OTL Extras logfile created on: 27/05/2013 12:30:12 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\.......\Downloads 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.10.9200.16576) Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy 4,00 Gb Total Physical Memory | 2,18 Gb Available Physical Memory | 54,59% Memory free 8,00 Gb Paging File | 5,38 Gb Available in Paging File | 67,28% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 296,65 Gb Total Space | 184,46 Gb Free Space | 62,18% Space Free | Partition Type: NTFS Drive E: | 410,15 Gb Total Space | 82,86 Gb Free Space | 20,20% Space Free | Partition Type: NTFS Drive F: | 55,61 Gb Total Space | 4,05 Gb Free Space | 7,29% Space Free | Partition Type: NTFS Drive G: | 634,76 Gb Total Space | 30,63 Gb Free Space | 4,82% Space Free | Partition Type: NTFS Drive H: | 74,52 Gb Total Space | 6,33 Gb Free Space | 8,49% Space Free | Partition Type: NTFS Drive I: | 951,58 Mb Total Space | 323,20 Mb Free Space | 33,96% Space Free | Partition Type: FAT Computer Name: ....... | User Name: ....... | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Quick Scan | Include 64bit Scans Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days ========== Extra Registry (SafeList) ========== ========== File Associations ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .html[@ = Opera.HTML] -- C:\Program Files (x86)\Opera\Opera.exe (Opera Software) .url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) .html [@ = Opera.HTML] -- C:\Program Files (x86)\Opera\Opera.exe (Opera Software) ========== Shell Spawning ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1" http [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software) https [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" () Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" () Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.) Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.) Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1" http [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software) https [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" () Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" () Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.) Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.) Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error. ========== Security Center Settings ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] ========== Firewall Settings ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "EnableFirewall" = 0 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\S.......rdProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 ========== Authorized Applications List ========== ========== Vista Active Open Ports Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{0514DFD5-8DAD-4322-AE33-3872C092F743}" = rport=138 | protocol=17 | dir=out | app=system | "{1347F757-BE57-4EE7-8675-72FDED979C2A}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{195193A5-4E0E-4872-82F8-7F3CF97CBA15}" = lport=139 | protocol=6 | dir=in | app=system | "{2BE2966B-4774-4D86-A6A5-9779C7D2EE5C}" = lport=138 | protocol=17 | dir=in | app=system | "{379A62E9-9863-4BD0-97A5-7153BCD86CB1}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) | "{3C16240B-8558-40DC-855A-6C5DD615C183}" = lport=2869 | protocol=6 | dir=in | app=system | "{423F9937-3B12-43BE-A0F0-5FA2D9EBE0BD}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{4C81C91F-5A26-46BB-870B-20A39C7263A1}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{5B47A0DC-B9D1-4739-BBEA-9470D841B377}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{5BB5725A-9514-4F19-8433-969B9490F610}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{6428B39F-3D98-4A71-9146-F4D59AEF5083}" = lport=137 | protocol=17 | dir=in | app=system | "{670FC7AA-D3A5-453A-A4D1-2A89BC3B45DD}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{8C207EB3-20F1-4EEB-A54E-11A957EAE268}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{9B7F17D8-01D2-4FA6-A438-2ADBD81E2A62}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{A05A8B56-90A5-4D0D-BF68-13B394C596AA}" = rport=445 | protocol=6 | dir=out | app=system | "{A09FEA1E-DB65-4375-81C3-70451FE7EB7E}" = rport=137 | protocol=17 | dir=out | app=system | "{A3E33597-795F-4CF4-A1BF-9989B8DF3B5D}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{B5D7AE7C-32E0-49ED-8997-66E950D92AC8}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{C61F8F5F-B362-4B9F-919C-8146E9AF9EE6}" = rport=139 | protocol=6 | dir=out | app=system | "{CBB78C3A-BD89-423C-B6E9-582EB57FC82C}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | "{D8293094-BB9E-4800-ADC1-E66EEB9F66CC}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) | "{E6B0ABC5-F8BF-4C39-BA7C-3EE15CB3A3DF}" = rport=10243 | protocol=6 | dir=out | app=system | "{EA98BE21-C119-4AC2-8D63-632440B20257}" = lport=10243 | protocol=6 | dir=in | app=system | "{F2B0EBDB-EEBD-4391-A3E5-5A9CE8D0CE6F}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | "{FF34BD23-71C8-4D3A-BE2C-C95322F2DB6D}" = lport=445 | protocol=6 | dir=in | app=system | ========== Vista Active Application Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{03C57269-DA09-4684-9C24-96ED4E6AE1A6}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | "{04CD9C66-C4E6-4B32-B345-4A973375CD65}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | "{09444F8F-D414-43EE-84A4-3E9B294A5073}" = protocol=17 | dir=in | app=c:\program files (x86)\opera\opera.exe | "{0DA56370-B191-4195-B4B5-B25DF346351B}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{0DD69A3E-834E-4E28-BA10-88375827A337}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{0E310695-9FFD-45CE-9E95-ED60798112A9}" = dir=in | app=c:\program files (x86)\nokia\nokia suite\nokiasuite.exe | "{17647884-6238-45B3-ACAD-6CFF1E88BAFB}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{17D8187E-D153-4D8B-8B8D-29E5EA5574AD}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | "{18A28266-E27E-4D10-94D5-A66712B38D1B}" = protocol=6 | dir=in | app=c:\program files (x86)\opera\opera.exe | "{1BC5477F-5902-4287-B7AE-9255C1221EDD}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{1C20CDCA-5555-4A09-9DAB-0E5E041B1EEC}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{1D1A90FB-F7BC-4096-8872-8B519732BD67}" = protocol=17 | dir=in | app=c:\users\.......\appdata\local\microsoft\skydrive\skydrive.exe | "{1F0961FC-80F1-41E1-9CAA-ED12EACDA904}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{3682CEA7-DA71-48CC-BC1C-70276213C2C6}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{3B1465B5-4A18-41C9-8F1A-AF6B41574A0F}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{44214AA4-AB95-4A08-9020-C2287344B154}" = protocol=17 | dir=in | app=c:\program files (x86)\google\google talk\googletalk.exe | "{4A53FE99-3096-47B9-951C-87F48B84B2D5}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{4E953063-78B0-48CA-B3E2-A7CD896AF29E}" = protocol=6 | dir=out | app=system | "{53E8BE72-36C9-47D1-82EB-23B8FC619212}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer_service.exe | "{5D92E67A-921B-4665-8571-DC5AA50CC620}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{695A1A19-879B-4FE5-B7BB-52442963337A}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{6ACDF2FD-B183-4038-B941-3BA8BB1E310C}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | "{6D777B2C-C905-4067-9321-1616F944867E}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | "{744AFEB2-0381-4586-A11C-0E9332E8CE39}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{8031DCAC-1E14-4216-9C6B-F03B9234A378}" = protocol=6 | dir=in | app=c:\program files (x86)\google\google talk\googletalk.exe | "{8D9FD6C3-D328-494F-BE7D-EC5E1A98D052}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe | "{9A77E04F-4919-4C85-8693-79B6E867ECB0}" = dir=in | app=c:\program files\hp\hp officejet 6700\bin\hpnetworkcommunicator.exe | "{9B000803-C42E-48AE-B358-B5540E31E1D7}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer_service.exe | "{A1A4DAC5-14EB-46D6-9EC3-8D7994FC4B32}" = protocol=17 | dir=in | app=c:\program files (x86)\yahoo!\messenger\yahoomessenger.exe | "{B28C8DD4-D152-4DD6-831C-23FE0550831C}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer.exe | "{B31EA225-4B9F-4CB4-BF13-1E6A1FB592BC}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer.exe | "{B5A99C2E-A5EE-4C4C-BDE2-EC680291D979}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe | "{B6D47B9F-613B-40E4-8E67-87B52862B394}" = protocol=6 | dir=in | app=c:\program files (x86)\yahoo!\messenger\yahoomessenger.exe | "{BBAC4314-EFD3-4A7B-9536-8F73B280E3B3}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{BC5D6934-34F2-4BDE-BC57-B0400D0F5D63}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{C43A95D2-5421-4B3C-9047-DB28BAD39EC7}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | "{C72CF0A2-74EE-4562-AABC-341C251350CC}" = dir=in | app=c:\program files\hp\hp officejet 6700\bin\devicesetup.exe | "{D78C41F9-A58C-468E-AFBA-ADD61C31A9AA}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe | "{DD319C3A-CC67-492A-A582-514AB7A60C54}" = protocol=6 | dir=in | app=c:\users\.......\appdata\local\microsoft\skydrive\skydrive.exe | "{E34F4E1B-471F-48FD-8FFC-DC3023F4DE8E}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{E94C20D0-4262-4830-9D46-2D123450044F}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{ECB1FE19-8E3A-4380-923D-DCB27B503DFA}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe | "{F9513A9D-F4C0-4B23-B2A9-6B9B76550E36}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "TCP Query User{0C78A9F6-A431-4A8D-A1D2-E41426C2C032}C:\program files (x86)\soulseekns\slsk.exe" = protocol=6 | dir=in | app=c:\program files (x86)\soulseekns\slsk.exe | "TCP Query User{1638A9EE-F51B-46A9-B3F4-3E5767508ED3}C:\users\.......\appdata\roaming\spotify\spotify.exe" = protocol=6 | dir=in | app=c:\users\.......\appdata\roaming\spotify\spotify.exe | "TCP Query User{6C53AD53-6294-4A6B-BCDD-AC4150F42EE1}C:\program files (x86)\secondlifeviewer\slvoice.exe" = protocol=6 | dir=in | app=c:\program files (x86)\secondlifeviewer\slvoice.exe | "TCP Query User{B39A6B74-DC50-4336-B244-AD11C174DCBD}C:\program files (x86)\google\google earth\client\googleearth.exe" = protocol=6 | dir=in | app=c:\program files (x86)\google\google earth\client\googleearth.exe | "TCP Query User{BA35A795-3A08-41A0-B5FA-6CF9C4042FE7}C:\program files (x86)\firestorm-release\slvoice.exe" = protocol=6 | dir=in | app=c:\program files (x86)\firestorm-release\slvoice.exe | "TCP Query User{CA0F286B-3763-47F7-968F-F2655BC98D88}C:\program files (x86)\phoenix viewer\slvoice.exe" = protocol=6 | dir=in | app=c:\program files (x86)\phoenix viewer\slvoice.exe | "TCP Query User{DACD0FA6-E1E9-4232-AE3E-84EA60194C8B}C:\program files (x86)\singularity\slvoice.exe" = protocol=6 | dir=in | app=c:\program files (x86)\singularity\slvoice.exe | "TCP Query User{F80CED3C-D268-495C-83E2-DFABFDCCC847}C:\program files (x86)\phoenix viewer\slvoice.exe" = protocol=6 | dir=in | app=c:\program files (x86)\phoenix viewer\slvoice.exe | "UDP Query User{0796B4BA-4504-4E53-85BE-C7584E70D154}C:\users\.......\appdata\roaming\spotify\spotify.exe" = protocol=17 | dir=in | app=c:\users\.......\appdata\roaming\spotify\spotify.exe | "UDP Query User{48E45145-D1EE-4A16-92CF-4A4263D484E6}C:\program files (x86)\singularity\slvoice.exe" = protocol=17 | dir=in | app=c:\program files (x86)\singularity\slvoice.exe | "UDP Query User{6557BDC7-30E6-4823-922C-70A094908012}C:\program files (x86)\phoenix viewer\slvoice.exe" = protocol=17 | dir=in | app=c:\program files (x86)\phoenix viewer\slvoice.exe | "UDP Query User{A2647A08-4315-4F90-ABFB-2FAED3314471}C:\program files (x86)\soulseekns\slsk.exe" = protocol=17 | dir=in | app=c:\program files (x86)\soulseekns\slsk.exe | "UDP Query User{C8E47C92-9A37-43E3-B094-AA98D08A8C8B}C:\program files (x86)\phoenix viewer\slvoice.exe" = protocol=17 | dir=in | app=c:\program files (x86)\phoenix viewer\slvoice.exe | "UDP Query User{D0F8A287-E97A-4209-9ABD-45BE9F0EFDB7}C:\program files (x86)\google\google earth\client\googleearth.exe" = protocol=17 | dir=in | app=c:\program files (x86)\google\google earth\client\googleearth.exe | "UDP Query User{DACD2890-589E-47EF-AF98-5092E1C83289}C:\program files (x86)\secondlifeviewer\slvoice.exe" = protocol=17 | dir=in | app=c:\program files (x86)\secondlifeviewer\slvoice.exe | "UDP Query User{E92015D1-F36A-4C37-B0F4-33A1FBB14117}C:\program files (x86)\firestorm-release\slvoice.exe" = protocol=17 | dir=in | app=c:\program files (x86)\firestorm-release\slvoice.exe | ========== HKEY_LOCAL_MACHINE Uninstall List ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{027E5FAB-1476-4C59-AAB4-32EF28520399}" = Windows Live Language Selector "{1ACC8FFB-9D84-4C05-A4DE-D28A9BC91698}" = Windows Live ID Sign-in Assistant "{24F93B56-61F5-415F-85B9-AA444DA34AFC}" = Centre Souris et Claviers Microsoft "{291D2C6C-3874-4FC8-B2D6-33C4B749D151}" = Logiciel de base du périphérique HP Officejet 6700 "{2F72F540-1F60-4266-9506-952B21D6640D}" = Apple Mobile Device Support "{4D668D4F-FAA2-4726-834C-31F4614F312E}" = MSVC80_x64_v2 "{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime "{57807BE0-5450-8B40-7D6E-2571073AC9E6}" = ccc-utility64 "{5DA7E362-2D73-4649-A913-B6193D1C6714}" = HP Officejet 6700 - Enquête sur l'amélioration du produit "{6312C9B9-3093-9BB0-AAE0-9A801045A6C6}" = ATI Catalyst Install Manager "{680EDA59-9266-44B4-949E-0C24F65DFF82}" = Microsoft_VC100_CRT_SP1_x64 "{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour "{704C0303-D20C-45AF-BD2B-556EAF31BE09}" = iCloud "{7FCDABCC-1A1E-4D61-909D-BA9495172774}" = iTunes "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{90140000-006D-040C-1000-0000000FF1CE}" = Microsoft Office « Démarrer en un clic » 2010 "{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting "{AB071C8B-873C-459F-ACA9-9EBE03C3E89B}" = MSVC90_x64 "{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter "{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 "{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile "{F5CB9BCC-FAD8-552E-8072-33C0881C4373}" = ATI AVIVO64 Codecs "CCleaner" = CCleaner "FCEC33AD40CEA5E0FC4CEE6E42041A0DA189652D" = Package de pilotes Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0) "GIMP-2_is1" = GIMP 2.8.4 "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft Mouse and Keyboard Center" = Centre Souris et Claviers Microsoft "PCSU-SL_is1" = Accelerer PC - Désinstallation complète [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{05E379CC-F626-4E7D-8354-463865B303BF}" = Windows Live UX Platform Language Pack "{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer "{177C6209-FDF1-4851-D7F1-5AA4B9A8DA38}" = Catalyst Control Center Localization All "{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer "{1C3DA126-D523-4089-BCCA-FA46FE34D6F8}" = Google Drive "{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update "{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions "{226b64e8-dc75-4eea-a6c8-abcb496320f2}-Google Talk" = Google Talk (remove only) "{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer "{26DB09BC-6EB5-4CE0-A05D-D4DECE60E189}_is1" = Phoenix Viewer 1.6.0.1691 "{287EAC0F-6C96-4712-97A6-958510872CBB}" = Utility "{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1 "{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}" = HP Update "{306C4404-240E-42BC-B95E-D6C6D7697DA6}" = Scratch Live 2.3.3 (18) "{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery "{34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}" = Windows Live "{3C4F57EF-B5ED-40A7-ABEB-F1604BF6E41B}" = Fnacmusic - Gestionnaire de téléchargement - V2 "{415FA9AD-DA10-4ABE-97B6-5051D4795C90}" = HP FWUpdateEDO2 "{468D22C0-8080-11E2-B86E-B8AC6F98CCE3}" = Google Earth "{488F0347-C4A7-4374-91A7-30818BEDA710}" = Galerie de photos Windows Live "{4AA68A73-DB9C-439D-9481-981C82BD008B}" = Nokia Connectivity Cable Driver "{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.3 "{50DA41E2-0701-43E2-A8BB-FAA0CB64B28B}" = HP Officejet 6700 Aide "{560985FB-4B76-4121-9189-7A2CDC7886D6}" = Kaspersky Internet Security 2013 "{57AC79C8-157E-403A-A8D0-DD74EF71BAE2}" = Catalyst Control Center - Branding "{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}" = Apple Application Support "{5D4A3E17-F56A-FE3A-C9CA-A27EA4C6439A}" = CCC Help French "{62687B11-58B5-4A18-9BC3-9DF4CE03F194}" = Windows Live Writer Resources "{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE "{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2 "{6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}" = Windows Live Movie Maker "{6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}" = Complément Messenger "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = Analyseur et SDK MSXML 4.0 SP2 "{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}" = RealNetworks - Microsoft Visual C++ 2008 Runtime "{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update "{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core "{79A2706B-9CBD-5C52-3C61-474C78ADBF01}" = Catalyst Control Center Profiles Desktop "{7D095455-D971-4D4C-9EFD-9AF6A6584F3A}" = Bing Bureau "{7F88C9E5-12BD-404F-AC6A-108BAAC9B708}" = ASUS Gamer OSD "{809D7E6D-915D-4EAD-821F-E13D93F37161}" = ASUS Smart Doctor "{82BEEB3F-D0BF-42EE-8739-F4827C4805B7}" = VirtualDJ PRO Full "{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform "{846B5DED-DC8C-4E1A-B5B4-9F5B39A0CACE}" = HPDiagnosticAlert "{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT "{90140011-0061-040C-0000-0000000FF1CE}" = Microsoft Office Home and Student 2010 - Français "{90157C5D-D791-4D36-8C2B-7553DC01D601}" = ASUS VGA Driver "{92D1CEBC-7C72-4ECF-BFC6-C131EF3FE6A7}" = Nokia Suite "{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker "{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail "{9F8DDA54-E98B-4067-A0D8-FB37068964D8}" = Dj Mixer Studio "{9FAE6E8D-E686-49F5-A574-0A58DFD9580C}" = Windows Live Mail "{A2AA4204-C05A-4013-888A-AD153139297F}" = PC Connectivity Solution "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common "{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer "{AAECF7BA-E83B-4A10-87EA-DE0B333F8734}" = RealNetworks - Microsoft Visual C++ 2010 Runtime "{AB61A2E9-37D3-485D-9085-19FBDF8CEF4A}" = Windows Live Messenger "{AC76BA86-7AD7-1036-7B44-AA1000000001}" = Adobe Reader X (10.1.7) - Français "{AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}" = QuickTime "{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86 "{AF7EBCA4-9FAF-4DC8-8D09-67854BB84D34}" = RealDownloader "{B132ABA2-1DD4-12EB-5A77-5AEA936A7E16}" = Catalyst Control Center "{BEEFC4F8-2909-48B3-AFAA-55D3533FDEDD}" = Creative MediaSource 5 "{C06EFB22-B5DB-46C5-9215-BCB5C19C0858}" = LauncherMA "{C6A9A44F-229A-7D6A-D144-2355EFD0B89D}" = HydraVision "{C779648B-410E-4BBA-B75B-5815BCEFE71D}" = Safari "{C893D8C0-1BA0-4517-B11C-E89B65E72F70}" = Windows Live Photo Common "{CA6BCA2F-EDEB-408F-850B-31404BE16A61}" = I.R.I.S. OCR "{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform "{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64 "{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform "{E01F0A3C-D908-5BF1-BB7A-8A03D505F87B}" = Catalyst Control Center InstallProxy "{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10 "{E3B64CC5-C011-40C0-92BC-7316CD5E5688}" = Microsoft_VC100_CRT_SP1_x86 "{E5B21F11-6933-4E0B-A25C-7963E3C07D11}" = Windows Live Messenger "{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU] "{F535B2CF-C9BB-4162-B03A-02D6971F32CC}" = Microsoft Flight Simulator X "Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin "Amazon MP3 Downloader" = Amazon MP3 Downloader 1.0.17 "Code de la Route" = Code de la Route "Creative Software AutoUpdate" = Creative Software AutoUpdate "DiskAid_is1" = DiskAid 5.46 "Firestorm-Release" = Firestorm-Release (remove only) "Free M4a to MP3 Converter_is1" = Free M4a to MP3 Converter 7.2 "Free YouTube to MP3 Converter Studio_is1" = Free YouTube to MP3 Converter Studio 7.4 "Google Chrome" = Google Chrome "HP Photo Creations" = HP Photo Creations "InstallShield_{809D7E6D-915D-4EAD-821F-E13D93F37161}" = ASUS Smart Doctor "InstallShield_{F535B2CF-C9BB-4162-B03A-02D6971F32CC}" = Microsoft Flight Simulator X "InstallWIX_{560985FB-4B76-4121-9189-7A2CDC7886D6}" = Kaspersky Internet Security 2013 "Le Généalogiste Deluxe_is1" = Le Généalogiste Deluxe "Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.75.0.1300 "Messenger Plus!" = Messenger Plus! "Messenger Plus! for Skype" = Messenger Plus! for Skype "Mozilla Firefox 21.0 (x86 fr)" = Mozilla Firefox 21.0 (x86 fr) "MozillaMaintenanceService" = Mozilla Maintenance Service "Nokia Suite" = Nokia Suite "Office14.Click2Run" = Microsoft Office « Démarrer en un clic » 2010 "Opera 12.15.1748" = Opera 12.15 "Picasa 3" = Picasa 3 "RealPlayer 16.0" = RealPlayer "SecondLifeViewer" = SecondLifeViewer (remove only) "Singularity" = Singularity (remove only) "Soulseek2" = SoulSeek 157 NS 13e "TeamViewer 7" = TeamViewer 7 "Virtual DJ - Atomix Productions" = Virtual DJ - Atomix Productions "Virtual DJ Broadcaster - Atomix Productions" = Virtual DJ Broadcaster - Atomix Productions "VLC media player" = VLC media player 1.1.11 "Winamp" = Winamp "WinLiveSuite" = Windows Live "WinRAR archiver" = WinRAR 4.00 (32 bits) "xvid" = XviD MPEG-4 Video Codec "Yahoo! Companion" = Yahoo! Toolbar "Yahoo! Messenger" = Yahoo! Messenger "Yahoo! Software Update" = Yahoo! Software Update ========== HKEY_USERS Uninstall List ========== [HKEY_USERS\S-1-5-21-4127258612-3736016076-2062170232-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "2146124445.www.pcspeedup.com" = PCSpeedUp Application "CopyTrans Suite" = CopyTrans Suite désinstallation uniquement "Notification de cadeaux MSN" = Notification de cadeaux MSN "PhotoFiltre 7" = PhotoFiltre 7 "SkyDriveSetup.exe" = Microsoft SkyDrive "Spotify" = Spotify "Winamp Detect" = Détection de l'application Winamp ========== Last 20 Event Log Errors ========== [ Application Events ] Error - 26/05/2013 12:18:04 | Computer Name = ....... | Source = Application Error | ID = 1000 Description = Nom de l’application défaillante IEXPLORE.EXE, version : 10.0.9200.16576, horodatage : 0x515e30fe Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000 Code d’exception : 0xc0000005 Décalage d’erreur : 0x0719a02c ID du processus défaillant : 0x1e40 Heure de début de l’application défaillante : 0x01ce5a2c26bfdf4e Chemin d’accès de l’application défaillante : C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Chemin d’accès du module défaillant: unknown ID de rapport : d791deb5-c61f-11e2-a4e8-14dae98f367f Error - 26/05/2013 12:59:57 | Computer Name = ....... | Source = WinMgmt | ID = 10 Description = Error - 26/05/2013 13:08:01 | Computer Name = ....... | Source = WinMgmt | ID = 10 Description = Error - 26/05/2013 13:11:54 | Computer Name = ....... | Source = Application Error | ID = 1000 Description = Nom de l’application défaillante IEXPLORE.EXE, version : 10.0.9200.16576, horodatage : 0x515e30fe Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000 Code d’exception : 0xc0000005 Décalage d’erreur : 0x06ed1044 ID du processus défaillant : 0xcf8 Heure de début de l’application défaillante : 0x01ce5a341c8742ac Chemin d’accès de l’application défaillante : C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Chemin d’accès du module défaillant: unknown ID de rapport : 5cccba42-c627-11e2-9852-14dae98f367f Error - 26/05/2013 14:17:44 | Computer Name = ....... | Source = WinMgmt | ID = 10 Description = Error - 26/05/2013 18:58:25 | Computer Name = ....... | Source = Application Error | ID = 1000 Description = Nom de l’application défaillante IEXPLORE.EXE, version : 10.0.9200.16576, horodatage : 0x515e30fe Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000 Code d’exception : 0xc0000005 Décalage d’erreur : 0x00ab0a4c ID du processus défaillant : 0x6f40 Heure de début de l’application défaillante : 0x01ce5a6475428463 Chemin d’accès de l’application défaillante : C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Chemin d’accès du module défaillant: unknown ID de rapport : c5140260-c657-11e2-8a5d-14dae98f367f Error - 26/05/2013 22:01:43 | Computer Name = ....... | Source = Application Error | ID = 1000 Description = Nom de l’application défaillante IEXPLORE.EXE, version : 10.0.9200.16576, horodatage : 0x515e30fe Nom du module défaillant : ntdll.dll, version : 6.1.7601.17725, horodatage : 0x4ec49b8f Code d’exception : 0xc0000005 Décalage d’erreur : 0x0002e066 ID du processus défaillant : 0x1ae8 Heure de début de l’application défaillante : 0x01ce5a3dd16129b9 Chemin d’accès de l’application défaillante : C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Chemin d’accès du module défaillant: C:\Windows\SysWOW64\ntdll.dll ID de rapport : 602983cf-c671-11e2-8a5d-14dae98f367f Error - 27/05/2013 04:52:36 | Computer Name = ....... | Source = WinMgmt | ID = 10 Description = Error - 27/05/2013 05:27:56 | Computer Name = ....... | Source = Customer Experience Improvement Program | ID = 1008 Description = Error - 27/05/2013 06:29:06 | Computer Name = ....... | Source = SideBySide | ID = 16842832 Description = La création du contexte d’activation a échoué pour « C:\Users\.......\Downloads\SoftonicDownloader_pour_copytrans-suite.exe ». Erreur dans le fichier de manifeste ou de stratégie «  » à la ligne . Une version de composant nécessaire à l’application est en conflit avec une autre version de composant déjà active. Les composants en conflit sont : Composant 1 : C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Composant 2 : C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. [ System Events ] Error - 21/05/2013 15:02:25 | Computer Name = ....... | Source = DCOM | ID = 10010 Description = Error - 24/05/2013 19:02:20 | Computer Name = ....... | Source = Service Control Manager | ID = 7022 Description = Le service Windows Update est en attente de démarrage. Error - 25/05/2013 09:55:23 | Computer Name = ....... | Source = DCOM | ID = 10010 Description = Error - 25/05/2013 10:03:24 | Computer Name = ....... | Source = Service Control Manager | ID = 7011 Description = Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la réponse transactionnelle du service sftlist. Error - 26/05/2013 11:25:23 | Computer Name = ....... | Source = DCOM | ID = 10010 Description = Error - 26/05/2013 12:02:46 | Computer Name = ....... | Source = DCOM | ID = 10010 Description = Error - 26/05/2013 12:57:08 | Computer Name = ....... | Source = DCOM | ID = 10010 Description = Error - 26/05/2013 14:14:58 | Computer Name = ....... | Source = DCOM | ID = 10010 Description = Error - 27/05/2013 04:47:07 | Computer Name = ....... | Source = DCOM | ID = 10010 Description = Error - 27/05/2013 04:48:10 | Computer Name = ....... | Source = DCOM | ID = 10010 Description = < End of report >