out | name=@{microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} |
"{1F7F4B99-9578-44FB-81FF-198241BDF72C}" = dir=out | name=@{microsoft.windowsmaps_4.1506.50715.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsmaps/resources/appstorename} |
"{211691A2-8183-4297-B9E0-A97F57493674}" = dir=out | name=@{microsoft.messaging_3.37.23004.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.messaging/resources/appstorename} |
"{2315181C-4FCC-4A9C-AED3-9056B86144B0}" = dir=out | name=@{microsoft.microsoftofficehub_17.8830.7600.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoftofficehub/officehubintl/appmanifest_getoffice_displayname} |
"{28DD28CB-43BE-4974-89C2-DBAF27CCC99A}" = dir=out | name=@{microsoft.windows.holographicfirstrun_10.0.16299.125_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.holographicfirstrun/resources/pkgdisplayname} |
"{3071A663-F44E-4C86-9406-CAF4F235E672}" = dir=in | name=@{microsoft.bingnews_4.4.200.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/applicationtitlewithbranding} |
"{30CE02F7-DA12-4FD3-8BDD-5D403D26089B}" = protocol=6 | dir=out | app=%systemroot%\ehome\ehshell.exe |
"{30DE52E8-C03B-40A9-BABE-DF22DF5CCEA2}" = dir=in | name=onenote |
"{32C06588-4304-473B-AFEC-ACF5456EF974}" = protocol=6 | dir=out | svc=mcx2svc | app=%systemroot%\system32\svchost.exe |
"{32C5DA6B-1D6F-4180-B061-9FC172558990}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{33D17539-324B-4AE6-AEAA-20D99D01635E}" = dir=out | name=@{microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy?ms-resource://microsoft.lockapp/resources/appdisplayname} |
"{3570D9C3-5872-463C-BB45-42D4786D9DAD}" = dir=out | name=@{microsoft.lockapp_10.0.16299.15_neutral__cw5n1h2txyewy?ms-resource://microsoft.lockapp/resources/appdisplayname} |
"{358BB2E9-7999-4119-8D1C-7EC8F13CD685}" = dir=out | name=@{microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windowsfeedback/feedbackapp.resources/appname/text} |
"{36D5F693-C285-44DD-B40C-5715A3488F7B}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{38F1056C-C95D-4574-933F-B53FD444AAA9}" = dir=out | name=xbox |
"{3C65728A-8D56-48AB-A71A-6436639F048E}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{3F08C02F-F4E7-4C53-A0E3-48EAF5497AEF}" = dir=out | name=@{microsoft.windows.oobenetworkcaptiveportal_10.0.16299.15_neutral__cw5n1h2txyewy?ms-resource://microsoft.windows.oobenetworkcaptiveportal/resources/appdisplayname} |
"{412E77C0-3B8B-4F52-86C5-2F810C26C6D4}" = dir=out | name=@{microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} |
"{449746F2-836E-4647-8E71-1C86184F059B}" = dir=in | name=@{microsoft.zunevideo_10.17122.16211.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} |
"{46075697-1471-471A-B33A-3F562081C666}" = dir=in | name=@{microsoft.aad.brokerplugin_1000.16299.15.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} |
"{49362420-369C-4146-9EB9-1484869D4FA0}" = dir=out | name=@{microsoft.zunemusic_10.18011.13411.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} |
"{4A6A689E-24C6-49E7-B5E8-04D5820CCB15}" = dir=in | name=@{microsoft.windowsfeedbackhub_1.1711.3412.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsfeedbackhub/resources/appstorename} |
"{4D9D83A8-3D27-40BB-9E55-EF98BB553C75}" = dir=out | name=@{microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.xboxidentityprovider/resources/pkgdisplayname} |
"{4DD035F0-DFB9-40DC-9772-700987B2F7B3}" = dir=out | name=@{microsoft.bingweather_4.22.3254.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/applicationtitlewithbranding} |
"{50D322EE-4EDE-4D83-A02A-C1BDC37B2285}" = dir=in | name=@{microsoft.windowsstore_2015.7.22.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsstore/resources/storetitle} |
"{51CF74B8-6C0E-48CB-8082-ECDE6524A668}" = dir=out | name=@{microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.parentalcontrols/resources/displayname} |
"{556E9C10-3289-4DC2-BDB9-F8A2C6EEE11D}" = dir=out | name=@{microsoft.windows.shellexperiencehost_10.0.16299.15_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.shellexperiencehost/resources/pkgdisplayname} |
"{55E909FE-23CF-4638-A5C7-93CEBDEB8611}" = dir=out | name=@{microsoft.oneconnect_3.1710.3044.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.oneconnect/oneconnect/appstorename} |
"{5622C72E-B300-4B59-AFB9-10FF175089C9}" = dir=out | name=@{microsoft.windows.contentdeliverymanager_10.0.16299.15_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.contentdeliverymanager/resources/appdisplayname} |
"{5AFD4E9F-1A65-4176-95BE-406890669F5A}" = dir=in | name=@{microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} |
"{5B99F6EC-A00E-4093-A7E5-090D6216B85A}" = dir=out | name=onenote |
"{5BEAF644-FB9D-4B22-B962-47A770512BC0}" = dir=out | name=@{microsoft.people_10.3.3472.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.people/resources/appstorename} |
"{5C1B4456-B15F-4C35-BB17-9670BA2C386F}" = dir=in | name=@{microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} |
"{5CADDE8E-8806-4B21-AD6C-025740AE005C}" = dir=out | name=@{microsoft.people_1.10241.0.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.people/resources/appstorename} |
"{609F3F55-00A9-4459-AC65-D75A06FD20AF}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{60FA0A92-7986-43F6-9E27-BEC9F9D3F3AB}" = protocol=6 | dir=out | app=%systemroot%\ehome\mcrmgr.exe |
"{613E19D1-E216-4EFE-A8F6-091A4BAEBBD7}" = dir=in | name=@{microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} |
"{632D68F4-CD88-4096-9A2E-56FAE10CACC2}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{63765B14-6E04-4E30-BC47-1189F93DE8B1}" = dir=out | name=onenote |
"{64CFD70C-5EAB-4980-B8FE-6333BF14B9B4}" = dir=in | name=xbox |
"{65D571AF-F56F-4296-BFE4-EC4343863344}" = dir=in | name=@{microsoft.microsoftofficehub_17.8830.7600.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoftofficehub/officehubintl/appmanifest_getoffice_displayname} |
"{66C14471-E788-4EBD-ACC5-4C4B34EC3A56}" = dir=out | name=@{microsoft.windows.cloudexperiencehost_10.0.16299.15_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} |
"{69BC01AA-ED8B-431A-8491-0314E667F89F}" = dir=in | app=%systemroot%\system32\alg.exe |
"{69BE0989-EB44-42DC-9A06-200CCD5E26E3}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{6AA2E102-9B4C-4D51-A1FC-4211C1CEB7CD}" = dir=in | name=@{microsoft.windows.cloudexperiencehost_10.0.16299.15_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} |
"{710C9ECF-4158-42D1-90F3-7537B6B31440}" = dir=in | name=@{microsoft.oneconnect_3.1710.3044.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.oneconnect/oneconnect/appstorename} |
"{71443307-3560-4AA6-B7E6-3D7B62A04AAB}" = dir=out | name=@{microsoft.getstarted_2.2.7.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.getstarted/resources/appstorename} |
"{74468895-4E87-4C6F-92F3-41205B28F88C}" = dir=out | name=@{windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.contactsupport/resources/appdisplayname} |
"{75EB7FEA-0B02-49B8-A501-C459B64E2A18}" = dir=out | name=microsoft sticky notes |
"{771077CC-7D2B-45A8-B8B2-1CB9A346F2AA}" = protocol=6 | dir=in | app=%systemroot%\system32\rdpsa.exe |
"{77A82393-C9A4-47FE-95AD-2C2051479535}" = dir=out | name=xbox game bar |
"{77F4AB30-9AF8-4E50-BA02-722C7F37E782}" = dir=in | name=@{microsoft.microsoftofficehub_17.6020.23801.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoftofficehub/officehubintl/appmanifest_getoffice_displayname} |
"{795560C9-686C-4094-BB8F-8187AA214BF5}" = dir=out | name=messenger |
"{7A82356F-8371-45A8-8AC7-5401EED685AE}" = dir=in | name=microsoft solitaire collection |
"{7D6ECC5C-9E27-4737-B190-928A8E68E880}" = dir=out | name=@{microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} |
"{7E6F72B0-52D2-4FCD-A151-3833B8C5D0BF}" = dir=out | name=@{microsoft.windowsstore_2015.7.22.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsstore/resources/storetitle} |
"{805F72CC-ED3D-49BE-9C71-169F0B3B49D9}" = dir=in | name=@{microsoft.bingfinance_4.4.200.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/applicationtitlewithbranding} |
"{81785BC5-1994-46A3-A6F3-410244497067}" = dir=in | name=@{microsoft.zunemusic_10.18011.13411.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} |
"{82FD3D7D-DDCD-448E-85D6-D9C7D232A028}" = dir=out | name=@{microsoft.zunevideo_10.17122.16211.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} |
"{84646A46-77AC-451C-8698-449DBCD491AD}" = protocol=6 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{85265AE7-1784-4E37-A48F-72FB66715CE5}" = dir=in | name=@{microsoft.windows.cortana_1.4.8.176_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/displayname} |
"{866B685B-9DED-44DA-B3B4-6F7FF5571DE1}" = dir=in | name=@{microsoft.windows.cortana_1.9.6.16299_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/packagedisplayname} |
"{86E7CF84-9FB7-4330-BE02-4F71B1F8D4F5}" = dir=out | name=@{microsoft.windowscommunicationsapps_17.6020.42011.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/hxcommintl/appmanifest_outlookdesktop_displayname} |
"{8740D0F1-DABA-4ECA-B414-2FBBD9BE5B96}" = dir=out | name=@{microsoft.xboxidentityprovider_12.39.1003.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxidentityprovider/resources/displayname} |
"{8B752663-1A8B-4897-9339-4951AFD57661}" = dir=in | name=@{microsoft.messaging_3.37.23004.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.messaging/resources/appstorename} |
"{8CCCAC51-5B37-4477-B948-AA7D620697B0}" = dir=in | name=@{microsoft.bingweather_4.4.183.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/applicationtitlewithbranding} |
"{8D5D3448-E6AA-4B13-B473-CC8CCB29CD21}" = dir=out | name=@{microsoft.windowsmaps_5.1711.10477.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsmaps/resources/appstorename} |
"{8E4B2364-EFA0-4CD5-9740-607D1351342F}" = dir=out | name=xbox |
"{8FAFCC22-E52D-4258-B55F-EE89C04ED277}" = protocol=58 | dir=in | name=@ipnathlp.dll,-148 |
"{8FB86DAE-1734-46C4-A870-50C8040D50D1}" = dir=in | name=@{microsoft.windows.photos_15.721.12350.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windows.photos/resources/appstorename} |
"{932F97F8-91E0-4C46-AA27-1494E0A08024}" = dir=out | name=@{microsoft.3dbuilder_10.1.9.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.3dbuilder/resources/appstorename} |
"{936D24EC-B2E4-42B8-BC40-2DDD7A368039}" = dir=out | name=@{microsoft.bingfinance_4.4.200.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/applicationtitlewithbranding} |
"{93AD5F6A-DB6E-49F2-85D4-EC41535BA298}" = dir=out | name=@{microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy?ms-resource://microsoft.accountscontrol/resources/displayname} |
"{9535610B-0F17-41DB-BB84-53FBE4707890}" = dir=in | name=@{microsoft.windowscommunicationsapps_17.6020.42011.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/hxcommintl/appmanifest_outlookdesktop_displayname} |
"{95A7F724-75D4-4A19-8C9F-0F39AAFB2DC6}" = dir=out | name=xbox tcui |
"{97273B19-A9AD-4B86-878D-A6BFE8153D40}" = protocol=6 | dir=out | app=system |
"{992CE9E1-5310-493C-8E7A-3D5AEA2696D0}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{9A65AE7E-70A8-4CE7-B41F-66F65647A90B}" = dir=out | name=@{microsoft.windows.apprep.chxapp_1000.16299.15.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.apprep.chxapp/resources/displayname} |
"{9AD3019A-3882-457A-9B7B-F60AAC654092}" = dir=out | name=@{microsoft.storepurchaseapp_11802.1802.23001.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.storepurchaseapp/resources/displaytitle} |
"{A07686F9-6CE3-4281-8B37-1FDF1C690B6F}" = dir=out | name=@{microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} |
"{A1B5F4D9-8D33-4347-8529-F33610CB7C62}" = dir=out | name=@{microsoft.windowscommunicationsapps_17.9029.22105.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/hxoutlookintl/appmanifest_outlookdesktop_displayname} |
"{A3A84146-064F-4AAF-A0ED-A835024EE397}" = dir=in | name=@{microsoft.ppiprojection_10.0.16299.15_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} |
"{A486C28F-C69E-4B9E-999C-32AE4D6EBD05}" = dir=out | name=@{microsoft.microsoftofficehub_17.6020.23801.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoftofficehub/officehubintl/appmanifest_getoffice_displayname} |
"{A4CB7AD0-C4A9-4FFF-BFAC-63A6E425536B}" = dir=out | name=@{microsoft.windowscalculator_10.1802.311.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscalculator/resources/appstorename} |
"{A8154083-7D12-4237-B9A5-CFBD543E4BEC}" = dir=out | name=@{microsoft.xboxgamecallableui_1000.16299.15.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.xboxgamecallableui/resources/pkgdisplayname} |
"{A8B4497A-E106-48BD-9D9B-20B8CE9F3702}" = dir=out | name=@{microsoft.gethelp_10.1706.3471.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.gethelp/resources/appdisplayname} |
"{A8D3293A-89B4-4CA1-98EC-4795FE11B5BB}" = dir=in | name=@{windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.contactsupport/resources/appdisplayname} |
"{ADD75394-C7DD-435B-9D51-AF332DFEEE25}" = dir=in | name=@{microsoft.desktopappinstaller_1.0.12894.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.desktopappinstaller/resources/appdisplayname} |
"{B0D0DF9F-648B-41A1-A0C7-F073923E6F65}" = dir=out | name=@{microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.contentdeliverymanager/resources/appdisplayname} |
"{B776DDE2-1983-408D-B7FA-51037255D1CB}" = dir=out | name=@{windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.purchasedialog/resources/displayname} |
"{B924E67C-AD7E-41D3-A0C7-E3A00F421506}" = dir=in | app=%systemroot%\system32\alg.exe |
"{BB68F288-62D9-4494-A5C4-1881B7CD2960}" = dir=out | name=@{microsoft.windows.photos_15.721.12350.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windows.photos/resources/appstorename} |
"{BC7BDC89-86C7-4450-8FB8-6196261A98BD}" = dir=out | name=@{microsoft.windowsfeedbackhub_1.1711.3412.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsfeedbackhub/resources/appstorename} |
"{BD91D4B8-5EAE-479F-B1FC-96C4A3B369D3}" = dir=in | name=@{microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/displayname} |
"{C2B0C45B-710A-4B72-A279-552C971D1EB2}" = dir=out | name=@{microsoft.accountscontrol_10.0.16299.15_neutral__cw5n1h2txyewy?ms-resource://microsoft.accountscontrol/resources/displayname} |
"{C65A93E3-A67A-49FA-B41A-9B62A8D5294C}" = dir=in | name=@{microsoft.bingsports_4.4.200.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/applicationtitlewithbranding} |
"{CBB77542-20ED-4BE4-8EDF-366560CF9E4B}" = dir=out | name=@{microsoft.windows.cortana_1.4.8.176_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/displayname} |
"{CD0B1E44-DD06-48FA-A8A1-C81E3C16597B}" = dir=out | name=@{microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/displayname} |
"{CD1A2A15-8856-4697-A150-D9871889C16D}" = dir=out | name=@{microsoft.bingsports_4.4.200.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/applicationtitlewithbranding} |
"{CDB7843C-3BBC-45A9-B073-AA647DE98E14}" = dir=out | name=@{microsoft.mspaint_4.1802.21027.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.mspaint/resources/appname} |
"{CEFF75BC-A0F6-4872-8B09-AA8506FE7773}" = dir=out | name=shell input application |
"{D3237F4C-1938-42EC-A30C-D97DBA36838B}" = dir=in | name=onenote |
"{D3D07524-2D74-4FC4-A7E8-786F291BD704}" = dir=in | name=xbox |
"{D4F97FD7-D278-468F-BC81-FBB16B7F32FA}" = dir=out | name=@{microsoft.windowsphone_10.1507.17010.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsphone/resources/appstorename} |
"{D51ACC4E-8269-4018-A629-CB9CA8A17F0D}" = dir=in | app=%systemroot%\system32\alg.exe |
"{DD71146A-4473-42FC-8CD1-A8B7017FF823}" = dir=in | name=@{microsoft.windowscommunicationsapps_17.9029.22105.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/hxoutlookintl/appmanifest_outlookdesktop_displayname} |
"{DF9739A8-ABB4-4184-8FEF-2F4EC3DC3A6C}" = protocol=17 | dir=out | app=%systemroot%\ehome\ehshell.exe |
"{DFCF2BD0-0603-4910-8E5C-8AEA4119C9DD}" = dir=out | name=@{microsoft.ppiprojection_10.0.16299.15_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} |
"{E1BC6CF9-C3C5-43A3-8888-E9B8BFC6CF59}" = dir=out | name=@{microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.xboxgamecallableui/resources/pkgdisplayname} |
"{E3974B3D-EEE1-41F3-B009-AFD06744B70C}" = dir=in | name=microsoft sticky notes |
"{E5F1F7AA-86E3-4EF5-8077-C75C988EDD2C}" = dir=out | name=@{microsoft.windows.sechealthui_10.0.16299.251_neutral__cw5n1h2txyewy?ms-resource://microsoft.windows.sechealthui/resources/packagedisplayname} |
"{E62BC006-CA29-4128-BEF7-C35007A6F62D}" = dir=out | name=@{microsoft.windows.secureassessmentbrowser_10.0.16299.15_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.secureassessmentbrowser/resources/packagedisplayname} |
"{E88F7ADB-FFD9-4D4D-9F5C-A93E536B32DF}" = dir=in | name=@{microsoft.ppiprojection_10.0.16299.15_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} |
"{ED9C72CB-E5EE-405C-AB8E-3B9449A72EAD}" = protocol=58 | dir=in | name=@ipnathlp.dll,-148 |
"{F58A5239-0A27-4C76-904A-6EBCD566082B}" = dir=out | name=@{microsoft.windowsfeedback_10.0.10240.16393_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windowsfeedback/feedbackapp.resources/appname/text} |
"{F6202490-FCD1-4887-BE3B-C2069D93760A}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{F89C66AA-5B2F-41E9-B4B6-7C7C0B0E80DD}" = dir=out | name=@{microsoft.windows.cortana_1.9.6.16299_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/packagedisplayname} |
"{FA7B38FC-6BA0-4000-A214-D516919E10B4}" = dir=out | name=@{microsoft.zunemusic_3.6.11821.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} |
"{FDB33D0D-B8B7-4734-BDA3-2D05919D55B1}" = dir=in | name=@{microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} |
"{FE45C986-6CCF-4156-943B-B38A8CC53B96}" = dir=out | name=@{microsoft.windows.peopleexperiencehost_10.0.16299.15_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.peopleexperiencehost/resources/pkgdisplayname} |
"{FF5B0BC2-A3D0-4792-9230-74F665D5A86D}" = dir=out | name=@{microsoft.windows.parentalcontrols_1000.16299.15.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.parentalcontrols/resources/displayname} |
"TCP Query User{2470CEAD-0239-4681-AF3D-78F916A6FE0E}C:\program files\electronic arts\need for speed - hot pursuit\nfs11.exe" = protocol=6 | dir=in | app=c:\program files\electronic arts\need for speed - hot pursuit\nfs11.exe |
"TCP Query User{89537926-5274-4ED0-975A-5B3003637604}C:\users\akrem\appdata\roaming\utorrent\utorrent.exe" = protocol=6 | dir=in | app=c:\users\akrem\appdata\roaming\utorrent\utorrent.exe |
"UDP Query User{6FAA8C2A-BB9D-47C7-8973-426DB8A7170F}C:\users\akrem\appdata\roaming\utorrent\utorrent.exe" = protocol=17 | dir=in | app=c:\users\akrem\appdata\roaming\utorrent\utorrent.exe |
"UDP Query User{F98D2780-55BF-44C5-85ED-3A132076C592}C:\program files\electronic arts\need for speed - hot pursuit\nfs11.exe" = protocol=17 | dir=in | app=c:\program files\electronic arts\need for speed - hot pursuit\nfs11.exe |

[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"{37B8F9C7-03FB-3253-8781-2517C99D7C00}" = Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030
"{409CB30E-E457-4008-9B1A-ED1B9EA21140}" = Intel(R) Rapid Storage Technology
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{5740BD44-B58D-321A-AFC0-6D3D4556DD6C}" = Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40660
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{7E3D8FA1-6092-469A-955B-68FC4A2C67CA}" = Dolby Digital Plus Home Theater
"{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1" = KMSpico
"{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}" = Microsoft Visual C++ 2017 x64 Minimum Runtime - 14.10.25017
"{90160000-007E-0000-1000-0000000FF1CE}" = Office 16 Click-to-Run Licensing Component
"{90160000-008C-0000-1000-0000000FF1CE}" = Office 16 Click-to-Run Extensibility Component
"{90160000-008C-040C-1000-0000000FF1CE}" = Office 16 Click-to-Run Localization Component
"{9503AD68-6198-4081-9F57-1F346D7B58D4}" = Intel(R) Rapid Storage Technology
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel" = NVIDIA Ansel
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA Pilote 3D Vision 391.01
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Panneau de configuration NVIDIA 391.01
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Pilote graphique 391.01
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience" = NVIDIA GeForce Experience 3.12.0.84
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus" = NVIDIA Optimus Update 31.0.11.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Logiciel système PhysX 9.17.0524
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Mises à jour NVIDIA 31.0.11.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_DisplayDriverAnalyzer" = DisplayDriverAnalyzer
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv" = NVIDIA SHIELD Streaming
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvBackend" = NVIDIA Backend
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer" = NVIDIA Container
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.ContainerTelemetryApiHelper" = NVIDIA TelemetryApi helper for NvContainer
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.LocalSystem" = NVIDIA LocalSystem Container
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.MessageBus" = NVIDIA Message Bus for NvContainer
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NetworkService" = NVIDIA NetworkService Container
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.Session" = NVIDIA Session Container
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.User" = NVIDIA User Container
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVDisplayContainer" = NVIDIA Display Container
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVDisplayContainerLS" = NVIDIA Display Container LS
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVDisplayPluginWatchdog" = NVIDIA Display Watchdog Plugin
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVDisplaySessionContainer" = NVIDIA Display Session Container
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvNodejs" = NVIDIA NodeJS
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvPlugin.Watchdog" = NVIDIA Watchdog Plugin for NvContainer
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvTelemetry" = NVIDIA Telemetry Client
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvTelemetryContainer" = NVIDIA Telemetry Container
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvvHci" = NVIDIA Virtual Host Controller
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_OSC" = Nvidia Share
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShadowPlay" = NVIDIA ShadowPlay 3.12.0.84
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController" = NVIDIA SHIELD Wireless Controller Driver
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Update.Core" = NVIDIA Update Core
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver" = NVIDIA Virtual Audio 4.04.0
"{CB0836EC-B072-368D-82B2-D3470BF95707}" = Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40660
"{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}" = Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030
"{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}" = Microsoft SQL Server Compact 3.5 SP2 x64 ENU
"{E512788E-C50B-3858-A4B9-73AD5F3F9E93}" = Microsoft Visual C++ 2017 x64 Additional Runtime - 14.10.25017
"CCleaner" = CCleaner
"ProfessionalRetail - fr-fr" = Microsoft Office Professionnel 2016 - fr-fr
"VLC media player" = VLC media player
"VulkanRT1.0.65.1" = Vulkan Run Time Libraries 1.0.65.1
"WinRAR archiver" = WinRAR 5.50 (64-bit)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{196467F1-C11F-4F76-858B-5812ADC83B94}" = MSXML 4.0 SP3 Parser
"{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}" = Microsoft XNA Framework Redistributable 3.1
"{1EB9D639-08BE-4DB1-96EE-C126D8EF402A}" = Intel Extreme Tuning Utility
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}" = Microsoft XNA Framework Redistributable 4.0
"{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030
"{3A9FC03D-C685-4831-94CF-4EDFD3749497}" = Microsoft SQL Server Compact 3.5 SP2 ENU
"{582EA838-9199-3518-A05C-DB09462F68EC}" = Microsoft Visual C++ 2017 x86 Minimum Runtime - 14.10.25017
"{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}" = Google Update Helper
"{61087a79-ac85-455c-934d-1fa22cc64f36}" = Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660
"{68306422-7C57-373F-8860-D26CE4BA2A15}" = Microsoft Visual C++ 2017 x86 Additional Runtime - 14.10.25017
"{7DAD0258-515C-3DD4-8964-BD714199E0F7}" = Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40660
"{7f51bdb9-ee21-49ee-94d6-90afc321780e}" = Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{B0BCDCBD-863D-4CAB-BF68-8D1F6B1BDC13}" = Jumpstart Installation Program
"{B175520C-86A2-35A7-8619-86DC379688B9}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030
"{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030
"{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" = Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030
"{cb7c3049-21de-415b-bd85-b65c14e547df}" = Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25017
"{ce085a78-074e-4823-8dc1-8a721b94b76d}" = Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005
"{d6f233bd-3f8c-43f6-878b-07bd0568d595}" = Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25017
"{dde655b5-95f0-42fb-a5ab-608790284acc}" = Intel Extreme Tuning Utility
"{E30D8B21-D82D-3211-82CC-0F0A5D1495E8}" = Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40660
"{ef6b00ec-13e1-4c25-9064-b2f383cb8412}" = Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics
"µTorrent 3.5.1 Build 44332" = µTorrent 3.5.1
"Advanced SystemCare_is1" = Advanced SystemCare 11
"AIMP" = AIMP
"Google Chrome" = Google Chrome
"IDM Crack 6.30 build 7" = IDM Crack 6.30 build 7
"Internet Download Manager" = Internet Download Manager
"IObitUninstall" = IObit Uninstaller
"MEGAsync" = MEGAsync
"Need For Speed - Hot Pursuit_is1" = Need For Speed - Hot Pursuit
"NetCut_is1" = NetCut 2.1.4
"NetCutDefender_is1" = NetCutDefender 2.1.5
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"OpenAL" = OpenAL
"Smart Defrag_is1" = Smart Defrag 5
"WinPcapInst" = WinPcap 4.1.3
"XnView_is1" = XnView 2.44

[color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Photos Backup" = Google Photos Backup

[color=#E56717]========== Last 20 Event Log Errors ==========[/color]

[ Application Events ]
OTL encountered an error while reading this event log. It may be corrupt.
OTL encountered an error while reading this event log. It may be corrupt.
OTL encountered an error while reading this event log. It may be corrupt.
OTL encountered an error while reading this event log. It may be corrupt.
OTL encountered an error while reading this event log. It may be corrupt.
OTL encountered an error while reading this event log. It may be corrupt.
OTL encountered an error while reading this event log. It may be corrupt.
OTL encountered an error while reading this event log. It may be corrupt.
OTL encountered an error while reading this event log. It may be corrupt.

< End of report >